Win 7 security

morganeganou -  
 g3n-h@ckm@n -
Bonjour,

Apres avoir utilisé roguekiller et pre_scan, je ne sais pas quoi faire pour etre sure que le virus soit éliminé... quelqu un pourrait analyser mes rapports? Merci!!

11 réponses

  1. g3n-h@ckm@n
     
    salut heberge tes deux rapports ici :

    http://pjjoint.malekal.com et donne les liens obtenus
    0
    1. morganeganou
       
      je n'y arrive pas... lorsque je clique sur "envoyer" on me dit "erreur de chargement"
      0
    2. morganeganou
       
      21:56:44.0464 4736 TDSS rootkit removing tool 2.7.0.0 Jan 10 2012 09:14:26
      21:56:44.0763 4736 ============================================================
      21:56:44.0763 4736 Current date / time: 2012/01/12 21:56:44.0763
      21:56:44.0763 4736 SystemInfo:
      21:56:44.0763 4736
      21:56:44.0764 4736 OS Version: 6.1.7601 ServicePack: 1.0
      21:56:44.0764 4736 Product type: Workstation
      21:56:44.0764 4736 ComputerName: MORGANE-PC
      21:56:44.0766 4736 UserName: Morgane
      21:56:44.0766 4736 Windows directory: C:\Windows
      21:56:44.0766 4736 System windows directory: C:\Windows
      21:56:44.0766 4736 Processor architecture: Intel x86
      21:56:44.0766 4736 Number of processors: 2
      21:56:44.0766 4736 Page size: 0x1000
      21:56:44.0766 4736 Boot type: Normal boot
      21:56:44.0766 4736 ============================================================
      21:56:46.0699 4736 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000, SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K', Flags 0x00000050
      21:56:46.0909 4736 Initialize success
      21:56:50.0136 2508 ============================================================
      21:56:50.0136 2508 Scan started
      21:56:50.0136 2508 Mode: Manual;
      21:56:50.0136 2508 ============================================================
      21:56:51.0666 2508 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\Windows\system32\drivers\1394ohci.sys
      21:56:51.0712 2508 1394ohci - ok
      21:56:51.0937 2508 ACPI (cea80c80bed809aa0da6febc04733349) C:\Windows\system32\drivers\ACPI.sys
      21:56:51.0957 2508 ACPI - ok
      21:56:52.0128 2508 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\Windows\system32\drivers\acpipmi.sys
      21:56:52.0139 2508 AcpiPmi - ok
      21:56:52.0373 2508 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
      21:56:52.0399 2508 adp94xx - ok
      21:56:52.0546 2508 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
      21:56:52.0623 2508 adpahci - ok
      21:56:52.0827 2508 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
      21:56:52.0989 2508 adpu320 - ok
      21:56:53.0271 2508 AFD (f584ec3f4930b41d2d4d51fa7e784e6d) C:\Windows\system32\drivers\afd.sys
      21:56:53.0289 2508 Suspicious file (Forged): C:\Windows\system32\drivers\afd.sys. Real md5: f584ec3f4930b41d2d4d51fa7e784e6d, Fake md5: 9ebbba55060f786f0fcaa3893bfa2806
      21:56:53.0336 2508 AFD ( Rootkit.Win32.ZAccess.aml ) - infected
      21:56:53.0337 2508 AFD - detected Rootkit.Win32.ZAccess.aml (0)
      21:56:53.0549 2508 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\drivers\agp440.sys
      21:56:53.0595 2508 agp440 - ok
      21:56:53.0750 2508 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
      21:56:53.0759 2508 aic78xx - ok
      21:56:54.0159 2508 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\drivers\aliide.sys
      21:56:54.0193 2508 aliide - ok
      21:56:54.0369 2508 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\drivers\amdagp.sys
      21:56:54.0466 2508 amdagp - ok
      21:56:54.0746 2508 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\drivers\amdide.sys
      21:56:54.0853 2508 amdide - ok
      21:56:55.0177 2508 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
      21:56:55.0269 2508 AmdK8 - ok
      21:56:55.0355 2508 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
      21:56:55.0369 2508 AmdPPM - ok
      21:56:55.0497 2508 amdsata (e7f4d42d8076ec60e21715cd11743a0d) C:\Windows\system32\drivers\amdsata.sys
      21:56:55.0622 2508 amdsata - ok
      21:56:55.0755 2508 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
      21:56:55.0767 2508 amdsbs - ok
      21:56:55.0871 2508 amdxata (146459d2b08bfdcbfa856d9947043c81) C:\Windows\system32\drivers\amdxata.sys
      21:56:56.0404 2508 amdxata - ok
      21:56:56.0536 2508 androidusb (dd8d9c597af7cd2f6b70a3d6a4a1acea) C:\Windows\system32\Drivers\ssadadb.sys
      21:56:56.0548 2508 androidusb - ok
      21:56:56.0694 2508 AppID (aea177f783e20150ace5383ee368da19) C:\Windows\system32\drivers\appid.sys
      21:56:56.0905 2508 AppID - ok
      21:56:57.0201 2508 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
      21:56:57.0227 2508 arc - ok
      21:56:57.0277 2508 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
      21:56:57.0303 2508 arcsas - ok
      21:56:57.0374 2508 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
      21:56:57.0387 2508 AsyncMac - ok
      21:56:57.0572 2508 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\drivers\atapi.sys
      21:56:57.0649 2508 atapi - ok
      21:56:57.0962 2508 athr (b01751cc563aecac09bbe36aaa21fbef) C:\Windows\system32\DRIVERS\athr.sys
      21:56:58.0197 2508 athr - ok
      21:56:58.0735 2508 AVGIDSDriver (b9acb889ba1e0561868c025f95d63e25) C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
      21:56:58.0845 2508 AVGIDSDriver - ok
      21:56:59.0041 2508 AVGIDSEH (13256fc72fa5b3f6d6e8c5957e579b7c) C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
      21:56:59.0102 2508 AVGIDSEH - ok
      21:56:59.0136 2508 AVGIDSFilter (fa0685cc51de5cfd804e7deaa6488e0e) C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
