Supprimer win 7 home security 2012

salut

telecharge et enregistre ceci sur ton bureau :

Pre_Scan

Avertissement: tous les processus non-vitaux de windows seront coupés --> pas de panique.

une fois telechargé lance-le , laisse faire le scan jusqu'à l'apparition du rapport sur le bureau.

si 'outil est bloqué par l'infection utilise cette version : Version .pif

ou encore cette version renommée : Winlogon.exe

si l'outil detecte un proxy et que tu n'en as pas installé clique sur "supprimer le proxy"

Il se peut qu'une multitude de fenêtres noires clignotent , laisse-le travailler

Poste Pre_Scan_la_date_et_l'heure.txt qui apparaitra sur le bureau en fin de scan après redemarrage

▶▶▶ NE LE POSTE PAS SUR LE FORUM (il est trop long)

heberge le rapport sur http://pjjoint.malekal.com et donne le lien obtenu

Merci pour ta réactivité
J'ai lancé le scan et après la multitude de fenêtre je reste bloqué sur une fenêtre qui me dit :

Le lecteur n'est pas prêt à être utilisé. Son volet est peut être ouvert. Vérifiez le lecteur A: et assurez vous qu'il contient un disque et que son volet est fermé
Avec comme choix Annuler, Recommencer ou Continuer

N'importe lequel choix fait réapparaître la fenêtre

continuer plusieurs fois

https://pjjoint.malekal.com/files.php?id=20120113_v15e12d5x1515

windows pas à jour => à mettre à jour

=============

desinstalle adobe reader 8
desinstalle Viewpoint Media Player
desinstalle Pando media booster ca te bouffe des ressources pour rien
desinstalle moovida Air

============

fais glisser une icone n'importe quel fichier sur Pre_scan , pre_script va apparaitre

Lance Pre_script , une page vierge va s'ouvrir.

selectionne tout le texte en gras ci-dessous, puis (clic droit/copier ou ctrl+c) :
___________________________________________________
Kill::

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"Browser companion helper"=-
"QuickTime Task"=-
"iTunesHelper"=-
"HostManager"=-
[-HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}]
[-HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{809FA228-ADEF-4964-AA29-2D38568E157E}]
[-HKCU\Software\Spointer]
[-HKCU\Software\StartSearch]
[-HKCU\Software\vShare.tv]
[-HKLM\Software\MetaStream]
[-HKLM\Software\Trymedia Systems]
[-HKLM\Software\Viewpoint]

file::
C:\Users\nicolas\AppData\Roaming\e3ac20da
C:\ProgramData\ec0b3a7c
C:\Users\nicolas\AppData\Local\cfd32959

folder::
C:\Users\nicolas\AppData\Roaming\e3ac20da
C:\Users\nicolas\AppData\Roaming\Media Get LLC
C:\Users\nicolas\AppData\Roaming\winlogon
C:\ProgramData\ec0b3a7c
C:\ProgramData\Media Get LLC
C:\ProgramData\Spybot - Search & Destroy
C:\ProgramData\Viewpoint
C:\Users\nicolas\AppData\Local\cfd32959
C:\Users\nicolas\AppData\Local\MediaGet2
C:\Users\nicolas\AppData\Local\moovida Air
C:\Program Files (x86)\Viewpoint

Mbr::

clean::

Reboot::
___________________________________________________

colle-le ensuite (clic droit/coller ou ctrl+V) dans la page vierge.

puis onglet fichier => enregistrer (pas enregistrer sous...) , puis ferme le texte

des fenetres noires risquent de clignoter , c'est normal , c'est le programme qui travaille

poste Pre_Script.txt qui apparaitra sur le bureau en fin de travail

si ton bureau ne reapparait pas => ctrl+alt+supp , gestionnaire des taches => onglet fichier => nouvelle tache puis tape explorer

=========================

▶ Télécharge Reload_TDSSKiller

▶ Lance le

choisis : lancer le nettoyage

l'outil va automatiquement télécharger la derniere version puis

TDSSKiller va s'ouvrir , clique sur "Start Scan"

Si TDSS.tdl2 est détecté l''option delete sera cochée par défaut.
Si TDSS.tdl3 est détecté assure toi que Cure est bien cochée.
Si TDSS.tdl4(\HardDisk0\MBR) est détecté assure toi que Cure est bien cochée.
Si Suspicious file est indiqué, laisse l''option cochée sur Skip
Si Rootkit.Win32.ZAccess.* est détecté règle sur "cure" en haut , et "delete" en bas

une fois qu'il a terminé , redemarre s'il te le demande pour finir de nettoyer

sinon , ferme tdssKiller et le rapport s'affichera sur le bureau

▶ Copie/Colle son contenu dans ta prochaine réponse.

==========================

Télécharge et enregistre ADWcleaner sur ton bureau :

ADWCleaner (Merci à Xplode)

Lance le,

clique sur suppression et poste son rapport.

