Analyse hijack this

julex37 -  
 juju666 -
Bonjour,
Je pose ce rapport juste pour voir si tous va bien, car je ne suis pas un pro de ce logiciel. Le voici :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:23:32, on 31/01/2012
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Users\alex\AppData\Local\Akamai\netsession_win.exe
C:\Users\alex\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Panda Security\Panda Global Protection 2012\ApVxdWin.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\mswinext.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Windows Live\Companion\companionuser.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_2_202_183_ActiveX.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\alex\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VR7O692N\HiJackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.glarysoft.com/?src=iehome
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://isearch.glarysoft.com/?src=iehome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.glarysoft.com/?src=iehome
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;127.0.0.1:9421;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
O3 - Toolbar: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - (no file)
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [iolo Startup] "C:\Program Files (x86)\iolo\Common\Lib\ioloLManager.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files (x86)\Panda Security\Panda Global Protection 2012\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files (x86)\Panda Security\Panda Global Protection 2012\Inicio.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\alex\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O13 - Gopher Prefix:
O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} - http://www.consoclicker.com/TNSClickrb.CAB
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.7.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - iolo technologies, LLC - C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe
O23 - Service: iolo System Service (ioloSystemService) - iolo technologies, LLC - C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Program Files (x86)\Common Files\Panda Security\PavShld\pavprsrv.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Updater Service - Acer Group - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11967 bytes

46 réponses

  • 1
  • 2
  • 3
Résumé de la discussion

Un rapport HijackThis signale une infection potentielle et des modifications persos dans la configuration du navigateur et des services système, nécessitant une évaluation approfondie pour déterminer les éléments indésirables. Plusieurs pistes sont proposées, notamment effectuer un rapport Malwarebytes, préparer un rapport ZHPDiag et lancer ComboFix pour identifier et neutraliser les éléments indésirables présents actifs. Des éléments logiciels tels que Panda et Avast sont mentionnés comme nécessitant une revue des composants résidents, tandis qu'un redémarrage entraîne des comportements anormaux et des chargements intempestifs de la page d'accueil. Pour compléter, des éléments techniques tels que des services manquants ou des fichiers critiques signalés invitent à vérifier ces composants et à envisager une mise à jour des outils de sécurité.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Salut,

    Nous allons effectuer un diagnostic plus profond de ton PC:
    *Télécharge ZHPDiag sur ton bureau :

    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
    ou :
    http://www.premiumorange.com/zeb-help-process/zhpdiag.html

    * Laisse toi guider lors de l'installation,coche "Ajouter une icône sur le bureau" et décoche la case "Exécuter ZHPDiag"

    /!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

    * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
    * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
    * Héberge le rapport ZHPDiag.txt sur un des sites ci dessous, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum : http://pjjoint.malekal.com/
    Si indisponible, tu peux essayer avec l'un de ces liens:
    https://www.terafiles.net/
    https://www.casimages.com/

    * Tuto zhpdiag :
    http://www.premiumorange.com/zeb-help-process/zhpdiag.html

    Hébergement de rapport sur pjjoint.malekal.com

    Rends toi sur pjjoint.malekal.com
    * Clique sur le bouton Parcourir
    * Sélectionne le fichier que tu veux héberger et clique sur Ouvrir
    * Clique sur le bouton Envoyer
    * Un message de confirmation s'affiche (L'upload a réussi ! - Le lien à transmettre à vos correspondant pour visualiser le fichier est : https://pjjoint.malekal.com/files.php?id=df5ea299241015

    * Copie le lien dans ta prochaine réponse.

    @+
    0
    1. julex37
       
      Ne le poste pas ici ! Il y a déja une désinfection en cour, suprimme ton message et met le dans un sujet pliz
      0
    2. themas
       
      ok merci .
      0
    3. themas
       
      je le poste ou ???
      0
    4. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
       
      Salut,

      ici : créer un nouveau sujet

      @+
      0
  2. julex37
     
    C'est bon !

    http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120131_e13e8u9w15g7
    0
  3. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,

    On commence par la suppression des adwares!

    1/
    Télécharge AdwCleaner (merci à Xplode)
    Lance AdwCleaner
    Clique sur le bouton [ Suppression ]
    Patiente...
    Poste le rapport qui apparait en fin de recherche.
    Il se trouve également à C:\AdwCleaner[SX] (où X est un chiffre)

    2/ Ensuite

    * Télécharge de AD-Remover sur ton Bureau.
    http://security-domain.be/download/AD-Remover.html

    /!\ Ferme toutes applications en cours /!\

    - Double sur l'icône Ad-remover située sur ton Bureau.
    -Pour vista/Seven : clique avec le bouton droit de la souris et choisis « exécuter en tant qu'administrateur »
    - Sur la page, clique sur le bouton « chercher »
    - Confirme lancement du scan
    - Laisse travailler l'outil.
    - Poste le rapport qui apparaît à la fin.

    (Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt)

    (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour c

    @+
    0
  4. julex37
     
    Voici le rapport de ADW-cleaner : # AdwCleaner v1.408 - Rapport créé le 31/01/2012 à 11:19:45
    # Mis à jour le 29/01/2012 par Xplode
    # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Nom d'utilisateur : alex - ALL-ANGELS (Administrateur)
    # Exécuté depuis : C:\Users\alex\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\23W2XG4D\28-adwcleaner[1].exe
    # Option [Suppression]

    ***** [Services] *****

    ***** [Fichiers / Dossiers] *****

    Dossier Supprimé : C:\Users\alex\AppData\Local\AskToolbar
    Dossier Supprimé : C:\Users\alex\AppData\LocalLow\AskToolbar
    Dossier Supprimé : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

    ***** [Registre] *****

    Clé Supprimée : HKCU\Software\Ask.com
    Clé Supprimée : HKCU\Software\AppDataLow\AskToolbarInfo
    Clé Supprimée : HKCU\Software\AppDataLow\Software\AskToolbar
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\RFC1156Agent
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8856F961-340A-11D0-A96B-00C04FD705A2}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

    ***** [Registre (x64)] *****

    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF

    ***** [Navigateurs] *****

    -\\ Internet Explorer v8.0.7601.17514

    [OK] Le registre ne contient aucune entrée illégitime.

    -\\ Google Chrome v16.0.912.77

    Fichier : C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Preferences

    [OK] Le fichier ne contient aucune entrée illégitime.

    *************************

    AdwCleaner[S3].txt - [2276 octets] - [31/01/2012 11:19:45]

    *************************

    Dossier Temporaire : 9 dossier(s) et 18 fichier(s) supprimés

    ########## EOF - C:\AdwCleaner[S3].txt - [2497 octets] ##########

    et celui de ad-remove :

    ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

    Mis à jour par TeamXscript le 12/04/11
    Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
    Site web: http://www.teamxscript.org

    C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 14:25:43 le 31/01/2012, Mode normal

    Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X64)
    alex@ALL-ANGELS (Packard Bell EasyNote TK87)

    ============== RECHERCHE ==============

    ============== SCAN ADDITIONNEL ==============

    **** Google Chrome Version [16.0.912.77] ****

    Extension\icmlaeflemplmjndnaapfdbbnpncnbda (C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx) (?)

    -- C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default --
    Preferences - default_search_provider: "Glary Search" (Activé: true) (hxxp://isearch.glarysoft.com/?q={searchTerms}&src=gcsearch)
    Preferences - homepage_is_newtabpage: false
    Plugin - Remoting Viewer (Activé: true) (internal-remoting-viewer) (x)
    Plugin - Native Client (Activé: true) (C:\Users\alex\AppData\Local\Google\Chrome\Application\16.0.912.77\ppGoogleNaClPluginChrome.dll)
    Plugin - Bing Bar (Activé: true) (C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll)
    Plugin - WildTangent Games App Presence Detector (Activé: true) (C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\3\NP_wtapp.dll) (x)
    Plugin - Windows Live\u0099 Photo Gallery (Activé: true) (C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll)
    Plugin - "Silverlight" (Activé: true)
    Plugin - "Remoting Viewer" (Activé: true)
    Plugin - "Native Client" (Activé: true)
    Plugin - "Bing Bar" (Activé: true)
    Plugin - "WildTangent Games App Presence Detector" (Activé: true)
    Plugin - "Windows Live\u0099 Photo Gallery" (Activé: true)
    Plugin - "Unity Player" (Activé: true)
    Plugin - "ShiVa3D Plugin 1.8.1" (Activé: true)

    ========================================

    **** Internet Explorer Version [8.0.7601.17514] ****

    HKCU_Main|Default_Page_URL - hxxp://isearch.glarysoft.com/?src=iehome
    HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
    HKCU_Main|Start Page - hxxp://www.google.fr/
    HKLM_Main|Default_Page_URL - hxxp://isearch.glarysoft.com/?src=iehome
    HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
    HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
    HKLM_Main|Start Page - hxxp://isearch.glarysoft.com/?src=iehome
    HKCU_URLSearchHooks|{472734EA-242A-422b-ADF8-83D1E48CC825} (x)
    HKCU_SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06} - "?" (?)
    HKLM_SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06} - "Glary Search" (hxxp://isearch.glarysoft.com/?q={searchTerms}&src=iesearch)
    HKCU_Toolbar\WebBrowser|{472734EA-242A-422B-ADF8-83D1E48CC825} (x)
    HKLM_Toolbar|{8dcb7100-df86-4384-8842-8fa844297b3f} (C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll)
    HKLM_Toolbar|{472734EA-242A-422B-ADF8-83D1E48CC825} (x)
    HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
    HKCU_ElevationPolicy\{4169044D-6BA4-4661-B7D6-E29274F1F458} - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\wtapp_ProtocolHandler.exe (WildTangent, Inc.)
    HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x)
    HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x)
    HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x)
    HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x)
    HKLM_Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - "?" (?)
    BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)
    BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)

