Redirection dans des pubs

kardes -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour, J'ai un probleme. Lorsque je rentre sur un site dans google, google me redirige vers une page pub. Pouriez vous m'aider svp.

6 réponses

  1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start=
    Lire ce qui est écrit au niveau des suppressions/réparation (delete et cure), ne pas supprimer n'importe quoi.
    Poste le rapport ici.

    0
  2. kardes
     
    15:58:41.0723 4412 TDSS rootkit removing tool 2.7.5.0 Jan 18 2012 09:26:24
    15:58:41.0907 4412 ============================================================
    15:58:41.0907 4412 Current date / time: 2012/01/18 15:58:41.0907
    15:58:41.0907 4412 SystemInfo:
    15:58:41.0907 4412
    15:58:41.0907 4412 OS Version: 6.1.7601 ServicePack: 1.0
    15:58:41.0907 4412 Product type: Workstation
    15:58:41.0907 4412 ComputerName: ABDIL-PC
    15:58:41.0908 4412 UserName: abdil
    15:58:41.0908 4412 Windows directory: C:\Windows
    15:58:41.0908 4412 System windows directory: C:\Windows
    15:58:41.0908 4412 Running under WOW64
    15:58:41.0908 4412 Processor architecture: Intel x64
    15:58:41.0908 4412 Number of processors: 2
    15:58:41.0908 4412 Page size: 0x1000
    15:58:41.0908 4412 Boot type: Normal boot
    15:58:41.0908 4412 ============================================================
    15:58:43.0151 4412 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    15:58:43.0251 4412 Initialize success
    15:58:45.0001 0708 ============================================================
    15:58:45.0001 0708 Scan started
    15:58:45.0001 0708 Mode: Manual;
    15:58:45.0001 0708 ============================================================
    15:58:46.0178 0708 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
    15:58:46.0183 0708 1394ohci - ok
    15:58:46.0235 0708 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
    15:58:46.0241 0708 ACPI - ok
    15:58:46.0289 0708 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
    15:58:46.0292 0708 AcpiPmi - ok
    15:58:46.0351 0708 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
    15:58:46.0359 0708 adp94xx - ok
    15:58:46.0403 0708 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
    15:58:46.0409 0708 adpahci - ok
    15:58:46.0451 0708 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
    15:58:46.0473 0708 adpu320 - ok
    15:58:46.0620 0708 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
    15:58:46.0628 0708 AFD - ok
    15:58:46.0689 0708 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
    15:58:46.0692 0708 agp440 - ok
    15:58:46.0797 0708 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
    15:58:46.0799 0708 aliide - ok
    15:58:46.0822 0708 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
    15:58:46.0824 0708 amdide - ok
    15:58:46.0865 0708 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
    15:58:46.0867 0708 AmdK8 - ok
    15:58:46.0888 0708 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
    15:58:46.0890 0708 AmdPPM - ok
    15:58:46.0926 0708 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
    15:58:46.0929 0708 amdsata - ok
    15:58:46.0983 0708 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
    15:58:46.0988 0708 amdsbs - ok
    15:58:47.0028 0708 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
    15:58:47.0030 0708 amdxata - ok
    15:58:47.0092 0708 AmUStor (391887990cdaa83de5c56c3fde966da1) C:\Windows\system32\drivers\AmUStor.SYS
    15:58:47.0095 0708 AmUStor - ok
    15:58:47.0140 0708 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
    15:58:47.0143 0708 AppID - ok
    15:58:47.0197 0708 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
    15:58:47.0200 0708 arc - ok
    15:58:47.0221 0708 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
    15:58:47.0224 0708 arcsas - ok
    15:58:47.0265 0708 AsDsm (88fbc8bebfd38566235eaa5e4dbc4e05) C:\Windows\system32\drivers\AsDsm.sys
    15:58:47.0268 0708 AsDsm - ok
    15:58:47.0348 0708 ASMMAP64 (2db34edd17d3a8da7105a19c95a3dd68) C:\Program Files\ATKGFNEX\ASMMAP64.sys
    15:58:47.0351 0708 ASMMAP64 - ok
    15:58:47.0433 0708 aswFsBlk (ce6d8bcc4787704ea4feeb92b0d0caf8) C:\Windows\system32\drivers\aswFsBlk.sys
    15:58:47.0435 0708 aswFsBlk - ok
    15:58:47.0510 0708 aswMonFlt (0debeb2e3fbd0bf5343125cce617f105) C:\Windows\system32\drivers\aswMonFlt.sys
    15:58:47.0513 0708 aswMonFlt - ok
    15:58:47.0604 0708 aswRdr (952edc2e81f85d1781958d4128bf59f8) C:\Windows\system32\drivers\aswRdr.sys
    15:58:47.0606 0708 aswRdr - ok
    15:58:47.0648 0708 aswSnx (dd383e2ac941c545a85ab72503da6c12) C:\Windows\system32\drivers\aswSnx.sys
    15:58:47.0658 0708 aswSnx - ok
    15:58:47.0722 0708 aswSP (ef5403fb8b2dcb791ec365fdf6040a4a) C:\Windows\system32\drivers\aswSP.sys
    15:58:47.0728 0708 aswSP - ok
    15:58:47.0750 0708 aswTdi (34165da5c6b30c0f9d61246bf8a28040) C:\Windows\system32\drivers\aswTdi.sys
    15:58:47.0753 0708 aswTdi - ok
    15:58:47.0792 0708 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
    15:58:47.0794 0708 AsyncMac - ok
    15:58:47.0836 0708 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
    15:58:47.0838 0708 atapi - ok
    15:58:47.0916 0708 athr (0acc06fcf46f64ed4f11e57ee461c1f4) C:\Windows\system32\DRIVERS\athrx.sys
    15:58:47.0951 0708 athr - ok
    15:58:48.0083 0708 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
    15:58:48.0091 0708 b06bdrv - ok
    15:58:48.0177 0708 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
    15:58:48.0184 0708 b57nd60a - ok
    15:58:48.0359 0708 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
    15:58:48.0361 0708 Beep - ok
    15:58:48.0391 0708 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
    15:58:48.0393 0708 blbdrive - ok
    15:58:48.0441 0708 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
    15:58:48.0444 0708 bowser - ok
    15:58:48.0485 0708 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    15:58:48.0487 0708 BrFiltLo - ok
    15:58:48.0499 0708 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    15:58:48.0501 0708 BrFiltUp - ok
    15:58:48.0551 0708 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
    15:58:48.0556 0708 Brserid - ok
    15:58:48.0580 0708 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
    15:58:48.0583 0708 BrSerWdm - ok
    15:58:48.0596 0708 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
    15:58:48.0598 0708 BrUsbMdm - ok