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Script | 2.014 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤ XP | Vista | Seven - 32/64 bits ¤¤¤¤¤

Mise à jour : 10/01/2012 | 20.20 Par g3n-h@ckm@n
Utilisateur : nicolas (Administrateurs)
Ordinateur : NICOLAS-PC
Système d'exploitation : Windows 7 Ultimate (64 bits)
Internet Explorer : 8.0.7600.16385
Mozilla Firefox : 9.0.1 (fr)

Switchs possibles :

processes:: | file:: | folder:: | Registry::
Driver:: | replace:: | DNS:: | Command::
txt:: | Host:: | NsLook::
list:: | IP:: | ADS:: | Kill:: | clean::
Reboot:: | MBR:: | Fixmbr:: | 40:: | Zip::
Tray::

Script : 18:01:11

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Modification du registre effectuée

¤

Supprimé : C:\Users\nicolas\AppData\Roaming\e3ac20da
Supprimé : C:\ProgramData\ec0b3a7c
Supprimé : C:\Users\nicolas\AppData\Local\cfd32959

¤

Absent : C:\Users\nicolas\AppData\Roaming\e3ac20da
Supprimé : C:\Users\nicolas\AppData\Roaming\Media Get LLC
Supprimé : C:\Users\nicolas\AppData\Roaming\winlogon
Absent : C:\ProgramData\ec0b3a7c
Supprimé : C:\ProgramData\Media Get LLC
Supprimé : C:\ProgramData\Spybot - Search & Destroy
Absent : C:\ProgramData\Viewpoint
Absent : C:\Users\nicolas\AppData\Local\cfd32959
Supprimé : C:\Users\nicolas\AppData\Local\MediaGet2
Supprimé : C:\Users\nicolas\AppData\Local\moovida Air
Absent : C:\Program Files (x86)\Viewpoint

¤

¤¤¤¤¤¤¤¤¤¤ | MBR

Windows Version: Windows 7 Ultimate Edition
Windows Information: (build 7600), 64-bit
Base Board Manufacturer: ASUSTeK Computer INC.
BIOS Manufacturer: Phoenix Technologies, LTD
System Manufacturer: System manufacturer
System Product Name: System Product Name
Logical Drives Mask: 0x020003fd

