nettoyage du virus System Check Résolu/Fermé

Question

Bonjour, 
J'ai eu récemment plusieurs virus dû à des visite de site de streaming.
Pour nettoyer cela j'ai passé rkill puis Roguekiller qui ma redirigé sur un site me conseillant de passer Combofix.
Après avoir fait tout ça les rogues ont disparu. Toutefois Avira m'envoie régulièrement des alertes et je ne peux plus me connecter à internet.
J'ai poster la dessus ici:
https://forums.commentcamarche.net/forum/affich-24518369-alerte-client-security-solution#p24518369

Avant de relancer l'autre sujet, j'aimerais m'assurer que j'ai effectivement supprimer les virus. Du coup j'ai fait un scan ZHPdiag:
https://pjjoint.malekal.com/files.php?id=ZHPDiag_20120222_v7w8z15c6r10

Est-ce que quelqu'un peut me confirmer que l'ordi est clean? Si il ne l'est pas je supprime l'autre post et me concentrerais sur celui-là.

Merci d'avance


Configuration: Mac OS X / Firefox 10.0.2

Redbart · Answer

Bsr
as tu nettoyé ton pc avec MBAM à jour?

Elboubdelapampa · Answer

Bonjour,
oui j'ai oublié de le dire: J'ai passé MBAM, la mise à jour date du dernier moment ou j'avais la connection internet, mais il m'a repéré des trucs et les a supprimé. Tu veux le rapport?

Redbart · Answer

cela peut être interessant 

que détecte avira?

Elboubdelapampa · Answer

Desolé pour le délais de réponse super long, mais j'ai eu une semaine chargée...

Avira detecte Tr/Rootkit.Gen
dans le dossier
C:/Windows/system32/drivers/afd.sys

il le met chaque fois en quarantaine mais celui-ci réaparait à chaque fois. Sans connection internet...

C'est lié à mon problème de connection?

Pour MBAM, il ne detecte rien, le rapport ne fait pas vraiment de sens du coup...

Elboubdelapampa · Answer

y a quelqu'un?

jacques.gache · Answer

bonjour, sur le rapport de zhpdiag je vois en premier un espace disque trop petit pour un bon fonctionnement car il faut un minimun de 10% et toi tu est avec 2% System drive C: has 2 GB (2%) free of 107 GB

tu devrait faire la mise à jour manuel de malwarebytes et faire un examen complet car il y a des restes qu'il devrait traiter  
https://www.commentcamarche.net/faq/9016-mettre-a-jour-son-antivirus-anti-malware-sans-connexion-internet#malwarebytes-anti-malware 
sur ton pc qui as internet tu télécharges MBAM Rules.exe la mises à jour et tu la passes sur l'autre pc avec une clés usb ou un mp3 !!!  
------ 
 Perso je ne sais peut être pas grand chose, mais si le peu que je sais p­eut aider et bien,  
 je veux bien le partager avec toi  !!

Elboubdelapampa · Answer

Bonjour,
J'ai fait la manip et j'ai un message "la base de donnée n'existe pas ou est corrompue. Voulez vous télécharger une copie actuelle?" et il essaie de se connecter sur internet.

Ensuite j'ai l'erreur "PROGRAM_ERROR-LOAD-DATABASE(0, 13, SDKCreate)

J'ai essayé en désinstallant Malware, en le réinstallant puis en installant la mise à jour, mais rien à faire. Que cela soit en mode normal ous sans échec...

Elboubdelapampa · Answer

voila le rapport:
Rapport de ZHPFix 1.12.3380 par Nicolas Coolman, Update du 05/02/2011
Fichier d'export Registre : 
Run by Kathrin at 12.03.2012 22:10:59
Windows XP Professional Service Pack 3 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Registry Key ==========
DELETED Key: CLSID BHO: {F040E541-A427-4CF7-85D8-75E3E0F476C5}
DELETED Key: Service: Bonjour Service
NOT FOUND Key: Service: Bonjour Service
DELETED Key: Service: AMService
NOT FOUND Key: Service Legacy: LEGACY_AMSERVICE
DELETED Key: HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
DELETED Key: HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
DELETED Key: HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
NOT FOUND Key: HKLM\SYSTEM\CurrentControlSet\Services\AMService
NOT FOUND Key: Service: AMService

========== Registry Value ==========
DELETED RunValue: ISUSPM Startup
DELETED RunValue: ISUSScheduler
DELETED RunValue: nwiz
DELETED RunValue: QuickTime Task
DELETED RunValue: iTunesHelper
DELETED RunValue: ctfmon.exe
NOT FOUND RunValue: ctfmon.exe
No Value in Firewall Exception Register Key (FirewallRaz)

========== Repertory ==========
DELETED Flash Cookies: 2
DELETED Window Temporary: : 5

========== File ==========
DELETED File: c:\program files\lenovo\client security solution	vtpwm_ie_com.dll
DELETED File: c:\windows	empfqdhg\setup.exe
NOT FOUND File: c:\windows	empfqdhg\setup.exe
DELETED Flash Cookies: 1
DELETED Window Temporary: : 3

========== Restoration ==========
Restore System Point not created


========== Summary ==========
10 : Registry Key
8 : Registry Value
2 : Repertory
5 : File
1 : Restoration


End of clean in 00mn 05s

========== Report File ==========
C:\ZHP\ZHPFix[R1].txt - 12.03.2012 22:10:59 [1848]

Elboubdelapampa · Answer

Bonjour,
voila le scan de MBAM:

Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Database version: v2012.01.13.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Kathrin :: KSLAPTOP [administrator]

Protection: Enabled

12.03.2012 22:24:02
mbam-log-2012-03-12 (22-24-02).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 268332
Time elapsed: 1 hour(s), 12 minute(s), 28 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Apperement réinstaller MBAM fonctionne. C'est la mise à jour qui ne va pas...
Sinon j'ai toujours pas de connection à internet et Avira détecte toujours le rootkit

Elboubdelapampa · Answer

Bonjour,
vu que j'ai toujours pas de connection internet, j'ai réinstallé TdssKiller via USB. Dans un premier scan il n'a rien trouvé. Dans un deuxième scan avec toutes les options cochée,il a détecté 9 trucs. J'ai tout mis en quanrantaine. Voila le rapport:

