Problème rootkit MBR:\\.\PHYSICALDIVE0\...
olympe_42
-
Utilisateur anonyme -
Utilisateur anonyme -
Bonjour,
Chaque fois que j'allume mon PC, Avast affiche un message d'alerte de détection d'un rootkit : problème rootkit MBR:\\.\PHYSICALDIVE0\Partition3.
Chaque fois je le supprime comme préconisé par Avast mais le message revient de nouveau quand je rallume mon ordinateur.
En sachant que je ne suis pas une pro de l'informatique, quelqu'un peut-il m'aider?
Merci par avance à ceux ou celle qui prendront le temps de me répondre.
Chaque fois que j'allume mon PC, Avast affiche un message d'alerte de détection d'un rootkit : problème rootkit MBR:\\.\PHYSICALDIVE0\Partition3.
Chaque fois je le supprime comme préconisé par Avast mais le message revient de nouveau quand je rallume mon ordinateur.
En sachant que je ne suis pas une pro de l'informatique, quelqu'un peut-il m'aider?
Merci par avance à ceux ou celle qui prendront le temps de me répondre.
A voir également:
- Problème rootkit MBR:\\.\PHYSICALDIVE0\...
- Rootkit - Télécharger - Antivirus & Antimalwares
- Rootkit hunter - Télécharger - Antivirus & Antimalwares
- Sophos anti rootkit - Télécharger - Antivirus & Antimalwares
- Avg anti rootkit - Télécharger - Antivirus & Antimalwares
- Panda anti-rootkit - Télécharger - Antivirus & Antimalwares
10 réponses
bonjour
-Télécharge l'utilitaire TDSSKiller (de Kaspersky) sur ton Bureau.
https://support.kaspersky.com/downloads/utils/tdsskiller.zip
* Lance TDSSKiller.exe
-Sous XP double-clic sur l'icône pour lancer l'outil.
- Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
* Clique sur Start scan.
* Laisse l'outil balayer ton système sans l'interrompre et sans utiliser le PC.
* Conserve l'action proposée par défaut par l'outil
- Si TDSS.tdl2 : l'option Delete sera cochée.
- Si TDSS.tdl3 ou TDSS.tdl4 : assure toi que Cure soit bien cochée.
- Si "Suspicious object" laisse l'option cochée sur Skip
- Si Rootkit.Win32.ZAccess.* est détecté règle sur cure en haut , et delete en bas
* Clique sur Continue puis sur Reboot now si le redémarrage est proposé.
* Le rapport se trouve à la racine du disque principal : C:\TDSSKiller.n° de version_date_heure_log.txt
-Télécharge l'utilitaire TDSSKiller (de Kaspersky) sur ton Bureau.
https://support.kaspersky.com/downloads/utils/tdsskiller.zip
* Lance TDSSKiller.exe
-Sous XP double-clic sur l'icône pour lancer l'outil.
- Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
* Clique sur Start scan.
* Laisse l'outil balayer ton système sans l'interrompre et sans utiliser le PC.
* Conserve l'action proposée par défaut par l'outil
- Si TDSS.tdl2 : l'option Delete sera cochée.
- Si TDSS.tdl3 ou TDSS.tdl4 : assure toi que Cure soit bien cochée.
- Si "Suspicious object" laisse l'option cochée sur Skip
- Si Rootkit.Win32.ZAccess.* est détecté règle sur cure en haut , et delete en bas
* Clique sur Continue puis sur Reboot now si le redémarrage est proposé.
* Le rapport se trouve à la racine du disque principal : C:\TDSSKiller.n° de version_date_heure_log.txt
Merci de ta réponse. Je viens de lancer TDSSKiller.exe. Cela vient de détecter le Rootkit.boot.SST.b . Est-ce je dois faire "cure"?
J'ai fait "cure" et ai redémarré mon ordinateur. Est-ce que je dois faire autre chose? (je n'ai pas eu le message d'avast sur le rootkit quand j'ai redémarré).