    ========================================

    C:\Program Files (x86)\Ad-Remover\Quarantine: 0 Fichier(s)
    C:\Program Files (x86)\Ad-Remover\Backup: 1 Fichier(s)

    C:\Ad-Report-SCAN[1].txt - 31/01/2012 14:25:50 (4204 Octet(s))

    Fin à: 14:26:37, 31/01/2012

    ============== E.O.F ==============
    0
    1. julex37
       
      Peut-tu m'aider ?
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,
    1/
    Lance Ad-remover puis cliques sur "Désinstaller"

    2/ Désinstallation propre de Panda :
    Télécharges :l'utilitaire de désinstallation. Exécutes-le puis redémarres ton PC s'il est demandé

    3/
    * Lance Malwarebytes' Anti-Malware
    * Fais la mise à jour
    * Clique dans l'onglet "Recherche"
    * Coche l'option "Exécuter un examen complet" puis sur le bouton "Rechercher"
    * Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"

    A la fin de l'analyse, si MBAM n'a rien trouvé :

    * Clique sur OK, le rapport s'ouvre spontanément

    Si des menaces ont été détectées :

    * Clique sur OK puis "Afficher les résultats"
    *Vérifie que toutes les lignes sont cochées
    * Choisis l'option "Supprimer la sélection"
    * Si MBAM demande le redémarrage de Windows : Clique sur "Oui"
    * Le rapport s'ouvre automatiquement après la suppression, il se trouve aussi dans l'onglet "Rapports/Logs"

    * Copie/colle le rapport dans le prochain message

    Remarque :
    - S'il y'a un problème de mise à jour de mbam, tu peux la faire manuellement en téléchargeant ce fichier puis en l'exécutant.

    @+
    0
  7. julex37
     
    J'ai désinstaller panda, et Malwarebytes' Anti-Malware n'a pas trouvé de malware.
    Et j'ai un petit soucis, quand je redémarre l'ordi, tous démarre bien, la page d'accueil de packard bell se met et tout d'un coup écran noir, il refait tout le temps ça, et je suis obliger d'enlever la batterie pour qu'il arrete de démarrer/s'arreter.
    0
  8. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,

    Télécharge Reload_TDSSKiller

    * Lance le

    * choisis : lancer le nettoyage

    * l'outil va automatiquement télécharger la derniere version puis

    * TDSSKiller va s'ouvrir , clique sur "Start Scan"

    Clique ici pour l'aide en image
    - Si TDSS.tdl2 est détecté l''option delete sera cochée par défaut.
    - Si TDSS.tdl3 est détecté assure toi que Cure est bien cochée.
    - Si TDSS.tdl4(\HardDisk0\MBR) est détecté assure toi que Cure est bien cochée.
    - Si Suspicious file est indiqué, laisse l''option cochée sur Skip
    - une fois qu'il a terminé , redemarre s'il te le demande pour finir de nettoyer