      21:56:59.0149 2508 AVGIDSFilter - ok
      21:56:59.0203 2508 AVGIDSShim (f788b51100d0f40ea176798cce954a1a) C:\Windows\system32\DRIVERS\AVGIDSShim.Sys
      21:56:59.0233 2508 AVGIDSShim - ok
      21:56:59.0582 2508 Avgldx86 (4e796d3d2c3182b13b3e3b5a2ad4ef0a) C:\Windows\system32\DRIVERS\avgldx86.sys
      21:56:59.0672 2508 Avgldx86 - ok
      21:56:59.0880 2508 Avgmfx86 (5639de66b37d02bd22df4cf3155fba60) C:\Windows\system32\DRIVERS\avgmfx86.sys
      21:56:59.0892 2508 Avgmfx86 - ok
      21:56:59.0956 2508 Avgrkx86 (d1baf652eda0ae70896276a1fb32c2d4) C:\Windows\system32\DRIVERS\avgrkx86.sys
      21:56:59.0965 2508 Avgrkx86 - ok
      21:57:00.0073 2508 Avgtdix (aaf0ebcad95f2164cffb544e00392498) C:\Windows\system32\DRIVERS\avgtdix.sys
      21:57:00.0145 2508 Avgtdix - ok
      21:57:00.0420 2508 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
      21:57:00.0536 2508 b06bdrv - ok
      21:57:00.0796 2508 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
      21:57:00.0922 2508 b57nd60x - ok
      21:57:01.0282 2508 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
      21:57:01.0297 2508 Beep - ok
      21:57:01.0404 2508 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
      21:57:01.0435 2508 blbdrive - ok
      21:57:01.0564 2508 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\Windows\system32\DRIVERS\bowser.sys
      21:57:01.0586 2508 bowser - ok
      21:57:01.0722 2508 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
      21:57:01.0733 2508 BrFiltLo - ok
      21:57:01.0796 2508 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
      21:57:01.0919 2508 BrFiltUp - ok
      21:57:02.0288 2508 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
      21:57:02.0339 2508 Brserid - ok
      21:57:02.0530 2508 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
      21:57:02.0561 2508 BrSerWdm - ok
      21:57:02.0667 2508 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
      21:57:02.0684 2508 BrUsbMdm - ok
      21:57:02.0779 2508 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
      21:57:02.0798 2508 BrUsbSer - ok
      21:57:03.0022 2508 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\Windows\system32\drivers\BthEnum.sys
      21:57:03.0039 2508 BthEnum - ok
      21:57:03.0182 2508 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
      21:57:03.0193 2508 BTHMODEM - ok
      21:57:03.0298 2508 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\Windows\system32\DRIVERS\bthpan.sys
      21:57:03.0311 2508 BthPan - ok
      21:57:03.0454 2508 BTHPORT (c2fbf6d271d9a94d839c416bf186ead9) C:\Windows\System32\Drivers\BTHport.sys
      21:57:03.0496 2508 BTHPORT - ok
      21:57:03.0616 2508 BTHUSB (c81e9413a25a439f436b1d4b6a0cf9e9) C:\Windows\System32\Drivers\BTHUSB.sys
      21:57:03.0627 2508 BTHUSB - ok
      21:57:03.0748 2508 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
      21:57:03.0763 2508 cdfs - ok
      21:57:04.0027 2508 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\Windows\system32\DRIVERS\cdrom.sys
      21:57:04.0040 2508 cdrom - ok
      21:57:04.0166 2508 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
      21:57:04.0176 2508 circlass - ok
      21:57:04.0247 2508 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
      21:57:04.0256 2508 CLFS - ok
      21:57:04.0489 2508 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
      21:57:04.0500 2508 CmBatt - ok
      21:57:04.0597 2508 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\drivers\cmdide.sys
      21:57:04.0612 2508 cmdide - ok
      21:57:04.0796 2508 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
      21:57:04.0874 2508 CNG - ok
      21:57:05.0181 2508 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
      21:57:05.0191 2508 Compbatt - ok
      21:57:05.0440 2508 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\Windows\system32\drivers\CompositeBus.sys
      21:57:05.0455 2508 CompositeBus - ok
      21:57:05.0617 2508 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
      21:57:05.0646 2508 crcdisk - ok
      21:57:05.0773 2508 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\Windows\system32\drivers\csc.sys
      21:57:05.0832 2508 CSC - ok
      21:57:05.0941 2508 DfsC (f024449c97ec1e464aaffda18593db88) C:\Windows\system32\Drivers\dfsc.sys
      21:57:05.0973 2508 DfsC - ok
      21:57:06.0058 2508 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
      21:57:06.0064 2508 discache - ok
      21:57:06.0145 2508 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
      21:57:06.0154 2508 Disk - ok
      21:57:06.0327 2508 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
      21:57:06.0338 2508 drmkaud - ok
      21:57:06.0521 2508 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\Windows\System32\drivers\dxgkrnl.sys
      21:57:06.0563 2508 DXGKrnl - ok
      21:57:06.0974 2508 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
      21:57:07.0139 2508 ebdrv - ok
      21:57:07.0479 2508 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
      21:57:07.0550 2508 elxstor - ok
      21:57:07.0619 2508 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\drivers\errdev.sys
      21:57:07.0758 2508 ErrDev - ok
      21:57:07.0976 2508 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
      21:57:08.0133 2508 exfat - ok
      21:57:08.0206 2508 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
      21:57:08.0224 2508 fastfat - ok
      21:57:08.0316 2508 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
      21:57:08.0338 2508 fdc - ok
      21:57:08.0423 2508 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