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
10:49:06.0281 2564 TDSS rootkit removing tool 2.7.14.0 Feb 22 2012 16:54:49
10:49:06.0500 2564 ============================================================
10:49:06.0500 2564 Current date / time: 2012/02/26 10:49:06.0500
10:49:06.0500 2564 SystemInfo:
10:49:06.0500 2564
10:49:06.0500 2564 OS Version: 5.1.2600 ServicePack: 3.0
10:49:06.0500 2564 Product type: Workstation
10:49:06.0500 2564 ComputerName: maisonreboud
10:49:06.0500 2564 UserName: Pascal
10:49:06.0500 2564 Windows directory: C:\WINDOWS
10:49:06.0500 2564 System windows directory: C:\WINDOWS
10:49:06.0500 2564 Processor architecture: Intel x86
10:49:06.0500 2564 Number of processors: 2
10:49:06.0500 2564 Page size: 0x1000
10:49:06.0500 2564 Boot type: Normal boot
10:49:06.0500 2564 ============================================================
10:49:08.0406 2564 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
10:49:08.0703 2564 \Device\Harddisk0\DR0:
10:49:08.0703 2564 MBR used
10:49:08.0703 2564 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0xF9CA3B, BlocksNum 0x2448CDC5
10:49:08.0734 2564 Initialize success
10:49:08.0734 2564 ============================================================
10:52:52.0171 5976 ============================================================
10:52:52.0171 5976 Scan started
10:52:52.0171 5976 Mode: Manual;
10:52:52.0171 5976 ============================================================
10:52:52.0390 5976 .redbook - ok
10:52:52.0562 5976 Aavmker4 (fdba5bb4c8171cda00b2233d5389ee5f) C:\WINDOWS\system32\drivers\Aavmker4.sys
10:52:52.0562 5976 Aavmker4 - ok
10:52:52.0578 5976 Abiosdsk - ok
10:52:52.0656 5976 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
10:52:52.0656 5976 abp480n5 - ok
10:52:52.0718 5976 ACPI (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\WINDOWS\system32\DRIVERS\ACPI.sys
10:52:52.0718 5976 ACPI - ok
10:52:52.0796 5976 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
10:52:52.0796 5976 ACPIEC - ok
10:52:52.0812 5976 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
10:52:52.0812 5976 adpu160m - ok
10:52:52.0875 5976 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
10:52:52.0890 5976 aec - ok
10:52:52.0937 5976 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\WINDOWS\system32\drivers\Afc.sys
10:52:52.0937 5976 Afc - ok
10:52:53.0015 5976 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
10:52:53.0015 5976 AFD - ok
10:52:53.0062 5976 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
10:52:53.0062 5976 agp440 - ok
10:52:53.0093 5976 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
10:52:53.0093 5976 agpCPQ - ok
10:52:53.0125 5976 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
10:52:53.0125 5976 Aha154x - ok
10:52:53.0156 5976 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
10:52:53.0156 5976 aic78u2 - ok
10:52:53.0203 5976 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
10:52:53.0203 5976 aic78xx - ok
10:52:53.0281 5976 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
10:52:53.0296 5976 AliIde - ok
10:52:53.0421 5976 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
10:52:53.0421 5976 alim1541 - ok
10:52:53.0484 5976 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
10:52:53.0500 5976 amdagp - ok
10:52:53.0531 5976 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
10:52:53.0531 5976 amsint - ok
10:52:53.0593 5976 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
10:52:53.0593 5976 Arp1394 - ok
10:52:53.0656 5976 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
10:52:53.0656 5976 asc - ok
10:52:53.0671 5976 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
10:52:53.0671 5976 asc3350p - ok
10:52:53.0718 5976 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
10:52:53.0718 5976 asc3550 - ok