    sinon , ferme tdssKiller et le rapport s'affichera sur le bureau

    * Copie/Colle son contenu dans ta prochaine réponse

    @+

    0
  9. julex37
     
    voici le rapport

    16:17:59.0568 4728 TDSS rootkit removing tool 2.7.8.0 Jan 30 2012 16:39:36
    16:18:01.0579 4728 ============================================================
    16:18:01.0579 4728 Current date / time: 2012/01/31 16:18:01.0579
    16:18:01.0579 4728 SystemInfo:
    16:18:01.0579 4728
    16:18:01.0579 4728 OS Version: 6.1.7601 ServicePack: 1.0
    16:18:01.0579 4728 Product type: Workstation
    16:18:01.0581 4728 ComputerName: ALL-ANGELS
    16:18:01.0581 4728 UserName: alex
    16:18:01.0581 4728 Windows directory: C:\Windows
    16:18:01.0581 4728 System windows directory: C:\Windows
    16:18:01.0581 4728 Running under WOW64
    16:18:01.0581 4728 Processor architecture: Intel x64
    16:18:01.0581 4728 Number of processors: 4
    16:18:01.0581 4728 Page size: 0x1000
    16:18:01.0581 4728 Boot type: Normal boot
    16:18:01.0581 4728 ============================================================
    16:18:10.0617 4728 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    16:18:10.0624 4728 \Device\Harddisk0\DR0:
    16:18:10.0624 4728 MBR used
    16:18:10.0624 4728 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1A00800, BlocksNum 0x32000
    16:18:10.0624 4728 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1A32800, BlocksNum 0x48E25000
    16:18:10.0661 4728 Initialize success
    16:18:10.0661 4728 ============================================================
    16:18:16.0162 2896 ============================================================
    16:18:16.0162 2896 Scan started
    16:18:16.0162 2896 Mode: Manual;
    16:18:16.0162 2896 ============================================================
    16:18:17.0824 2896 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
    16:18:17.0829 2896 1394ohci - ok
    16:18:17.0964 2896 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
    16:18:17.0971 2896 ACPI - ok
    16:18:18.0103 2896 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
    16:18:18.0106 2896 AcpiPmi - ok
    16:18:18.0253 2896 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
    16:18:18.0263 2896 adp94xx - ok
    16:18:18.0803 2896 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
    16:18:18.0963 2896 adpahci - ok
    16:18:19.0108 2896 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
    16:18:19.0112 2896 adpu320 - ok
    16:18:19.0273 2896 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
    16:18:19.0281 2896 AFD - ok
    16:18:19.0401 2896 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
    16:18:19.0404 2896 agp440 - ok
    16:18:19.0548 2896 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
    16:18:19.0550 2896 aliide - ok
    16:18:19.0804 2896 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
    16:18:19.0806 2896 amdide - ok
    16:18:20.0094 2896 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
    16:18:20.0096 2896 AmdK8 - ok
    16:18:20.0239 2896 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
    16:18:20.0242 2896 AmdPPM - ok
    16:18:20.0381 2896 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
    16:18:20.0385 2896 amdsata - ok
    16:18:20.0898 2896 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
    16:18:20.0903 2896 amdsbs - ok
    16:18:21.0182 2896 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
    16:18:21.0182 2896 amdxata - ok
    16:18:21.0302 2896 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
    16:18:21.0302 2896 AppID - ok
    16:18:21.0462 2896 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
    16:18:21.0462 2896 arc - ok
    16:18:21.0522 2896 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
    16:18:21.0522 2896 arcsas - ok
    16:18:21.0562 2896 aswFsBlk (ce6d8bcc4787704ea4feeb92b0d0caf8) C:\Windows\system32\drivers\aswFsBlk.sys
    16:18:21.0572 2896 aswFsBlk - ok
    16:18:21.0622 2896 aswMonFlt (0debeb2e3fbd0bf5343125cce617f105) C:\Windows\system32\drivers\aswMonFlt.sys
    16:18:21.0622 2896 aswMonFlt - ok
    16:18:21.0632 2896 aswRdr (952edc2e81f85d1781958d4128bf59f8) C:\Windows\system32\drivers\aswRdr.sys
    16:18:21.0632 2896 aswRdr - ok
    16:18:21.0682 2896 aswSnx (dd383e2ac941c545a85ab72503da6c12) C:\Windows\system32\drivers\aswSnx.sys
    16:18:21.0682 2896 aswSnx - ok
    16:18:21.0702 2896 aswSP (ef5403fb8b2dcb791ec365fdf6040a4a) C:\Windows\system32\drivers\aswSP.sys
    16:18:21.0702 2896 aswSP - ok
    16:18:21.0742 2896 aswTdi (34165da5c6b30c0f9d61246bf8a28040) C:\Windows\system32\drivers\aswTdi.sys
    16:18:21.0742 2896 aswTdi - ok
    16:18:22.0252 2896 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
    16:18:22.0252 2896 AsyncMac - ok
    16:18:22.0402 2896 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
    16:18:22.0402 2896 atapi - ok
    16:18:22.0612 2896 athr (e642491f64e58cd5bc8fb8b347dcf65f) C:\Windows\system32\DRIVERS\athrx.sys
    16:18:22.0632 2896 athr - ok
    16:18:23.0142 2896 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
    16:18:23.0152 2896 b06bdrv - ok
    16:18:23.0312 2896 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
    16:18:23.0322 2896 b57nd60a - ok
    16:18:23.0452 2896 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
    16:18:23.0452 2896 Beep - ok
    16:18:23.0622 2896 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
    16:18:23.0622 2896 blbdrive - ok
    16:18:23.0782 2896 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
    16:18:23.0782 2896 bowser - ok
    16:18:23.0932 2896 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    16:18:23.0932 2896 BrFiltLo - ok
    16:18:24.0022 2896 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    16:18:24.0022 2896 BrFiltUp - ok
    16:18:24.0112 2896 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
    16:18:24.0112 2896 Brserid - ok
    16:18:24.0217 2896 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
    16:18:24.0217 2896 BrSerWdm - ok
    16:18:24.0727 2896 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
    16:18:24.0727 2896 BrUsbMdm - ok
    16:18:24.0817 2896 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
    16:18:24.0817 2896 BrUsbSer - ok
    16:18:24.0907 2896 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
    16:18:24.0912 2896 BTHMODEM - ok
    16:18:25.0082 2896 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
    16:18:25.0085 2896 cdfs - ok
    16:18:25.0222 2896 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
    16:18:25.0225 2896 cdrom - ok
    16:18:25.0382 2896 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
    16:18:25.0385 2896 circlass - ok
    16:18:25.0612 2896 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
    16:18:25.0620 2896 CLFS - ok
    16:18:25.0784 2896 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
    16:18:25.0786 2896 CmBatt - ok
    16:18:25.0853 2896 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
    16:18:25.0855 2896 cmdide - ok
    16:18:25.0994 2896 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
    16:18:26.0003 2896 CNG - ok
    16:18:26.0174 2896 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
    16:18:26.0175 2896 Compbatt - ok
    16:18:26.0226 2896 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
    16:18:26.0228 2896 CompositeBus - ok
    16:18:26.0385 2896 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
    16:18:26.0387 2896 crcdisk - ok
    16:18:26.0492 2896 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
    16:18:26.0495 2896 DfsC - ok
    16:18:26.0614 2896 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
    16:18:26.0616 2896 discache - ok
    16:18:26.0749 2896 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
    16:18:26.0751 2896 Disk - ok
    16:18:27.0030 2896 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
    16:18:27.0032 2896 drmkaud - ok
    16:18:27.0221 2896 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
    16:18:27.0232 2896 DXGKrnl - ok
    16:18:27.0473 2896 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
    16:18:27.0573 2896 ebdrv - ok
    16:18:27.0739 2896 ElRawDisk (d38a883309e04b9fbffe1aca60ea3bbf) C:\Windows\system32\drivers\ElRawDsk.sys
    16:18:27.0739 2896 ElRawDisk - ok
    16:18:27.0884 2896 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
    16:18:27.0896 2896 elxstor - ok
    16:18:28.0061 2896 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
    16:18:28.0063 2896 ErrDev - ok
    16:18:28.0217 2896 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
    16:18:28.0222 2896 exfat - ok
    16:18:28.0374 2896 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
    16:18:28.0378 2896 fastfat - ok
    16:18:28.0540 2896 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
    16:18:28.0542 2896 fdc - ok
    16:18:28.0696 2896 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
    16:18:28.0698 2896 FileInfo - ok
    16:18:28.0821 2896 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
    16:18:28.0823 2896 Filetrace - ok
    16:18:28.0919 2896 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
    16:18:28.0921 2896 flpydisk - ok
    16:18:29.0051 2896 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
    16:18:29.0056 2896 FltMgr - ok
    16:18:29.0214 2896 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
    16:18:29.0217 2896 FsDepends - ok
    16:18:29.0388 2896 fssfltr (6c06701bf1db05405804d7eb610991ce) C:\Windows\system32\DRIVERS\fssfltr.sys
    16:18:29.0390 2896 fssfltr - ok
    16:18:29.0554 2896 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
    16:18:29.0556 2896 Fs_Rec - ok
    16:18:29.0737 2896 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
    16:18:29.0742 2896 fvevol - ok
    16:18:29.0898 2896 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
    16:18:29.0898 2896 gagp30kx - ok
    16:18:30.0048 2896 GEARAspiWDM - ok
    16:18:30.0148 2896 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
    16:18:30.0148 2896 hcw85cir - ok
    16:18:30.0310 2896 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
    16:18:30.0318 2896 HdAudAddService - ok
    16:18:30.0468 2896 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
    16:18:30.0470 2896 HDAudBus - ok
    16:18:30.0645 2896 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
    16:18:30.0648 2896 HECIx64 - ok
    16:18:30.0813 2896 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
    16:18:30.0815 2896 HidBatt - ok
    16:18:30.0993 2896 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
    16:18:30.0998 2896 HidBth - ok
    16:18:31.0173 2896 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
    16:18:31.0175 2896 HidIr - ok
    16:18:31.0343 2896 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys
    16:18:31.0345 2896 HidUsb - ok
    16:18:31.0530 2896 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
    16:18:31.0533 2896 HpSAMD - ok
    16:18:31.0695 2896 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
    16:18:31.0714 2896 HTTP - ok
    16:18:31.0877 2896 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
    16:18:31.0878 2896 hwpolicy - ok
    16:18:32.0043 2896 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
    16:18:32.0046 2896 i8042prt - ok
    16:18:32.0232 2896 iaStor (1384872112e8e7fd5786eceb8bddf4c9) C:\Windows\system32\DRIVERS\iaStor.sys
    16:18:32.0238 2896 iaStor - ok
    16:18:32.0415 2896 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
    16:18:32.0424 2896 iaStorV - ok
    16:18:32.0853 2896 igfx (0089b53f1befd34b7d8ca4ab021335fa) C:\Windows\system32\DRIVERS\igdkmd64.sys
    16:18:33.0137 2896 igfx - ok
    16:18:33.0334 2896 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
    16:18:33.0337 2896 iirsp - ok
    16:18:33.0533 2896 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
    16:18:33.0533 2896 Impcd - ok
    16:18:33.0748 2896 IntcAzAudAddService (235362d403d9d677514649d88db31914) C:\Windows\system32\drivers\RTKVHD64.sys
    16:18:33.0776 2896 IntcAzAudAddService - ok
    16:18:34.0006 2896 IntcDAud (03c74719d48056a1078f3a51ceb76baa) C:\Windows\system32\DRIVERS\IntcDAud.sys
    16:18:34.0086 2896 IntcDAud - ok
    16:18:34.0245 2896 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
    16:18:34.0248 2896 intelide - ok
    16:18:34.0363 2896 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