Analysis of file "C:\Kill'em\MBR.bin":
Windows 7 MBR code detected

¤

¤¤¤¤¤¤¤¤¤¤ | Nettoyage disque

Nettoyage du disque effectué

¤

explorer.exe -> Processus redémarré

Fin : 18:01:41

¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤

18:11:12.0652 3744 TDSS rootkit removing tool 2.7.1.0 Jan 13 2012 15:24:05
18:11:12.0824 3744 ============================================================
18:11:12.0824 3744 Current date / time: 2012/01/13 18:11:12.0824
18:11:12.0824 3744 SystemInfo:
18:11:12.0824 3744
18:11:12.0824 3744 OS Version: 6.1.7600 ServicePack: 0.0
18:11:12.0824 3744 Product type: Workstation
18:11:12.0824 3744 ComputerName: NICOLAS-PC
18:11:12.0824 3744 UserName: nicolas
18:11:12.0824 3744 Windows directory: C:\Windows
18:11:12.0824 3744 System windows directory: C:\Windows
18:11:12.0824 3744 Running under WOW64
18:11:12.0824 3744 Processor architecture: Intel x64
18:11:12.0824 3744 Number of processors: 2
18:11:12.0824 3744 Page size: 0x1000
18:11:12.0824 3744 Boot type: Normal boot
18:11:12.0824 3744 ============================================================
18:11:21.0716 3744 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000, SectorSize: 0x200, Cylinders: 0x50C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K', Flags 0x00000040
18:11:21.0731 3744 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000, SectorSize: 0x200, Cylinders: 0xFC59, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K', Flags 0x00000040
18:11:21.0856 3744 Initialize success
18:11:41.0496 4880 ============================================================
18:11:41.0496 4880 Scan started
18:11:41.0496 4880 Mode: Manual;
18:11:41.0496 4880 ============================================================
18:11:42.0370 4880 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
18:11:42.0370 4880 1394ohci - ok
18:11:42.0417 4880 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
18:11:42.0417 4880 ACPI - ok
18:11:42.0448 4880 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
18:11:42.0464 4880 AcpiPmi - ok
18:11:42.0526 4880 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
18:11:42.0542 4880 adp94xx - ok
18:11:42.0588 4880 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
18:11:42.0604 4880 adpahci - ok
18:11:42.0635 4880 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
18:11:42.0635 4880 adpu320 - ok
18:11:42.0698 4880 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys
18:11:42.0713 4880 AFD - ok
18:11:42.0744 4880 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
18:11:42.0744 4880 agp440 - ok
18:11:42.0791 4880 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
18:11:42.0791 4880 aliide - ok
18:11:42.0822 4880 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
18:11:42.0822 4880 amdide - ok
18:11:42.0869 4880 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
18:11:42.0869 4880 AmdK8 - ok
18:11:42.0900 4880 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
18:11:42.0900 4880 AmdPPM - ok
18:11:42.0947 4880 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys
18:11:42.0947 4880 amdsata - ok
18:11:42.0994 4880 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
18:11:42.0994 4880 amdsbs - ok
18:11:43.0025 4880 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys
18:11:43.0025 4880 amdxata - ok
18:11:43.0072 4880 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
18:11:43.0072 4880 AppID - ok
18:11:43.0134 4880 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
18:11:43.0134 4880 arc - ok
18:11:43.0166 4880 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
18:11:43.0166 4880 arcsas - ok
18:11:43.0275 4880 ArcSec (a7409b5c0e35ddee64f16f3054e5530b) C:\Windows\system32\drivers\ArcSec.sys
18:11:43.0275 4880 ArcSec - ok
18:11:43.0322 4880 ArcSoftKsUFilter (c130bc4a51b1382b2be8e44579ec4c0a) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys
18:11:43.0322 4880 ArcSoftKsUFilter - ok
18:11:43.0384 4880 aswFsBlk (5a68b880c16ad5a6aa20b49a47ffff24) C:\Windows\system32\drivers\aswFsBlk.sys
18:11:43.0384 4880 aswFsBlk - ok
18:11:43.0462 4880 aswMonFlt (230613be2d3da8053879be5ed2848f2d) C:\Windows\system32\drivers\aswMonFlt.sys
18:11:43.0462 4880 aswMonFlt - ok
18:11:43.0478 4880 aswRdr (0dc1996ae4178d7d14744ef6b3082313) C:\Windows\system32\drivers\aswRdr.sys
18:11:43.0493 4880 aswRdr - ok
18:11:43.0571 4880 aswSnx (b6ff911c23775cdfdd49612d92637af4) C:\Windows\system32\drivers\aswSnx.sys
18:11:43.0571 4880 aswSnx - ok
18:11:43.0602 4880 aswSP (5a590d8516376aed1829fc07d3bdaa4b) C:\Windows\system32\drivers\aswSP.sys
18:11:43.0618 4880 aswSP - ok
18:11:43.0649 4880 aswTdi (3239c0082fb0c1c4ee323730b85690a5) C:\Windows\system32\drivers\aswTdi.sys
18:11:43.0649 4880 aswTdi - ok
18:11:43.0696 4880 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
18:11:43.0696 4880 AsyncMac - ok
18:11:43.0727 4880 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
18:11:43.0727 4880 atapi - ok
18:11:43.0790 4880 atksgt (09149d03629a44f4773e621c432d1d89) C:\Windows\system32\DRIVERS\atksgt.sys
18:11:43.0790 4880 atksgt - ok
18:11:43.0883 4880 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
18:11:43.0883 4880 b06bdrv - ok
18:11:43.0946 4880 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
18:11:43.0961 4880 b57nd60a - ok
18:11:44.0008 4880 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
18:11:44.0008 4880 Beep - ok
18:11:44.0102 4880 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
18:11:44.0102 4880 blbdrive - ok
18:11:44.0148 4880 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys
18:11:44.0148 4880 bowser - ok
18:11:44.0195 4880 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
18:11:44.0195 4880 BrFiltLo - ok
18:11:44.0226 4880 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
18:11:44.0226 4880 BrFiltUp - ok
18:11:44.0273 4880 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
18:11:44.0289 4880 Brserid - ok
18:11:44.0320 4880 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
18:11:44.0320 4880 BrSerWdm - ok
18:11:44.0351 4880 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
18:11:44.0351 4880 BrUsbMdm - ok
18:11:44.0382 4880 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
18:11:44.0382 4880 BrUsbSer - ok
18:11:44.0414 4880 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
18:11:44.0414 4880 BTHMODEM - ok
18:11:44.0460 4880 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