10:52:53.0765 5976 ASCTRM (d880831279ed91f9a4190a2db9539ea9) C:\WINDOWS\system32\drivers\ASCTRM.sys
10:52:53.0765 5976 ASCTRM - ok
10:52:53.0890 5976 aswFsBlk (581b82df5dbcc1dda6b775fac0d92472) C:\WINDOWS\system32\drivers\aswFsBlk.sys
10:52:53.0890 5976 aswFsBlk - ok
10:52:53.0953 5976 aswMon2 (4310e0977b48ec9bc5cca6931f806e6d) C:\WINDOWS\system32\drivers\aswMon2.sys
10:52:53.0968 5976 aswMon2 - ok
10:52:53.0984 5976 aswRdr (0b44ee90b3db93582b260a80b28b7ffd) C:\WINDOWS\system32\drivers\aswRdr.sys
10:52:53.0984 5976 aswRdr - ok
10:52:54.0078 5976 aswSnx (ca9601cd277a1e510b80422a40240a95) C:\WINDOWS\system32\drivers\aswSnx.sys
10:52:54.0078 5976 aswSnx - ok
10:52:54.0156 5976 aswSP (05ea22dde5ca7ee3a865046aff2f0229) C:\WINDOWS\system32\drivers\aswSP.sys
10:52:54.0156 5976 aswSP - ok
10:52:54.0203 5976 aswTdi (3ac73a9e7378848d1bde174b4bb39212) C:\WINDOWS\system32\drivers\aswTdi.sys
10:52:54.0203 5976 aswTdi - ok
10:52:54.0250 5976 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
10:52:54.0250 5976 AsyncMac - ok
10:52:54.0296 5976 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
10:52:54.0296 5976 atapi - ok
10:52:54.0312 5976 Atdisk - ok
10:52:54.0343 5976 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
10:52:54.0343 5976 Atmarpc - ok
10:52:54.0421 5976 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
10:52:54.0421 5976 audstub - ok
10:52:54.0531 5976 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
10:52:54.0531 5976 Beep - ok
10:52:54.0671 5976 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
10:52:54.0671 5976 cbidf - ok
10:52:54.0687 5976 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
10:52:54.0687 5976 cbidf2k - ok
10:52:54.0765 5976 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
10:52:54.0765 5976 CCDECODE - ok
10:52:54.0812 5976 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
10:52:54.0812 5976 cd20xrnt - ok
10:52:54.0828 5976 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
10:52:54.0843 5976 Cdaudio - ok
10:52:54.0890 5976 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
10:52:54.0890 5976 Cdfs - ok
10:52:54.0921 5976 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
10:52:54.0921 5976 Cdrom - ok
10:52:54.0968 5976 Changer - ok
10:52:55.0125 5976 CmdIde (e3726ad522d0bdae090671048c991ab3) C:\WINDOWS\system32\DRIVERS\cmdide.sys
10:52:55.0125 5976 CmdIde - ok
10:52:55.0187 5976 CoachAud (a456dd2ced6f8d0fb73b5bc38868ac7a) C:\WINDOWS\system32\DRIVERS\CoachAud.sys
10:52:55.0187 5976 CoachAud - ok
10:52:55.0234 5976 CoachUsb (fafa3c99864e9df18cb68725bbcf7bca) C:\WINDOWS\system32\DRIVERS\CoachUsb.sys
10:52:55.0234 5976 CoachUsb - ok
10:52:55.0281 5976 CoachVid (7aefe82c02d4933cee4b7cb78c409845) C:\WINDOWS\system32\DRIVERS\CoachVid.sys
10:52:55.0281 5976 CoachVid - ok
10:52:55.0375 5976 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
10:52:55.0390 5976 Cpqarray - ok
10:52:55.0406 5976 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
10:52:55.0421 5976 dac2w2k - ok
10:52:55.0437 5976 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
10:52:55.0437 5976 dac960nt - ok
10:52:55.0500 5976 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
10:52:55.0500 5976 Disk - ok
10:52:55.0578 5976 dmboot (f5deadd42335fb33edca74ecb2f36cba) C:\WINDOWS\system32\drivers\dmboot.sys
10:52:55.0609 5976 dmboot - ok
10:52:55.0703 5976 dmio (5a7c47c9b3f9fb92a66410a7509f0c71) C:\WINDOWS\system32\drivers\dmio.sys
10:52:55.0703 5976 dmio - ok
10:52:55.0734 5976 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
10:52:55.0734 5976 dmload - ok
10:52:55.0796 5976 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
10:52:55.0796 5976 DMusic - ok
10:52:55.0906 5976 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
10:52:55.0906 5976 dpti2o - ok
10:52:56.0000 5976 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