    16:18:34.0365 2896 intelppm - ok
    16:18:34.0469 2896 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    16:18:34.0473 2896 IpFilterDriver - ok
    16:18:34.0519 2896 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
    16:18:34.0523 2896 IPMIDRV - ok
    16:18:34.0549 2896 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
    16:18:34.0552 2896 IPNAT - ok
    16:18:34.0577 2896 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
    16:18:34.0579 2896 IRENUM - ok
    16:18:34.0630 2896 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
    16:18:34.0632 2896 isapnp - ok
    16:18:34.0702 2896 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
    16:18:34.0708 2896 iScsiPrt - ok
    16:18:34.0751 2896 k57nd60a (37e053a2cf8f0082b689ed74106e0cec) C:\Windows\system32\DRIVERS\k57nd60a.sys
    16:18:34.0757 2896 k57nd60a - ok
    16:18:34.0775 2896 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
    16:18:34.0777 2896 kbdclass - ok
    16:18:34.0803 2896 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
    16:18:34.0806 2896 kbdhid - ok
    16:18:34.0836 2896 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
    16:18:34.0839 2896 KSecDD - ok
    16:18:34.0867 2896 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
    16:18:34.0870 2896 KSecPkg - ok
    16:18:34.0947 2896 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
    16:18:34.0949 2896 ksthunk - ok
    16:18:34.0995 2896 Lavasoft Kernexplorer - ok
    16:18:35.0136 2896 Lbd (c8b3131857931ae76798a741cc52b021) C:\Windows\system32\DRIVERS\Lbd.sys
    16:18:35.0139 2896 Lbd - ok
    16:18:35.0232 2896 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
    16:18:35.0235 2896 lltdio - ok
    16:18:35.0293 2896 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
    16:18:35.0296 2896 LSI_FC - ok
    16:18:35.0309 2896 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
    16:18:35.0311 2896 LSI_SAS - ok
    16:18:35.0324 2896 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    16:18:35.0326 2896 LSI_SAS2 - ok
    16:18:35.0338 2896 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    16:18:35.0342 2896 LSI_SCSI - ok
    16:18:35.0376 2896 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
    16:18:35.0379 2896 luafv - ok
    16:18:35.0396 2896 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
    16:18:35.0398 2896 megasas - ok
    16:18:35.0423 2896 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
    16:18:35.0428 2896 MegaSR - ok
    16:18:35.0462 2896 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
    16:18:35.0464 2896 Modem - ok
    16:18:35.0491 2896 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
    16:18:35.0492 2896 monitor - ok
    16:18:35.0525 2896 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys
    16:18:35.0527 2896 mouclass - ok
    16:18:35.0677 2896 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
    16:18:35.0679 2896 mouhid - ok
    16:18:35.0742 2896 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
    16:18:35.0745 2896 mountmgr - ok
    16:18:35.0790 2896 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
    16:18:35.0795 2896 mpio - ok
    16:18:35.0845 2896 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
    16:18:35.0848 2896 mpsdrv - ok
    16:18:35.0904 2896 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
    16:18:35.0908 2896 MRxDAV - ok
    16:18:35.0947 2896 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
    16:18:35.0950 2896 mrxsmb - ok
    16:18:36.0006 2896 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    16:18:36.0014 2896 mrxsmb10 - ok
    16:18:36.0075 2896 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    16:18:36.0079 2896 mrxsmb20 - ok
    16:18:36.0126 2896 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
    16:18:36.0129 2896 msahci - ok
    16:18:36.0172 2896 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
    16:18:36.0176 2896 msdsm - ok
    16:18:36.0196 2896 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
    16:18:36.0206 2896 Msfs - ok
    16:18:36.0226 2896 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
    16:18:36.0226 2896 mshidkmdf - ok
    16:18:36.0266 2896 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
    16:18:36.0266 2896 msisadrv - ok
    16:18:36.0426 2896 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
    16:18:36.0426 2896 MSKSSRV - ok
    16:18:36.0536 2896 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
    16:18:36.0536 2896 MSPCLOCK - ok
    16:18:36.0633 2896 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
    16:18:36.0636 2896 MSPQM - ok
    16:18:36.0728 2896 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
    16:18:36.0736 2896 MsRPC - ok
    16:18:36.0779 2896 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
    16:18:36.0781 2896 mssmbios - ok
    16:18:36.0833 2896 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
    16:18:36.0835 2896 MSTEE - ok
    16:18:36.0875 2896 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
    16:18:36.0878 2896 MTConfig - ok
    16:18:36.0909 2896 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
    16:18:36.0911 2896 Mup - ok
    16:18:36.0943 2896 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
    16:18:36.0950 2896 NativeWifiP - ok
    16:18:37.0010 2896 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
    16:18:37.0033 2896 NDIS - ok
    16:18:37.0205 2896 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
    16:18:37.0207 2896 NdisCap - ok
    16:18:37.0239 2896 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
    16:18:37.0241 2896 NdisTapi - ok
    16:18:37.0329 2896 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
    16:18:37.0331 2896 Ndisuio - ok
    16:18:37.0402 2896 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
    16:18:37.0406 2896 NdisWan - ok
    16:18:37.0450 2896 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
    16:18:37.0453 2896 NDProxy - ok
    16:18:37.0501 2896 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
    16:18:37.0503 2896 NetBIOS - ok
    16:18:37.0549 2896 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
    16:18:37.0555 2896 NetBT - ok
    16:18:37.0650 2896 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
    16:18:37.0653 2896 nfrd960 - ok
    16:18:37.0704 2896 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
    16:18:37.0706 2896 Npfs - ok
    16:18:37.0723 2896 NPPTNT2 - ok
    16:18:37.0761 2896 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
    16:18:37.0763 2896 nsiproxy - ok
    16:18:37.0855 2896 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
    16:18:37.0902 2896 Ntfs - ok
    16:18:38.0062 2896 NTIDrvr (64ddd0dee976302f4bd93e5efcc2f013) C:\Windows\system32\drivers\NTIDrvr.sys
    16:18:38.0064 2896 NTIDrvr - ok
    16:18:38.0185 2896 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
    16:18:38.0187 2896 Null - ok
    16:18:38.0343 2896 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
    16:18:38.0348 2896 nvraid - ok
    16:18:38.0366 2896 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
    16:18:38.0371 2896 nvstor - ok
    16:18:38.0397 2896 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
    16:18:38.0401 2896 nv_agp - ok
    16:18:38.0414 2896 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
    16:18:38.0419 2896 ohci1394 - ok
    16:18:38.0471 2896 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
    16:18:38.0474 2896 Parport - ok
    16:18:38.0506 2896 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
    16:18:38.0509 2896 partmgr - ok
    16:18:38.0573 2896 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
    16:18:38.0579 2896 pci - ok
    16:18:38.0595 2896 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
    16:18:38.0598 2896 pciide - ok
    16:18:38.0631 2896 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
    16:18:38.0641 2896 pcmcia - ok
    16:18:38.0691 2896 PCTCore (2cbdb9792dc47fe0bc34dfb9f0beaba4) C:\Windows\system32\drivers\PCTCore64.sys
    16:18:38.0691 2896 PCTCore - ok
    16:18:38.0741 2896 pctDS (ff43e3b1687e4e2140de6349ea5c7372) C:\Windows\system32\drivers\pctDS64.sys
    16:18:38.0751 2896 pctDS - ok
    16:18:38.0811 2896 pctEFA (60e9a05852af7e9cb11237c00aee4ccf) C:\Windows\system32\drivers\pctEFA64.sys
    16:18:38.0831 2896 pctEFA - ok
    16:18:38.0981 2896 PCTFW-PacketFilter (bec2272ee5553a8d605051c5d3a1c1e6) C:\Windows\system32\drivers\pctNdis-PacketFilter64.sys
    16:18:38.0991 2896 PCTFW-PacketFilter - ok
    16:18:39.0101 2896 pctgntdi (6169a3c8e2c9ce88e6d3058cfbfcff03) C:\Windows\System32\drivers\pctgntdi64.sys
    16:18:39.0101 2896 pctgntdi - ok
    16:18:39.0211 2896 pctNdis (aa1d53ca65dbf3c291918fa430647876) C:\Windows\system32\DRIVERS\pctNdis64.sys
    16:18:39.0211 2896 pctNdis - ok
    16:18:39.0221 2896 pctNdisMP (aa1d53ca65dbf3c291918fa430647876) C:\Windows\system32\DRIVERS\pctNdis64.sys
    16:18:39.0221 2896 pctNdisMP - ok
    16:18:39.0293 2896 pctplfw (81a17c2f263936f07664a58b2a3b5c2f) C:\Windows\System32\drivers\pctplfw64.sys
    16:18:39.0298 2896 pctplfw - ok
    16:18:39.0315 2896 pctplsg (eb27b1b0a1be8ae632c30bb16c4381b3) C:\Windows\System32\drivers\pctplsg64.sys
    16:18:39.0320 2896 pctplsg - ok
    16:18:39.0364 2896 PCTSD (dea3e7a33e268d4f1fbb4516c784646b) C:\Windows\system32\Drivers\PCTSD64.sys
    16:18:39.0369 2896 PCTSD - ok
    16:18:39.0403 2896 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
    16:18:39.0405 2896 pcw - ok
    16:18:39.0484 2896 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
    16:18:39.0503 2896 PEAUTH - ok
    16:18:39.0705 2896 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
    16:18:39.0709 2896 PptpMiniport - ok
    16:18:39.0824 2896 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
    16:18:39.0828 2896 Processor - ok
    16:18:39.0860 2896 Prot6Flt - ok
    16:18:39.0939 2896 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
    16:18:39.0941 2896 Psched - ok
    16:18:40.0038 2896 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
    16:18:40.0084 2896 ql2300 - ok
    16:18:40.0270 2896 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
    16:18:40.0274 2896 ql40xx - ok
    16:18:40.0443 2896 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
    16:18:40.0446 2896 QWAVEdrv - ok
    16:18:40.0620 2896 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
    16:18:40.0623 2896 RasAcd - ok
    16:18:40.0753 2896 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
    16:18:40.0755 2896 RasAgileVpn - ok
    16:18:40.0925 2896 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
    16:18:40.0929 2896 Rasl2tp - ok
    16:18:41.0104 2896 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
    16:18:41.0108 2896 RasPppoe - ok
    16:18:41.0284 2896 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
    16:18:41.0286 2896 RasSstp - ok
    16:18:41.0479 2896 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
    16:18:41.0489 2896 rdbss - ok
    16:18:41.0702 2896 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
    16:18:41.0705 2896 rdpbus - ok
    16:18:41.0886 2896 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
    16:18:41.0888 2896 RDPCDD - ok
    16:18:42.0064 2896 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
    16:18:42.0066 2896 RDPENCDD - ok
    16:18:42.0229 2896 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
    16:18:42.0231 2896 RDPREFMP - ok
    16:18:42.0417 2896 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
    16:18:42.0422 2896 RDPWD - ok
    16:18:42.0598 2896 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
    16:18:42.0603 2896 rdyboost - ok
    16:18:42.0802 2896 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
    16:18:42.0805 2896 rspndr - ok
    16:18:42.0957 2896 RSUSBSTOR (763ae0c6d9df4c24b7e2c26036a8188a) C:\Windows\system32\Drivers\RtsUStor.sys
    16:18:42.0961 2896 RSUSBSTOR - ok
    16:18:43.0163 2896 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
    16:18:43.0167 2896 sbp2port - ok
    16:18:43.0337 2896 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
    16:18:43.0340 2896 scfilter - ok
    16:18:43.0565 2896 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
    16:18:43.0567 2896 secdrv - ok
    16:18:43.0768 2896 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
    16:18:43.0778 2896 Serenum - ok