    15:58:48.0615 0708 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
    15:58:48.0617 0708 BrUsbSer - ok
    15:58:48.0641 0708 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
    15:58:48.0644 0708 BTHMODEM - ok
    15:58:48.0680 0708 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
    15:58:48.0683 0708 cdfs - ok
    15:58:48.0724 0708 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
    15:58:48.0728 0708 cdrom - ok
    15:58:48.0782 0708 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
    15:58:48.0785 0708 circlass - ok
    15:58:48.0820 0708 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
    15:58:48.0827 0708 CLFS - ok
    15:58:48.0891 0708 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
    15:58:48.0893 0708 CmBatt - ok
    15:58:48.0915 0708 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
    15:58:48.0917 0708 cmdide - ok
    15:58:48.0964 0708 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
    15:58:48.0971 0708 CNG - ok
    15:58:49.0003 0708 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
    15:58:49.0006 0708 Compbatt - ok
    15:58:49.0049 0708 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
    15:58:49.0051 0708 CompositeBus - ok
    15:58:49.0084 0708 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
    15:58:49.0086 0708 crcdisk - ok
    15:58:49.0165 0708 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
    15:58:49.0168 0708 DfsC - ok
    15:58:49.0232 0708 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
    15:58:49.0234 0708 discache - ok
    15:58:49.0251 0708 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
    15:58:49.0254 0708 Disk - ok
    15:58:49.0302 0708 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
    15:58:49.0304 0708 drmkaud - ok
    15:58:49.0370 0708 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
    15:58:49.0405 0708 DXGKrnl - ok
    15:58:49.0546 0708 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
    15:58:49.0631 0708 ebdrv - ok
    15:58:49.0836 0708 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
    15:58:49.0845 0708 elxstor - ok
    15:58:49.0920 0708 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
    15:58:49.0922 0708 ErrDev - ok
    15:58:49.0986 0708 ETD (3c38648375b7f3988691f53a7aae10a9) C:\Windows\system32\DRIVERS\ETD.sys
    15:58:49.0989 0708 ETD - ok
    15:58:50.0037 0708 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
    15:58:50.0042 0708 exfat - ok
    15:58:50.0072 0708 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
    15:58:50.0077 0708 fastfat - ok
    15:58:50.0120 0708 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
    15:58:50.0122 0708 fdc - ok
    15:58:50.0204 0708 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
    15:58:50.0207 0708 FileInfo - ok
    15:58:50.0247 0708 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
    15:58:50.0249 0708 Filetrace - ok
    15:58:50.0277 0708 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
    15:58:50.0279 0708 flpydisk - ok
    15:58:50.0323 0708 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
    15:58:50.0329 0708 FltMgr - ok
    15:58:50.0359 0708 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
    15:58:50.0361 0708 FsDepends - ok
    15:58:50.0412 0708 fssfltr (6c06701bf1db05405804d7eb610991ce) C:\Windows\system32\DRIVERS\fssfltr.sys
    15:58:50.0414 0708 fssfltr - ok
    15:58:50.0462 0708 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
    15:58:50.0465 0708 Fs_Rec - ok
    15:58:50.0526 0708 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
    15:58:50.0531 0708 fvevol - ok
    15:58:50.0551 0708 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
    15:58:50.0554 0708 gagp30kx - ok
    15:58:50.0625 0708 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
    15:58:50.0627 0708 hcw85cir - ok
    15:58:50.0696 0708 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
    15:58:50.0704 0708 HdAudAddService - ok
    15:58:50.0820 0708 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
    15:58:50.0823 0708 HDAudBus - ok
    15:58:50.0857 0708 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
    15:58:50.0859 0708 HidBatt - ok
    15:58:50.0882 0708 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
    15:58:50.0885 0708 HidBth - ok
    15:58:50.0928 0708 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
    15:58:50.0931 0708 HidIr - ok
    15:58:50.0990 0708 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys
    15:58:50.0992 0708 HidUsb - ok
    15:58:51.0038 0708 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
    15:58:51.0041 0708 HpSAMD - ok
    15:58:51.0111 0708 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
    15:58:51.0127 0708 HTTP - ok
    15:58:51.0200 0708 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
    15:58:51.0202 0708 hwpolicy - ok
    15:58:51.0256 0708 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
    15:58:51.0259 0708 i8042prt - ok
    15:58:51.0320 0708 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
    15:58:51.0328 0708 iaStorV - ok
    15:58:51.0406 0708 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
    15:58:51.0409 0708 iirsp - ok
    15:58:51.0516 0708 IntcAzAudAddService (5ba1779e2c84fde2a5e201fff9c42c9c) C:\Windows\system32\drivers\RTKVHD64.sys
    15:58:51.0585 0708 IntcAzAudAddService - ok
    15:58:51.0624 0708 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
    15:58:51.0627 0708 intelide - ok
    15:58:51.0670 0708 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
    15:58:51.0671 0708 intelppm - ok
    15:58:51.0719 0708 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    15:58:51.0722 0708 IpFilterDriver - ok
    15:58:51.0760 0708 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
    15:58:51.0763 0708 IPMIDRV - ok
    15:58:51.0821 0708 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
    15:58:51.0824 0708 IPNAT - ok
    15:58:51.0865 0708 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
    15:58:51.0867 0708 IRENUM - ok
    15:58:51.0899 0708 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
    15:58:51.0902 0708 isapnp - ok
    15:58:51.0935 0708 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
    15:58:51.0941 0708 iScsiPrt - ok
    15:58:51.0978 0708 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
    15:58:51.0981 0708 kbdclass - ok
    15:58:52.0015 0708 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
    15:58:52.0018 0708 kbdhid - ok