      21:57:08.0475 2508 FileInfo - ok
      21:57:08.0515 2508 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
      21:57:08.0585 2508 Filetrace - ok
      21:57:08.0618 2508 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
      21:57:08.0645 2508 flpydisk - ok
      21:57:08.0735 2508 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
      21:57:08.0747 2508 FltMgr - ok
      21:57:08.0836 2508 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
      21:57:08.0853 2508 FsDepends - ok
      21:57:08.0960 2508 fssfltr (bfaaa92861526bb0adcd01e964ab6609) C:\Windows\system32\DRIVERS\fssfltr.sys
      21:57:08.0969 2508 fssfltr - ok
      21:57:09.0024 2508 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
      21:57:09.0033 2508 Fs_Rec - ok
      21:57:09.0127 2508 fvevol (8a73e79089b282100b9393b644cb853b) C:\Windows\system32\DRIVERS\fvevol.sys
      21:57:09.0136 2508 fvevol - ok
      21:57:09.0267 2508 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
      21:57:09.0393 2508 gagp30kx - ok
      21:57:09.0450 2508 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
      21:57:09.0831 2508 hcw85cir - ok
      21:57:10.0315 2508 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\Windows\system32\drivers\HdAudio.sys
      21:57:10.0471 2508 HdAudAddService - ok
      21:57:11.0000 2508 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\Windows\system32\drivers\HDAudBus.sys
      21:57:11.0007 2508 HDAudBus - ok
      21:57:12.0380 2508 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
      21:57:12.0632 2508 HidBatt - ok
      21:57:12.0800 2508 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
      21:57:12.0816 2508 HidBth - ok
      21:57:12.0895 2508 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
      21:57:12.0924 2508 HidIr - ok
      21:57:13.0008 2508 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\Windows\system32\drivers\hidusb.sys
      21:57:13.0022 2508 HidUsb - ok
      21:57:13.0178 2508 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\drivers\HpSAMD.sys
      21:57:13.0203 2508 HpSAMD - ok
      21:57:13.0296 2508 HTTP (871917b07a141bff43d76d8844d48106) C:\Windows\system32\drivers\HTTP.sys
      21:57:13.0340 2508 HTTP - ok
      21:57:13.0394 2508 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\Windows\system32\drivers\hwpolicy.sys
      21:57:13.0402 2508 hwpolicy - ok
      21:57:13.0510 2508 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\drivers\i8042prt.sys
      21:57:13.0520 2508 i8042prt - ok
      21:57:13.0688 2508 iaStor (d483687eace0c065ee772481a96e05f5) C:\Windows\system32\DRIVERS\iaStor.sys
      21:57:13.0697 2508 iaStor - ok
      21:57:13.0787 2508 iaStorV (a3cae5d281db4cff7cff8233507ee5ad) C:\Windows\system32\drivers\iaStorV.sys
      21:57:13.0819 2508 iaStorV - ok
      21:57:14.0349 2508 igfx (9467514ea189475a6e7fdc5d7bde9d3f) C:\Windows\system32\DRIVERS\igdkmd32.sys
      21:57:14.0718 2508 igfx - ok
      21:57:14.0897 2508 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
      21:57:14.0907 2508 iirsp - ok
      21:57:15.0126 2508 IntcAzAudAddService (f2baa4ff548f7f0317f7638951c1cd9c) C:\Windows\system32\drivers\RTKVHDA.sys
      21:57:15.0422 2508 IntcAzAudAddService - ok
      21:57:15.0580 2508 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\drivers\intelide.sys
      21:57:15.0677 2508 intelide - ok
      21:57:15.0762 2508 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
      21:57:15.0775 2508 intelppm - ok
      21:57:15.0844 2508 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\Windows\system32\DRIVERS\ipfltdrv.sys
      21:57:15.0948 2508 IpFilterDriver - ok
      21:57:16.0001 2508 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\Windows\system32\drivers\IPMIDrv.sys
      21:57:16.0129 2508 IPMIDRV - ok
      21:57:16.0189 2508 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
      21:57:16.0454 2508 IPNAT - ok
      21:57:16.0625 2508 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
      21:57:16.0683 2508 IRENUM - ok
      21:57:16.0915 2508 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\drivers\isapnp.sys
      21:57:16.0932 2508 isapnp - ok
      21:57:17.0028 2508 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\Windows\system32\drivers\msiscsi.sys
      21:57:17.0103 2508 iScsiPrt - ok
      21:57:17.0366 2508 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
      21:57:17.0384 2508 kbdclass - ok
      21:57:17.0452 2508 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\Windows\system32\DRIVERS\kbdhid.sys
      21:57:17.0615 2508 kbdhid - ok
      21:57:17.0709 2508 KSecDD (412cea1aa78cc02a447f5c9e62b32ff1) C:\Windows\system32\Drivers\ksecdd.sys
      21:57:17.0868 2508 KSecDD - ok
      21:57:17.0933 2508 KSecPkg (26c046977e85b95036453d7b88ba1820) C:\Windows\system32\Drivers\ksecpkg.sys
      21:57:18.0070 2508 KSecPkg - ok
      21:57:18.0214 2508 L1C (6c32bfeab708915d6bbf4b20d4f3ef7b) C:\Windows\system32\DRIVERS\L1C62x86.sys
      21:57:18.0278 2508 L1C - ok
      21:57:18.0389 2508 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
      21:57:18.0431 2508 lltdio - ok
      21:57:18.0726 2508 LMIInfo (4f69faaabb7db0d43e327c0b6aab40fc) C:\Program Files\LogMeIn\x86\RaInfo.sys
      21:57:18.0819 2508 LMIInfo - ok
      21:57:18.0998 2508 lmimirr (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\Windows\system32\DRIVERS\lmimirr.sys
      21:57:19.0170 2508 lmimirr - ok
      21:57:19.0360 2508 LMIRfsClientNP - ok
      21:57:19.0434 2508 LMIRfsDriver (3faa563ddf853320f90259d455a01d79) C:\Windows\system32\drivers\LMIRfsDriver.sys
      21:57:19.0493 2508 LMIRfsDriver - ok
      21:57:19.0628 2508 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