18:11:44.0460 4880 cdfs - ok
18:11:44.0523 4880 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
18:11:44.0523 4880 cdrom - ok
18:11:44.0570 4880 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
18:11:44.0570 4880 circlass - ok
18:11:44.0632 4880 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
18:11:44.0632 4880 CLFS - ok
18:11:44.0694 4880 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
18:11:44.0694 4880 CmBatt - ok
18:11:44.0726 4880 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
18:11:44.0726 4880 cmdide - ok
18:11:44.0757 4880 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
18:11:44.0772 4880 CNG - ok
18:11:44.0788 4880 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
18:11:44.0788 4880 Compbatt - ok
18:11:44.0850 4880 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
18:11:44.0850 4880 CompositeBus - ok
18:11:44.0944 4880 cpuz132 - ok
18:11:44.0991 4880 cpuz135 - ok
18:11:45.0006 4880 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
18:11:45.0022 4880 crcdisk - ok
18:11:45.0131 4880 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys
18:11:45.0147 4880 CSC - ok
18:11:45.0256 4880 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys
18:11:45.0256 4880 DfsC - ok
18:11:45.0303 4880 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
18:11:45.0303 4880 discache - ok
18:11:45.0365 4880 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
18:11:45.0365 4880 Disk - ok
18:11:45.0474 4880 driverhardwarev2x64 (3f9933fac064a84a293207f039860de7) C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys
18:11:45.0474 4880 driverhardwarev2x64 - ok
18:11:45.0537 4880 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
18:11:45.0537 4880 drmkaud - ok
18:11:45.0615 4880 dtsoftbus01 (fb9bef3401ee5ecc2603311b9c64f44a) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
18:11:45.0615 4880 dtsoftbus01 - ok
18:11:45.0662 4880 dump_wmimmc - ok
18:11:45.0740 4880 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys
18:11:45.0755 4880 DXGKrnl - ok
18:11:45.0880 4880 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
18:11:45.0958 4880 ebdrv - ok
18:11:46.0020 4880 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
18:11:46.0020 4880 elxstor - ok
18:11:46.0067 4880 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
18:11:46.0067 4880 ErrDev - ok
18:11:46.0114 4880 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
18:11:46.0114 4880 exfat - ok
18:11:46.0161 4880 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
18:11:46.0161 4880 fastfat - ok
18:11:46.0192 4880 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
18:11:46.0192 4880 fdc - ok
18:11:46.0239 4880 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
18:11:46.0239 4880 FileInfo - ok
18:11:46.0270 4880 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
18:11:46.0270 4880 Filetrace - ok
18:11:46.0301 4880 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
18:11:46.0301 4880 flpydisk - ok
18:11:46.0348 4880 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
18:11:46.0348 4880 FltMgr - ok
18:11:46.0395 4880 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
18:11:46.0395 4880 FsDepends - ok
18:11:46.0473 4880 fssfltr (dc0dce4ec2c5d2cf6472f9fd6aa9a7dc) C:\Windows\system32\DRIVERS\fssfltr.sys
18:11:46.0473 4880 fssfltr - ok
18:11:46.0520 4880 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
18:11:46.0520 4880 Fs_Rec - ok
18:11:46.0613 4880 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys
18:11:46.0613 4880 fvevol - ok
18:11:46.0644 4880 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
18:11:46.0644 4880 gagp30kx - ok
18:11:46.0707 4880 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
18:11:46.0707 4880 GEARAspiWDM - ok
18:11:46.0722 4880 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
18:11:46.0722 4880 hcw85cir - ok
18:11:46.0800 4880 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
18:11:46.0800 4880 HdAudAddService - ok
18:11:46.0847 4880 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
18:11:46.0847 4880 HDAudBus - ok
18:11:46.0878 4880 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
18:11:46.0878 4880 HidBatt - ok
18:11:46.0910 4880 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
18:11:46.0910 4880 HidBth - ok
18:11:46.0956 4880 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
18:11:46.0956 4880 HidIr - ok
18:11:47.0019 4880 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
18:11:47.0019 4880 HidUsb - ok
18:11:47.0050 4880 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
18:11:47.0050 4880 HpSAMD - ok
18:11:47.0128 4880 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
18:11:47.0144 4880 HTTP - ok
18:11:47.0175 4880 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
18:11:47.0175 4880 hwpolicy - ok
18:11:47.0222 4880 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
18:11:47.0237 4880 i8042prt - ok
18:11:47.0284 4880 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys
18:11:47.0300 4880 iaStorV - ok
18:11:47.0346 4880 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
18:11:47.0346 4880 iirsp - ok
18:11:47.0378 4880 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
18:11:47.0378 4880 intelide - ok
18:11:47.0409 4880 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
18:11:47.0409 4880 intelppm - ok
18:11:47.0440 4880 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:11:47.0440 4880 IpFilterDriver - ok
18:11:47.0487 4880 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
18:11:47.0487 4880 IPMIDRV - ok
18:11:47.0518 4880 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
18:11:47.0518 4880 IPNAT - ok
18:11:47.0580 4880 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
18:11:47.0580 4880 IRENUM - ok
18:11:47.0612 4880 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
18:11:47.0612 4880 isapnp - ok
18:11:47.0658 4880 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
18:11:47.0658 4880 iScsiPrt - ok
18:11:47.0721 4880 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
18:11:47.0721 4880 kbdclass - ok
18:11:47.0752 4880 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
18:11:47.0752 4880 kbdhid - ok
18:11:47.0799 4880 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
18:11:47.0799 4880 KSecDD - ok
18:11:47.0846 4880 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
18:11:47.0846 4880 KSecPkg - ok