19:45:01.0859 0452	TDSS rootkit removing tool 2.7.20.0 Mar  9 2012 17:10:43
19:45:01.0937 0452	============================================================
19:45:01.0937 0452	Current date / time: 2012/03/13 19:45:01.0937
19:45:01.0937 0452	SystemInfo:
19:45:01.0937 0452	
19:45:01.0937 0452	OS Version: 5.1.2600 ServicePack: 3.0
19:45:01.0937 0452	Product type: Workstation
19:45:01.0937 0452	ComputerName: KSLAPTOP
19:45:01.0937 0452	UserName: Kathrin
19:45:01.0937 0452	Windows directory: C:\WINDOWS
19:45:01.0937 0452	System windows directory: C:\WINDOWS
19:45:01.0937 0452	Processor architecture: Intel x86
19:45:01.0937 0452	Number of processors: 2
19:45:01.0937 0452	Page size: 0x1000
19:45:01.0937 0452	Boot type: Normal boot
19:45:01.0937 0452	============================================================
19:45:04.0687 0452	Drive \Device\Harddisk0\DR0 - Size: 0x1BF2976000 (111.79 Gb), SectorSize: 0x200, Cylinders: 0x3C91, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000050
19:45:04.0718 0452	Drive \Device\Harddisk1\DR3 - Size: 0xDF8F90000 (55.89 Gb), SectorSize: 0x200, Cylinders: 0x1C80, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
19:45:04.0718 0452	\Device\Harddisk0\DR0:
19:45:04.0718 0452	MBR used
19:45:04.0718 0452	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xD688BA1
19:45:04.0718 0452	\Device\Harddisk1\DR3:
19:45:04.0718 0452	MBR used
19:45:04.0718 0452	\Device\Harddisk1\DR3\Partition0: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x6FC3D80
19:45:04.0796 0452	Initialize success
19:45:04.0796 0452	============================================================
19:45:10.0921 0344	============================================================
19:45:10.0921 0344	Scan started
19:45:10.0921 0344	Mode: Manual; 
19:45:10.0921 0344	============================================================
19:45:12.0343 0344	Abiosdsk - ok
19:45:12.0406 0344	abp480n5        (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
19:45:12.0406 0344	abp480n5 - ok
19:45:12.0453 0344	ac97intc        (0f2d66d5f08ebe2f77bb904288dcf6f0) C:\WINDOWS\system32\drivers\ac97intc.sys
19:45:12.0468 0344	ac97intc - ok
19:45:12.0546 0344	ACPI            (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
19:45:12.0562 0344	ACPI - ok
19:45:12.0609 0344	ACPIEC          (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
19:45:12.0609 0344	ACPIEC - ok
19:45:12.0687 0344	ADIHdAudAddService (6296f30a2760b2adae778a9f71fe46fe) C:\WINDOWS\system32\drivers\ADIHdAud.sys
19:45:12.0703 0344	ADIHdAudAddService - ok
19:45:12.0812 0344	adpu160m        (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
19:45:12.0812 0344	adpu160m - ok
19:45:13.0015 0344	AEAudio         (e8694fc1dac061ad989506b470552415) C:\WINDOWS\system32\drivers\AEAudio.sys
19:45:13.0015 0344	AEAudio - ok
19:45:13.0093 0344	aec             (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
19:45:13.0109 0344	aec - ok
19:45:13.0140 0344	AegisP - ok
19:45:13.0203 0344	agp440          (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
19:45:13.0203 0344	agp440 - ok
19:45:13.0250 0344	agpCPQ          (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
19:45:13.0250 0344	agpCPQ - ok
19:45:13.0406 0344	Aha154x         (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
19:45:13.0406 0344	Aha154x - ok
19:45:13.0578 0344	aic78u2         (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
19:45:13.0578 0344	aic78u2 - ok
19:45:13.0640 0344	aic78xx         (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
19:45:13.0640 0344	aic78xx - ok
19:45:13.0734 0344	AliIde          (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
19:45:13.0734 0344	AliIde - ok
19:45:13.0828 0344	alim1541        (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
19:45:13.0843 0344	alim1541 - ok
19:45:13.0937 0344	amdagp          (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
19:45:13.0937 0344	amdagp - ok
19:45:14.0000 0344	amsint          (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
19:45:14.0000 0344	amsint - ok
19:45:14.0187 0344	ANC             (11ab185a7af224800bbfb5b836974a17) C:\WINDOWS\system32\drivers\ANC.SYS
19:45:14.0187 0344	ANC - ok
19:45:14.0312 0344	Arp1394         (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
19:45:14.0312 0344	Arp1394 - ok
19:45:14.0359 0344	asc             (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
19:45:14.0359 0344	asc - ok
19:45:14.0406 0344	asc3350p        (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
19:45:14.0406 0344	asc3350p - ok
19:45:14.0468 0344	asc3550         (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
19:45:14.0468 0344	asc3550 - ok
19:45:14.0609 0344	AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
19:45:14.0609 0344	AsyncMac - ok
19:45:14.0765 0344	atapi           (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
19:45:14.0796 0344	atapi - ok
19:45:14.0843 0344	Atdisk - ok
19:45:14.0906 0344	Atmarpc         (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
19:45:14.0906 0344	Atmarpc - ok
19:45:14.0968 0344	atmeltpm        (dbf0d7e2df33b469eb55406fea759350) C:\WINDOWS\system32\DRIVERS\atmeltpm.sys
19:45:14.0968 0344	atmeltpm - ok
19:45:15.0031 0344	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
19:45:15.0031 0344	audstub - ok
19:45:15.0187 0344	avgio           (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
19:45:15.0187 0344	avgio - ok
19:45:15.0421 0344	avgntflt        (1e4114685de1ffa9675e09c6a1fb3f4b) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
19:45:15.0421 0344	avgntflt - ok
19:45:15.0578 0344	avipbb          (0f78d3dae6dedd99ae54c9491c62adf2) C:\WINDOWS\system32\DRIVERS\avipbb.sys
19:45:15.0578 0344	avipbb - ok
19:45:15.0671 0344	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
19:45:15.0671 0344	Beep - ok
19:45:15.0734 0344	btaudio - ok
19:45:15.0953 0344	BTDriver - ok
19:45:15.0984 0344	BTKRNL - ok
19:45:16.0046 0344	BTWDNDIS - ok
19:45:16.0093 0344	BTWUSB - ok
19:45:16.0109 0344	catchme - ok
19:45:16.0171 0344	cbidf           (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
19:45:16.0171 0344	cbidf - ok
19:45:16.0218 0344	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
19:45:16.0218 0344	cbidf2k - ok
19:45:16.0343 0344	cd20xrnt        (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
19:45:16.0343 0344	cd20xrnt - ok
19:45:16.0546 0344	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
19:45:16.0546 0344	Cdaudio - ok
19:45:16.0625 0344	Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
19:45:16.0640 0344	Cdfs - ok
19:45:16.0687 0344	Cdrom           (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
19:45:16.0687 0344	Cdrom - ok
19:45:16.0734 0344	Changer - ok
19:45:16.0984 0344	CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
19:45:17.0000 0344	CmBatt - ok
19:45:17.0093 0344	CmdIde          (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys
19:45:17.0093 0344	CmdIde - ok
19:45:17.0218 0344	Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
19:45:17.0218 0344	Compbatt - ok
19:45:17.0390 0344	Cpqarray        (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
19:45:17.0406 0344	Cpqarray - ok
19:45:17.0609 0344	dac2w2k         (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
19:45:17.0609 0344	dac2w2k - ok
19:45:17.0703 0344	dac960nt        (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
19:45:17.0718 0344	dac960nt - ok
19:45:17.0859 0344	Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
19:45:17.0890 0344	Disk - ok
19:45:18.0234 0344	DLABOIOM        (35cbc02546335ea41a5d516da6626c8a) C:\WINDOWS\system32\DLA\DLABOIOM.SYS
19:45:18.0234 0344	DLABOIOM - ok
19:45:18.0453 0344	DLACDBHM - ok
19:45:18.0656 0344	DLADResN        (19e3db16de2bb3db81b172a78d140b03) C:\WINDOWS\system32\DLA\DLADResN.SYS
19:45:18.0671 0344	DLADResN - ok
19:45:18.0750 0344	DLAIFS_M        (e4859ca5bd8412a9a60d62067a653522) C:\WINDOWS\system32\DLA\DLAIFS_M.SYS
19:45:18.0765 0344	DLAIFS_M - ok
19:45:18.0921 0344	DLAOPIOM        (20c24a3d1cf0825487c93f806625805e) C:\WINDOWS\system32\DLA\DLAOPIOM.SYS
19:45:18.0937 0344	DLAOPIOM - ok
19:45:19.0140 0344	DLAPoolM        (8a530da5dc81954bcf1966813f699b49) C:\WINDOWS\system32\DLA\DLAPoolM.SYS
19:45:19.0156 0344	DLAPoolM - ok
19:45:19.0265 0344	DLARTL_N - ok
19:45:19.0406 0344	DLAUDFAM        (7eda68af6a91bf64af6f301e39928ebf) C:\WINDOWS\system32\DLA\DLAUDFAM.SYS
19:45:19.0406 0344	DLAUDFAM - ok
19:45:19.0500 0344	DLAUDF_M        (a18423bbc6d92b01fdf3c51e7510ee70) C:\WINDOWS\system32\DLA\DLAUDF_M.SYS
19:45:19.0515 0344	DLAUDF_M - ok
19:45:19.0734 0344	dmboot          (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
19:45:19.0781 0344	dmboot - ok
19:45:19.0875 0344	dmio            (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
19:45:19.0875 0344	dmio - ok
19:45:19.0906 0344	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
19:45:19.0921 0344	dmload - ok
19:45:20.0046 0344	DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
19:45:20.0046 0344	DMusic - ok
19:45:20.0125 0344	dpti2o          (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
19:45:20.0125 0344	dpti2o - ok
19:45:20.0171 0344	drmkaud         (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
19:45:20.0171 0344	drmkaud - ok
19:45:20.0203 0344	DRVMCDB - ok
19:45:20.0375 0344	DRVNDDM - ok
19:45:20.0421 0344	E100B           (3fca03cbca11269f973b70fa483c88ef) C:\WINDOWS\system32\DRIVERS\e100b325.sys
19:45:20.0437 0344	E100B - ok
19:45:20.0562 0344	e1express       (67396a6b3adac7ff233cadf6d1660dba) C:\WINDOWS\system32\DRIVERS\e1e5132.sys
19:45:20.0562 0344	e1express - ok
19:45:20.0703 0344	Fastfat         (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
19:45:20.0718 0344	Fastfat - ok
19:45:20.0765 0344	Fdc             (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
19:45:20.0765 0344	Fdc - ok
19:45:20.0812 0344	Fips            (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
19:45:20.0812 0344	Fips - ok
19:45:20.0859 0344	Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
19:45:20.0859 0344	Flpydisk - ok
19:45:20.0968 0344	FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
19:45:20.0968 0344	FltMgr - ok
19:45:21.0062 0344	Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
19:45:21.0062 0344	Fs_Rec - ok
19:45:21.0140 0344	Ftdisk          (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
19:45:21.0156 0344	Ftdisk - ok