    15:58:52.0070 0708 kbfiltr (e63ef8c3271d014f14e2469ce75fecb4) C:\Windows\system32\DRIVERS\kbfiltr.sys
    15:58:52.0073 0708 kbfiltr - ok
    15:58:52.0116 0708 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
    15:58:52.0120 0708 KSecDD - ok
    15:58:52.0170 0708 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
    15:58:52.0174 0708 KSecPkg - ok
    15:58:52.0206 0708 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
    15:58:52.0208 0708 ksthunk - ok
    15:58:52.0303 0708 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
    15:58:52.0306 0708 lltdio - ok
    15:58:52.0424 0708 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
    15:58:52.0428 0708 LSI_FC - ok
    15:58:52.0472 0708 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
    15:58:52.0475 0708 LSI_SAS - ok
    15:58:52.0517 0708 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    15:58:52.0521 0708 LSI_SAS2 - ok
    15:58:52.0597 0708 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    15:58:52.0601 0708 LSI_SCSI - ok
    15:58:52.0633 0708 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
    15:58:52.0636 0708 luafv - ok
    15:58:52.0674 0708 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
    15:58:52.0676 0708 MBAMProtector - ok
    15:58:52.0722 0708 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
    15:58:52.0724 0708 megasas - ok
    15:58:52.0796 0708 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
    15:58:52.0802 0708 MegaSR - ok
    15:58:52.0847 0708 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
    15:58:52.0850 0708 Modem - ok
    15:58:52.0911 0708 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
    15:58:52.0912 0708 monitor - ok
    15:58:52.0945 0708 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys
    15:58:52.0948 0708 mouclass - ok
    15:58:53.0063 0708 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
    15:58:53.0066 0708 mouhid - ok
    15:58:53.0112 0708 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
    15:58:53.0116 0708 mountmgr - ok
    15:58:53.0155 0708 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
    15:58:53.0160 0708 mpio - ok
    15:58:53.0191 0708 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
    15:58:53.0194 0708 mpsdrv - ok
    15:58:53.0236 0708 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
    15:58:53.0241 0708 MRxDAV - ok
    15:58:53.0268 0708 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
    15:58:53.0273 0708 mrxsmb - ok
    15:58:53.0316 0708 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    15:58:53.0323 0708 mrxsmb10 - ok
    15:58:53.0346 0708 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    15:58:53.0388 0708 mrxsmb20 - ok
    15:58:53.0521 0708 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
    15:58:53.0524 0708 msahci - ok
    15:58:53.0560 0708 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
    15:58:53.0564 0708 msdsm - ok
    15:58:53.0610 0708 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
    15:58:53.0613 0708 Msfs - ok
    15:58:53.0640 0708 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
    15:58:53.0642 0708 mshidkmdf - ok
    15:58:53.0668 0708 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
    15:58:53.0672 0708 msisadrv - ok
    15:58:53.0710 0708 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
    15:58:53.0712 0708 MSKSSRV - ok
    15:58:53.0747 0708 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
    15:58:53.0749 0708 MSPCLOCK - ok
    15:58:53.0772 0708 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
    15:58:53.0774 0708 MSPQM - ok
    15:58:53.0825 0708 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
    15:58:53.0832 0708 MsRPC - ok
    15:58:53.0867 0708 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
    15:58:53.0870 0708 mssmbios - ok
    15:58:53.0908 0708 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
    15:58:53.0910 0708 MSTEE - ok
    15:58:53.0922 0708 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
    15:58:53.0924 0708 MTConfig - ok
    15:58:53.0961 0708 MTsensor (032d35c996f21d19a205a7c8f0b76f3c) C:\Windows\system32\DRIVERS\ATK64AMD.sys
    15:58:53.0963 0708 MTsensor - ok
    15:58:53.0996 0708 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
    15:58:53.0999 0708 Mup - ok
    15:58:54.0053 0708 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
    15:58:54.0060 0708 NativeWifiP - ok
    15:58:54.0138 0708 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
    15:58:54.0176 0708 NDIS - ok
    15:58:54.0220 0708 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
    15:58:54.0222 0708 NdisCap - ok
    15:58:54.0251 0708 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
    15:58:54.0255 0708 NdisTapi - ok
    15:58:54.0302 0708 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
    15:58:54.0305 0708 Ndisuio - ok
    15:58:54.0344 0708 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
    15:58:54.0348 0708 NdisWan - ok
    15:58:54.0389 0708 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
    15:58:54.0392 0708 NDProxy - ok
    15:58:54.0437 0708 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
    15:58:54.0440 0708 NetBIOS - ok
    15:58:54.0489 0708 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
    15:58:54.0495 0708 NetBT - ok
    15:58:54.0542 0708 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
    15:58:54.0544 0708 nfrd960 - ok
    15:58:54.0579 0708 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
    15:58:54.0582 0708 Npfs - ok
    15:58:54.0607 0708 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
    15:58:54.0610 0708 nsiproxy - ok
    15:58:54.0667 0708 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
    15:58:54.0716 0708 Ntfs - ok
    15:58:54.0770 0708 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
    15:58:54.0773 0708 Null - ok
    15:58:54.0815 0708 NVHDA (6e41a4df26340a07a489b721f9721ec1) C:\Windows\system32\drivers\nvhda64v.sys
    15:58:54.0818 0708 NVHDA - ok
    15:58:55.0086 0708 nvlddmkm (25b51a9fb639dc59221cb3a5b7836e30) C:\Windows\system32\DRIVERS\nvlddmkm.sys
    15:58:55.0344 0708 nvlddmkm - ok
    15:58:55.0445 0708 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
    15:58:55.0449 0708 nvraid - ok
    15:58:55.0499 0708 nvsmu (e58d81fb8616d0cb55c1e36aa0b213c9) C:\Windows\system32\DRIVERS\nvsmu.sys
    15:58:55.0502 0708 nvsmu - ok
    15:58:55.0544 0708 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
    15:58:55.0549 0708 nvstor - ok