18:11:47.0877 4880 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
18:11:47.0877 4880 ksthunk - ok
18:11:47.0970 4880 lirsgt (5ea407821bb3104c31a705175ab4f309) C:\Windows\system32\DRIVERS\lirsgt.sys
18:11:47.0970 4880 lirsgt - ok
18:11:48.0017 4880 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
18:11:48.0017 4880 lltdio - ok
18:11:48.0064 4880 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
18:11:48.0064 4880 LSI_FC - ok
18:11:48.0095 4880 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
18:11:48.0095 4880 LSI_SAS - ok
18:11:48.0126 4880 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
18:11:48.0126 4880 LSI_SAS2 - ok
18:11:48.0158 4880 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
18:11:48.0173 4880 LSI_SCSI - ok
18:11:48.0220 4880 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
18:11:48.0220 4880 luafv - ok
18:11:48.0251 4880 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
18:11:48.0267 4880 megasas - ok
18:11:48.0298 4880 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
18:11:48.0298 4880 MegaSR - ok
18:11:48.0329 4880 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
18:11:48.0345 4880 Modem - ok
18:11:48.0376 4880 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
18:11:48.0376 4880 monitor - ok
18:11:48.0438 4880 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
18:11:48.0454 4880 mouclass - ok
18:11:48.0485 4880 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
18:11:48.0485 4880 mouhid - ok
18:11:48.0532 4880 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
18:11:48.0532 4880 mountmgr - ok
18:11:48.0579 4880 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
18:11:48.0579 4880 mpio - ok
18:11:48.0610 4880 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
18:11:48.0610 4880 mpsdrv - ok
18:11:48.0641 4880 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
18:11:48.0641 4880 MRxDAV - ok
18:11:48.0688 4880 mrxsmb (767a4c3bcf9410c286ced15a2db17108) C:\Windows\system32\DRIVERS\mrxsmb.sys
18:11:48.0688 4880 mrxsmb - ok
18:11:48.0735 4880 mrxsmb10 (920ee0ff995fcfdeb08c41605a959e1c) C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:11:48.0735 4880 mrxsmb10 - ok
18:11:48.0782 4880 mrxsmb20 (740d7ea9d72c981510a5292cf6adc941) C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:11:48.0782 4880 mrxsmb20 - ok
18:11:48.0813 4880 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
18:11:48.0813 4880 msahci - ok
18:11:48.0844 4880 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
18:11:48.0844 4880 msdsm - ok
18:11:48.0891 4880 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
18:11:48.0891 4880 Msfs - ok
18:11:48.0922 4880 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
18:11:48.0922 4880 mshidkmdf - ok
18:11:48.0938 4880 MSICDSetup - ok
18:11:48.0969 4880 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
18:11:48.0969 4880 msisadrv - ok
18:11:49.0016 4880 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
18:11:49.0016 4880 MSKSSRV - ok
18:11:49.0062 4880 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
18:11:49.0062 4880 MSPCLOCK - ok
18:11:49.0109 4880 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
18:11:49.0109 4880 MSPQM - ok
18:11:49.0156 4880 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
18:11:49.0156 4880 MsRPC - ok
18:11:49.0203 4880 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
18:11:49.0203 4880 mssmbios - ok
18:11:49.0234 4880 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
18:11:49.0234 4880 MSTEE - ok
18:11:49.0265 4880 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
18:11:49.0265 4880 MTConfig - ok
18:11:49.0328 4880 MTsensor (03b7145c889603537e9ffeabb1ad1089) C:\Windows\system32\DRIVERS\ASACPI.sys
18:11:49.0328 4880 MTsensor - ok
18:11:49.0374 4880 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
18:11:49.0374 4880 Mup - ok
18:11:49.0437 4880 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
18:11:49.0437 4880 NativeWifiP - ok
18:11:49.0546 4880 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
18:11:49.0562 4880 NDIS - ok
18:11:49.0624 4880 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
18:11:49.0624 4880 NdisCap - ok
18:11:49.0671 4880 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
18:11:49.0671 4880 NdisTapi - ok
18:11:49.0718 4880 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
18:11:49.0718 4880 Ndisuio - ok
18:11:49.0764 4880 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
18:11:49.0764 4880 NdisWan - ok
18:11:49.0796 4880 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
18:11:49.0811 4880 NDProxy - ok
18:11:49.0874 4880 Netaapl (6f4607e2333fe21e9e3ff8133a88b35b) C:\Windows\system32\DRIVERS\netaapl64.sys
18:11:49.0889 4880 Netaapl - ok
18:11:49.0920 4880 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
18:11:49.0920 4880 NetBIOS - ok
18:11:49.0967 4880 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
18:11:49.0967 4880 NetBT - ok
18:11:50.0014 4880 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
18:11:50.0014 4880 nfrd960 - ok
18:11:50.0092 4880 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
18:11:50.0092 4880 Npfs - ok
18:11:50.0154 4880 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
18:11:50.0154 4880 nsiproxy - ok
18:11:50.0232 4880 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys
18:11:50.0279 4880 Ntfs - ok
18:11:50.0388 4880 ntk_PowerDVD (7420b2e1f65642129b6e23bd42f752aa) C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys
18:11:50.0388 4880 ntk_PowerDVD - ok
18:11:50.0420 4880 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
18:11:50.0420 4880 Null - ok
18:11:50.0498 4880 NVENETFD (a85b4f2ef3a7304a5399ef0526423040) C:\Windows\system32\DRIVERS\nvm62x64.sys
18:11:50.0498 4880 NVENETFD - ok
18:11:50.0576 4880 NVHDA (10204955027011e08a9dc27737a48a54) C:\Windows\system32\drivers\nvhda64v.sys
18:11:50.0576 4880 NVHDA - ok
18:11:50.0966 4880 nvlddmkm (cbf698abe989d60ec0d0b6b81ad82930) C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:11:51.0028 4880 nvlddmkm - ok
18:11:51.0106 4880 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys
18:11:51.0122 4880 nvraid - ok
18:11:51.0153 4880 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys
18:11:51.0153 4880 nvstor - ok
18:11:51.0215 4880 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
18:11:51.0215 4880 nv_agp - ok
18:11:51.0262 4880 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