19:45:21.0218 0344	GEARAspiWDM     (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
19:45:21.0234 0344	GEARAspiWDM - ok
19:45:21.0328 0344	Gpc             (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
19:45:21.0328 0344	Gpc - ok
19:45:21.0406 0344	HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
19:45:21.0406 0344	HDAudBus - ok
19:45:21.0546 0344	HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
19:45:21.0546 0344	HidUsb - ok
19:45:21.0671 0344	hpn             (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
19:45:21.0671 0344	hpn - ok
19:45:21.0781 0344	HSFHWAZL        (6a5c4732d6803f84e2987edd8e4359ce) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
19:45:21.0781 0344	HSFHWAZL - ok
19:45:21.0875 0344	HSF_DPV         (21c31273c6cc4826e74be8ae3b09d4a8) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
19:45:21.0921 0344	HSF_DPV - ok
19:45:22.0015 0344	HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
19:45:22.0031 0344	HTTP - ok
19:45:22.0234 0344	i2omgmt         (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
19:45:22.0234 0344	i2omgmt - ok
19:45:22.0328 0344	i2omp           (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
19:45:22.0328 0344	i2omp - ok
19:45:22.0390 0344	i8042prt        (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
19:45:22.0390 0344	i8042prt - ok
19:45:22.0453 0344	iaStor          (fd7f9d74c2b35dbda400804a3f5ed5d8) C:\WINDOWS\system32\DRIVERS\iaStor.sys
19:45:22.0453 0344	iaStor - ok
19:45:22.0515 0344	IBMPMDRV        (326edb99d2b509f6c48bf723c1817292) C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys
19:45:22.0515 0344	IBMPMDRV - ok
19:45:22.0671 0344	IBMTPCHK        (bfc9f3adaad74e13f9ce16c8bd336f95) C:\WINDOWS\system32\Drivers\IBMBLDID.sys
19:45:22.0671 0344	IBMTPCHK - ok
19:45:22.0796 0344	Imapi           (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
19:45:22.0796 0344	Imapi - ok
19:45:22.0859 0344	ini910u         (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
19:45:22.0859 0344	ini910u - ok
19:45:22.0890 0344	IntelIde        (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
19:45:22.0890 0344	IntelIde - ok
19:45:22.0906 0344	intelppm        (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
19:45:22.0906 0344	intelppm - ok
19:45:22.0921 0344	Ip6Fw           (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
19:45:22.0921 0344	Ip6Fw - ok
19:45:22.0953 0344	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
19:45:22.0953 0344	IpFilterDriver - ok
19:45:22.0968 0344	IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
19:45:22.0968 0344	IpInIp - ok
19:45:23.0000 0344	IpNat           (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
19:45:23.0000 0344	IpNat - ok
19:45:23.0078 0344	IPSec           (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
19:45:23.0093 0344	IPSec - ok
19:45:23.0109 0344	IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
19:45:23.0109 0344	IRENUM - ok
19:45:23.0140 0344	isapnp          (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
19:45:23.0140 0344	isapnp - ok
19:45:23.0218 0344	Iviaspi - ok
19:45:23.0312 0344	Kbdclass        (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
19:45:23.0312 0344	Kbdclass - ok
19:45:23.0421 0344	kbdhid          (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
19:45:23.0421 0344	kbdhid - ok
19:45:23.0468 0344	kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
19:45:23.0468 0344	kmixer - ok
19:45:23.0593 0344	KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
19:45:23.0593 0344	KSecDD - ok
19:45:23.0656 0344	lbrtfdc - ok
19:45:23.0812 0344	LenovoRd        (e0e962e7ee5624f8fad8319255e0ee5b) C:\WINDOWS\system32\Drivers\LenovoRd.sys
19:45:23.0812 0344	LenovoRd - ok
19:45:23.0921 0344	MBAMProtector   (b7ca8cc3f978201856b6ab82f40953c3) C:\WINDOWS\system32\drivers\mbam.sys
19:45:23.0921 0344	MBAMProtector - ok
19:45:24.0031 0344	MBAMSwissArmy   (0db7527db188c7d967a37bb51bbf3963) C:\WINDOWS\system32\drivers\mbamswissarmy.sys
19:45:24.0031 0344	MBAMSwissArmy - ok
19:45:24.0125 0344	mdmxsdk         (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
19:45:24.0125 0344	mdmxsdk - ok
19:45:24.0234 0344	mnmdd           (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
19:45:24.0234 0344	mnmdd - ok
19:45:24.0390 0344	Modem           (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
19:45:24.0390 0344	Modem - ok
19:45:24.0453 0344	Mouclass        (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
19:45:24.0453 0344	Mouclass - ok
19:45:24.0546 0344	mouhid          (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
19:45:24.0546 0344	mouhid - ok
19:45:24.0593 0344	MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
19:45:24.0593 0344	MountMgr - ok
19:45:24.0640 0344	mraid35x        (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
19:45:24.0640 0344	mraid35x - ok
19:45:24.0671 0344	MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
19:45:24.0687 0344	MRxDAV - ok
19:45:24.0796 0344	MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
19:45:24.0828 0344	MRxSmb - ok
19:45:25.0015 0344	Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
19:45:25.0015 0344	Msfs - ok
19:45:25.0093 0344	MSKSSRV         (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
19:45:25.0093 0344	MSKSSRV - ok
19:45:25.0125 0344	MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
19:45:25.0125 0344	MSPCLOCK - ok
19:45:25.0171 0344	MSPQM           (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
19:45:25.0171 0344	MSPQM - ok
19:45:25.0218 0344	mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
19:45:25.0218 0344	mssmbios - ok
19:45:25.0312 0344	Mup             (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
19:45:25.0328 0344	Mup - ok
19:45:25.0390 0344	NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
19:45:25.0390 0344	NDIS - ok
19:45:25.0593 0344	NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS
distapi.sys
19:45:25.0593 0344	NdisTapi - ok
19:45:25.0687 0344	Ndisuio         (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS
disuio.sys
19:45:25.0687 0344	Ndisuio - ok
19:45:25.0734 0344	NdisWan         (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS
diswan.sys
19:45:25.0734 0344	NdisWan - ok
19:45:25.0828 0344	NDProxy         (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
19:45:25.0828 0344	NDProxy - ok
19:45:25.0906 0344	NetBIOS         (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS
etbios.sys
19:45:25.0906 0344	NetBIOS - ok
19:45:26.0078 0344	NetBT           (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS
etbt.sys
19:45:26.0093 0344	NetBT - ok
19:45:26.0343 0344	NETw4x32        (9b18806954cb7f33b538cbf090562db2) C:\WINDOWS\system32\DRIVERS\NETw4x32.sys
19:45:26.0453 0344	NETw4x32 - ok
19:45:26.0500 0344	NIC1394         (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS
ic1394.sys
19:45:26.0500 0344	NIC1394 - ok
19:45:26.0578 0344	nmwcd           (c82f4cc10ad315b6d6bcb14d0a7cad66) C:\WINDOWS\system32\drivers\ccdcmb.sys
19:45:26.0593 0344	nmwcd - ok
19:45:26.0671 0344	Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
19:45:26.0671 0344	Npfs - ok
19:45:26.0859 0344	Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
19:45:26.0890 0344	Ntfs - ok
19:45:26.0953 0344	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
19:45:26.0953 0344	Null - ok
19:45:27.0406 0344	nv              (8f91d713ebb1682f36dd93525861149f) C:\WINDOWS\system32\DRIVERS
v4_mini.sys
19:45:27.0750 0344	nv - ok
19:45:27.0843 0344	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS
wlnkflt.sys
19:45:27.0843 0344	NwlnkFlt - ok
19:45:27.0984 0344	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS
wlnkfwd.sys
19:45:28.0000 0344	NwlnkFwd - ok
19:45:28.0093 0344	ohci1394        (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
19:45:28.0093 0344	ohci1394 - ok
19:45:28.0171 0344	Parport         (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
19:45:28.0171 0344	Parport - ok
19:45:28.0218 0344	PartMgr         (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
19:45:28.0218 0344	PartMgr - ok
19:45:28.0250 0344	ParVdm          (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
19:45:28.0265 0344	ParVdm - ok
19:45:28.0296 0344	PCI             (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
19:45:28.0296 0344	PCI - ok
19:45:28.0343 0344	PCIDump - ok
19:45:28.0437 0344	PCIIde          (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys
19:45:28.0437 0344	PCIIde - ok
19:45:28.0625 0344	Pcmcia          (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
19:45:28.0625 0344	Pcmcia - ok
19:45:28.0687 0344	PDCOMP - ok
19:45:28.0734 0344	PDFRAME - ok
19:45:28.0781 0344	PDRELI - ok
19:45:28.0828 0344	PDRFRAME - ok
19:45:28.0875 0344	perc2           (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
19:45:28.0890 0344	perc2 - ok
19:45:28.0968 0344	perc2hib        (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
19:45:28.0968 0344	perc2hib - ok
19:45:29.0093 0344	pmem - ok
19:45:29.0218 0344	PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERSaspptp.sys
19:45:29.0218 0344	PptpMiniport - ok
19:45:29.0328 0344	PROCDD          (1d80309fed4babf8ea9e7b84a394348b) C:\WINDOWS\system32\DRIVERS\PROCDD.SYS
19:45:29.0328 0344	PROCDD - ok
19:45:29.0343 0344	Processor       (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys
19:45:29.0343 0344	Processor - ok
19:45:29.0421 0344	psadd           (ce5114c9d3ab67e6f6f8017c5f975292) C:\WINDOWS\system32\DRIVERS\psadd.sys
19:45:29.0421 0344	psadd - ok
19:45:29.0468 0344	PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
19:45:29.0468 0344	PSched - ok
19:45:29.0515 0344	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
19:45:29.0515 0344	Ptilink - ok
19:45:29.0593 0344	PxHelp20        (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\Drivers\PxHelp20.sys
19:45:29.0593 0344	PxHelp20 - ok
19:45:29.0687 0344	ql1080          (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
19:45:29.0687 0344	ql1080 - ok
19:45:29.0718 0344	Ql10wnt         (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
19:45:29.0718 0344	Ql10wnt - ok
19:45:29.0765 0344	ql12160         (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
19:45:29.0765 0344	ql12160 - ok
19:45:29.0828 0344	ql1240          (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
19:45:29.0828 0344	ql1240 - ok
19:45:29.0875 0344	ql1280          (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