10:52:56.0000 5976 drmkaud - ok
10:52:56.0234 5976 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
10:52:56.0234 5976 Fastfat - ok
10:52:56.0250 5976 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
10:52:56.0250 5976 Fdc - ok
10:52:56.0312 5976 FETND5BV (fc3b2083e1fffc2bf6a3cd688dc728c8) C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys
10:52:56.0312 5976 FETND5BV - ok
10:52:56.0359 5976 Fips (31f923eb2170fc172c81abda0045d18c) C:\WINDOWS\system32\drivers\Fips.sys
10:52:56.0359 5976 Fips - ok
10:52:56.0390 5976 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
10:52:56.0390 5976 Flpydisk - ok
10:52:56.0468 5976 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
10:52:56.0468 5976 FltMgr - ok
10:52:56.0562 5976 fssfltr (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
10:52:56.0562 5976 fssfltr - ok
10:52:56.0640 5976 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
10:52:56.0640 5976 Fs_Rec - ok
10:52:56.0671 5976 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
10:52:56.0671 5976 Ftdisk - ok
10:52:56.0750 5976 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
10:52:56.0750 5976 GEARAspiWDM - ok
10:52:56.0828 5976 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
10:52:56.0828 5976 Gpc - ok
10:52:56.0953 5976 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
10:52:56.0953 5976 HDAudBus - ok
10:52:57.0046 5976 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
10:52:57.0062 5976 HidUsb - ok
10:52:57.0140 5976 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
10:52:57.0140 5976 hpn - ok
10:52:57.0187 5976 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
10:52:57.0187 5976 HTTP - ok
10:52:57.0265 5976 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
10:52:57.0265 5976 i2omgmt - ok
10:52:57.0296 5976 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
10:52:57.0296 5976 i2omp - ok
10:52:57.0343 5976 i8042prt (a09bdc4ed10e3b2e0ec27bb94af32516) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
10:52:57.0359 5976 i8042prt - ok
10:52:57.0406 5976 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
10:52:57.0406 5976 Imapi - ok
10:52:57.0500 5976 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
10:52:57.0500 5976 ini910u - ok
10:52:57.0640 5976 IntcAzAudAddService (fa9a9468f982835e99c1ec21257f7e60) C:\WINDOWS\system32\drivers\RtkHDAud.sys
10:52:57.0734 5976 IntcAzAudAddService - ok
10:52:57.0796 5976 IntelIde (4b6da2f0a4095857a9e3f3697399d575) C:\WINDOWS\system32\DRIVERS\intelide.sys
10:52:57.0796 5976 IntelIde - ok
10:52:57.0843 5976 intelppm (ad340800c35a42d4de1641a37feea34c) C:\WINDOWS\system32\DRIVERS\intelppm.sys
10:52:57.0859 5976 intelppm - ok
10:52:57.0890 5976 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
10:52:57.0890 5976 Ip6Fw - ok
10:52:57.0937 5976 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
10:52:57.0937 5976 IpFilterDriver - ok
10:52:57.0968 5976 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
10:52:57.0968 5976 IpInIp - ok
10:52:58.0031 5976 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
10:52:58.0046 5976 IpNat - ok
10:52:58.0078 5976 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
10:52:58.0078 5976 IPSec - ok
10:52:58.0125 5976 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
10:52:58.0125 5976 IRENUM - ok
10:52:58.0171 5976 isapnp (355836975a67b6554bca60328cd6cb74) C:\WINDOWS\system32\DRIVERS\isapnp.sys
10:52:58.0171 5976 isapnp - ok
10:52:58.0296 5976 Kbdclass (16813155807c6881f4bfbf6657424659) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
10:52:58.0296 5976 Kbdclass - ok
10:52:58.0328 5976 kbdhid (94c59cb884ba010c063687c3a50dce8e) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
10:52:58.0343 5976 kbdhid - ok
10:52:58.0375 5976 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