    15:58:55.0575 0708 nvstor64 (1978dd2ee567287d040b5a9468eceb72) C:\Windows\system32\DRIVERS\nvstor64.sys
    15:58:55.0578 0708 nvstor64 - ok
    15:58:55.0642 0708 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
    15:58:55.0646 0708 nv_agp - ok
    15:58:55.0764 0708 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
    15:58:55.0766 0708 ohci1394 - ok
    15:58:55.0833 0708 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
    15:58:55.0837 0708 Parport - ok
    15:58:55.0877 0708 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
    15:58:55.0882 0708 partmgr - ok
    15:58:55.0921 0708 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
    15:58:55.0926 0708 pci - ok
    15:58:55.0963 0708 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
    15:58:55.0966 0708 pciide - ok
    15:58:56.0002 0708 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
    15:58:56.0007 0708 pcmcia - ok
    15:58:56.0028 0708 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
    15:58:56.0032 0708 pcw - ok
    15:58:56.0060 0708 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
    15:58:56.0070 0708 PEAUTH - ok
    15:58:56.0174 0708 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
    15:58:56.0178 0708 PptpMiniport - ok
    15:58:56.0206 0708 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
    15:58:56.0209 0708 Processor - ok
    15:58:56.0261 0708 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
    15:58:56.0264 0708 Psched - ok
    15:58:56.0343 0708 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
    15:58:56.0381 0708 ql2300 - ok
    15:58:56.0491 0708 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
    15:58:56.0495 0708 ql40xx - ok
    15:58:56.0531 0708 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
    15:58:56.0534 0708 QWAVEdrv - ok
    15:58:56.0546 0708 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
    15:58:56.0549 0708 RasAcd - ok
    15:58:56.0598 0708 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
    15:58:56.0600 0708 RasAgileVpn - ok
    15:58:56.0645 0708 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
    15:58:56.0648 0708 Rasl2tp - ok
    15:58:56.0677 0708 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
    15:58:56.0680 0708 RasPppoe - ok
    15:58:56.0717 0708 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
    15:58:56.0720 0708 RasSstp - ok
    15:58:56.0763 0708 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
    15:58:56.0770 0708 rdbss - ok
    15:58:56.0807 0708 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
    15:58:56.0809 0708 rdpbus - ok
    15:58:56.0850 0708 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
    15:58:56.0853 0708 RDPCDD - ok
    15:58:56.0870 0708 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
    15:58:56.0873 0708 RDPENCDD - ok
    15:58:56.0892 0708 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
    15:58:56.0895 0708 RDPREFMP - ok
    15:58:56.0942 0708 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
    15:58:56.0947 0708 RDPWD - ok
    15:58:57.0040 0708 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
    15:58:57.0045 0708 rdyboost - ok
    15:58:57.0088 0708 RimUsb - ok
    15:58:57.0136 0708 RimVSerPort (c903d49655b4aae46673f0aaa6be0f58) C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys
    15:58:57.0139 0708 RimVSerPort - ok
    15:58:57.0180 0708 ROOTMODEM (388d3dd1a6457280f3badba9f3acd6b1) C:\Windows\system32\Drivers\RootMdm.sys
    15:58:57.0183 0708 ROOTMODEM - ok
    15:58:57.0232 0708 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
    15:58:57.0236 0708 rspndr - ok
    15:58:57.0326 0708 RTL8167 (b49dc435ae3695bac5623dd94b05732d) C:\Windows\system32\DRIVERS\Rt64win7.sys
    15:58:57.0332 0708 RTL8167 - ok
    15:58:57.0377 0708 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
    15:58:57.0381 0708 sbp2port - ok
    15:58:57.0420 0708 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
    15:58:57.0422 0708 scfilter - ok
    15:58:57.0498 0708 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
    15:58:57.0500 0708 secdrv - ok
    15:58:57.0616 0708 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
    15:58:57.0618 0708 Serenum - ok
    15:58:57.0662 0708 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
    15:58:57.0665 0708 Serial - ok
    15:58:57.0712 0708 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
    15:58:57.0715 0708 sermouse - ok
    15:58:57.0759 0708 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
    15:58:57.0762 0708 sffdisk - ok
    15:58:57.0796 0708 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
    15:58:57.0800 0708 sffp_mmc - ok
    15:58:57.0818 0708 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
    15:58:57.0820 0708 sffp_sd - ok
    15:58:57.0851 0708 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
    15:58:57.0854 0708 sfloppy - ok
    15:58:57.0903 0708 SiSGbeLH (1bc348cf6baa90ec8e533ef6e6a69933) C:\Windows\system32\DRIVERS\SiSG664.sys
    15:58:57.0905 0708 SiSGbeLH - ok
    15:58:57.0931 0708 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    15:58:57.0934 0708 SiSRaid2 - ok
    15:58:57.0955 0708 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
    15:58:57.0959 0708 SiSRaid4 - ok
    15:58:57.0979 0708 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
    15:58:57.0983 0708 Smb - ok
    15:58:58.0112 0708 SNP2UVC (2d280b5799f9c143fa7d49e032fbce46) C:\Windows\system32\DRIVERS\snp2uvc.sys
    15:58:58.0158 0708 SNP2UVC - ok
    15:58:58.0211 0708 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
    15:58:58.0214 0708 spldr - ok
    15:58:58.0294 0708 sptd (602884696850c86434530790b110e8eb) C:\Windows\System32\Drivers\sptd.sys
    15:58:58.0318 0708 sptd - ok
    15:58:58.0379 0708 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
    15:58:58.0387 0708 srv - ok
    15:58:58.0430 0708 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
    15:58:58.0454 0708 srv2 - ok
    15:58:58.0592 0708 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
    15:58:58.0598 0708 srvnet - ok
    15:58:58.0690 0708 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
    15:58:58.0693 0708 stexstor - ok
    15:58:58.0801 0708 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
    15:58:58.0803 0708 swenum - ok
    15:58:59.0050 0708 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
    15:58:59.0108 0708 Tcpip - ok
    15:58:59.0314 0708 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