19:45:29.0875 0344	ql1280 - ok
19:45:29.0937 0344	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERSasacd.sys
19:45:29.0937 0344	RasAcd - ok
19:45:30.0062 0344	Rasl2tp         (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERSasl2tp.sys
19:45:30.0062 0344	Rasl2tp - ok
19:45:30.0156 0344	RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERSaspppoe.sys
19:45:30.0156 0344	RasPppoe - ok
19:45:30.0296 0344	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERSaspti.sys
19:45:30.0296 0344	Raspti - ok
19:45:30.0406 0344	Rdbss           (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERSdbss.sys
19:45:30.0406 0344	Rdbss - ok
19:45:30.0484 0344	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
19:45:30.0484 0344	RDPCDD - ok
19:45:30.0562 0344	rdpdr           (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERSdpdr.sys
19:45:30.0562 0344	rdpdr - ok
19:45:30.0640 0344	RDPWD           (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
19:45:30.0640 0344	RDPWD - ok
19:45:30.0750 0344	redbook         (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERSedbook.sys
19:45:30.0750 0344	redbook - ok
19:45:30.0921 0344	s24trans        (e2c6abcbefb1d44f6aaeb1cd5d6062d4) C:\WINDOWS\system32\DRIVERS\s24trans.sys
19:45:30.0921 0344	s24trans - ok
19:45:31.0015 0344	Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
19:45:31.0015 0344	Secdrv - ok
19:45:31.0078 0344	serenum         (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
19:45:31.0078 0344	serenum - ok
19:45:31.0109 0344	Serial          (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
19:45:31.0109 0344	Serial - ok
19:45:31.0171 0344	Sfloppy         (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
19:45:31.0171 0344	Sfloppy - ok
19:45:31.0250 0344	Shockprf        (6873edc0d75e1e255208442ea3e018c1) C:\WINDOWS\system32\DRIVERS\Apsx86.sys
19:45:31.0250 0344	Shockprf - ok
19:45:31.0265 0344	Simbad - ok
19:45:31.0390 0344	sisagp          (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
19:45:31.0390 0344	sisagp - ok
19:45:31.0515 0344	smihlp          (350483c5a139f8a39ed3191aff39bed0) C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys
19:45:31.0515 0344	smihlp - ok
19:45:31.0671 0344	Sparrow         (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
19:45:31.0671 0344	Sparrow - ok
19:45:31.0765 0344	splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
19:45:31.0765 0344	splitter - ok
19:45:31.0796 0344	sr              (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
19:45:31.0796 0344	sr - ok
19:45:31.0875 0344	Srv             (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
19:45:31.0890 0344	Srv - ok
19:45:31.0953 0344	ssmdrv          (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
19:45:31.0968 0344	ssmdrv - ok
19:45:31.0984 0344	swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
19:45:32.0000 0344	swenum - ok
19:45:32.0031 0344	swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
19:45:32.0031 0344	swmidi - ok
19:45:32.0078 0344	symc810         (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
19:45:32.0078 0344	symc810 - ok
19:45:32.0156 0344	symc8xx         (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
19:45:32.0156 0344	symc8xx - ok
19:45:32.0265 0344	sym_hi          (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
19:45:32.0281 0344	sym_hi - ok
19:45:32.0328 0344	sym_u3          (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
19:45:32.0328 0344	sym_u3 - ok
19:45:32.0421 0344	SynTP           (7c02db7416d52c02b131d0e3a8d2337c) C:\WINDOWS\system32\DRIVERS\SynTP.sys
19:45:32.0437 0344	SynTP - ok
19:45:32.0515 0344	sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
19:45:32.0531 0344	sysaudio - ok
19:45:32.0593 0344	Tcpip           (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS	cpip.sys
19:45:32.0609 0344	Tcpip - ok
19:45:32.0703 0344	TcUsb           (109d1f5cd9cc370a87901db3ddd533f1) C:\WINDOWS\system32\Drivers	cusb.sys
19:45:32.0718 0344	TcUsb - ok
19:45:32.0828 0344	TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
19:45:32.0828 0344	TDPIPE - ok
19:45:32.0921 0344	TDTCP           (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
19:45:32.0921 0344	TDTCP - ok
19:45:32.0968 0344	TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS	ermdd.sys
19:45:32.0968 0344	TermDD - ok
19:45:33.0093 0344	TosIde          (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS	oside.sys
19:45:33.0093 0344	TosIde - ok
19:45:33.0187 0344	TPDIGIMN        (9c72fdd0fa2d3be3bd5cca211fb19916) C:\WINDOWS\system32\DRIVERS\ApsHM86.sys
19:45:33.0187 0344	TPDIGIMN - ok
19:45:33.0234 0344	TPHKDRV - ok
19:45:33.0265 0344	TPPWRIF - ok
19:45:33.0437 0344	TSMAPIP         (6880cc241678cc3a148082c05b1db786) C:\WINDOWS\system32\drivers\TSMAPIP.SYS
19:45:33.0437 0344	TSMAPIP - ok
19:45:33.0578 0344	tvtfilter       (49258a02a1e8d304ed88b0f1c56b1738) C:\WINDOWS\system32\DRIVERS	vtfilter.sys
19:45:33.0578 0344	tvtfilter - ok
19:45:33.0656 0344	TVTI2C          (c254bff0a928ea7d5ccdc2522d56fd01) C:\WINDOWS\system32\DRIVERS\Tvti2c.sys
19:45:33.0656 0344	TVTI2C - ok
19:45:33.0718 0344	TVTPktFilter    (0727cce3ff1a4446f4a1d507361567ab) C:\WINDOWS\system32\DRIVERS	vtpktfilter.sys
19:45:33.0718 0344	TVTPktFilter - ok
19:45:33.0781 0344	Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
19:45:33.0781 0344	Udfs - ok
19:45:33.0796 0344	UIUSys - ok
19:45:33.0875 0344	ultra           (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
19:45:33.0875 0344	ultra - ok
19:45:33.0968 0344	Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
19:45:34.0031 0344	Update - ok
19:45:34.0125 0344	USBAAPL         (5c2bdc152bbab34f36473deaf7713f22) C:\WINDOWS\system32\Drivers\usbaapl.sys
19:45:34.0125 0344	USBAAPL - ok
19:45:34.0234 0344	usbccgp         (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
19:45:34.0234 0344	usbccgp - ok
19:45:34.0359 0344	usbehci         (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
19:45:34.0359 0344	usbehci - ok
19:45:34.0437 0344	usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
19:45:34.0437 0344	usbhub - ok
19:45:34.0546 0344	usbprint        (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
19:45:34.0546 0344	usbprint - ok
19:45:34.0671 0344	usbscan         (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
19:45:34.0671 0344	usbscan - ok
19:45:34.0734 0344	USBSTOR         (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
19:45:34.0734 0344	USBSTOR - ok
19:45:34.0812 0344	usbuhci         (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
19:45:34.0812 0344	usbuhci - ok
19:45:34.0859 0344	VgaSave         (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
19:45:34.0859 0344	VgaSave - ok
19:45:34.0968 0344	viaagp          (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
19:45:34.0968 0344	viaagp - ok
19:45:35.0062 0344	ViaIde          (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
19:45:35.0078 0344	ViaIde - ok
19:45:35.0125 0344	VolSnap         (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
19:45:35.0125 0344	VolSnap - ok
19:45:35.0265 0344	Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
19:45:35.0265 0344	Wanarp - ok
19:45:35.0437 0344	Wdf01000        (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
19:45:35.0468 0344	Wdf01000 - ok
19:45:35.0546 0344	WDICA - ok
19:45:35.0625 0344	wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
19:45:35.0625 0344	wdmaud - ok
19:45:35.0750 0344	winachsf        (307d248f97835b6879bdd361086924fe) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
19:45:35.0796 0344	winachsf - ok
19:45:35.0984 0344	WmiAcpi         (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
19:45:35.0984 0344	WmiAcpi - ok
19:45:36.0171 0344	WS2IFSL         (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
19:45:36.0171 0344	WS2IFSL - ok
19:45:36.0250 0344	MBR (0x1B8)     (ce0188f2ed7a8ffb8214978c5b0777a1) \Device\Harddisk0\DR0
19:45:36.0296 0344	\Device\Harddisk0\DR0 - ok
19:45:36.0296 0344	MBR (0x1B8)     (4e109e088ef4f29892fb4b77ab48296c) \Device\Harddisk1\DR3
19:45:37.0078 0344	\Device\Harddisk1\DR3 - ok
19:45:37.0078 0344	Boot (0x1200)   (c1555ae184b90239b925490118e7f311) \Device\Harddisk0\DR0\Partition0
19:45:37.0078 0344	\Device\Harddisk0\DR0\Partition0 - ok
19:45:37.0093 0344	Boot (0x1200)   (5b0964884d5383d8731258d500b8ce6c) \Device\Harddisk1\DR3\Partition0
19:45:37.0093 0344	\Device\Harddisk1\DR3\Partition0 - ok
19:45:37.0093 0344	============================================================
19:45:37.0093 0344	Scan finished
19:45:37.0093 0344	============================================================
19:45:37.0125 0352	Detected object count: 0
19:45:37.0125 0352	Actual detected object count: 0
19:45:53.0250 0992	============================================================
19:45:53.0250 0992	Scan started
19:45:53.0250 0992	Mode: Manual; SigCheck; TDLFS; 
19:45:53.0250 0992	============================================================
19:45:53.0843 0992	Abiosdsk - ok
19:45:53.0906 0992	abp480n5        (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
19:47:30.0734 0992	abp480n5 - ok
19:47:31.0093 0992	ac97intc        (0f2d66d5f08ebe2f77bb904288dcf6f0) C:\WINDOWS\system32\drivers\ac97intc.sys
19:47:31.0593 0992	ac97intc - ok
19:47:32.0015 0992	ACPI            (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
19:47:32.0109 0992	ACPI - ok
19:47:32.0296 0992	ACPIEC          (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
19:47:33.0484 0992	ACPIEC - ok
19:47:33.0937 0992	ADIHdAudAddService (6296f30a2760b2adae778a9f71fe46fe) C:\WINDOWS\system32\drivers\ADIHdAud.sys
19:47:34.0046 0992	ADIHdAudAddService - ok
19:47:34.0343 0992	adpu160m        (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
19:47:34.0468 0992	adpu160m - ok
19:47:34.0562 0992	AEAudio         (e8694fc1dac061ad989506b470552415) C:\WINDOWS\system32\drivers\AEAudio.sys
19:47:34.0609 0992	AEAudio - ok
19:47:34.0890 0992	aec             (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
19:47:35.0078 0992	aec - ok
19:47:35.0437 0992	AegisP - ok
19:47:35.0562 0992	agp440          (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
19:47:35.0796 0992	agp440 - ok
19:47:36.0109 0992	agpCPQ          (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
19:47:36.0218 0992	agpCPQ - ok
19:47:36.0546 0992	Aha154x         (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
19:47:36.0687 0992	Aha154x - ok