      21:57:19.0639 2508 LSI_FC - ok
      21:57:19.0685 2508 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
      21:57:19.0698 2508 LSI_SAS - ok
      21:57:19.0769 2508 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
      21:57:19.0778 2508 LSI_SAS2 - ok
      21:57:19.0813 2508 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
      21:57:19.0828 2508 LSI_SCSI - ok
      21:57:19.0897 2508 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
      21:57:19.0931 2508 luafv - ok
      21:57:19.0999 2508 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
      21:57:20.0042 2508 megasas - ok
      21:57:20.0127 2508 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
      21:57:20.0189 2508 MegaSR - ok
      21:57:20.0239 2508 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
      21:57:20.0318 2508 Modem - ok
      21:57:20.0393 2508 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
      21:57:20.0451 2508 monitor - ok
      21:57:20.0545 2508 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
      21:57:20.0631 2508 mouclass - ok
      21:57:20.0928 2508 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
      21:57:20.0996 2508 mouhid - ok
      21:57:21.0060 2508 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\Windows\system32\drivers\mountmgr.sys
      21:57:21.0065 2508 mountmgr - ok
      21:57:21.0128 2508 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\Windows\system32\drivers\mpio.sys
      21:57:21.0168 2508 mpio - ok
      21:57:21.0249 2508 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
      21:57:21.0297 2508 mpsdrv - ok
      21:57:21.0365 2508 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\Windows\system32\drivers\mrxdav.sys
      21:57:21.0448 2508 MRxDAV - ok
      21:57:21.0525 2508 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\Windows\system32\DRIVERS\mrxsmb.sys
      21:57:21.0703 2508 mrxsmb - ok
      21:57:21.0887 2508 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\Windows\system32\DRIVERS\mrxsmb10.sys
      21:57:21.0943 2508 mrxsmb10 - ok
      21:57:22.0042 2508 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\Windows\system32\DRIVERS\mrxsmb20.sys
      21:57:22.0221 2508 mrxsmb20 - ok
      21:57:22.0299 2508 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\Windows\system32\drivers\msahci.sys
      21:57:22.0367 2508 msahci - ok
      21:57:22.0430 2508 msdsm (55055f8ad8be27a64c831322a780a228) C:\Windows\system32\drivers\msdsm.sys
      21:57:22.0516 2508 msdsm - ok
      21:57:22.0732 2508 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
      21:57:22.0822 2508 Msfs - ok
      21:57:22.0931 2508 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
      21:57:23.0011 2508 mshidkmdf - ok
      21:57:23.0087 2508 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\drivers\msisadrv.sys
      21:57:23.0108 2508 msisadrv - ok
      21:57:23.0197 2508 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
      21:57:23.0215 2508 MSKSSRV - ok
      21:57:23.0271 2508 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
      21:57:23.0349 2508 MSPCLOCK - ok
      21:57:23.0386 2508 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
      21:57:23.0424 2508 MSPQM - ok
      21:57:23.0541 2508 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
      21:57:23.0623 2508 MsRPC - ok
      21:57:23.0703 2508 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\drivers\mssmbios.sys
      21:57:23.0784 2508 mssmbios - ok
      21:57:23.0931 2508 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
      21:57:23.0961 2508 MSTEE - ok
      21:57:23.0994 2508 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
      21:57:24.0047 2508 MTConfig - ok
      21:57:24.0091 2508 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
      21:57:24.0123 2508 Mup - ok
      21:57:24.0187 2508 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
      21:57:24.0246 2508 NativeWifiP - ok
      21:57:24.0357 2508 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\Windows\system32\drivers\ndis.sys
      21:57:24.0420 2508 NDIS - ok
      21:57:24.0507 2508 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
      21:57:24.0583 2508 NdisCap - ok
      21:57:24.0679 2508 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
      21:57:24.0761 2508 NdisTapi - ok
      21:57:24.0840 2508 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\Windows\system32\DRIVERS\ndisuio.sys
      21:57:24.0871 2508 Ndisuio - ok
      21:57:24.0930 2508 NdisWan (38fbe267e7e6983311179230facb1017) C:\Windows\system32\DRIVERS\ndiswan.sys
      21:57:24.0988 2508 NdisWan - ok
      21:57:25.0058 2508 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\Windows\system32\drivers\NDProxy.sys
      21:57:25.0080 2508 NDProxy - ok
      21:57:25.0164 2508 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
      21:57:25.0192 2508 NetBIOS - ok
      21:57:25.0292 2508 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\Windows\system32\DRIVERS\netbt.sys
      21:57:25.0423 2508 NetBT - ok
      21:57:25.0568 2508 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
      21:57:25.0587 2508 nfrd960 - ok
      21:57:25.0665 2508 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
      21:57:25.0695 2508 Npfs - ok
      21:57:25.0761 2508 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
      21:57:25.0765 2508 nsiproxy - ok
      21:57:25.0889 2508 Ntfs (33c3093d09017cfe2e219f2472bff6eb) C:\Windows\system32\drivers\Ntfs.sys
      21:57:26.0058 2508 Ntfs - ok
      21:57:26.0119 2508 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
      21:57:26.0133 2508 Null - ok