    15:58:59.0328 0708 TCPIP6 - ok
    15:58:59.0375 0708 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
    15:58:59.0377 0708 tcpipreg - ok
    15:58:59.0416 0708 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
    15:58:59.0419 0708 TDPIPE - ok
    15:58:59.0431 0708 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
    15:58:59.0434 0708 TDTCP - ok
    15:58:59.0468 0708 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
    15:58:59.0471 0708 tdx - ok
    15:58:59.0512 0708 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
    15:58:59.0515 0708 TermDD - ok
    15:58:59.0591 0708 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
    15:58:59.0594 0708 tssecsrv - ok
    15:58:59.0647 0708 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
    15:58:59.0650 0708 TsUsbFlt - ok
    15:58:59.0743 0708 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
    15:58:59.0747 0708 tunnel - ok
    15:58:59.0790 0708 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
    15:58:59.0793 0708 uagp35 - ok
    15:58:59.0838 0708 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
    15:58:59.0844 0708 udfs - ok
    15:58:59.0895 0708 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
    15:58:59.0898 0708 uliagpkx - ok
    15:58:59.0936 0708 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
    15:58:59.0939 0708 umbus - ok
    15:58:59.0976 0708 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
    15:58:59.0979 0708 UmPass - ok
    15:59:00.0030 0708 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
    15:59:00.0034 0708 usbccgp - ok
    15:59:00.0079 0708 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
    15:59:00.0084 0708 usbcir - ok
    15:59:00.0125 0708 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
    15:59:00.0128 0708 usbehci - ok
    15:59:00.0167 0708 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
    15:59:00.0174 0708 usbhub - ok
    15:59:00.0191 0708 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
    15:59:00.0193 0708 usbohci - ok
    15:59:00.0221 0708 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
    15:59:00.0224 0708 usbprint - ok
    15:59:00.0267 0708 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
    15:59:00.0270 0708 usbscan - ok
    15:59:00.0290 0708 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    15:59:00.0295 0708 USBSTOR - ok
    15:59:00.0314 0708 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
    15:59:00.0316 0708 usbuhci - ok
    15:59:00.0367 0708 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys
    15:59:00.0371 0708 usbvideo - ok
    15:59:00.0472 0708 usb_rndisx (70d05ee263568a742d14e1876df80532) C:\Windows\system32\DRIVERS\usb8023x.sys
    15:59:00.0475 0708 usb_rndisx - ok
    15:59:00.0527 0708 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
    15:59:00.0530 0708 vdrvroot - ok
    15:59:00.0564 0708 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
    15:59:00.0567 0708 vga - ok
    15:59:00.0589 0708 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
    15:59:00.0592 0708 VgaSave - ok
    15:59:00.0639 0708 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
    15:59:00.0644 0708 vhdmp - ok
    15:59:00.0676 0708 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
    15:59:00.0679 0708 viaide - ok
    15:59:00.0713 0708 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
    15:59:00.0716 0708 volmgr - ok
    15:59:00.0760 0708 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
    15:59:00.0767 0708 volmgrx - ok
    15:59:00.0799 0708 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
    15:59:00.0805 0708 volsnap - ok
    15:59:00.0850 0708 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
    15:59:00.0855 0708 vsmraid - ok
    15:59:00.0878 0708 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
    15:59:00.0881 0708 vwifibus - ok
    15:59:00.0908 0708 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
    15:59:00.0911 0708 vwififlt - ok
    15:59:00.0940 0708 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
    15:59:00.0943 0708 vwifimp - ok
    15:59:00.0972 0708 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
    15:59:00.0975 0708 WacomPen - ok
    15:59:01.0029 0708 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
    15:59:01.0033 0708 WANARP - ok
    15:59:01.0052 0708 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
    15:59:01.0055 0708 Wanarpv6 - ok
    15:59:01.0173 0708 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
    15:59:01.0177 0708 Wd - ok
    15:59:01.0215 0708 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
    15:59:01.0226 0708 Wdf01000 - ok
    15:59:01.0345 0708 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
    15:59:01.0347 0708 WfpLwf - ok
    15:59:01.0377 0708 WimFltr (52ded146e4797e6ccf94799e8e22bb2a) C:\Windows\system32\DRIVERS\wimfltr.sys
    15:59:01.0381 0708 WimFltr - ok
    15:59:01.0403 0708 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
    15:59:01.0406 0708 WIMMount - ok
    15:59:01.0534 0708 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
    15:59:01.0537 0708 WinUsb - ok
    15:59:01.0590 0708 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
    15:59:01.0592 0708 WmiAcpi - ok
    15:59:01.0661 0708 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
    15:59:01.0664 0708 ws2ifsl - ok
    15:59:01.0728 0708 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
    15:59:01.0732 0708 WudfPf - ok
    15:59:01.0786 0708 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
    15:59:01.0791 0708 WUDFRd - ok
    15:59:01.0862 0708 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
    15:59:01.0922 0708 \Device\Harddisk0\DR0 - ok
    15:59:01.0933 0708 Boot (0x1200) (da3a1262e442aac9610f281cdbd0e680) \Device\Harddisk0\DR0\Partition0
    15:59:01.0935 0708 \Device\Harddisk0\DR0\Partition0 - ok
    15:59:01.0961 0708 Boot (0x1200) (caeed160b58b5a3c79003f2f586f39e2) \Device\Harddisk0\DR0\Partition1
    15:59:01.0963 0708 \Device\Harddisk0\DR0\Partition1 - ok
    15:59:01.0963 0708 ============================================================
    15:59:01.0963 0708 Scan finished
    15:59:01.0963 0708 ============================================================
    15:59:01.0979 4276 Detected object count: 0
    15:59:01.0979 4276 Actual detected object count: 0
    0
  3. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    okay... :
    15:58:41.0908 4412 Processor architecture: Intel x64