    16:18:43.0948 2896 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
    16:18:43.0958 2896 Serial - ok
    16:18:44.0138 2896 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
    16:18:44.0138 2896 sermouse - ok
    16:18:44.0378 2896 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
    16:18:44.0378 2896 sffdisk - ok
    16:18:44.0548 2896 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
    16:18:44.0558 2896 sffp_mmc - ok
    16:18:44.0848 2896 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
    16:18:44.0858 2896 sffp_sd - ok
    16:18:45.0058 2896 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
    16:18:45.0068 2896 sfloppy - ok
    16:18:45.0258 2896 Sftfs (a40abfdcb75f835fdf3ce0cc64e4250d) C:\Windows\system32\DRIVERS\Sftfslh.sys
    16:18:45.0268 2896 Sftfs - ok
    16:18:45.0448 2896 Sftplay (411769ed1cb12d2b44217734347bdb7a) C:\Windows\system32\DRIVERS\Sftplaylh.sys
    16:18:45.0458 2896 Sftplay - ok
    16:18:45.0638 2896 Sftredir (a14d0df34bbb00ea94da16193d0c7957) C:\Windows\system32\DRIVERS\Sftredirlh.sys
    16:18:45.0638 2896 Sftredir - ok
    16:18:45.0828 2896 Sftvol (393b22addd89979eb1c60898f51c3648) C:\Windows\system32\DRIVERS\Sftvollh.sys
    16:18:45.0828 2896 Sftvol - ok
    16:18:46.0078 2896 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    16:18:46.0078 2896 SiSRaid2 - ok
    16:18:46.0258 2896 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
    16:18:46.0258 2896 SiSRaid4 - ok
    16:18:46.0448 2896 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
    16:18:46.0458 2896 Smb - ok
    16:18:46.0728 2896 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
    16:18:46.0728 2896 spldr - ok
    16:18:46.0958 2896 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
    16:18:46.0968 2896 srv - ok
    16:18:47.0158 2896 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
    16:18:47.0168 2896 srv2 - ok
    16:18:47.0343 2896 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
    16:18:47.0348 2896 srvnet - ok
    16:18:47.0568 2896 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
    16:18:47.0568 2896 stexstor - ok
    16:18:47.0733 2896 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
    16:18:47.0738 2896 swenum - ok
    16:18:47.0918 2896 SynTP (064a2530a4a7c7cec1be6a1945645be4) C:\Windows\system32\DRIVERS\SynTP.sys
    16:18:47.0923 2896 SynTP - ok
    16:18:48.0156 2896 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
    16:18:48.0201 2896 Tcpip - ok
    16:18:48.0391 2896 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
    16:18:48.0413 2896 TCPIP6 - ok
    16:18:48.0602 2896 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
    16:18:48.0605 2896 tcpipreg - ok
    16:18:48.0777 2896 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
    16:18:48.0780 2896 TDPIPE - ok
    16:18:48.0889 2896 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
    16:18:48.0891 2896 TDTCP - ok
    16:18:49.0052 2896 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
    16:18:49.0056 2896 tdx - ok
    16:18:49.0246 2896 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
    16:18:49.0249 2896 TermDD - ok
    16:18:49.0437 2896 TfFsMon (d2df419972ceb50af29309a1beb24eff) C:\Windows\system32\drivers\TfFsMon.sys
    16:18:49.0440 2896 TfFsMon - ok
    16:18:49.0613 2896 TfNetMon (3c98592982c41a6c6cccccdf1d0c1881) C:\Windows\system32\drivers\TfNetMon.sys
    16:18:49.0616 2896 TfNetMon - ok
    16:18:49.0791 2896 TFSysMon (6b9e882313f9ee9a41843077fc764196) C:\Windows\system32\drivers\TfSysMon.sys
    16:18:49.0794 2896 TFSysMon - ok
    16:18:50.0020 2896 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
    16:18:50.0023 2896 tssecsrv - ok
    16:18:50.0211 2896 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
    16:18:50.0214 2896 TsUsbFlt - ok
    16:18:50.0391 2896 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
    16:18:50.0394 2896 tunnel - ok
    16:18:50.0585 2896 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
    16:18:50.0585 2896 uagp35 - ok
    16:18:50.0796 2896 UBHelper (2e22c1fd397a5a9ffef55e9d1fc96c00) C:\Windows\system32\drivers\UBHelper.sys
    16:18:50.0800 2896 UBHelper - ok
    16:18:51.0007 2896 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
    16:18:51.0013 2896 udfs - ok
    16:18:51.0210 2896 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
    16:18:51.0213 2896 uliagpkx - ok
    16:18:51.0393 2896 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
    16:18:51.0396 2896 umbus - ok
    16:18:51.0596 2896 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
    16:18:51.0600 2896 UmPass - ok
    16:18:51.0815 2896 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
    16:18:51.0818 2896 usbccgp - ok
    16:18:51.0987 2896 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
    16:18:51.0991 2896 usbcir - ok
    16:18:52.0167 2896 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
    16:18:52.0170 2896 usbehci - ok
    16:18:52.0368 2896 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
    16:18:52.0377 2896 usbhub - ok
    16:18:52.0576 2896 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
    16:18:52.0578 2896 usbohci - ok
    16:18:52.0785 2896 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
    16:18:52.0795 2896 usbprint - ok
    16:18:52.0985 2896 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
    16:18:52.0995 2896 usbscan - ok
    16:18:53.0175 2896 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    16:18:53.0175 2896 USBSTOR - ok
    16:18:53.0365 2896 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
    16:18:53.0365 2896 usbuhci - ok
    16:18:53.0545 2896 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys
    16:18:53.0545 2896 usbvideo - ok
    16:18:53.0745 2896 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
    16:18:53.0745 2896 vdrvroot - ok
    16:18:53.0939 2896 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
    16:18:53.0940 2896 vga - ok
    16:18:54.0072 2896 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
    16:18:54.0074 2896 VgaSave - ok
    16:18:54.0238 2896 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
    16:18:54.0241 2896 vhdmp - ok
    16:18:54.0294 2896 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
    16:18:54.0296 2896 viaide - ok
    16:18:54.0338 2896 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
    16:18:54.0340 2896 volmgr - ok
    16:18:54.0407 2896 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
    16:18:54.0412 2896 volmgrx - ok
    16:18:54.0477 2896 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
    16:18:54.0481 2896 volsnap - ok
    16:18:54.0520 2896 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
    16:18:54.0524 2896 vsmraid - ok
    16:18:54.0551 2896 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
    16:18:54.0553 2896 vwifibus - ok
    16:18:54.0589 2896 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
    16:18:54.0592 2896 vwififlt - ok
    16:18:54.0673 2896 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
    16:18:54.0675 2896 vwifimp - ok
    16:18:54.0802 2896 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
    16:18:54.0806 2896 WacomPen - ok
    16:18:54.0861 2896 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
    16:18:54.0864 2896 WANARP - ok
    16:18:54.0873 2896 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
    16:18:54.0875 2896 Wanarpv6 - ok
    16:18:55.0058 2896 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
    16:18:55.0061 2896 Wd - ok
    16:18:55.0176 2896 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
    16:18:55.0188 2896 Wdf01000 - ok
    16:18:55.0443 2896 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
    16:18:55.0445 2896 WfpLwf - ok
    16:18:55.0635 2896 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
    16:18:55.0638 2896 WIMMount - ok
    16:18:55.0865 2896 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
    16:18:55.0870 2896 WinUsb - ok
    16:18:56.0052 2896 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
    16:18:56.0055 2896 WmiAcpi - ok
    16:18:56.0247 2896 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
    16:18:56.0250 2896 ws2ifsl - ok
    16:18:56.0447 2896 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
    16:18:56.0452 2896 WudfPf - ok
    16:18:56.0622 2896 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
    16:18:56.0627 2896 WUDFRd - ok
    16:18:56.0695 2896 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
    16:18:56.0757 2896 \Device\Harddisk0\DR0 - ok
    16:18:56.0762 2896 Boot (0x1200) (c6d3c5a876adf910f0e7990789f2b72d) \Device\Harddisk0\DR0\Partition0
    16:18:56.0764 2896 \Device\Harddisk0\DR0\Partition0 - ok
    16:18:56.0779 2896 Boot (0x1200) (c433b47330f9a3d370b0df3cd707583a) \Device\Harddisk0\DR0\Partition1
    16:18:56.0780 2896 \Device\Harddisk0\DR0\Partition1 - ok
    16:18:56.0780 2896 ============================================================
    16:18:56.0781 2896 Scan finished
    16:18:56.0781 2896 ============================================================
    16:18:56.0797 6340 Detected object count: 0
    16:18:56.0799 6340 Actual detected object count: 0
    16:19:10.0517 4296 ============================================================
    16:19:10.0517 4296 Scan started
    16:19:10.0517 4296 Mode: Manual;
    16:19:10.0517 4296 ============================================================
    16:19:12.0248 4296 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
    16:19:12.0258 4296 1394ohci - ok
    16:19:12.0438 4296 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
    16:19:12.0438 4296 ACPI - ok
    16:19:12.0618 4296 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
    16:19:12.0618 4296 AcpiPmi - ok
    16:19:12.0818 4296 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
    16:19:12.0828 4296 adp94xx - ok
    16:19:13.0018 4296 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
    16:19:13.0028 4296 adpahci - ok
    16:19:13.0228 4296 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
    16:19:13.0228 4296 adpu320 - ok
    16:19:13.0468 4296 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
    16:19:13.0468 4296 AFD - ok
    16:19:13.0658 4296 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
    16:19:13.0658 4296 agp440 - ok
    16:19:13.0838 4296 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
    16:19:13.0838 4296 aliide - ok
    16:19:14.0028 4296 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
    16:19:14.0028 4296 amdide - ok
    16:19:14.0198 4296 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
    16:19:14.0198 4296 AmdK8 - ok
    16:19:14.0318 4296 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
    16:19:14.0328 4296 AmdPPM - ok
    16:19:14.0348 4296 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
    16:19:14.0358 4296 amdsata - ok
    16:19:14.0518 4296 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
    16:19:14.0518 4296 amdsbs - ok
    16:19:14.0678 4296 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
    16:19:14.0678 4296 amdxata - ok
    16:19:14.0838 4296 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
    16:19:14.0838 4296 AppID - ok
    16:19:14.0998 4296 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
    16:19:14.0998 4296 arc - ok
    16:19:15.0068 4296 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
    16:19:15.0068 4296 arcsas - ok
    16:19:15.0138 4296 aswFsBlk (ce6d8bcc4787704ea4feeb92b0d0caf8) C:\Windows\system32\drivers\aswFsBlk.sys
    16:19:15.0138 4296 aswFsBlk - ok
    16:19:15.0188 4296 aswMonFlt (0debeb2e3fbd0bf5343125cce617f105) C:\Windows\system32\drivers\aswMonFlt.sys
    16:19:15.0198 4296 aswMonFlt - ok
    16:19:15.0208 4296 aswRdr (952edc2e81f85d1781958d4128bf59f8) C:\Windows\system32\drivers\aswRdr.sys
    16:19:15.0208 4296 aswRdr - ok
    16:19:15.0258 4296 aswSnx (dd383e2ac941c545a85ab72503da6c12) C:\Windows\system32\drivers\aswSnx.sys
    16:19:15.0258 4296 aswSnx - ok
    16:19:15.0268 4296 aswSP (ef5403fb8b2dcb791ec365fdf6040a4a) C:\Windows\system32\drivers\aswSP.sys
    16:19:15.0278 4296 aswSP - ok
    16:19:15.0298 4296 aswTdi (34165da5c6b30c0f9d61246bf8a28040) C:\Windows\system32\drivers\aswTdi.sys
    16:19:15.0308 4296 aswTdi - ok
    16:19:15.0328 4296 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
    16:19:15.0328 4296 AsyncMac - ok
    16:19:15.0508 4296 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