      21:57:26.0306 2508 nvraid (af2eec9580c1d32fb7eaf105d9784061) C:\Windows\system32\drivers\nvraid.sys
      21:57:26.0322 2508 nvraid - ok
      21:57:26.0371 2508 nvstor (9283c58ebaa2618f93482eb5dabcec82) C:\Windows\system32\drivers\nvstor.sys
      21:57:26.0423 2508 nvstor - ok
      21:57:26.0508 2508 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\drivers\nv_agp.sys
      21:57:26.0583 2508 nv_agp - ok
      21:57:26.0661 2508 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\drivers\ohci1394.sys
      21:57:26.0743 2508 ohci1394 - ok
      21:57:26.0865 2508 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
      21:57:26.0914 2508 Parport - ok
      21:57:26.0966 2508 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\Windows\system32\drivers\partmgr.sys
      21:57:26.0990 2508 partmgr - ok
      21:57:27.0035 2508 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
      21:57:27.0064 2508 Parvdm - ok
      21:57:27.0129 2508 pci (673e55c3498eb970088e812ea820aa8f) C:\Windows\system32\drivers\pci.sys
      21:57:27.0176 2508 pci - ok
      21:57:27.0353 2508 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\drivers\pciide.sys
      21:57:27.0443 2508 pciide - ok
      21:57:27.0508 2508 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
      21:57:27.0598 2508 pcmcia - ok
      21:57:27.0667 2508 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
      21:57:27.0687 2508 pcw - ok
      21:57:27.0767 2508 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
      21:57:27.0925 2508 PEAUTH - ok
      21:57:28.0280 2508 Point32 (7d7a9c17d5455203dea11e5ef886cc59) C:\Windows\system32\DRIVERS\point32.sys
      21:57:28.0289 2508 Point32 - ok
      21:57:28.0447 2508 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
      21:57:28.0481 2508 PptpMiniport - ok
      21:57:28.0564 2508 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
      21:57:28.0596 2508 Processor - ok
      21:57:28.0726 2508 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
      21:57:28.0732 2508 Psched - ok
      21:57:28.0837 2508 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
      21:57:28.0988 2508 ql2300 - ok
      21:57:29.0051 2508 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
      21:57:29.0063 2508 ql40xx - ok
      21:57:29.0120 2508 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
      21:57:29.0134 2508 QWAVEdrv - ok
      21:57:29.0178 2508 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
      21:57:29.0206 2508 RasAcd - ok
      21:57:29.0296 2508 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
      21:57:29.0305 2508 RasAgileVpn - ok
      21:57:29.0346 2508 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
      21:57:29.0375 2508 Rasl2tp - ok
      21:57:29.0471 2508 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
      21:57:29.0567 2508 RasPppoe - ok
      21:57:29.0656 2508 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
      21:57:29.0713 2508 RasSstp - ok
      21:57:29.0794 2508 rdbss (d528bc58a489409ba40334ebf96a311b) C:\Windows\system32\DRIVERS\rdbss.sys
      21:57:29.0831 2508 rdbss - ok
      21:57:29.0892 2508 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
      21:57:29.0967 2508 rdpbus - ok
      21:57:30.0013 2508 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\Windows\system32\DRIVERS\RDPCDD.sys
      21:57:30.0017 2508 RDPCDD - ok
      21:57:30.0095 2508 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\Windows\system32\drivers\rdpdr.sys
      21:57:30.0149 2508 RDPDR - ok
      21:57:30.0268 2508 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
      21:57:30.0277 2508 RDPENCDD - ok
      21:57:30.0380 2508 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
      21:57:30.0384 2508 RDPREFMP - ok
      21:57:30.0509 2508 RdpVideoMiniport (68a0387f58e226deee23d9715955572a) C:\Windows\system32\drivers\rdpvideominiport.sys
      21:57:30.0587 2508 RdpVideoMiniport - ok
      21:57:30.0669 2508 RDPWD (288b06960d78428ff89e811632684e20) C:\Windows\system32\drivers\RDPWD.sys
      21:57:30.0707 2508 RDPWD - ok
      21:57:30.0829 2508 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\Windows\system32\drivers\rdyboost.sys
      21:57:30.0895 2508 rdyboost - ok
      21:57:31.0030 2508 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\Windows\system32\DRIVERS\rfcomm.sys
      21:57:31.0046 2508 RFCOMM - ok
      21:57:31.0209 2508 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
      21:57:31.0224 2508 rspndr - ok
      21:57:31.0296 2508 RSUSBSTOR - ok
      21:57:31.0358 2508 RtsUIR - ok
      21:57:31.0468 2508 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\Windows\system32\drivers\vms3cap.sys
      21:57:31.0505 2508 s3cap - ok
      21:57:31.0634 2508 sbp2port (05d860da1040f111503ac416ccef2bca) C:\Windows\system32\drivers\sbp2port.sys
      21:57:31.0670 2508 sbp2port - ok
      21:57:31.0769 2508 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\Windows\system32\DRIVERS\scfilter.sys
      21:57:31.0790 2508 scfilter - ok
      21:57:32.0180 2508 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
      21:57:32.0246 2508 secdrv - ok
      21:57:32.0408 2508 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
      21:57:32.0419 2508 Serenum - ok
      21:57:32.0465 2508 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
      21:57:32.0485 2508 Serial - ok
      21:57:32.0586 2508 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
      21:57:32.0600 2508 sermouse - ok
      21:57:32.0881 2508 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\drivers\sffdisk.sys
      21:57:32.0919 2508 sffdisk - ok
      21:57:32.0995 2508 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\drivers\sffp_mmc.sys