    ~~

    Sauvegarde tes documents importants.
    A lire en entier.

    Désactive les logiciels de protection (Antivirus, Antispywares)
    En Général, cela se fait par un clic droit sur l'icône de ton antivirus en bas à droite et désactiver protection/agent ou autres.

    ensuite :

    Télécharge Combofix sUBs : http://download.bleepingcomputer.com/sUBs/ComboFix.exe et sauvegarde le sur ton bureau et pas ailleurs!

    Double-clic sur combofix, accepte la licence d'utilisation et laisse toi guider.

    Eventuellement, installe la console de récupération comme cela est conseillé

    Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.
    Si le rapport ne passe pas, envoie le sur ce site : http://pjjoint.malekal.com/
    et donne le lien ici :)

    Tu as le tutorial sur ce lien pour t'aider : https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

    PS : si Combofix ne se lance pas, renomme le fichier Combofix et retente.

    Si pas mieux, tente en mode sans échec sans prise en charge du réseau : Redémarre en mode sans échec, pour cela, redémarre l'ordinateur, avant le logo Windows, tapote sur la touche F8, un menu va apparaître, choisis Mode sans échec et appuye sur la touche entrée du clavier.

    Si Combofix émet toujours une alerte sur l'antivirus : Si tu es en mode sans échec continue, si tu es en mode normal et que l'antivirus est bien désactivé. Continue.
    Hébergement du rapport : Utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport, donne le lien pjjoint qui pointent vers ce rapport dans un nouveau message.
    0
  4. kardes
     
    Il me dit que Microsoft Security essential est actif alors que je l'ai desinstaller avant. je continu ou pas?
    0
    1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      yep
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. kardes
     