    16:19:15.0518 4296 atapi - ok
    16:19:15.0698 4296 athr (e642491f64e58cd5bc8fb8b347dcf65f) C:\Windows\system32\DRIVERS\athrx.sys
    16:19:15.0718 4296 athr - ok
    16:19:15.0878 4296 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
    16:19:15.0888 4296 b06bdrv - ok
    16:19:16.0018 4296 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
    16:19:16.0028 4296 b57nd60a - ok
    16:19:16.0178 4296 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
    16:19:16.0178 4296 Beep - ok
    16:19:16.0368 4296 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
    16:19:16.0368 4296 blbdrive - ok
    16:19:16.0498 4296 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
    16:19:16.0508 4296 bowser - ok
    16:19:16.0678 4296 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    16:19:16.0678 4296 BrFiltLo - ok
    16:19:16.0768 4296 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    16:19:16.0768 4296 BrFiltUp - ok
    16:19:16.0868 4296 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
    16:19:16.0868 4296 Brserid - ok
    16:19:17.0018 4296 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
    16:19:17.0028 4296 BrSerWdm - ok
    16:19:17.0108 4296 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
    16:19:17.0108 4296 BrUsbMdm - ok
    16:19:17.0198 4296 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
    16:19:17.0198 4296 BrUsbSer - ok
    16:19:17.0248 4296 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
    16:19:17.0248 4296 BTHMODEM - ok
    16:19:17.0298 4296 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
    16:19:17.0298 4296 cdfs - ok
    16:19:17.0348 4296 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
    16:19:17.0348 4296 cdrom - ok
    16:19:17.0508 4296 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
    16:19:17.0508 4296 circlass - ok
    16:19:17.0628 4296 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
    16:19:17.0638 4296 CLFS - ok
    16:19:17.0778 4296 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
    16:19:17.0778 4296 CmBatt - ok
    16:19:17.0848 4296 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
    16:19:17.0848 4296 cmdide - ok
    16:19:17.0978 4296 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
    16:19:17.0988 4296 CNG - ok
    16:19:18.0038 4296 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
    16:19:18.0038 4296 Compbatt - ok
    16:19:18.0068 4296 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
    16:19:18.0068 4296 CompositeBus - ok
    16:19:18.0088 4296 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
    16:19:18.0088 4296 crcdisk - ok
    16:19:18.0138 4296 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
    16:19:18.0138 4296 DfsC - ok
    16:19:18.0290 4296 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
    16:19:18.0291 4296 discache - ok
    16:19:18.0446 4296 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
    16:19:18.0448 4296 Disk - ok
    16:19:18.0616 4296 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
    16:19:18.0617 4296 drmkaud - ok
    16:19:18.0775 4296 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
    16:19:18.0785 4296 DXGKrnl - ok
    16:19:19.0024 4296 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
    16:19:19.0056 4296 ebdrv - ok
    16:19:19.0216 4296 ElRawDisk (d38a883309e04b9fbffe1aca60ea3bbf) C:\Windows\system32\drivers\ElRawDsk.sys
    16:19:19.0218 4296 ElRawDisk - ok
    16:19:19.0385 4296 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
    16:19:19.0393 4296 elxstor - ok
    16:19:19.0581 4296 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
    16:19:19.0582 4296 ErrDev - ok
    16:19:19.0771 4296 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
    16:19:19.0775 4296 exfat - ok
    16:19:19.0971 4296 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
    16:19:19.0975 4296 fastfat - ok
    16:19:20.0159 4296 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
    16:19:20.0161 4296 fdc - ok
    16:19:20.0354 4296 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
    16:19:20.0354 4296 FileInfo - ok
    16:19:20.0524 4296 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
    16:19:20.0524 4296 Filetrace - ok
    16:19:20.0717 4296 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
    16:19:20.0718 4296 flpydisk - ok
    16:19:20.0903 4296 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
    16:19:20.0908 4296 FltMgr - ok
    16:19:21.0079 4296 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
    16:19:21.0080 4296 FsDepends - ok
    16:19:21.0263 4296 fssfltr (6c06701bf1db05405804d7eb610991ce) C:\Windows\system32\DRIVERS\fssfltr.sys
    16:19:21.0265 4296 fssfltr - ok
    16:19:21.0452 4296 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
    16:19:21.0453 4296 Fs_Rec - ok
    16:19:21.0634 4296 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
    16:19:21.0638 4296 fvevol - ok
    16:19:21.0809 4296 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
    16:19:21.0810 4296 gagp30kx - ok
    16:19:21.0958 4296 GEARAspiWDM - ok
    16:19:22.0075 4296 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
    16:19:22.0077 4296 hcw85cir - ok
    16:19:22.0264 4296 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
    16:19:22.0269 4296 HdAudAddService - ok
    16:19:22.0455 4296 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
    16:19:22.0458 4296 HDAudBus - ok
    16:19:22.0652 4296 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
    16:19:22.0652 4296 HECIx64 - ok
    16:19:22.0852 4296 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
    16:19:22.0852 4296 HidBatt - ok
    16:19:23.0042 4296 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
    16:19:23.0042 4296 HidBth - ok
    16:19:23.0247 4296 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
    16:19:23.0247 4296 HidIr - ok
    16:19:23.0417 4296 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys
    16:19:23.0417 4296 HidUsb - ok
    16:19:23.0628 4296 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
    16:19:23.0632 4296 HpSAMD - ok
    16:19:23.0814 4296 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
    16:19:23.0823 4296 HTTP - ok
    16:19:24.0019 4296 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
    16:19:24.0020 4296 hwpolicy - ok
    16:19:24.0218 4296 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
    16:19:24.0222 4296 i8042prt - ok
    16:19:24.0442 4296 iaStor (1384872112e8e7fd5786eceb8bddf4c9) C:\Windows\system32\DRIVERS\iaStor.sys
    16:19:24.0448 4296 iaStor - ok
    16:19:24.0657 4296 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
    16:19:24.0663 4296 iaStorV - ok
    16:19:25.0108 4296 igfx (0089b53f1befd34b7d8ca4ab021335fa) C:\Windows\system32\DRIVERS\igdkmd64.sys
    16:19:25.0211 4296 igfx - ok
    16:19:25.0443 4296 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
    16:19:25.0446 4296 iirsp - ok
    16:19:25.0628 4296 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys
    16:19:25.0638 4296 Impcd - ok
    16:19:25.0843 4296 IntcAzAudAddService (235362d403d9d677514649d88db31914) C:\Windows\system32\drivers\RTKVHD64.sys
    16:19:25.0863 4296 IntcAzAudAddService - ok
    16:19:26.0026 4296 IntcDAud (03c74719d48056a1078f3a51ceb76baa) C:\Windows\system32\DRIVERS\IntcDAud.sys
    16:19:26.0031 4296 IntcDAud - ok
    16:19:26.0353 4296 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
    16:19:26.0356 4296 intelide - ok
    16:19:26.0583 4296 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
    16:19:26.0583 4296 intelppm - ok
    16:19:26.0766 4296 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    16:19:26.0768 4296 IpFilterDriver - ok
    16:19:26.0881 4296 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
    16:19:26.0883 4296 IPMIDRV - ok
    16:19:26.0991 4296 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
    16:19:26.0993 4296 IPNAT - ok
    16:19:27.0031 4296 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
    16:19:27.0031 4296 IRENUM - ok
    16:19:27.0106 4296 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
    16:19:27.0106 4296 isapnp - ok
    16:19:27.0176 4296 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
    16:19:27.0183 4296 iScsiPrt - ok
    16:19:27.0268 4296 k57nd60a (37e053a2cf8f0082b689ed74106e0cec) C:\Windows\system32\DRIVERS\k57nd60a.sys
    16:19:27.0276 4296 k57nd60a - ok
    16:19:27.0316 4296 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
    16:19:27.0318 4296 kbdclass - ok
    16:19:27.0378 4296 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
    16:19:27.0378 4296 kbdhid - ok
    16:19:27.0423 4296 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
    16:19:27.0426 4296 KSecDD - ok
    16:19:27.0463 4296 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
    16:19:27.0468 4296 KSecPkg - ok
    16:19:27.0521 4296 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
    16:19:27.0523 4296 ksthunk - ok
    16:19:27.0571 4296 Lavasoft Kernexplorer - ok
    16:19:27.0711 4296 Lbd (c8b3131857931ae76798a741cc52b021) C:\Windows\system32\DRIVERS\Lbd.sys
    16:19:27.0713 4296 Lbd - ok
    16:19:27.0871 4296 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
    16:19:27.0871 4296 lltdio - ok
    16:19:28.0061 4296 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
    16:19:28.0071 4296 LSI_FC - ok
    16:19:28.0241 4296 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
    16:19:28.0251 4296 LSI_SAS - ok
    16:19:28.0431 4296 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    16:19:28.0431 4296 LSI_SAS2 - ok
    16:19:28.0611 4296 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    16:19:28.0621 4296 LSI_SCSI - ok
    16:19:28.0791 4296 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
    16:19:28.0791 4296 luafv - ok
    16:19:28.0991 4296 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
    16:19:28.0991 4296 megasas - ok
    16:19:29.0191 4296 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
    16:19:29.0201 4296 MegaSR - ok
    16:19:29.0361 4296 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
    16:19:29.0361 4296 Modem - ok
    16:19:29.0531 4296 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
    16:19:29.0531 4296 monitor - ok
    16:19:29.0701 4296 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys
    16:19:29.0701 4296 mouclass - ok
    16:19:29.0901 4296 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
    16:19:29.0901 4296 mouhid - ok
    16:19:30.0096 4296 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
    16:19:30.0098 4296 mountmgr - ok
    16:19:30.0256 4296 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
    16:19:30.0259 4296 mpio - ok
    16:19:30.0432 4296 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
    16:19:30.0434 4296 mpsdrv - ok
    16:19:30.0602 4296 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
    16:19:30.0605 4296 MRxDAV - ok
    16:19:30.0757 4296 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
    16:19:30.0760 4296 mrxsmb - ok
    16:19:30.0949 4296 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    16:19:30.0953 4296 mrxsmb10 - ok
    16:19:31.0129 4296 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    16:19:31.0133 4296 mrxsmb20 - ok
    16:19:31.0314 4296 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
    16:19:31.0316 4296 msahci - ok
    16:19:31.0516 4296 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
    16:19:31.0518 4296 msdsm - ok
    16:19:31.0727 4296 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
    16:19:31.0729 4296 Msfs - ok
    16:19:31.0920 4296 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
    16:19:31.0922 4296 mshidkmdf - ok
    16:19:32.0096 4296 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
    16:19:32.0096 4296 msisadrv - ok
    16:19:32.0276 4296 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
    16:19:32.0276 4296 MSKSSRV - ok
    16:19:32.0461 4296 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
    16:19:32.0466 4296 MSPCLOCK - ok
    16:19:32.0654 4296 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
    16:19:32.0655 4296 MSPQM - ok
    16:19:32.0838 4296 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
    16:19:32.0847 4296 MsRPC - ok
    16:19:33.0033 4296 mssm
    0
  10. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,