19:47:37.0031 0992	aic78u2         (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
19:47:37.0171 0992	aic78u2 - ok
19:47:37.0375 0992	aic78xx         (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
19:47:37.0656 0992	aic78xx - ok
19:47:37.0875 0992	AliIde          (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
19:47:38.0031 0992	AliIde - ok
19:47:38.0468 0992	alim1541        (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
19:47:38.0656 0992	alim1541 - ok
19:47:39.0156 0992	amdagp          (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
19:47:39.0406 0992	amdagp - ok
19:47:39.0781 0992	amsint          (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
19:47:39.0859 0992	amsint - ok
19:47:40.0078 0992	ANC             (11ab185a7af224800bbfb5b836974a17) C:\WINDOWS\system32\drivers\ANC.SYS
19:47:40.0125 0992	ANC ( UnsignedFile.Multi.Generic ) - warning
19:47:40.0125 0992	ANC - detected UnsignedFile.Multi.Generic (1)
19:47:40.0531 0992	Arp1394         (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
19:47:40.0796 0992	Arp1394 - ok
19:47:41.0046 0992	asc             (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
19:47:41.0265 0992	asc - ok
19:47:41.0500 0992	asc3350p        (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
19:47:41.0656 0992	asc3350p - ok
19:47:41.0687 0992	asc3550         (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
19:47:41.0796 0992	asc3550 - ok
19:47:42.0125 0992	AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
19:47:42.0234 0992	AsyncMac - ok
19:47:42.0781 0992	atapi           (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
19:47:43.0125 0992	atapi - ok
19:47:43.0437 0992	Atdisk - ok
19:47:43.0546 0992	Atmarpc         (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
19:47:43.0687 0992	Atmarpc - ok
19:47:44.0093 0992	atmeltpm        (dbf0d7e2df33b469eb55406fea759350) C:\WINDOWS\system32\DRIVERS\atmeltpm.sys
19:47:44.0468 0992	atmeltpm - ok
19:47:44.0750 0992	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
19:47:44.0968 0992	audstub - ok
19:47:45.0390 0992	avgio           (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
19:47:45.0390 0992	avgio - ok
19:47:45.0671 0992	avgntflt        (1e4114685de1ffa9675e09c6a1fb3f4b) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
19:47:45.0703 0992	avgntflt - ok
19:47:45.0812 0992	avipbb          (0f78d3dae6dedd99ae54c9491c62adf2) C:\WINDOWS\system32\DRIVERS\avipbb.sys
19:47:45.0828 0992	avipbb - ok
19:47:45.0921 0992	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
19:47:46.0109 0992	Beep - ok
19:47:46.0343 0992	btaudio - ok
19:47:46.0390 0992	BTDriver - ok
19:47:46.0453 0992	BTKRNL - ok
19:47:46.0500 0992	BTWDNDIS - ok
19:47:46.0734 0992	BTWUSB - ok
19:47:46.0750 0992	catchme - ok
19:47:46.0828 0992	cbidf           (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
19:47:47.0062 0992	cbidf - ok
19:47:47.0171 0992	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
19:47:47.0250 0992	cbidf2k - ok
19:47:47.0531 0992	cd20xrnt        (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
19:47:47.0703 0992	cd20xrnt - ok
19:47:47.0828 0992	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
19:47:48.0031 0992	Cdaudio - ok
19:47:48.0343 0992	Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
19:47:48.0468 0992	Cdfs - ok
19:47:48.0515 0992	Cdrom           (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
19:47:48.0718 0992	Cdrom - ok
19:47:49.0031 0992	Changer - ok
19:47:49.0156 0992	CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
19:47:49.0546 0992	CmBatt - ok
19:47:49.0906 0992	CmdIde          (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys
19:47:53.0953 0992	CmdIde - ok
19:47:54.0203 0992	Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
19:47:54.0296 0992	Compbatt - ok
19:47:54.0375 0992	Cpqarray        (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
19:47:54.0484 0992	Cpqarray - ok
19:47:54.0562 0992	dac2w2k         (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
19:47:54.0671 0992	dac2w2k - ok
19:47:54.0734 0992	dac960nt        (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
19:47:54.0843 0992	dac960nt - ok
19:47:55.0109 0992	Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
19:47:55.0218 0992	Disk - ok
19:47:55.0312 0992	DLABOIOM        (35cbc02546335ea41a5d516da6626c8a) C:\WINDOWS\system32\DLA\DLABOIOM.SYS
19:47:55.0343 0992	DLABOIOM ( UnsignedFile.Multi.Generic ) - warning
19:47:55.0343 0992	DLABOIOM - detected UnsignedFile.Multi.Generic (1)
19:47:55.0390 0992	DLACDBHM - ok
19:47:55.0453 0992	DLADResN        (19e3db16de2bb3db81b172a78d140b03) C:\WINDOWS\system32\DLA\DLADResN.SYS
19:47:55.0468 0992	DLADResN ( UnsignedFile.Multi.Generic ) - warning
19:47:55.0468 0992	DLADResN - detected UnsignedFile.Multi.Generic (1)
19:47:55.0671 0992	DLAIFS_M        (e4859ca5bd8412a9a60d62067a653522) C:\WINDOWS\system32\DLA\DLAIFS_M.SYS
19:47:55.0859 0992	DLAIFS_M ( UnsignedFile.Multi.Generic ) - warning
19:47:55.0859 0992	DLAIFS_M - detected UnsignedFile.Multi.Generic (1)
19:47:56.0062 0992	DLAOPIOM        (20c24a3d1cf0825487c93f806625805e) C:\WINDOWS\system32\DLA\DLAOPIOM.SYS
19:47:56.0109 0992	DLAOPIOM ( UnsignedFile.Multi.Generic ) - warning
19:47:56.0109 0992	DLAOPIOM - detected UnsignedFile.Multi.Generic (1)
19:47:56.0296 0992	DLAPoolM        (8a530da5dc81954bcf1966813f699b49) C:\WINDOWS\system32\DLA\DLAPoolM.SYS
19:47:56.0328 0992	DLAPoolM ( UnsignedFile.Multi.Generic ) - warning
19:47:56.0328 0992	DLAPoolM - detected UnsignedFile.Multi.Generic (1)
19:47:56.0453 0992	DLARTL_N - ok
19:47:56.0546 0992	DLAUDFAM        (7eda68af6a91bf64af6f301e39928ebf) C:\WINDOWS\system32\DLA\DLAUDFAM.SYS
19:47:56.0578 0992	DLAUDFAM ( UnsignedFile.Multi.Generic ) - warning
19:47:56.0578 0992	DLAUDFAM - detected UnsignedFile.Multi.Generic (1)
19:47:56.0781 0992	DLAUDF_M        (a18423bbc6d92b01fdf3c51e7510ee70) C:\WINDOWS\system32\DLA\DLAUDF_M.SYS
19:47:56.0843 0992	DLAUDF_M ( UnsignedFile.Multi.Generic ) - warning
19:47:56.0843 0992	DLAUDF_M - detected UnsignedFile.Multi.Generic (1)
19:47:57.0406 0992	dmboot          (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
19:47:57.0828 0992	dmboot - ok
19:47:58.0156 0992	dmio            (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
19:47:58.0281 0992	dmio - ok
19:47:58.0515 0992	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
19:47:58.0640 0992	dmload - ok
19:47:58.0750 0992	DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
19:47:58.0859 0992	DMusic - ok
19:47:59.0156 0992	dpti2o          (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
19:47:59.0343 0992	dpti2o - ok
19:47:59.0593 0992	drmkaud         (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
19:47:59.0718 0992	drmkaud - ok
19:47:59.0765 0992	DRVMCDB - ok
19:47:59.0859 0992	DRVNDDM - ok
19:48:00.0000 0992	E100B           (3fca03cbca11269f973b70fa483c88ef) C:\WINDOWS\system32\DRIVERS\e100b325.sys
19:48:00.0171 0992	E100B - ok
19:48:00.0281 0992	e1express       (67396a6b3adac7ff233cadf6d1660dba) C:\WINDOWS\system32\DRIVERS\e1e5132.sys
19:48:00.0312 0992	e1express - ok
19:48:00.0421 0992	Fastfat         (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
19:48:00.0531 0992	Fastfat - ok
19:48:00.0593 0992	Fdc             (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
19:48:00.0703 0992	Fdc - ok
19:48:00.0906 0992	Fips            (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
19:48:01.0015 0992	Fips - ok
19:48:01.0062 0992	Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
19:48:01.0546 0992	Flpydisk - ok
19:48:01.0640 0992	FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
19:48:01.0750 0992	FltMgr - ok
19:48:01.0812 0992	Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
19:48:01.0921 0992	Fs_Rec - ok
19:48:02.0250 0992	Ftdisk          (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
19:48:02.0406 0992	Ftdisk - ok
19:48:02.0484 0992	GEARAspiWDM     (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
19:48:02.0500 0992	GEARAspiWDM - ok
19:48:02.0578 0992	Gpc             (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
19:48:02.0734 0992	Gpc - ok
19:48:02.0812 0992	HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
19:48:02.0953 0992	HDAudBus - ok
19:48:03.0140 0992	HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
19:48:03.0234 0992	HidUsb - ok
19:48:03.0312 0992	hpn             (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
19:48:03.0406 0992	hpn - ok
19:48:03.0500 0992	HSFHWAZL        (6a5c4732d6803f84e2987edd8e4359ce) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
19:48:03.0562 0992	HSFHWAZL - ok
19:48:03.0671 0992	HSF_DPV         (21c31273c6cc4826e74be8ae3b09d4a8) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
19:48:03.0921 0992	HSF_DPV - ok
19:48:04.0125 0992	HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
19:48:04.0203 0992	HTTP - ok
19:48:04.0312 0992	i2omgmt         (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
19:48:04.0515 0992	i2omgmt - ok
19:48:04.0640 0992	i2omp           (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
19:48:04.0750 0992	i2omp - ok
19:48:04.0937 0992	i8042prt        (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
19:48:05.0031 0992	i8042prt - ok
19:48:05.0125 0992	iaStor          (fd7f9d74c2b35dbda400804a3f5ed5d8) C:\WINDOWS\system32\DRIVERS\iaStor.sys
19:48:05.0140 0992	iaStor - ok
19:48:05.0203 0992	IBMPMDRV        (326edb99d2b509f6c48bf723c1817292) C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys
19:48:05.0234 0992	IBMPMDRV - ok
19:48:05.0343 0992	IBMTPCHK        (bfc9f3adaad74e13f9ce16c8bd336f95) C:\WINDOWS\system32\Drivers\IBMBLDID.sys
19:48:05.0359 0992	IBMTPCHK ( UnsignedFile.Multi.Generic ) - warning
19:48:05.0359 0992	IBMTPCHK - detected UnsignedFile.Multi.Generic (1)
19:48:05.0484 0992	Imapi           (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
19:48:05.0609 0992	Imapi - ok
19:48:05.0921 0992	ini910u         (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
19:48:06.0078 0992	ini910u - ok
19:48:06.0453 0992	IntelIde        (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
19:48:06.0578 0992	IntelIde - ok
19:48:06.0609 0992	intelppm        (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
19:48:07.0234 0992	intelppm - ok
19:48:07.0562 0992	Ip6Fw           (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
19:48:07.0828 0992	Ip6Fw - ok