    ComboFix 12-01-18.04 - abdil 18/01/2012 16:16:39.1.2 - x64
    Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.4095.2150 [GMT 1:00]
    Lancé depuis: c:\users\abdil\Desktop\ComboFix.exe
    AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
    SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    * Un nouveau point de restauration a été créé
    .
    .
    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\programdata\FullRemove.exe
    c:\users\abdil\AppData\Local\TempDIR
    c:\users\abdil\AppData\Local\TempDIR\BetterInstaller.exe
    c:\users\abdil\AppData\Roaming\.#
    D:\install.exe
    .
    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2011-12-18 au 2012-01-18 ))))))))))))))))))))))))))))))))))))
    .
    .
    2012-01-18 15:25 . 2012-01-18 15:25 -------- d-----w- c:\users\yoodaSGBD\AppData\Local\temp
    2012-01-18 15:25 . 2012-01-18 15:25 -------- d-----w- c:\users\Default\AppData\Local\temp
    2012-01-18 14:45 . 2012-01-18 14:58 -------- d-----w- C:\tdsskiller
    2012-01-18 08:00 . 2012-01-18 08:19 -------- d-----w- C:\ZHP
    2012-01-18 08:00 . 2012-01-18 08:19 -------- d-----w- c:\program files (x86)\ZHPDiag
    2012-01-17 20:46 . 2012-01-17 20:46 -------- d-----w- c:\users\abdil\AppData\Roaming\Malwarebytes
    2012-01-17 20:46 . 2012-01-17 20:46 -------- d-----w- c:\programdata\Malwarebytes
    2012-01-17 20:46 . 2012-01-17 20:46 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
    2012-01-17 20:46 . 2011-12-10 14:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-01-17 19:37 . 2011-11-28 17:51 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
    2012-01-17 19:37 . 2011-11-28 17:53 304472 ----a-w- c:\windows\system32\drivers\aswSP.sys
    2012-01-17 19:37 . 2011-11-28 17:52 42328 ----a-w- c:\windows\system32\drivers\aswRdr.sys
    2012-01-17 19:37 . 2011-11-28 17:52 58712 ----a-w- c:\windows\system32\drivers\aswTdi.sys
    2012-01-17 19:37 . 2011-11-28 17:54 591192 ----a-w- c:\windows\system32\drivers\aswSnx.sys
    2012-01-17 19:37 . 2011-11-28 17:52 66904 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
    2012-01-17 19:37 . 2011-11-28 18:01 256960 ----a-w- c:\windows\system32\aswBoot.exe
    2012-01-17 19:36 . 2011-11-28 18:01 41184 ----a-w- c:\windows\avastSS.scr
    2012-01-17 19:36 . 2011-11-28 18:01 199816 ----a-w- c:\windows\SysWow64\aswBoot.exe
    2012-01-17 19:36 . 2012-01-17 19:36 -------- d-----w- c:\programdata\AVAST Software
    2012-01-17 19:36 . 2012-01-17 19:36 -------- d-----w- c:\program files\AVAST Software
    2012-01-17 19:23 . 2012-01-17 21:33 -------- d-----w- c:\programdata\Spybot - Search & Destroy
    2012-01-17 19:23 . 2012-01-17 20:14 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
    2012-01-17 19:17 . 2012-01-17 19:17 -------- d-----w- c:\users\abdil\AppData\Roaming\EeeStorageUploader
    2012-01-17 19:17 . 2012-01-17 19:17 -------- d-----w- c:\program files (x86)\Common Files\Java
    2012-01-17 19:17 . 2011-11-10 04:54 476904 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
    2012-01-17 18:23 . 2012-01-17 18:23 626688 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr80.dll
    2012-01-17 18:23 . 2012-01-17 18:23 548864 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp80.dll
    2012-01-17 18:23 . 2012-01-17 18:23 479232 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcm80.dll
    2012-01-17 18:23 . 2012-01-17 18:23 43992 ----a-w- c:\program files (x86)\Mozilla Firefox\mozutils.dll
    2012-01-17 17:01 . 2012-01-17 17:01 118784 --sha-r- c:\windows\SysWow64\msrab.dll
    2012-01-11 19:44 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll
    2012-01-11 19:44 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\SysWow64\quartz.dll
    2012-01-11 19:44 . 2011-10-26 04:32 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
    2012-01-11 19:44 . 2011-10-26 05:25 366592 ----a-w- c:\windows\system32\qdvd.dll
    2012-01-11 19:40 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
    2012-01-11 19:40 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
    2012-01-11 19:37 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
    2012-01-11 19:37 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
    2012-01-10 17:39 . 2012-01-17 20:29 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft
    2012-01-03 16:22 . 2012-01-03 16:22 103864 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nppdf32.dll
    2012-01-03 16:22 . 2012-01-03 16:22 103864 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
    2011-12-23 17:35 . 2011-12-23 17:35 -------- d-----w- c:\users\abdil\AppData\Roaming\Unity
    2011-12-23 17:09 . 2012-01-17 20:29 -------- d-----w- c:\users\abdil\AppData\Local\Unity
    2011-12-22 19:57 . 2011-12-22 20:01 -------- d-----w- c:\users\abdil\AppData\Roaming\BitZipper
    .
    .
    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-11-24 04:52 . 2011-12-15 17:22 3145216 ----a-w- c:\windows\system32\win32k.sys
    2011-11-10 04:54 . 2010-11-06 19:08 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
    2011-11-05 05:32 . 2011-12-15 17:22 2048 ----a-w- c:\windows\system32\tzres.dll
    2011-11-05 04:26 . 2011-12-15 17:22 2048 ----a-w- c:\windows\SysWow64\tzres.dll
    2011-11-04 01:53 . 2011-12-16 12:59 2309120 ----a-w- c:\windows\system32\jscript9.dll
    2011-11-04 01:44 . 2011-12-16 12:59 1390080 ----a-w- c:\windows\system32\wininet.dll
    2011-11-04 01:44 . 2011-12-16 12:59 1493504 ----a-w- c:\windows\system32\inetcpl.cpl
    2011-11-04 01:34 . 2011-12-16 12:59 2382848 ----a-w- c:\windows\system32\mshtml.tlb
    2011-11-03 22:47 . 2011-12-16 12:59 1798144 ----a-w- c:\windows\SysWow64\jscript9.dll
    2011-11-03 22:40 . 2011-12-16 12:59 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
    2011-11-03 22:39 . 2011-12-16 12:59 1127424 ----a-w- c:\windows\SysWow64\wininet.dll
    2011-11-03 22:31 . 2011-12-16 12:59 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
    2011-10-26 05:21 . 2011-12-15 17:30 43520 ----a-w- c:\windows\system32\csrsrv.dll
    2011-10-20 19:49 . 2011-10-20 19:49 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    .
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
    @="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
    [HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
    2007-06-02 01:08 143360 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
    "MyTomTomSA.exe"="c:\program files (x86)\MyTomTom 3\MyTomTomSA.exe" [2011-06-14 399320]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
    "UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-12-04 218408]
    "HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
    "ATKOSD2"="c:\program files (x86)\ASUS\ATKOSD2\ATKOSD2.exe" [2009-08-17 6859392]
    "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Media\DMedia.exe" [2009-08-20 170624]
    "EEventManager"="c:\progra~2\EPSONS~1\EVENTM~1\EEventManager.exe" [2008-12-04 665424]
    "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
    "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 402432]
    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