10:52:58.0375 5976 kmixer - ok
10:52:58.0437 5976 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
10:52:58.0437 5976 KSecDD - ok
10:52:58.0500 5976 L8042Kbd (0c6e346cde730cf1356dd69ad6e9bc42) C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys
10:52:58.0500 5976 L8042Kbd - ok
10:52:58.0562 5976 L8042mou (8a5993705add14352c9a279fa8338334) C:\WINDOWS\system32\DRIVERS\L8042mou.Sys
10:52:58.0562 5976 L8042mou - ok
10:52:58.0593 5976 lbrtfdc - ok
10:52:58.0687 5976 LHidFilt (7f9c7b28cf1c859e1c42619eea946dc8) C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys
10:52:58.0687 5976 LHidFilt - ok
10:52:58.0781 5976 LMouFilt (ab33792a87285344f43b5ce23421bab0) C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys
10:52:58.0781 5976 LMouFilt - ok
10:52:58.0859 5976 LMouKE (9837e55673818ecd8febb47f7f77521a) C:\WINDOWS\system32\DRIVERS\LMouKE.Sys
10:52:58.0859 5976 LMouKE - ok
10:52:58.0890 5976 LUsbFilt (77030525cd86a93f1af34fa9b96d33ce) C:\WINDOWS\system32\Drivers\LUsbFilt.Sys
10:52:58.0890 5976 LUsbFilt - ok
10:52:58.0953 5976 LVUSBSta (90259f3a20fbaec1a08d74ef5415b9d8) C:\WINDOWS\system32\drivers\lvusbsta.sys
10:52:58.0968 5976 LVUSBSta - ok
10:52:59.0000 5976 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\WINDOWS\system32\drivers\mbam.sys
10:52:59.0000 5976 MBAMProtector - ok
10:52:59.0125 5976 MHNDRV (7f2f1d2815a6449d346fcccbc569fbd6) C:\WINDOWS\system32\DRIVERS\mhndrv.sys
10:52:59.0125 5976 MHNDRV - ok
10:52:59.0156 5976 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
10:52:59.0156 5976 mnmdd - ok
10:52:59.0265 5976 Modem (510ade9327fe84c10254e1902697e25f) C:\WINDOWS\system32\drivers\Modem.sys
10:52:59.0265 5976 Modem - ok
10:52:59.0312 5976 Mouclass (027c01bd7ef3349aaebc883d8a799efb) C:\WINDOWS\system32\DRIVERS\mouclass.sys
10:52:59.0312 5976 Mouclass - ok
10:52:59.0359 5976 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
10:52:59.0359 5976 mouhid - ok
10:52:59.0437 5976 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
10:52:59.0453 5976 MountMgr - ok
10:52:59.0484 5976 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
10:52:59.0484 5976 mraid35x - ok
10:52:59.0515 5976 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
10:52:59.0515 5976 MRxDAV - ok
10:52:59.0593 5976 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
10:52:59.0609 5976 MRxSmb - ok
10:52:59.0703 5976 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
10:52:59.0703 5976 Msfs - ok
10:52:59.0796 5976 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
10:52:59.0796 5976 MSKSSRV - ok
10:52:59.0812 5976 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
10:52:59.0828 5976 MSPCLOCK - ok
10:52:59.0859 5976 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
10:52:59.0859 5976 MSPQM - ok
10:52:59.0921 5976 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
10:52:59.0921 5976 mssmbios - ok
10:52:59.0984 5976 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
10:52:59.0984 5976 MSTEE - ok
10:53:00.0046 5976 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
10:53:00.0046 5976 Mup - ok
10:53:00.0093 5976 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
10:53:00.0109 5976 NABTSFEC - ok
10:53:00.0187 5976 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
10:53:00.0187 5976 NDIS - ok
10:53:00.0234 5976 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
10:53:00.0250 5976 NdisIP - ok
10:53:00.0359 5976 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
10:53:00.0359 5976 NdisTapi - ok
10:53:00.0390 5976 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
10:53:00.0390 5976 Ndisuio - ok
10:53:00.0421 5976 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
10:53:00.0437 5976 NdisWan - ok
10:53:00.0484 5976 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
10:53:00.0484 5976 NDProxy - ok
10:53:00.0656 5976 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