18:11:51.0262 4880 ohci1394 - ok
18:11:51.0340 4880 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
18:11:51.0340 4880 Parport - ok
18:11:51.0371 4880 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
18:11:51.0371 4880 partmgr - ok
18:11:51.0418 4880 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
18:11:51.0418 4880 pci - ok
18:11:51.0449 4880 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
18:11:51.0449 4880 pciide - ok
18:11:51.0480 4880 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
18:11:51.0480 4880 pcmcia - ok
18:11:51.0527 4880 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
18:11:51.0527 4880 pcw - ok
18:11:51.0574 4880 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
18:11:51.0590 4880 PEAUTH - ok
18:11:51.0683 4880 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
18:11:51.0699 4880 PptpMiniport - ok
18:11:51.0730 4880 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
18:11:51.0730 4880 Processor - ok
18:11:51.0777 4880 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
18:11:51.0777 4880 Psched - ok
18:11:51.0855 4880 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
18:11:51.0902 4880 ql2300 - ok
18:11:51.0948 4880 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
18:11:51.0948 4880 ql40xx - ok
18:11:51.0980 4880 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
18:11:51.0980 4880 QWAVEdrv - ok
18:11:52.0011 4880 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
18:11:52.0011 4880 RasAcd - ok
18:11:52.0073 4880 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
18:11:52.0073 4880 RasAgileVpn - ok
18:11:52.0104 4880 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
18:11:52.0104 4880 Rasl2tp - ok
18:11:52.0151 4880 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
18:11:52.0151 4880 RasPppoe - ok
18:11:52.0182 4880 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
18:11:52.0182 4880 RasSstp - ok
18:11:52.0229 4880 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
18:11:52.0229 4880 rdbss - ok
18:11:52.0260 4880 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
18:11:52.0260 4880 rdpbus - ok
18:11:52.0292 4880 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
18:11:52.0292 4880 RDPCDD - ok
18:11:52.0323 4880 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys
18:11:52.0338 4880 RDPDR - ok
18:11:52.0370 4880 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
18:11:52.0370 4880 RDPENCDD - ok
18:11:52.0401 4880 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
18:11:52.0401 4880 RDPREFMP - ok
18:11:52.0432 4880 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
18:11:52.0432 4880 RDPWD - ok
18:11:52.0479 4880 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
18:11:52.0479 4880 rdyboost - ok
18:11:52.0526 4880 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
18:11:52.0526 4880 rspndr - ok
18:11:52.0572 4880 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys
18:11:52.0572 4880 s3cap - ok
18:11:52.0604 4880 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
18:11:52.0604 4880 sbp2port - ok
18:11:52.0650 4880 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
18:11:52.0650 4880 scfilter - ok
18:11:52.0682 4880 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
18:11:52.0682 4880 secdrv - ok
18:11:52.0713 4880 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
18:11:52.0713 4880 Serenum - ok
18:11:52.0744 4880 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
18:11:52.0744 4880 Serial - ok
18:11:52.0791 4880 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
18:11:52.0791 4880 sermouse - ok
18:11:52.0822 4880 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
18:11:52.0822 4880 sffdisk - ok
18:11:52.0853 4880 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
18:11:52.0853 4880 sffp_mmc - ok
18:11:52.0884 4880 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
18:11:52.0884 4880 sffp_sd - ok
18:11:52.0916 4880 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
18:11:52.0916 4880 sfloppy - ok
18:11:52.0962 4880 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
18:11:52.0962 4880 SiSRaid2 - ok
18:11:53.0009 4880 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
18:11:53.0009 4880 SiSRaid4 - ok
18:11:53.0056 4880 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
18:11:53.0056 4880 Smb - ok
18:11:53.0087 4880 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
18:11:53.0103 4880 spldr - ok
18:11:53.0181 4880 sptd (4b3f898dc1378ced2f35d04e5b0ce0df) C:\Windows\System32\Drivers\sptd.sys
18:11:53.0181 4880 Suspicious file (NoAccess): C:\Windows\System32\Drivers\sptd.sys. md5: 4b3f898dc1378ced2f35d04e5b0ce0df
18:11:53.0181 4880 sptd ( LockedFile.Multi.Generic ) - warning
18:11:53.0181 4880 sptd - detected LockedFile.Multi.Generic (1)
18:11:53.0243 4880 srv (37c3abc2338010e110d2a6a3930f3149) C:\Windows\system32\DRIVERS\srv.sys
18:11:53.0259 4880 srv - ok
18:11:53.0306 4880 srv2 (f773d2ed090b7baa1c1a034f3ca476c8) C:\Windows\system32\DRIVERS\srv2.sys
18:11:53.0306 4880 srv2 - ok
18:11:53.0352 4880 srvnet (cce32bb223e9ff55d241099a858fa889) C:\Windows\system32\DRIVERS\srvnet.sys
18:11:53.0352 4880 srvnet - ok
18:11:53.0415 4880 StarOpen - ok
18:11:53.0477 4880 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
18:11:53.0477 4880 stexstor - ok
18:11:53.0540 4880 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys
18:11:53.0540 4880 storflt - ok
18:11:53.0586 4880 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys
18:11:53.0586 4880 storvsc - ok
18:11:53.0618 4880 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
18:11:53.0618 4880 swenum - ok
18:11:53.0711 4880 Tcpip (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\drivers\tcpip.sys
18:11:53.0758 4880 Tcpip - ok
18:11:53.0852 4880 TCPIP6 (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\DRIVERS\tcpip.sys
18:11:53.0867 4880 TCPIP6 - ok
18:11:53.0898 4880 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
18:11:53.0898 4880 tcpipreg - ok
18:11:53.0930 4880 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
18:11:53.0930 4880 TDPIPE - ok
18:11:53.0961 4880 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
18:11:53.0961 4880 TDTCP - ok
18:11:54.0008 4880 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
18:11:54.0008 4880 tdx - ok
18:11:54.0070 4880 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