    1/
    * inscris toi sur le forum afin de rendre tes liens lisibles

    * ICI >> Forum comment ca marche

    =====================================

    2/

    Les logiciels d'émulation de CD comme Daemon Tools peuvent gêner les outils de désinfection. Utilise Defogger pour les désactiver temporairement :

    si tu as ce genre de d'outils sur ton pc Utilise Defogger pour les désactiver temporairement : sinon passe directement à combofix

    * Télécharge Defogger (de jpshortstuff) sur ton Bureau
    * Lance le

    * Une fenêtre apparait : clique sur "Disable"

    * Fais redémarrer l'ordinateur si l'outil te le demande

    Note : Quand nous aurons terminé la désinfection, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"

    ===================================================

    Attention, avant de commencer, lit attentivement la procédure

    ********************************************************

    /!\ Ne pas utiliser ce logiciel en dehors du cadre de cette désinfection : DANGEUREUX /!\

    * Fais un clic droit sur ce lien, enregistre le dans ton bureau
    Voici Aide combofix

    * /!\ Déconnecte-toi du net et ARRÊTE TES LOGICIELS DE PROTECTION /!\


    *Double-clique sur ComboFix.exe (ou exécuter en tant qu'administrateur pour vista et seven)

    Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter

    ** SURTOUT INSTALLES LA CONSOLE DE RECUPERATION
    (si il te propose de l'installer remets internet)

    ? Ne touche à rien(souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC

    *En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

    * Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

    ** /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

    *Note : Le rapport se trouve également là : C:\ComboFix.txt

    @+

    _ _ _ Fish66_ _ _ I''"""""I_ _ membre contributeur sécurité_ _I''"""""I_ _ _
    ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤
    0
  11. julex37
     
    D'accord, mais je n'ai pas envie que mon pc plantent et ne se ralument plus ...
    Sinon, je le ferai plus tard ( sa prend du temps ? )
    0
  12. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,

    Il ne prend pas beaucoup de temps, juste il faut suivre les instructions :-)

    Poste moi le rapport Malwarebytes stp

    @+

    _ _ _ Fish66_ _ _ I''"""""I_ _ membre contributeur sécurité_ _I''"""""I_ _ _
    ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤
    0
  13. julex37
     
    Voici le rapport de combofix :
    ComboFix 12-01-30.02 - alex 31/01/2012 18:17:03.1.4 - x64
    Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3767.2340 [GMT 1:00]
    Lancé depuis: c:\users\alex\Desktop\ComboFix.exe
    AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
    SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\users\alex\AppData\Local\Temp\{17D6EF35-4145-4E6C-A58F-C8F61136FAE9}\fpb.tmp
    c:\users\alex\AppData\Roaming\app
    c:\users\alex\AppData\Roaming\app\Jerakine_lang.dat
    c:\users\alex\AppData\Roaming\app\Jerakine_lang_vesrion.dat
    .
    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2011-12-28 au 2012-01-31 ))))))))))))))))))))))))))))))))))))
    .
    .
    2012-01-31 17:22 . 2012-01-31 17:22 -------- d-----w- c:\users\Default\AppData\Local\temp
    2012-01-31 14:31 . 2012-01-31 14:59 -------- d-----w- C:\SMCLpav
    2012-01-17 06:41 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{541EE84E-464A-4FC1-85DC-1950405388C0}\mpengine.dll
    2012-01-16 15:57 . 2011-11-28 17:51 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
    2012-01-16 15:57 . 2011-11-28 17:53 304472 ----a-w- c:\windows\system32\drivers\aswSP.sys
    2012-01-16 15:57 . 2011-11-28 17:52 42328 ----a-w- c:\windows\system32\drivers\aswRdr.sys
    2012-01-16 15:57 . 2011-11-28 17:54 591192 ----a-w- c:\windows\system32\drivers\aswSnx.sys
    2012-01-16 15:57 . 2011-11-28 17:52 58712 ----a-w- c:\windows\system32\drivers\aswTdi.sys
    2012-01-16 15:57 . 2011-11-28 17:52 66904 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
    2012-01-16 15:57 . 2011-11-28 18:01 41184 ----a-w- c:\windows\avastSS.scr
    2012-01-16 15:57 . 2011-11-28 18:01 199816 ----a-w- c:\windows\SysWow64\aswBoot.exe
    2012-01-16 15:56 . 2012-01-16 15:56 -------- d-----w- c:\program files\AVAST Software
    2012-01-14 19:24 . 2012-01-14 19:24 -------- d-----w- c:\windows\FltMgr
    2012-01-14 19:23 . 2012-01-14 19:23 -------- d-----w- c:\users\alex\AppData\Local\Panda Security
    2012-01-14 19:22 . 2012-01-14 19:22 -------- d-----w- c:\programdata\Backup
    2012-01-14 19:21 . 2003-10-22 17:23 446464 ----a-w- c:\windows\SysWow64\HHActiveX.dll
    2012-01-14 19:21 . 2010-06-21 16:01 87872 ----a-w- c:\windows\SysWow64\PavLspHookWow.dll
    2012-01-14 19:21 . 2010-06-21 16:01 114496 ----a-w- c:\windows\system32\PavLspHook64.dll
    2012-01-14 19:21 . 2010-09-01 10:09 216648 ----a-w- c:\windows\system32\drivers\n64i1644.sys
    2012-01-14 19:21 . 2012-01-31 14:32 -------- d-----w- c:\program files (x86)\Panda Security
    2012-01-14 19:21 . 2012-01-19 16:54 -------- d-----w- c:\programdata\Panda Security
    2012-01-14 19:14 . 2012-01-31 14:32 -------- d-----w- c:\program files (x86)\Common Files\Panda Security
    2012-01-14 18:04 . 2012-01-14 18:04 -------- d-----w- c:\program files (x86)\Common Files\Bitdefender
    2012-01-14 17:19 . 2012-01-14 17:19 15712 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ad5d6ddc1ccd2e001\MeshBetaRemover.exe
    2012-01-14 12:25 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
    2012-01-14 12:25 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
    2012-01-09 19:25 . 2012-01-09 19:25 750488 ----a-w- c:\windows\system32\npdeployJava1.dll
    2012-01-09 19:25 . 2012-01-09 19:25 660368 ----a-w- c:\windows\system32\deployJava1.dll
    2012-01-09 19:25 . 2012-01-09 19:25 -------- d-----w- c:\program files\Java
    2012-01-09 19:12 . 2012-01-21 10:08 417440 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
    2012-01-05 17:40 . 2011-09-02 09:29 2135552 ----a-w- c:\windows\system32\Incinerator64.dll
    2012-01-05 17:40 . 2011-09-02 09:29 2077184 ----a-w- c:\windows\SysWow64\Incinerator32.dll
    2012-01-05 17:36 . 2008-12-09 08:59 23464 ----a-w- c:\windows\system32\drivers\ElRawDsk.sys
    2012-01-05 17:36 . 2011-03-11 01:03 14848 ----a-w- c:\windows\system32\smrgdf.exe
    2012-01-05 17:36 . 2011-03-11 01:03 45568 ----a-w- c:\windows\system32\iolobtdfg.exe
    2012-01-05 17:36 . 2011-03-11 01:02 91136 ----a-w- c:\windows\system32\IncContxMenu.dll
    2012-01-05 17:36 . 2010-02-08 21:36 69000 ----a-w- c:\windows\system32\offreg.dll
    2012-01-05 17:36 . 2010-02-08 20:59 56200 ----a-w- c:\windows\SysWow64\offreg.dll
    2012-01-05 17:26 . 2012-01-14 18:00 -------- d-----w- c:\program files (x86)\iolo
    2012-01-05 17:12 . 2010-09-23 11:29 511328 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\CAPICOM\CAPICOM.DLL
    2012-01-05 16:55 . 2012-01-30 07:15 -------- d-----w- c:\users\alex\AppData\Roaming\iolo
    2012-01-05 16:55 . 2012-01-05 16:55 74703 ----a-w- c:\windows\SysWow64\mfc45.dll
    2012-01-04 13:45 . 2012-01-04 13:45 -------- d-----w- c:\programdata\IObit
    2012-01-04 13:41 . 2012-01-04 13:41 -------- d--h--w- c:\programdata\Common Files
    2012-01-04 13:39 . 2012-01-04 13:59 -------- d-----w- c:\programdata\MFAData
    2012-01-04 13:37 . 2012-01-04 13:46 -------- d-----w- c:\users\alex\AppData\Roaming\IObit
    2012-01-04 13:37 . 2012-01-22 09:21 -------- d-----w- c:\program files (x86)\IObit
    2012-01-02 17:37 . 2012-01-14 17:59 -------- d-----w- c:\programdata\iolo
    2012-01-02 17:30 . 2012-01-02 17:30 -------- d-----w- c:\users\alex\AppData\Roaming\RegistryKeys
    2012-01-02 17:13 . 2012-01-02 17:13 -------- d-----w- c:\users\alex\AppData\Roaming\GlarySoft
    2012-01-02 16:35 . 2012-01-04 14:31 -------- dc-h--w- c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
    .
    .
    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-01-21 10:08 . 2011-05-30 18:16 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2011-12-10 14:24 . 2011-11-30 11:09 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
    2011-12-06 07:17 . 2011-12-06 07:17 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
    2011-12-06 07:17 . 2011-12-06 07:17 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
    2011-11-28 18:01 . 2011-03-11 06:46 256960 ----a-w- c:\windows\system32\aswBoot.exe
    2011-11-24 04:52 . 2011-12-14 14:05 3145216 ----a-w- c:\windows\system32\win32k.sys
    2011-11-15 13:29 . 2011-03-30 16:23 270720 ------w- c:\windows\system32\MpSigStub.exe
    2011-11-10 04:54 . 2011-10-22 13:19 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
    2011-11-05 05:41 . 2011-12-14 15:23 1188864 ----a-w- c:\windows\system32\wininet.dll
    2011-11-05 05:32 . 2011-12-14 14:00 2048 ----a-w- c:\windows\system32\tzres.dll
    2011-11-05 04:35 . 2011-12-14 15:23 981504 ----a-w- c:\windows\SysWow64\wininet.dll
    2011-11-05 04:26 . 2011-12-14 14:00 2048 ----a-w- c:\windows\SysWow64\tzres.dll
    2011-11-05 03:32 . 2011-12-14 15:23 1638912 ----a-w- c:\windows\system32\mshtml.tlb
    2011-11-05 02:48 . 2011-12-14 15:23 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb
    .
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Akamai NetSession Interface"="c:\users\alex\AppData\Local\Akamai\netsession_win.exe" [2011-12-23 3334432]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696]
    "BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" [2010-06-28 263936]
    "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-10 975952]
    "iolo Startup"="c:\program files (x86)\iolo\Common\Lib\ioloLManager.exe" [2011-09-02 606392]
    "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
    "aux"=wdmaud.drv
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService]
    @="Service"
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-disabled]
    "Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
    .
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-09-28 136176]
    R2 ioloFileInfoList;iolo FileInfoList Service;c:\program files (x86)\iolo\Common\Lib\ioloServiceManager.exe [2011-09-02 722616]
    R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-01-21 253600]
    R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
    R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-09-28 136176]
    R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [x]
    R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
    R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver;c:\windows\system32\drivers\pctNdis-PacketFilter64.sys [x]
    R3 pctNdis;PC Tools Firewall Intermediate Filter Service;c:\windows\system32\DRIVERS\pctNdis64.sys [x]
    R3 pctplfw;pctplfw;c:\windows\System32\drivers\pctplfw64.sys [x]
    R3 pctplsg;pctplsg;c:\windows\System32\drivers\pctplsg64.sys [x]
    R3 Prot6Flt;Prot6Flt;c:\windows\system32\DRIVERS\Prot6Flt.sys [x]
    R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
    R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [x]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
    R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
    S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [x]
    S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore64.sys [x]
    S0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS64.sys [x]
    S0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA64.sys [x]
    S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [x]
    S0 TFSysMon;TFSysMon;c:\windows\system32\drivers\TfSysMon.sys [x]
    S1 aswSnx;aswSnx; [x]
    S1 aswSP;aswSP; [x]
    S1 ElRawDisk;ElRawDisk;c:\windows\system32\drivers\ElRawDsk.sys [x]
    S1 pctgntdi;pctgntdi;c:\windows\System32\drivers\pctgntdi64.sys [x]
    S1 PCTSD;PC Tools Spyware Doctor Driver;c:\windows\system32\Drivers\PCTSD64.sys [x]
    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
    S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
    S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136]
    S2 aswFsBlk;aswFsBlk; [x]
    S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
    S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
    S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-08-10 321104]
    S2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2010-06-11 868896]
    S2 GREGService;GREGService;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe [2010-01-08 23584]
    S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
    S2 ioloSystemService;iolo System Service;c:\program files (x86)\iolo\Common\Lib\ioloServiceManager.exe [2011-09-02 722616]
    S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2010-06-28 255744]
    S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
    S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-18 2320920]
    S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2010-01-28 243232]
    S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
    S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
    S3 IntcDAud;Son Intel(R) pour écrans;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
    S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
    S3 pctNdisMP;PC Tools Driver;c:\windows\system32\DRIVERS\pctNdis64.sys [x]
    S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [x]
    S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [x]
    S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [x]
    S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [x]
    S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
    S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
    .
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
    Akamai REG_MULTI_SZ Akamai
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]
    2010-11-20 12:17 302592 ----a-w- c:\windows\System32\cmd.exe
    .
    Contenu du dossier 'Tâches planifiées'
    .
    2012-01-31 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-01-09 10:08]
    .
    2012-01-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-09-28 15:27]
    .
    2012-01-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-09-28 15:27]
    .
    2012-01-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3971021578-607728411-3101485768-1001Core.job
    - c:\users\alex\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-30 13:06]
    .
    2012-01-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3971021578-607728411-3101485768-1001UA.job
    - c:\users\alex\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-30 13:06]
    .
    .
    --------- x86-64 -----------
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
    @="{472083B0-C522-11CF-8763-00608CC02F24}"
    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
    2011-11-28 18:01 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
    "Acer ePower Management"="c:\program files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" [2010-06-11 861216]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-21 167704]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-21 392472]
    "Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-21 416024]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "LoadAppInit_DLLs"=0x0
    .
    ------- Examen supplémentaire -------
    .
    uStart Page = hxxp://www.google.fr/
    uLocal Page = c:\windows\system32\blank.htm
    mStart Page = hxxp://isearch.glarysoft.com/?src=iehome
    uInternet Settings,ProxyOverride = *.local;127.0.0.1:9421;
    LSP: c:\program files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll
    TCP: DhcpNameServer = 192.168.1.1
    DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} - hxxp://www.consoclicker.com/TNSClickrb.CAB
    .
    .
    ------- Associations de fichier -------
    .
    JSEFile=NOTEPAD.EXE %1
    .
    - - - - ORPHELINS SUPPRIMES - - - -
    .
    Toolbar-Locked - (no file)
    SafeBoot-Lavasoft Ad-Aware Service
    Toolbar-Locked - (no file)
    HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
    AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
    .
    .
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\Akamai]
    "ServiceDll"="c:\program files (x86)\common files\akamai/netsession_win_b427739.dll"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
    "ImagePath"="c:\windows\system32\GameMon.des -service"
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_183_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_183_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_183.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.11"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_183.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_183.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_183.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker4"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    ------------------------ Autres processus actifs ------------------------
    .
    c:\program files\AVAST Software\Avast\AvastSvc.exe
    c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    c:\program files (x86)\Bonjour\mDNSResponder.exe
    c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    .
    **************************************************************************
    .
    Heure de fin: 2012-01-31 18:35:36 - La machine a redémarré
    ComboFix-quarantined-files.txt 2012-01-31 17:35
    .
    Avant-CF: 580 813 635 584 octets libres
    Après-CF: 580 672 258 048 octets libres
    .
    - - End Of File - - 6695682A2190558B88795A1A490AA062
    0
    1. julex34
       