      21:57:33.0029 2508 sffp_mmc - ok
      21:57:33.0077 2508 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\Windows\system32\drivers\sffp_sd.sys
      21:57:33.0100 2508 sffp_sd - ok
      21:57:33.0150 2508 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
      21:57:33.0204 2508 sfloppy - ok
      21:57:33.0350 2508 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\drivers\sisagp.sys
      21:57:33.0399 2508 sisagp - ok
      21:57:33.0468 2508 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
      21:57:33.0642 2508 SiSRaid2 - ok
      21:57:33.0690 2508 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
      21:57:33.0766 2508 SiSRaid4 - ok
      21:57:33.0832 2508 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
      21:57:33.0902 2508 Smb - ok
      21:57:34.0005 2508 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
      21:57:34.0016 2508 spldr - ok
      21:57:34.0144 2508 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\Windows\system32\DRIVERS\srv.sys
      21:57:34.0202 2508 srv - ok
      21:57:34.0276 2508 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\Windows\system32\DRIVERS\srv2.sys
      21:57:34.0454 2508 srv2 - ok
      21:57:34.0493 2508 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\Windows\system32\DRIVERS\srvnet.sys
      21:57:34.0505 2508 srvnet - ok
      21:57:34.0645 2508 ssadbus (64e44acd8c238fcbbb78f0ba4bdc4b05) C:\Windows\system32\DRIVERS\ssadbus.sys
      21:57:34.0663 2508 ssadbus - ok
      21:57:34.0726 2508 ssadmdfl (bb2c84a15c765da89fd832b0e73f26ce) C:\Windows\system32\DRIVERS\ssadmdfl.sys
      21:57:34.0736 2508 ssadmdfl - ok
      21:57:34.0797 2508 ssadmdm (6d0d132ddc6f43eda00dced6d8b1ca31) C:\Windows\system32\DRIVERS\ssadmdm.sys
      21:57:34.0821 2508 ssadmdm - ok
      21:57:34.0866 2508 ssadserd (1a5a397bc459f346ab56492b61ef79f6) C:\Windows\system32\DRIVERS\ssadserd.sys
      21:57:34.0878 2508 ssadserd - ok
      21:57:34.0983 2508 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
      21:57:34.0999 2508 stexstor - ok
      21:57:35.0076 2508 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\Windows\system32\drivers\vmstorfl.sys
      21:57:35.0088 2508 storflt - ok
      21:57:35.0220 2508 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\Windows\system32\drivers\storvsc.sys
      21:57:35.0234 2508 storvsc - ok
      21:57:35.0294 2508 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\drivers\swenum.sys
      21:57:35.0309 2508 swenum - ok
      21:57:35.0419 2508 Synth3dVsc - ok
      21:57:35.0647 2508 Tcpip (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\drivers\tcpip.sys
      21:57:35.0747 2508 Tcpip - ok
      21:57:35.0903 2508 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) C:\Windows\system32\DRIVERS\tcpip.sys
      21:57:35.0955 2508 TCPIP6 - ok
      21:57:36.0015 2508 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\Windows\system32\drivers\tcpipreg.sys
      21:57:36.0028 2508 tcpipreg - ok
      21:57:36.0101 2508 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\Windows\system32\drivers\tdpipe.sys
      21:57:36.0111 2508 TDPIPE - ok
      21:57:36.0161 2508 TDTCP (2c10395baa4847f83042813c515cc289) C:\Windows\system32\drivers\tdtcp.sys
      21:57:36.0242 2508 TDTCP - ok
      21:57:36.0375 2508 tdx (b459575348c20e8121d6039da063c704) C:\Windows\system32\DRIVERS\tdx.sys
      21:57:36.0389 2508 tdx - ok
      21:57:36.0493 2508 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\Windows\system32\drivers\termdd.sys
      21:57:36.0504 2508 TermDD - ok
      21:57:36.0783 2508 TrueSight (f69641efdb19acb4753b0155f7fdeed5) c:\windows\system32\drivers\TrueSight.sys
      21:57:36.0826 2508 TrueSight - ok
      21:57:36.0910 2508 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\Windows\system32\DRIVERS\tssecsrv.sys
      21:57:36.0921 2508 tssecsrv - ok
      21:57:37.0001 2508 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\Windows\system32\drivers\tsusbflt.sys
      21:57:37.0036 2508 TsUsbFlt - ok
      21:57:37.0100 2508 tsusbhub - ok
      21:57:37.0198 2508 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\Windows\system32\DRIVERS\tunnel.sys
      21:57:37.0212 2508 tunnel - ok
      21:57:37.0263 2508 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
      21:57:37.0277 2508 uagp35 - ok
      21:57:37.0334 2508 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\Windows\system32\DRIVERS\udfs.sys
      21:57:37.0393 2508 udfs - ok
      21:57:37.0552 2508 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\drivers\uliagpkx.sys
      21:57:37.0623 2508 uliagpkx - ok
      21:57:37.0717 2508 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\Windows\system32\drivers\umbus.sys
      21:57:37.0780 2508 umbus - ok
      21:57:37.0877 2508 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
      21:57:37.0909 2508 UmPass - ok
      21:57:38.0088 2508 usbaudio (1d9f2bd026e8e2d45033a4df3f16b78c) C:\Windows\system32\drivers\usbaudio.sys
      21:57:38.0099 2508 usbaudio - ok
      21:57:38.0163 2508 usbccgp (7e72e7d7e0757d59481d530fd2b0bfae) C:\Windows\system32\DRIVERS\usbccgp.sys
      21:57:38.0191 2508 usbccgp - ok
      21:57:38.0247 2508 USBCCID - ok
      21:57:38.0299 2508 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\drivers\usbcir.sys
      21:57:38.0311 2508 usbcir - ok
      21:57:38.0369 2508 usbehci (cfbce999c057d78979a181c9c60f208e) C:\Windows\system32\drivers\usbehci.sys
      21:57:38.0379 2508 usbehci - ok
      21:57:38.0459 2508 usbhub (9d22aad9ac6a07c691a1113e5f860868) C:\Windows\system32\drivers\usbhub.sys
      21:57:38.0484 2508 usbhub - ok