10:53:00.0656 5976 NetBIOS - ok
10:53:00.0718 5976 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
10:53:00.0718 5976 NetBT - ok
10:53:00.0812 5976 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
10:53:00.0812 5976 NIC1394 - ok
10:53:00.0843 5976 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
10:53:00.0843 5976 Npfs - ok
10:53:00.0890 5976 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
10:53:00.0906 5976 Ntfs - ok
10:53:00.0968 5976 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
10:53:00.0968 5976 Null - ok
10:53:01.0093 5976 nv (dc0b33c6c7321714be4e6c1a005a75d9) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
10:53:01.0187 5976 nv - ok
10:53:01.0234 5976 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
10:53:01.0234 5976 NwlnkFlt - ok
10:53:01.0265 5976 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
10:53:01.0265 5976 NwlnkFwd - ok
10:53:01.0312 5976 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
10:53:01.0312 5976 ohci1394 - ok
10:53:01.0359 5976 Parport (8fd0bdbea875d06ccf6c945ca9abaf75) C:\WINDOWS\system32\drivers\Parport.sys
10:53:01.0359 5976 Parport - ok
10:53:01.0406 5976 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
10:53:01.0406 5976 PartMgr - ok
10:53:01.0453 5976 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
10:53:01.0453 5976 ParVdm - ok
10:53:01.0531 5976 PCAMPR5 (b670c5d89f0726b7a2a7dfb4e968cdf8) C:\WINDOWS\system32\PCAMPR5.SYS
10:53:01.0593 5976 PCAMPR5 - ok
10:53:01.0671 5976 PCANDIS5 (ecd2f9d67b06606064daf6961a6d5efe) C:\WINDOWS\system32\PCANDIS5.SYS
10:53:01.0671 5976 PCANDIS5 - ok
10:53:01.0796 5976 PCI (043410877bda580c528f45165f7125bc) C:\WINDOWS\system32\DRIVERS\pci.sys
10:53:01.0796 5976 PCI - ok
10:53:01.0812 5976 PCIDump - ok
10:53:01.0875 5976 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys
10:53:01.0875 5976 PCIIde - ok
10:53:01.0906 5976 Pcmcia (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\WINDOWS\system32\drivers\Pcmcia.sys
10:53:01.0906 5976 Pcmcia - ok
10:53:01.0921 5976 PDCOMP - ok
10:53:01.0953 5976 PDFRAME - ok
10:53:01.0984 5976 PDRELI - ok
10:53:02.0031 5976 PDRFRAME - ok
10:53:02.0109 5976 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
10:53:02.0109 5976 perc2 - ok
10:53:02.0140 5976 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
10:53:02.0140 5976 perc2hib - ok
10:53:02.0312 5976 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
10:53:02.0312 5976 PptpMiniport - ok
10:53:02.0328 5976 Processor (e19c9632ac828f6f214391e2bdda11cb) C:\WINDOWS\system32\DRIVERS\processr.sys
10:53:02.0343 5976 Processor - ok
10:53:02.0359 5976 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
10:53:02.0359 5976 PSched - ok
10:53:02.0390 5976 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
10:53:02.0390 5976 Ptilink - ok
10:53:02.0484 5976 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys
10:53:02.0484 5976 PxHelp20 - ok
10:53:02.0546 5976 QCMerced (e7ac7b1e8ae57c3d55c661187ceebf11) C:\WINDOWS\system32\DRIVERS\LVCM.sys
10:53:02.0562 5976 QCMerced - ok
10:53:02.0640 5976 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
10:53:02.0640 5976 ql1080 - ok
10:53:02.0687 5976 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
10:53:02.0687 5976 Ql10wnt - ok
10:53:02.0703 5976 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
10:53:02.0718 5976 ql12160 - ok
10:53:02.0734 5976 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
10:53:02.0734 5976 ql1240 - ok
10:53:02.0781 5976 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
10:53:02.0781 5976 ql1280 - ok
10:53:02.0828 5976 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
10:53:02.0828 5976 RasAcd - ok
10:53:02.0921 5976 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
10:53:02.0921 5976 Rasl2tp - ok