18:11:54.0070 4880 TermDD - ok
18:11:54.0117 4880 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
18:11:54.0117 4880 tssecsrv - ok
18:11:54.0164 4880 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
18:11:54.0164 4880 tunnel - ok
18:11:54.0210 4880 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
18:11:54.0210 4880 uagp35 - ok
18:11:54.0257 4880 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
18:11:54.0257 4880 udfs - ok
18:11:54.0320 4880 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
18:11:54.0320 4880 uliagpkx - ok
18:11:54.0366 4880 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
18:11:54.0366 4880 umbus - ok
18:11:54.0398 4880 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
18:11:54.0398 4880 UmPass - ok
18:11:54.0460 4880 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys
18:11:54.0460 4880 USBAAPL64 - ok
18:11:54.0522 4880 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
18:11:54.0522 4880 usbaudio - ok
18:11:54.0569 4880 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
18:11:54.0585 4880 usbccgp - ok
18:11:54.0616 4880 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
18:11:54.0616 4880 usbcir - ok
18:11:54.0678 4880 usbehci (df9f9afc9aaabd8ed47975d44e38169a) C:\Windows\system32\DRIVERS\usbehci.sys
18:11:54.0678 4880 usbehci - ok
18:11:54.0741 4880 usbhub (372a91bc3c6603080a793880b0873785) C:\Windows\system32\DRIVERS\usbhub.sys
18:11:54.0741 4880 usbhub - ok
18:11:54.0772 4880 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
18:11:54.0772 4880 usbohci - ok
18:11:54.0803 4880 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
18:11:54.0819 4880 usbprint - ok
18:11:54.0850 4880 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:11:54.0850 4880 USBSTOR - ok
18:11:54.0897 4880 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
18:11:54.0897 4880 usbuhci - ok
18:11:54.0944 4880 usbvideo (d501e12614b00a3252073101d6a1a74b) C:\Windows\system32\Drivers\usbvideo.sys
18:11:54.0944 4880 usbvideo - ok
18:11:55.0006 4880 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
18:11:55.0006 4880 vdrvroot - ok
18:11:55.0037 4880 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
18:11:55.0037 4880 vga - ok
18:11:55.0084 4880 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
18:11:55.0084 4880 VgaSave - ok
18:11:55.0131 4880 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
18:11:55.0131 4880 vhdmp - ok
18:11:55.0178 4880 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
18:11:55.0178 4880 viaide - ok
18:11:55.0209 4880 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys
18:11:55.0209 4880 vmbus - ok
18:11:55.0240 4880 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys
18:11:55.0240 4880 VMBusHID - ok
18:11:55.0271 4880 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
18:11:55.0271 4880 volmgr - ok
18:11:55.0302 4880 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
18:11:55.0318 4880 volmgrx - ok
18:11:55.0365 4880 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
18:11:55.0380 4880 volsnap - ok
18:11:55.0412 4880 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
18:11:55.0412 4880 vsmraid - ok
18:11:55.0458 4880 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
18:11:55.0458 4880 vwifibus - ok
18:11:55.0490 4880 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
18:11:55.0490 4880 WacomPen - ok
18:11:55.0536 4880 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
18:11:55.0536 4880 WANARP - ok
18:11:55.0552 4880 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
18:11:55.0552 4880 Wanarpv6 - ok
18:11:55.0583 4880 wanatw - ok
18:11:55.0630 4880 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
18:11:55.0630 4880 Wd - ok
18:11:55.0692 4880 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
18:11:55.0708 4880 Wdf01000 - ok
18:11:55.0755 4880 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
18:11:55.0770 4880 WfpLwf - ok
18:11:55.0802 4880 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
18:11:55.0802 4880 WIMMount - ok
18:11:55.0880 4880 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys
18:11:55.0880 4880 WinUsb - ok
18:11:55.0926 4880 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
18:11:55.0926 4880 WmiAcpi - ok
18:11:55.0973 4880 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
18:11:55.0973 4880 ws2ifsl - ok
18:11:56.0036 4880 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
18:11:56.0036 4880 WudfPf - ok
18:11:56.0067 4880 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
18:11:56.0067 4880 WUDFRd - ok
18:11:56.0145 4880 xusb21 (38f55d07b1d3391065c40ec065f984e2) C:\Windows\system32\DRIVERS\xusb21.sys
18:11:56.0145 4880 xusb21 - ok
18:11:56.0301 4880 {329F96B6-DF1E-4328-BFDA-39EA953C1312} (1870a74ee2901ca09ffbfe79a5ee0e94) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl
18:11:56.0301 4880 {329F96B6-DF1E-4328-BFDA-39EA953C1312} - ok
18:11:56.0316 4880 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
18:11:56.0363 4880 \Device\Harddisk0\DR0 - ok
18:11:56.0379 4880 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk1\DR1
18:11:56.0379 4880 \Device\Harddisk1\DR1 - ok
18:11:56.0379 4880 Boot (0x1200) (c8aa021d36c15948a14783cf0bf0139a) \Device\Harddisk0\DR0\Partition0
18:11:56.0379 4880 \Device\Harddisk0\DR0\Partition0 - ok
18:11:56.0394 4880 Boot (0x1200) (45411040cfcc3541aa211486a9e079b9) \Device\Harddisk0\DR0\Partition1
18:11:56.0394 4880 \Device\Harddisk0\DR0\Partition1 - ok
18:11:56.0410 4880 Boot (0x1200) (aa3e5f6d445ab88fa66dfa0920d4294c) \Device\Harddisk0\DR0\Partition2
18:11:56.0410 4880 \Device\Harddisk0\DR0\Partition2 - ok
18:11:56.0410 4880 Boot (0x1200) (b1e27aa018409de6bfd73f8afb883a65) \Device\Harddisk1\DR1\Partition0
18:11:56.0410 4880 \Device\Harddisk1\DR1\Partition0 - ok
18:11:56.0410 4880 Boot (0x1200) (c1d6010cddfd15ab031ad21d810116ff) \Device\Harddisk1\DR1\Partition1
18:11:56.0410 4880 \Device\Harddisk1\DR1\Partition1 - ok
18:11:56.0410 4880 ============================================================
18:11:56.0410 4880 Scan finished
18:11:56.0410 4880 ============================================================
18:11:56.0426 4888 Detected object count: 1
18:11:56.0426 4888 Actual detected object count: 1
18:12:30.0184 4888 sptd ( LockedFile.Multi.Generic ) - skipped by user
18:12:30.0184 4888 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
18:12:57.0593 2984 Deinitialize success