      21:57:38.0531 2508 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\Windows\system32\drivers\usbohci.sys
      21:57:38.0559 2508 usbohci - ok
      21:57:38.0634 2508 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
      21:57:38.0657 2508 usbprint - ok
      21:57:38.0725 2508 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
      21:57:38.0781 2508 usbscan - ok
      21:57:38.0848 2508 USBSTOR (bf63ebfc6979fefb2bc03df7989a0c1a) C:\Windows\system32\DRIVERS\USBSTOR.SYS
      21:57:38.0858 2508 USBSTOR - ok
      21:57:38.0929 2508 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) C:\Windows\system32\drivers\usbuhci.sys
      21:57:38.0938 2508 usbuhci - ok
      21:57:39.0014 2508 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\Windows\system32\Drivers\usbvideo.sys
      21:57:39.0064 2508 usbvideo - ok
      21:57:39.0164 2508 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\drivers\vdrvroot.sys
      21:57:39.0212 2508 vdrvroot - ok
      21:57:39.0290 2508 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
      21:57:39.0314 2508 vga - ok
      21:57:39.0395 2508 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
      21:57:39.0423 2508 VgaSave - ok
      21:57:39.0461 2508 VGPU - ok
      21:57:39.0528 2508 vhdmp (5461686cca2fda57b024547733ab42e3) C:\Windows\system32\drivers\vhdmp.sys
      21:57:39.0553 2508 vhdmp - ok
      21:57:39.0606 2508 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\drivers\viaagp.sys
      21:57:39.0617 2508 viaagp - ok
      21:57:39.0677 2508 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
      21:57:39.0739 2508 ViaC7 - ok
      21:57:39.0786 2508 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\drivers\viaide.sys
      21:57:39.0809 2508 viaide - ok
      21:57:39.0872 2508 vmbus (c2f2911156fdc7817c52829c86da494e) C:\Windows\system32\drivers\vmbus.sys
      21:57:39.0917 2508 vmbus - ok
      21:57:39.0974 2508 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\Windows\system32\drivers\VMBusHID.sys
      21:57:40.0134 2508 VMBusHID - ok
      21:57:40.0198 2508 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\Windows\system32\drivers\volmgr.sys
      21:57:40.0255 2508 volmgr - ok
      21:57:40.0324 2508 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
      21:57:40.0429 2508 volmgrx - ok
      21:57:40.0514 2508 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\Windows\system32\drivers\volsnap.sys
      21:57:40.0564 2508 volsnap - ok
      21:57:40.0655 2508 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
      21:57:40.0692 2508 vsmraid - ok
      21:57:40.0750 2508 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\system32\DRIVERS\vwifibus.sys
      21:57:40.0834 2508 vwifibus - ok
      21:57:40.0897 2508 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\Windows\system32\DRIVERS\vwififlt.sys
      21:57:40.0915 2508 vwififlt - ok
      21:57:41.0008 2508 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\Windows\system32\DRIVERS\vwifimp.sys
      21:57:41.0020 2508 vwifimp - ok
      21:57:41.0112 2508 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
      21:57:41.0123 2508 WacomPen - ok
      21:57:41.0222 2508 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
      21:57:41.0265 2508 WANARP - ok
      21:57:41.0277 2508 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\Windows\system32\DRIVERS\wanarp.sys
      21:57:41.0290 2508 Wanarpv6 - ok
      21:57:41.0452 2508 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
      21:57:41.0511 2508 Wd - ok
      21:57:41.0612 2508 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
      21:57:41.0671 2508 Wdf01000 - ok
      21:57:41.0901 2508 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
      21:57:41.0960 2508 WfpLwf - ok
      21:57:42.0025 2508 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
      21:57:42.0035 2508 WIMMount - ok
      21:57:42.0260 2508 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\drivers\wmiacpi.sys
      21:57:42.0271 2508 WmiAcpi - ok
      21:57:42.0443 2508 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
      21:57:42.0452 2508 ws2ifsl - ok
      21:57:42.0591 2508 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\Windows\system32\drivers\WudfPf.sys
      21:57:42.0607 2508 WudfPf - ok
      21:57:42.0709 2508 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\Windows\system32\DRIVERS\WUDFRd.sys
      21:57:42.0739 2508 WUDFRd - ok
      21:57:42.0907 2508 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
      21:57:42.0968 2508 \Device\Harddisk0\DR0 - ok
      21:57:42.0980 2508 Boot (0x1200) (4c5075f827d9ce56b8b5111d6d4eebe4) \Device\Harddisk0\DR0\Partition0
      21:57:42.0982 2508 \Device\Harddisk0\DR0\Partition0 - ok
      21:57:43.0013 2508 Boot (0x1200) (3b6f3d629415db6d605e1a53dc6c9885) \Device\Harddisk0\DR0\Partition1
      21:57:43.0024 2508 \Device\Harddisk0\DR0\Partition1 - ok
      21:57:43.0055 2508 Boot (0x1200) (dd64d3376b5e3d2f9828c0f12fb8eb14) \Device\Harddisk0\DR0\Partition2
      21:57:43.0057 2508 \Device\Harddisk0\DR0\Partition2 - ok
      21:57:43.0059 2508 ============================================================
      21:57:43.0059 2508 Scan finished
      21:57:43.0059 2508 ============================================================
      21:57:43.0124 5612 Detected object count: 1
      21:57:43.0124 5612 Actual detected object count: 1
      21:59:04.0443 5612 Backup copy found, using it..
      21:59:04.0667 5612 C:\Windows\system32\drivers\afd.sys - will be cured on reboot
      21:59:09.0002 5612 AFD ( Rootkit.Win32.ZAccess.aml ) - User select action: Cure
      21:59:13.0571 1468 Deinitialize success
      0
  2. g3n-h@ckm@n
     