19:48:08.0062 0992	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
19:48:08.0312 0992	IpFilterDriver - ok
19:48:08.0515 0992	IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
19:48:08.0640 0992	IpInIp - ok
19:48:08.0906 0992	IpNat           (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
19:48:09.0125 0992	IpNat - ok
19:48:09.0406 0992	IPSec           (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
19:48:09.0578 0992	IPSec - ok
19:48:09.0859 0992	IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
19:48:10.0046 0992	IRENUM - ok
19:48:10.0546 0992	isapnp          (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
19:48:10.0703 0992	isapnp - ok
19:48:10.0765 0992	Iviaspi - ok
19:48:10.0812 0992	Kbdclass        (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
19:48:10.0906 0992	Kbdclass - ok
19:48:11.0093 0992	kbdhid          (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
19:48:11.0281 0992	kbdhid - ok
19:48:11.0578 0992	kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
19:48:11.0718 0992	kmixer - ok
19:48:11.0984 0992	KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
19:48:12.0218 0992	KSecDD - ok
19:48:12.0562 0992	lbrtfdc - ok
19:48:12.0953 0992	LenovoRd        (e0e962e7ee5624f8fad8319255e0ee5b) C:\WINDOWS\system32\Drivers\LenovoRd.sys
19:48:13.0015 0992	LenovoRd - ok
19:48:13.0296 0992	MBAMProtector   (b7ca8cc3f978201856b6ab82f40953c3) C:\WINDOWS\system32\drivers\mbam.sys
19:48:13.0312 0992	MBAMProtector - ok
19:48:13.0531 0992	MBAMSwissArmy   (0db7527db188c7d967a37bb51bbf3963) C:\WINDOWS\system32\drivers\mbamswissarmy.sys
19:48:13.0546 0992	MBAMSwissArmy - ok
19:48:13.0750 0992	mdmxsdk         (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
19:48:13.0812 0992	mdmxsdk - ok
19:48:14.0171 0992	mnmdd           (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
19:48:14.0468 0992	mnmdd - ok
19:48:14.0703 0992	Modem           (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
19:48:14.0875 0992	Modem - ok
19:48:15.0187 0992	Mouclass        (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
19:48:15.0328 0992	Mouclass - ok
19:48:15.0593 0992	mouhid          (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
19:48:15.0796 0992	mouhid - ok
19:48:16.0109 0992	MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
19:48:16.0281 0992	MountMgr - ok
19:48:16.0531 0992	mraid35x        (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
19:48:16.0656 0992	mraid35x - ok
19:48:17.0062 0992	MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
19:48:17.0203 0992	MRxDAV - ok
19:48:17.0562 0992	MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
19:48:17.0921 0992	MRxSmb - ok
19:48:18.0140 0992	Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
19:48:18.0437 0992	Msfs - ok
19:48:18.0546 0992	MSKSSRV         (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
19:48:18.0640 0992	MSKSSRV - ok
19:48:18.0671 0992	MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
19:48:18.0828 0992	MSPCLOCK - ok
19:48:18.0906 0992	MSPQM           (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
19:48:19.0078 0992	MSPQM - ok
19:48:19.0125 0992	mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
19:48:19.0218 0992	mssmbios - ok
19:48:19.0484 0992	Mup             (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
19:48:20.0140 0992	Mup - ok
19:48:20.0250 0992	NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
19:48:20.0359 0992	NDIS - ok
19:48:20.0484 0992	NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS
distapi.sys
19:48:20.0609 0992	NdisTapi - ok
19:48:20.0937 0992	Ndisuio         (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS
disuio.sys
19:48:21.0062 0992	Ndisuio - ok
19:48:21.0156 0992	NdisWan         (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS
diswan.sys
19:48:21.0250 0992	NdisWan - ok
19:48:21.0359 0992	NDProxy         (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
19:48:21.0968 0992	NDProxy - ok
19:48:22.0171 0992	NetBIOS         (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS
etbios.sys
19:48:22.0265 0992	NetBIOS - ok
19:48:22.0359 0992	NetBT           (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS
etbt.sys
19:48:22.0437 0992	NetBT - ok
19:48:22.0640 0992	NETw4x32        (9b18806954cb7f33b538cbf090562db2) C:\WINDOWS\system32\DRIVERS\NETw4x32.sys
19:48:22.0812 0992	NETw4x32 - ok
19:48:23.0140 0992	NIC1394         (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS
ic1394.sys
19:48:23.0312 0992	NIC1394 - ok
19:48:23.0453 0992	nmwcd           (c82f4cc10ad315b6d6bcb14d0a7cad66) C:\WINDOWS\system32\drivers\ccdcmb.sys
19:48:23.0546 0992	nmwcd - ok
19:48:23.0609 0992	Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
19:48:23.0703 0992	Npfs - ok
19:48:23.0968 0992	Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
19:48:24.0109 0992	Ntfs - ok
19:48:24.0203 0992	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
19:48:24.0281 0992	Null - ok
19:48:24.0718 0992	nv              (8f91d713ebb1682f36dd93525861149f) C:\WINDOWS\system32\DRIVERS
v4_mini.sys
19:48:25.0203 0992	nv - ok
19:48:25.0562 0992	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS
wlnkflt.sys
19:48:25.0734 0992	NwlnkFlt - ok
19:48:25.0796 0992	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS
wlnkfwd.sys
19:48:25.0890 0992	NwlnkFwd - ok
19:48:25.0984 0992	ohci1394        (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
19:48:26.0062 0992	ohci1394 - ok
19:48:26.0109 0992	Parport         (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
19:48:26.0218 0992	Parport - ok
19:48:26.0390 0992	PartMgr         (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
19:48:26.0484 0992	PartMgr - ok
19:48:26.0562 0992	ParVdm          (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
19:48:26.0656 0992	ParVdm - ok
19:48:26.0718 0992	PCI             (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
19:48:26.0812 0992	PCI - ok
19:48:26.0843 0992	PCIDump - ok
19:48:26.0906 0992	PCIIde          (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys
19:48:27.0000 0992	PCIIde - ok
19:48:27.0078 0992	Pcmcia          (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
19:48:27.0171 0992	Pcmcia - ok
19:48:27.0281 0992	PDCOMP - ok
19:48:27.0375 0992	PDFRAME - ok
19:48:27.0453 0992	PDRELI - ok
19:48:27.0484 0992	PDRFRAME - ok
19:48:27.0531 0992	perc2           (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
19:48:27.0640 0992	perc2 - ok
19:48:27.0828 0992	perc2hib        (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
19:48:28.0000 0992	perc2hib - ok
19:48:28.0062 0992	pmem - ok
19:48:28.0156 0992	PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERSaspptp.sys
19:48:28.0250 0992	PptpMiniport - ok
19:48:28.0421 0992	PROCDD          (1d80309fed4babf8ea9e7b84a394348b) C:\WINDOWS\system32\DRIVERS\PROCDD.SYS
19:48:28.0437 0992	PROCDD - ok
19:48:28.0515 0992	Processor       (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys
19:48:29.0312 0992	Processor - ok
19:48:29.0421 0992	psadd           (ce5114c9d3ab67e6f6f8017c5f975292) C:\WINDOWS\system32\DRIVERS\psadd.sys
19:48:29.0437 0992	psadd - ok
19:48:29.0531 0992	PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
19:48:29.0625 0992	PSched - ok
19:48:29.0750 0992	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
19:48:29.0859 0992	Ptilink - ok
19:48:29.0984 0992	PxHelp20        (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\Drivers\PxHelp20.sys
19:48:29.0984 0992	PxHelp20 - ok
19:48:30.0093 0992	ql1080          (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
19:48:30.0265 0992	ql1080 - ok
19:48:30.0343 0992	Ql10wnt         (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
19:48:30.0453 0992	Ql10wnt - ok
19:48:30.0609 0992	ql12160         (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
19:48:31.0156 0992	ql12160 - ok
19:48:31.0250 0992	ql1240          (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
19:48:31.0343 0992	ql1240 - ok
19:48:31.0406 0992	ql1280          (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
19:48:31.0500 0992	ql1280 - ok
19:48:31.0546 0992	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERSasacd.sys
19:48:31.0625 0992	RasAcd - ok
19:48:31.0687 0992	Rasl2tp         (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERSasl2tp.sys
19:48:31.0765 0992	Rasl2tp - ok
19:48:31.0781 0992	RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERSaspppoe.sys
19:48:31.0875 0992	RasPppoe - ok
19:48:31.0921 0992	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERSaspti.sys
19:48:32.0031 0992	Raspti - ok
19:48:32.0062 0992	Rdbss           (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERSdbss.sys
19:48:32.0156 0992	Rdbss - ok
19:48:32.0218 0992	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
19:48:32.0406 0992	RDPCDD - ok
19:48:32.0546 0992	rdpdr           (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERSdpdr.sys
19:48:32.0640 0992	rdpdr - ok
19:48:32.0718 0992	RDPWD           (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
19:48:32.0796 0992	RDPWD - ok
19:48:32.0984 0992	redbook         (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERSedbook.sys
19:48:33.0093 0992	redbook - ok
19:48:33.0187 0992	s24trans        (e2c6abcbefb1d44f6aaeb1cd5d6062d4) C:\WINDOWS\system32\DRIVERS\s24trans.sys
19:48:33.0218 0992	s24trans ( UnsignedFile.Multi.Generic ) - warning
19:48:33.0218 0992	s24trans - detected UnsignedFile.Multi.Generic (1)
19:48:33.0328 0992	Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
19:48:33.0421 0992	Secdrv - ok
19:48:33.0453 0992	serenum         (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
19:48:33.0562 0992	serenum - ok
19:48:33.0578 0992	Serial          (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
19:48:33.0687 0992	Serial - ok
19:48:33.0734 0992	Sfloppy         (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
19:48:33.0843 0992	Sfloppy - ok
19:48:33.0968 0992	Shockprf        (6873edc0d75e1e255208442ea3e018c1) C:\WINDOWS\system32\DRIVERS\Apsx86.sys
19:48:33.0984 0992	Shockprf - ok
19:48:34.0031 0992	Simbad - ok
19:48:34.0078 0992	sisagp          (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
19:48:34.0203 0992	sisagp - ok
19:48:34.0296 0992	smihlp          (350483c5a139f8a39ed3191aff39bed0) C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys
19:48:34.0312 0992	smihlp - ok
19:48:34.0421 0992	Sparrow         (83c0f71f8