10:53:02.0953 5976 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
10:53:02.0953 5976 RasPppoe - ok
10:53:03.0046 5976 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
10:53:03.0046 5976 Raspti - ok
10:53:03.0140 5976 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
10:53:03.0140 5976 Rdbss - ok
10:53:03.0203 5976 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
10:53:03.0203 5976 RDPCDD - ok
10:53:03.0296 5976 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
10:53:03.0296 5976 rdpdr - ok
10:53:03.0375 5976 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
10:53:03.0390 5976 RDPWD - ok
10:53:03.0578 5976 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
10:53:03.0578 5976 Secdrv - ok
10:53:03.0671 5976 Serial (93d313c31f7ad9ea2b75f26075413c7c) C:\WINDOWS\system32\drivers\Serial.sys
10:53:03.0671 5976 Serial - ok
10:53:03.0781 5976 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
10:53:03.0781 5976 Sfloppy - ok
10:53:03.0828 5976 Simbad - ok
10:53:03.0906 5976 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
10:53:03.0906 5976 sisagp - ok
10:53:03.0968 5976 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
10:53:03.0968 5976 SLIP - ok
10:53:04.0015 5976 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
10:53:04.0015 5976 Sparrow - ok
10:53:04.0062 5976 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
10:53:04.0062 5976 splitter - ok
10:53:04.0093 5976 sr (39626e6dc1fb39434ec40c42722b660a) C:\WINDOWS\system32\DRIVERS\sr.sys
10:53:04.0093 5976 sr - ok
10:53:04.0171 5976 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
10:53:04.0171 5976 Srv - ok
10:53:04.0265 5976 ssm_bus (df5c19f053eff7f8ba25d73aea899656) C:\WINDOWS\system32\DRIVERS\ssm_bus.sys
10:53:04.0265 5976 ssm_bus - ok
10:53:04.0328 5976 ssm_mdfl (5347169fa449eabc4d0728ae39fab926) C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys
10:53:04.0328 5976 ssm_mdfl - ok
10:53:04.0375 5976 ssm_mdm (7aae23dd105eed15c4f45fc269fa42a9) C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys
10:53:04.0375 5976 ssm_mdm - ok
10:53:04.0437 5976 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys
10:53:04.0437 5976 StarOpen - ok
10:53:04.0515 5976 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
10:53:04.0515 5976 streamip - ok
10:53:04.0562 5976 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
10:53:04.0562 5976 swenum - ok
10:53:04.0609 5976 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
10:53:04.0609 5976 swmidi - ok
10:53:04.0718 5976 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
10:53:04.0718 5976 symc810 - ok
10:53:04.0734 5976 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
10:53:04.0734 5976 symc8xx - ok
10:53:04.0781 5976 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
10:53:04.0781 5976 sym_hi - ok
10:53:04.0812 5976 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
10:53:04.0812 5976 sym_u3 - ok
10:53:04.0875 5976 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
10:53:04.0890 5976 sysaudio - ok
10:53:05.0015 5976 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
10:53:05.0015 5976 Tcpip - ok
10:53:05.0093 5976 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
10:53:05.0093 5976 TDPIPE - ok
10:53:05.0109 5976 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
10:53:05.0109 5976 TDTCP - ok
10:53:05.0140 5976 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
10:53:05.0140 5976 TermDD - ok
10:53:05.0359 5976 TosIde (b411668322c3bf4e690888706b999679) C:\WINDOWS\system32\DRIVERS\toside.sys
10:53:05.0359 5976 TosIde - ok
10:53:05.0437 5976 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
10:53:05.0437 5976 Udfs - ok
10:53:05.0500 5976 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
10:53:05.0500 5976 ultra - ok
10:53:05.0593 5976 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