    ▶ Télécharge Reload_TDSSKiller

    ▶ Lance le

    choisis : lancer le nettoyage

    l'outil va automatiquement télécharger la derniere version puis

    TDSSKiller va s'ouvrir , clique sur "Start Scan"

    Si TDSS.tdl2 est détecté l''option delete sera cochée par défaut.
    Si TDSS.tdl3 est détecté assure toi que Cure est bien cochée.
    Si TDSS.tdl4(\HardDisk0\MBR) est détecté assure toi que Cure est bien cochée.
    Si Suspicious file est indiqué, laisse l''option cochée sur Skip
    Si Rootkit.Win32.ZAccess.* est détecté règle sur "cure" en haut , et "delete" en bas

    une fois qu'il a terminé , redemarre s'il te le demande pour finir de nettoyer

    sinon , ferme tdssKiller et le rapport s'affichera sur le bureau

    ▶ Copie/Colle son contenu dans ta prochaine réponse.
    0
  3. g3n-h@ckm@n
     
    tu peux repondre a la suite stp ?

    tu peux maintenant heberger tes deux rapports comme demandé plus haut
    0
  4. morganeganou
     
    rogue killer 1
    http://pjjoint.malekal.com/files.php?id=20120112_h13x12f8c13d11

    rogue killer 2
    http://pjjoint.malekal.com/files.php?id=20120112_i8g9k10f13x6

    Pre scan
    http://pjjoint.malekal.com/files.php?id=20120112_l13v12p12z6g8

    TDSS
    http://pjjoint.malekal.com/files.php?id=20120112_g11r13z13e13i7
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. morganeganou
     
    j'espère que c'est réglé...?
    Merci beaucoup en tout cas!
    0
  7. g3n-h@ckm@n
     
    Firefox pas à jour => à faire

    ====================

    fais glisser une icone n'importe quel fichier sur Pre_scan , pre_script va apparaitre

    Lance Pre_script , une page vierge va s'ouvrir.

    selectionne tout le texte en gras ci-dessous, puis (clic droit/copier ou ctrl+c) :
    ___________________________________________________
    Kill::

    Registry::
    [-HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
    [-HKLM\Software\BrowserChoice]

    txt::
    C:\Windows\System32\Tasks\{60FB5135-1CA4-4993-BC31-E93EE0D83702}

    file::
    C:\ProgramData\546o4j6k6254
    C:\Users\Morgane\AppData\Local\546o4j6k6254
    C:\Users\Morgane\AppData\Local\prvlcl.dat

    folder::
    C:\Windows\$NtUninstallKB54620$

    clean::

    Reboot::

    ___________________________________________________

    colle-le ensuite (clic droit/coller ou ctrl+V) dans la page vierge.

    puis onglet fichier => enregistrer (pas enregistrer sous...) , puis ferme le texte

    des fenetres noires risquent de clignoter , c'est normal , c'est le programme qui travaille

    poste Pre_Script.txt qui apparaitra sur le bureau en fin de travail

    si ton bureau ne reapparait pas => ctrl+alt+supp , gestionnaire des taches => onglet fichier => nouvelle tache puis tape explorer
    0
  8. morganeganou
     
    Nettoyage du disque effectué

    ¤

    Fin : 14:22:24

    ¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤

    Ca y est??? Merci beaucoup!!!
    0
  9. g3n-h@ckm@n
     
    heu...je peux l avoir entier le rapport ?
    0
  10. morganeganou
     
    j'étais étonnée, mais il n'y a que ça...
    0