Elboubdelapampa · Answer

Bon apparement il est trop grand voila le lien cjoint:
https://www.cjoint.com/?BCnuSueuRNh

Elboubdelapampa · Answer

Ourah, j'ai de nouveau une connection internet!!!

Voila le rapport ComboFix:
omboFix 12-03-15.03 - Kathrin 15.03.2012  21:40:54.2.2 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.2014.1546 [GMT 1:00]
Running from: c:\documents and settings\Kathrin\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
 * Created a new restore point
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Kathrin\Application Data\PriceGong
c:\documents and settings\Kathrin\Application Data\PriceGong\Data\mru.xml
c:\windows\$NtUninstallKB54921$
c:\windows\$NtUninstallKB54921$\486174706
c:\windows\$NtUninstallKB54921$\814409219\@
c:\windows\$NtUninstallKB54921$\814409219\cfg.ini
c:\windows\$NtUninstallKB54921$\814409219\Desktop.ini
c:\windows\$NtUninstallKB54921$\814409219\L\hvmonmrs
c:\windows\$NtUninstallKB54921$\814409219	wl.dll
c:\windows\$NtUninstallKB54921$\814409219\U\00000001.@
c:\windows\$NtUninstallKB54921$\814409219\U\00000002.@
c:\windows\$NtUninstallKB54921$\814409219\U\00000004.@
c:\windows\$NtUninstallKB54921$\814409219\U\80000000.@
c:\windows\$NtUninstallKB54921$\814409219\U\80000004.@
c:\windows\$NtUninstallKB54921$\814409219\U\80000032.@
c:\windows\$NtUninstallKB54921$\814409219\version
c:\windows\system32\dds_trash_log.cmd
c:\windows\system32\TPAPSLOG.LOG
c:\windows\system32\TPHDLOG0.LOG
.
.
(((((((((((((((((((((((((((((((((((((((   Drivers/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_AMSERVICE
.
.
(((((((((((((((((((((((((   Files Created from 2012-02-15 to 2012-03-15  )))))))))))))))))))))))))))))))
.
.
2012-03-13 05:56 . 2012-03-13 05:57	40776	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2012-03-12 20:44 . 2011-12-10 14:24	20464	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-03-04 21:14 . 2012-03-04 21:14	--------	d-sh--w-	c:\documents and settings\LocalService\IETldCache
2012-03-04 20:00 . 2012-03-04 20:00	--------	d-----w-	c:\documents and settings\NetworkService\Local Settings\Application Data\uTorrentBar_DE
2012-03-01 20:45 . 2012-03-01 20:45	--------	d-----w-	c:\documents and settings\Administrator\Application Data\Malwarebytes
2012-02-22 21:30 . 2012-03-12 21:10	--------	d-----w-	C:\ZHP
2012-02-22 21:30 . 2012-03-12 21:01	--------	d-----w-	c:\program files\ZHPDiag
2012-02-15 20:00 . 2012-02-15 20:00	--------	d-----w-	c:\documents and settings\Administrator\Application Data\Avira
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-15 19:54 . 2006-04-30 00:06	57600	----a-w-	c:\windows\system32\driversedbook.sys
2011-05-15 19:46 . 2011-05-15 19:45	52718176	----a-w-	c:\program files\avira_antivir_personal_de.exe
.
.
(((((((((((((((((((((((((((((   SnapShot@2012-02-15_20.46.44   )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-03-15 20:50 . 2012-03-15 20:50	16384              c:\windows\Temp\Perflib_Perfdata_844.dat
+ 2009-11-08 19:03 . 2012-03-12 21:20	7962              c:\windows\system32\config\systemprofile\Application Data\Intel\Wireless\Settings\AlertHistory.bin
- 2009-11-08 19:03 . 2012-02-06 18:07	7962              c:\windows\system32\config\systemprofile\Application Data\Intel\Wireless\Settings\AlertHistory.bin
+ 2006-04-30 06:55 . 2012-02-21 20:04	544258              c:\windows\system32\perfh009.dat
+ 2006-04-30 06:55 . 2012-02-21 20:04	107144              c:\windows\system32\perfc009.dat
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{c840e246-6b95-475e-9bd7-caa1c7eca9f2}"= "c:\program files\uTorrentBar_DE\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{c840e246-6b95-475e-9bd7-caa1c7eca9f2}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{c840e246-6b95-475e-9bd7-caa1c7eca9f2}]
2011-05-09 08:49	176936	----a-w-	c:\program files\uTorrentBar_DE\prxtbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{c840e246-6b95-475e-9bd7-caa1c7eca9f2}"= "c:\program files\uTorrentBar_DE\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{c840e246-6b95-475e-9bd7-caa1c7eca9f2}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{C840E246-6B95-475E-9BD7-CAA1C7ECA9F2}"= "c:\program files\uTorrentBar_DE\prxtbuTor.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{c840e246-6b95-475e-9bd7-caa1c7eca9f2}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\documents and settings\Kathrin\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\documents and settings\Kathrin\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\documents and settings\Kathrin\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12	94208	----a-w-	c:\documents and settings\Kathrin\Application Data\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2006-02-14 110592]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-02-14 512000]
"PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2006-12-19 159744]
"BLOG"="c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2006-12-19 208896]
"TPFNF7"="c:\program files\Lenovo\NPDIRECT\TPFNF7SP.exe" [2007-03-28 58416]
"TPHOTKEY"="c:\program files\Lenovo\HOTKEY\TPOSDSVC.exe" [2007-03-09 66176]
"TpShocks"="TpShocks.exe" [2007-03-30 181808]
"EZEJMNAP"="c:\progra~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2007-03-07 243248]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-01-28 925696]
"TVT Scheduler Proxy"="c:\program files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe" [2007-02-08 536576]
"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2006-02-02 122940]
"AwaySch"="c:\program files\Lenovo\AwayTask\AwaySch.EXE" [2006-11-07 91688]
"LPManager"="c:\progra~1\THINKV~2\PrdCtr\LPMGR.exe" [2007-03-22 120368]
"AMSG"="c:\program files\ThinkVantage\AMSG\Amsg.exe" [2007-02-01 419376]
"cssauth"="c:\program files\Lenovo\Client Security Solution\cssauth.exe" [2007-01-31 2618944]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-15 13549568]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-01-15 86016]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-03-28 281768]
"EPSON Stylus Photo R200 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" [2003-07-08 99840]
"EPSON Stylus Photo R200"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" [2003-07-08 99840]
"EPSON Stylus Photo R200 Series (Copy 1)"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE" [2003-07-08 99840]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\ThinkPad\Bluetooth Software\BTTray.exe [2007-2-28 561213]
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2009-9-24 50688]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\psfus]
2007-03-15 05:17	89600	------w-	c:\windows\system32\psqlpwd.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify	pfnf2]
2006-09-06 07:37	34344	------w-	c:\program files\Lenovo\HOTKEY
otifyf2.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify	photkey]
2006-12-14 02:06	28672	------w-	c:\program files\Lenovo\HOTKEY	phklock.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages	REG_MULTI_SZ   	scecli psqlpwd
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"c:\Program Files\Windows Live\Messenger\wlcsdk.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Skype\Plugin Manager\skypePM.exe"=
"c:\Program Files\Zattoo\zattood.exe"=
"c:\Program Files\Bonjour\mDNSResponder.exe"=
"c:\Program Files\iTunes\iTunes.exe"=
"c:\Documents and Settings\Kathrin\Application Data\Dropbox\bin\Dropbox.exe"=
"c:\Program Files\Skype\Phone\Skype.exe"=
"c:\Program Files\uTorrent\uTorrent.exe"=
.
R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [03.03.2007 01:47 19760]
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [13.10.2009 16:24 136360]
R2 BBUpdate;BBUpdate;c:\program files\Microsoft\BingBar\SeaPort.EXE [15.06.2011 16:33 249648]
R2 smihlp;SMI Helper Driver (smihlp);c:\program files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys [15.03.2007 06:10 11152]
R2 TVT Backup Protection Service;TVT Backup Protection Service;c:\program files\Lenovo\Rescue and Recoveryrpservice.exe [08.02.2007 21:11 569344]
R3 LenovoRd;LenovoRd;c:\windows\system32\drivers\LenovoRd.sys [24.09.2009 04:48 81920]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [12.03.2012 21:44 20464]
R3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\drivers	vti2c.sys [13.09.2006 20:42 35264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.03.2010 12:16 130384]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [12.03.2012 21:44 652360]
S3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [07.07.2011 18:31 195336]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [13.03.2012 06:56 40776]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.03.2010 12:16 753504]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
CYGF32X
Cardex
tfsnopio
rca
ntiopnp
aslm75
oracleorahome90agent
starwindserviceae
WD_FireWire_HID
sffdisk
.
Contents of the 'Scheduled Tasks' folder
.
2012-03-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]
.
2012-02-17 c:\windows\Tasks\PMTask.job
- c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2009-09-24 16:14]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\Kathrin\Application Data\Mozilla\Firefox\Profiles	p8s5rbb.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.ch/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Skype extension for Firefox: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-15 21:51
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...  
.
scanning hidden autostart entries ... 
.
scanning hidden files ...  
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\ÄñÄ|????¿ïÄ|?ïA~*]
"7040110900063D11C8EF10054038389C"="C?\WINDOWS\system32\FM20ENU.DLL"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(1368)
c:\windows\system32\psqlpwd.dll
c:\program files\ThinkVantage Fingerprint Software\homefus2.dll
c:\program files\ThinkVantage Fingerprint Software\infra.dll
c:\program files\ThinkVantage Fingerprint Software\homepass.dll
c:\program files\ThinkVantage Fingerprint Software\bio.dll
c:\program files\ThinkVantage Fingerprint Software\ps2css.dll
c:\program files\ThinkVantage Fingerprint Softwareemote.dll
c:\program files\Lenovo\HOTKEY	phklock.dll
c:\program files\ThinkVantage Fingerprint Software\pscssint.dll
c:\program files\ThinkVantage Fingerprint Software\crypto.dll
.
- - - - - - - > 'lsass.exe'(1424)
c:\windows\system32\psqlpwd.dll
c:\program files\ThinkVantage Fingerprint Software\homefus2.dll
c:\program files\ThinkVantage Fingerprint Software\infra.dll
.
- - - - - - - > 'explorer.exe'(2788)
c:\windows\system32\WININET.dll
c:\program files\Lenovo\Client Security Solution	vtpwm_windows_hook.dll
c:\program files\Lenovo\Client Security Solution	vt_passwordmanager.dll
c:\program files\Lenovo\Client Security Solution\css_banner.dll
c:\program files\Lenovo\Client Security Solution\csswait.dll
c:\windows\system32\cssuserdatadispatcher.dll
c:\program files\Lenovo\Client Security Solution\css_dlgcustompolicy.dll
c:\windows\system32	vttsp.dll
c:\windows\system32	csrpc.dll
c:\program files\Common Files\Lenovo	vt_think_res.dll
c:\program files\Lenovo\Client Security Solution\css_think_res.dll
c:\documents and settings\Kathrin\Application Data\Dropbox\bin\DropboxExt.14.dll
c:\windows\system32\btmmhook.dll
c:\windows\system32\ieframe.dll
c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL
c:\progra~1\ThinkPad\UTILIT~1\US\PWRMGRRT.DLL
c:\windows\system32
vapi.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ibmpmsvc.exe
c:\program files\ThinkPad\Bluetooth Software\bin\btwdins.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\windows\System32\SCardSvr.exe
c:\windows\system32\IPSSVC.EXE
c:\program files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\system32undll32.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\windows\system32\TpShocks.exe
c:\windows\system32\RUNDLL32.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32
vsvc32.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\lenovo\system update\suservice.exe
c:\program files\Common Files\Lenovo	vt_reg_monitor_svc.exe
c:\windows\System32\TPHDEXLG.exe
c:\program files\Lenovo\Client Security Solution	vttcsd.exe
c:\program files\Lenovo\Rescue and Recoveryrservice.exe
c:\program files\Common Files\Lenovo\Scheduler	vtsched.exe
c:\program files\Lenovo\Rescue and Recovery\ADM\IUService.exe
c:\windows\system32\wdfmgr.exe
c:\program files\Common Files\Lenovo\Logger\logmon.exe
c:\program files\ThinkPad\ConnectUtilities\AcSvc.exe
c:\program files\Lenovo\Client Security Solution	vtpwm_tray.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\program files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
.
**************************************************************************
.
Completion time: 2012-03-15  21:55:07 - machine was rebooted
ComboFix-quarantined-files.txt  2012-03-15 20:55
ComboFix2.txt  2012-02-15 20:52
.
Pre-Run: 13'706'039'296 bytes free
Post-Run: 13'704'257'536 bytes free
.
- - End Of File - - 314C5F2481CE18336C194AFC6F85DC43

Elboubdelapampa · Answer

voila le rapport MBAM, plutot positif!:
Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org

Database version: v2012.03.15.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Kathrin :: KSLAPTOP [administrator]