    "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-04 37296]
    "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
    "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
    "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
    .
    c:\users\abdil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
    Enregistrement de FIFA 11.lnk - c:\program files (x86)\EA Sports\FIFA 11\Support\EAregister.exe [N/A]
    OpenOffice.org 3.2.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2009-12-17 156880]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
    .
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-12-01 136176]
    R2 yoodaPG;SGBD Yooda SeeUrank;C:/Yooda/SeeUrankFalcon/pgsql/bin/pg_ctl.exe runservice -N yoodaPG -D C:/ProgramData/Yooda/SeeUrankFalcon/Data [x]
    R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-12-01 136176]
    R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
    R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
    R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
    R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
    S1 aswSnx;aswSnx; [x]
    S1 aswSP;aswSP; [x]
    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
    S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x]
    S2 ASMMAP64;ASMMAP64;c:\program files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
    S2 aswFsBlk;aswFsBlk; [x]
    S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
    S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
    S2 OberonGameConsoleService;Oberon Media Game Console service;c:\program files (x86)\Asus\Game Park\GameConsole\OberonGameConsoleService.exe [2009-09-15 44312]
    S3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
    S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
    S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
    S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
    .
    .
    --- Autres Services/Pilotes en mémoire ---
    .
    *NewlyCreated* - WS2IFSL
    .
    Contenu du dossier 'Tâches planifiées'
    .
    2012-01-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-12-01 19:31]
    .
    2012-01-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-12-01 19:31]
    .
    2012-01-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-211896153-1216998436-17115506-1000Core.job
    - c:\users\abdil\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-18 19:03]
    .
    2012-01-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-211896153-1216998436-17115506-1000UA.job
    - c:\users\abdil\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-18 19:03]
    .
    2012-01-18 c:\windows\Tasks\qguhbj.job
    - c:\windows\system32\rundll32.exe [2009-07-13 01:14]
    .
    .
    --------- x86-64 -----------
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
    @="{472083B0-C522-11CF-8763-00608CC02F24}"
    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
    2011-11-28 18:01 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
    @="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
    [HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
    2007-06-02 00:52 159744 ----a-w- c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\OverlayIconExtension1]
    @="{fe25455d-b4c2-4e32-97d2-92632ec1c224}"
    [HKEY_CLASSES_ROOT\CLSID\{fe25455d-b4c2-4e32-97d2-92632ec1c224}]
    2010-11-05 01:57 444752 ----a-w- c:\windows\System32\mscoree.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\OverlayIconExtension2]
    @="{1fae2d88-a78e-4f03-909f-be818a3c1ce6}"
    [HKEY_CLASSES_ROOT\CLSID\{1fae2d88-a78e-4f03-909f-be818a3c1ce6}]
    2010-11-05 01:57 444752 ----a-w- c:\windows\System32\mscoree.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-09-30 621440]
    "EeeStorageBackup"="c:\program files (x86)\ASUS\Asus WebStorage\BackupService.exe" [2009-08-25 947472]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-08-15 16336416]
    "AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-08-12 323072]
    "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "LoadAppInit_DLLs"=0x1
    .
    ------- Examen supplémentaire -------
    .
    uStart Page = hxxp://www.google.fr/
    uLocal Page = c:\windows\system32\blank.htm
    mStart Page = hxxp://www.bigseekpro.com/bsprpc/{A295A3DF-E6BA-4356-A6B8-EB88C422E6FF}
    mLocal Page = c:\windows\SysWOW64\blank.htm
    uInternet Settings,ProxyOverride = *.local
    IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
    TCP: DhcpNameServer = 192.168.1.254
    FF - ProfilePath - c:\users\abdil\AppData\Roaming\Mozilla\Firefox\Profiles\9ddfpr3d.default\
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
    FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
    .
    - - - - ORPHELINS SUPPRIMES - - - -
    .
    Toolbar-Locked - (no file)
    Toolbar-10 - (no file)
    SafeBoot-52938728.sys
    Toolbar-Locked - (no file)
    Toolbar-10 - (no file)
    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
    AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
    AddRemove-ASUS_Screensaver - c:\windows\system32\ASUS_Screensaver.scr
    .
    .
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\yoodaPG]
    "ImagePath"="C:/Yooda/SeeUrankFalcon/pgsql/bin/pg_ctl.exe runservice -N \"yoodaPG\" -D \"C:/ProgramData/Yooda/SeeUrankFalcon/Data\""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\yoodaPG]
    "ImagePath"="C:/Yooda/SeeUrankFalcon/pgsql/bin/pg_ctl.exe runservice -N \"yoodaPG\" -D \"C:/ProgramData/Yooda/SeeUrankFalcon/Data\""
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.10"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker4"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    ------------------------ Autres processus actifs ------------------------
    .
    c:\program files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
    c:\program files\ATKGFNEX\GFNEXSrv.exe
    c:\program files\AVAST Software\Avast\AvastSvc.exe
    c:\windows\SysWOW64\rundll32.exe
    c:\program files (x86)\Bonjour\mDNSResponder.exe
    c:\program files (x86)\ASUS\ATK Hotkey\HControl.exe
    c:\program files (x86)\ASUS\ATK Hotkey\Atouch64.exe
    c:\program files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
    c:\program files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
    c:\program files (x86)\ASUS\ATK Hotkey\WDC.exe
    c:\program files (x86)\ASUS\SmartLogon\sensorsrv.exe
    c:\program files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
    c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    c:\program files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
    c:\windows\AsScrPro.exe
    c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
    .
    **************************************************************************
    .
    Heure de fin: 2012-01-18 16:34:04 - La machine a redémarré
    ComboFix-quarantined-files.txt 2012-01-18 15:34
    .
    Avant-CF: 21 496 741 888 octets libres
    Après-CF: 21 366 632 448 octets libres
    .
    - - End Of File - - F524B0C173F82A7569FA2C059C9BB968
    0
  7. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    ha va mieux ?
    0