      J'ai un gros probleme, quand je veut aller sur Malwarbytes, ccleaner ou autre a l'aide de l'icone du bureau cela me met : C:\Program Files\CCleaner\CCleaner64.exe
      0
    2. julex37
       
      Et je n'arrive plus a activer deffoger
      0
    3. julex37 Messages postés 10 Statut Membre
       
      Cela me met C:\Program Files\CCleaner\CCleaner64.exe
      Tentative d'opération non autorisée sur une clé du registre marquée pour suppression
      0
  14. julex37
     
    Aidez-moi ! Je ne peut plus allez sur les icones de mon bureau et réactiver deffolger
    0
  15. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,

    1/
    Tu n'as pas bien désinstallé panda!

    Refais ce qui est demandé : >>> ICI en 2/<<<

    2/
    Redémarre ton PC et essais de lancer Malwarebytes

    @+
    0
  16. julex37
     
    Oui, mais ce qui m'inquiete le plus, c'est que je ne peut pas lancer les raccourcis du bureau comment faire ?
    0
    1. julex37
       
      J'ai restaurer le systeme, je n'utiliserai plus combofix.
      0
  17. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,

    Mais combofix a supprimé des infections :-)

    Puisque tu as restauré ton système il faudra un nouveau rapport ZHPDiag bien sûre si tu veux continuer :-)

    A demain

    Bonne soirée

    0
  18. julex37
     
    Mais j'ai restauré le systeme AVANT combofix, sa veut dir qu'elle sont parti quand j'ai utiliser combofix et quand j'ai restauré le systeme elle n'y sont plus ?
    0
  19. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Bonjour,

    Je veux dire qu'il y'a possibilité d'existence d'autres infections lorsque

    tu as fait cette restauration pour une date antérieure!

    ==============================

    Et j'ai un petit soucis, quand je redémarre l'ordi, tous démarre bien, la page d'accueil de packard bell se met et tout d'un coup écran noir, il refait tout le temps ça, et je suis obliger d'enlever la batterie pour qu'il arrete de démarrer/s'arreter.


    Est ce que tu as encore ce problème ?

    @+

    _ _ _ Fish66_ _ _ I''"""""I_ _ membre contributeur sécurité_ _I''"""""I_ _ _
    ¤¤¤ Le meilleur remède pour tous les problèmes, c'est la patience.... ¤¤¤
    0
  20. julex37
     
    Oui, quelque foi sa redémarre normal et quelque foi ça fais ça, c'est très énervant comme par exemple faire une désinfection est attendre 2-4h pour qu'il redémarre normalement.
    0
  21. Fish66 Messages postés 18337 Statut Contributeur sécurité 1 318
     
    Re,

    Ton PC est encore infecté!

    Tu peux préparer le rapport ZHPDiag comme expliqué : >>> ICI <<< pour analyser ton PC de nouveau

    @+

    0
  • 1
  • 2
  • 3