# AdwCleaner v1.406 - Rapport créé le 13/01/2012 à 18:15:17
# Mis à jour le 09/01/2012 par Xplode
# Système d'exploitation : Windows 7 Ultimate (64 bits)
# Nom d'utilisateur : nicolas - NICOLAS-PC (Administrateur)
# Exécuté depuis : C:\Users\nicolas\Desktop\adwcleaner(1).exe
# Option [Suppression]

***** [Services] *****

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\ProgramData\Tarma Installer

***** [Registre] *****

Clé Supprimée : HKLM\SOFTWARE\Viewpoint
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\SoftwareUpdate.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44b0-A826-84C829536E93}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\RFC1156Agent
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}

***** [Registre (x64)] *****

Clé Supprimée : HKLM\SOFTWARE\Tarma Installer
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.7600.16385

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v9.0.1 (fr)

Profil : ejjbepjj.default
Fichier : C:\Users\nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\ejjbepjj.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

-\\ Google Chrome v [Impossible d'obtenir la version]

Fichier : C:\Users\nicolas\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée : "homepage": "hxxp://startsear.ch/?aff=2&cf=d8fbb9f0-1858-11e1-9e23-001bfcf1a1f6",

*************************

AdwCleaner[S2].txt - [309 octets] - [30/11/2011 11:01:44]
AdwCleaner[S3].txt - [1267 octets] - [30/11/2011 11:05:47]
AdwCleaner[S4].txt - [4209 octets] - [13/01/2012 18:15:17]

*************************

Dossier Temporaire : 56 dossier(s) et 57 fichier(s) supprimés

########## EOF - C:\AdwCleaner[S4].txt - [4431 octets] ##########

hello

fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

▶ Télécharge ici :

Malwarebytes

▶ Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

relance malwarebytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

▶ Lance Malwarebyte's .

Fais un examen dit "Complet" .

▶ Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
▶ à la fin tu cliques sur "résultat" .
▶ Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

▶ Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

▶ Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)