15.03.2012 22:13:13
mbam-log-2012-03-15 (22-13-13).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 282145
Time elapsed: 52 minute(s), 35 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Elboubdelapampa · Answer

voila le rapport delfix:
# DelFix v8.8 - Rapport créé le 16/03/2012 à 19:16:46
# Mis à jour le 12/02/12 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Kathrin - KSLAPTOP (Administrateur)
# Exécuté depuis : C:\Documents and Settings\Kathrin\Desktop\delfix.exe
# Option [Suppression]


~~~~~~ Dossiers(s) ~~~~~~

Supprimé : C:\Qoobox
Supprimé : C:\ZHP
Supprimé : C:\Documents and Settings\All Users\Start Menu\Programs\ZHP
Supprimé : C:\Program Files\ZHPDiag

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\ComboFix.txt
Supprimé : C:kill.log
Supprimé : C:\TDSSKiller.2.7.20.0_13.03.2012_19.53.25_log.txt
Supprimé : C:\Documents and Settings\Kathrin\Desktop\ComboFix.exe
Supprimé : C:\Documents and Settings\Kathrin\Desktop\Reload_Tdsskiller.exe
Supprimé : C:\Documents and Settings\Kathrin\Desktop\TDSSKiller.2.7.11.0_11.02.2012_18.15.46_log.txt
Supprimé : C:\Documents and Settings\Kathrin\Desktop\TDSSKiller.2.7.12.0_15.02.2012_20.51.25_log.txt
Supprimé : C:\Documents and Settings\Kathrin\Desktop\TDSSKiller.2.7.12.0_15.02.2012_20.54.54_log.txt
Supprimé : C:\Documents and Settings\Kathrin\Desktop\TDSSKiller.2.7.12.0_21.02.2012_20.49.17_log.txt
Supprimé : C:\Documents and Settings\Kathrin\Desktop\TDSSKiller.2.7.20.0_13.03.2012_19.45.01_log.txt
Supprimé : C:\Documents and Settings\Kathrin\Desktop\TDSSKiller.exe
Supprimé : C:\Documents and Settings\Kathrin\Desktop	dsskiller.zip
Supprimé : C:\Documents and Settings\Kathrin\Desktop\ZHPFixReport.txt
Supprimé : C:\Documents and Settings\All Users\Desktop\ZHPDiag.lnk
Supprimé : C:\Documents and Settings\All Users\Desktop\ZHPFix.lnk
Supprimé : C:\Documents and Settings\All Users\Desktop\MBRCheck.lnk
Supprimé : C:\WINDOWS\grep.exe
Supprimé : C:\WINDOWS\PEV.exe
Supprimé : C:\WINDOWS\NIRCMD.exe
Supprimé : C:\WINDOWS\MBR.exe
Supprimé : C:\WINDOWS\SED.exe
Supprimé : C:\WINDOWS\SWREG.exe
Supprimé : C:\WINDOWS\SWSC.exe
Supprimé : C:\WINDOWS\SWXCACLS.exe
Supprimé : C:\WINDOWS\Zip.exe

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\Software\g3n-h@ckm@n
Clé Supprimée : HKLM\SOFTWARE\Swearware
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

~~~~~~ Autres ~~~~~~

-> Prefetch Vidé

*************************

DelFix[S1].txt - [1510 octets] - [09/10/2011 15:11:42]
DelFix[S2].txt - [2424 octets] - [16/03/2012 19:16:46]

########## EOF - C:\DelFix[S2].txt - [2548 octets] ##########

Elboubdelapampa · Answer

hello,
voila le rapport USBFix:
############################## | UsbFix V 7.084 | [Deletion]

User: Kathrin (Administrator) # KSLAPTOP
Updated 13/03/2012 by El Desaparecido
Started at 12:15:36 | 18/03/2012

Website: https://www.sosvirus.net/
Suspicious file ? : http://eldesaparecido.com/upload.html
Contact: contact@eldesaparecido.com

PC: LENOVO (7663B14) (X86-based PC) # Notebook
CPU: Intel(R) Core(TM)2 Duo CPU     T7500  @ 2.20GHz (2194)
RAM -> [ Total : 2014 | Free : 1540 ]
BIOS: Ver 1.00PARTTBLx
BOOT: Normal boot

OS: Microsoft Windows XP Professional (5.1.2600 32-Bit) # Service Pack 3
WB: Windows Internet Explorer 8.0.6001.18702

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Fixed drive # 107 Gb (12 Mb free - 11%) [Preload] # NTFS
D:\ -> Removable drive # 2 Gb (2 Mb free - 99%) [] # FAT
E:\ -> Fixed drive # 30 Gb (1 Mb free - 5%) [EXCHANGE] # FAT32

################## | Active Processes |

C:\WINDOWS\System32\smss.exe (1208)
C:\WINDOWS\system32\winlogon.exe (1360)
C:\WINDOWS\system32\services.exe (1404)
C:\WINDOWS\system32\lsass.exe (1416)
C:\WINDOWS\system32\svchost.exe (1616)
C:\WINDOWS\System32\svchost.exe (1744)
C:\Program Files\Avira\AntiVir Desktop\sched.exe (756)
C:\Program Files\Avira\AntiVir Desktop\avguard.exe (1044)
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (1192)
C:\WINDOWS\System32\svchost.exe (1232)
C:\WINDOWS\system32\svchost.exe (228)
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (2812)
C:\WINDOWS\system32\wscntfy.exe (2976)
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2800)
C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe (4024)
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe (328)
C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe (2228)
C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe (308)
C:\WINDOWS\Explorer.exe (2064)
C:\Program Files\Internet Explorer\iexplore.exe (2664)
C:\WINDOWS\system32\ctfmon.exe (644)
C:\UsbFix\Go.exe (1768)

################## | Stopped processes |

Stopped! C:\Program Files\Avira\AntiVir Desktop\sched.exe (756)
Stopped! C:\Program Files\Avira\AntiVir Desktop\avguard.exe (1044)
Stopped! C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (1192)
Stopped! C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (2812)
Stopped! C:\WINDOWS\system32\wscntfy.exe (2976)
Stopped! C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2800)
Stopped! C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe (4024)
Stopped! C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe (328)
Stopped! C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe (2228)
Stopped! C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe (308)
Stopped! C:\WINDOWS\Explorer.exe (2064)
Stopped! C:\Program Files\Internet Explorer\iexplore.exe (2664)
Stopped! C:\WINDOWS\system32\ctfmon.exe (644)

################## | Files # Infected Folders |

Deleted ! C:\Recycler\S-1-5-21-105782852-929082126-3567568699-1005

(!) Temporary files deleted.

################## | Registry |


################## | Mountpoints2 |


################## | Listing |

[12/11/2009 - 21:21:54 | D ] 	C:\4710ec1ddf959708c523b88ee2d28f2c
[28/09/2009 - 18:23:34 | D ] 	C:\74c0f9dc97977ac50a854a867c
[19/07/2010 - 17:12:15 | D ] 	C:\94d9e016a327bc4e95a389042f
[30/04/2006 - 08:13:35 | N | 0] 	C:\AUTOEXEC.BAT
[18/03/2012 - 12:13:42 | RASHD ] 	C:\Autorun.inf
[24/09/2009 - 05:39:54 | N | 211] 	C:\Boot.bak
[15/02/2012 - 21:31:02 | N | 327] 	C:\boot.ini
[15/02/2012 - 21:31:02 | D ] 	C:\cmdcons
[03/08/2004 - 23:00:00 | N | 260272] 	C:\cmldr
[30/04/2006 - 08:13:35 | N | 0] 	C:\CONFIG.SYS
[24/09/2009 - 05:40:12 | D ] 	C:\Documents and Settings
[28/09/2009 - 18:28:09 | D ] 	C:\drivers
[24/09/2009 - 05:14:59 | N | 1931] 	C:\drivez.log
[14/04/2006 - 06:55:44 | N | 529] 	C:\dsbHSM.inf
[20/11/2011 - 20:30:36 | D ] 	C:\EPLAN
[18/03/2012 - 12:02:28 | ASH | 2112139264] 	C:\hiberfil.sys
[24/09/2009 - 05:41:26 | D ] 	C:\I386
[24/09/2009 - 05:15:59 | D ] 	C:\Icons
[30/04/2006 - 08:13:35 | N | 0] 	C:\IO.SYS
[30/04/2006 - 08:13:35 | N | 0] 	C:\MSDOS.SYS
[02/10/2009 - 20:43:00 | RD ] 	C:\MSOCache
[04/08/2004 - 13:00:00 | N | 47564] 	C:\NTDETECT.COM
[01/10/2009 - 21:20:19 | N | 250048] 	C:\NTLDR
[18/03/2012 - 12:02:25 | ASH | 2145386496] 	C:\pagefile.sys
[28/09/2009 - 19:06:18 | D ] 	C:\Poseidon
[16/03/2012 - 19:17:25 | D ] 	C:\Program Files
[18/03/2012 - 12:16:03 | SHD ] 	C:\RECYCLER
[07/12/2009 - 10:04:20 | D ] 	C:\RRbackups
[30/04/2006 - 00:45:45 | D ] 	C:\SUPPORT
[18/03/2012 - 12:05:56 | D ] 	C:\SWSHARE
[24/09/2009 - 05:40:23 | D ] 	C:\SWTOOLS
[24/09/2009 - 04:48:20 | N | 93] 	C:\syslevel.lgl
[04/03/2012 - 21:48:22 | SHD ] 	C:\System Volume Information
[11/02/2012 - 18:16:48 | D ] 	C:\TDSSKiller_Quarantine
[18/03/2012 - 12:02:36 | N | 1080] 	C:\TPHKLOCK.TXT
[18/03/2012 - 12:16:03 | D ] 	C:\UsbFix
[18/03/2012 - 12:16:04 | A | 3205] 	C:\UsbFix.txt
[18/03/2012 - 12:13:49 | N | 27890083] 	C:\UsbFix_Upload_Me_KSLAPTOP.zip
[30/04/2006 - 00:45:43 | D ] 	C:\VALUEADD
[18/03/2012 - 12:10:14 | D ] 	C:\WINDOWS
[09/10/2011 - 15:50:08 | D ] 	C:\Zügs

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

################## | Upload |

Please send the file: C:\UsbFix_Upload_Me_KSLAPTOP.zip
http://eldesaparecido.com/upload.html
Thank you for your contribution.

################## | E.O.F |

Elboubdelapampa · Answer

On s'est mal compris,
je pensais exactement à ça: purger puis créer un nouveau point.
C'est fait. On peut dire que l'ordi est desinfecté?

Elboubdelapampa · Answer

Ok,
merci beaucoup pour ton aide et la rapidité de tes réponses, ça fait plaisir!

Nettoyage du virus System Check

17 réponses

Discussions similaires