10:53:05.0593 5976 Update - ok
10:53:05.0703 5976 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
10:53:05.0703 5976 USBAAPL - ok
10:53:05.0765 5976 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
10:53:05.0765 5976 usbaudio - ok
10:53:05.0812 5976 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
10:53:05.0812 5976 usbccgp - ok
10:53:05.0890 5976 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
10:53:05.0890 5976 usbehci - ok
10:53:05.0921 5976 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
10:53:05.0921 5976 usbhub - ok
10:53:05.0984 5976 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
10:53:05.0984 5976 usbohci - ok
10:53:06.0015 5976 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
10:53:06.0015 5976 usbprint - ok
10:53:06.0031 5976 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
10:53:06.0031 5976 usbscan - ok
10:53:06.0062 5976 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
10:53:06.0078 5976 USBSTOR - ok
10:53:06.0125 5976 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
10:53:06.0140 5976 usbuhci - ok
10:53:06.0156 5976 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
10:53:06.0156 5976 VgaSave - ok
10:53:06.0234 5976 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
10:53:06.0234 5976 viaagp - ok
10:53:06.0265 5976 ViaIde (a5d8b6c8d43786d4215c1df6fab0aae0) C:\WINDOWS\system32\DRIVERS\viaidexp.sys
10:53:06.0265 5976 ViaIde - ok
10:53:06.0343 5976 viamraid (fbf18f9f5fb852c2976723587b44f346) C:\WINDOWS\system32\DRIVERS\viamraid.sys
10:53:06.0343 5976 viamraid - ok
10:53:06.0390 5976 VolSnap (46de1126684369bace4849e4fc8c43ca) C:\WINDOWS\system32\drivers\VolSnap.sys
10:53:06.0390 5976 VolSnap - ok
10:53:06.0500 5976 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
10:53:06.0500 5976 Wanarp - ok
10:53:06.0593 5976 wanatw (0a716c08cb13c3a8f4f51e882dbf7416) C:\WINDOWS\system32\DRIVERS\wanatw4.sys
10:53:06.0593 5976 wanatw - ok
10:53:06.0671 5976 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
10:53:06.0718 5976 Wdf01000 - ok
10:53:06.0765 5976 WDICA - ok
10:53:06.0843 5976 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
10:53:06.0843 5976 wdmaud - ok
10:53:07.0046 5976 WpdUsb (bbaeaca1ffa3c86361cf0998474f6c3a) C:\WINDOWS\system32\Drivers\wpdusb.sys
10:53:07.0046 5976 WpdUsb - ok
10:53:07.0125 5976 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
10:53:07.0125 5976 WSTCODEC - ok
10:53:07.0250 5976 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
10:53:07.0281 5976 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
10:53:07.0281 5976 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
10:53:07.0312 5976 Boot (0x1200) (1161ab23bb551cfb7e74da8b71c1cd0f) \Device\Harddisk0\DR0\Partition0
10:53:07.0312 5976 \Device\Harddisk0\DR0\Partition0 - ok
10:53:07.0328 5976 ============================================================
10:53:07.0328 5976 Scan finished
10:53:07.0328 5976 ============================================================
10:53:07.0359 4740 Detected object count: 1
10:53:07.0359 4740 Actual detected object count: 1
11:41:14.0265 4740 \Device\Harddisk0\DR0\# - copied to quarantine
11:41:14.0265 4740 \Device\Harddisk0\DR0 - copied to quarantine
11:41:14.0296 4740 \Device\Harddisk0\DR0\TDLFS\mbr - copied to quarantine
11:41:14.0312 4740 \Device\Harddisk0\DR0\TDLFS\vbr - copied to quarantine
11:41:14.0312 4740 \Device\Harddisk0\DR0\TDLFS\bid - copied to quarantine
11:41:14.0312 4740 \Device\Harddisk0\DR0\TDLFS\affid - copied to quarantine
11:41:14.0312 4740 \Device\Harddisk0\DR0\TDLFS\boot - copied to quarantine
11:41:14.0312 4740 \Device\Harddisk0\DR0\TDLFS\cmd32 - copied to quarantine
11:41:23.0750 4740 \Device\Harddisk0\DR0\TDLFS\cmd64 - copied to quarantine
11:41:24.0093 4740 \Device\Harddisk0\DR0\TDLFS\dbg32 - copied to quarantine
11:41:24.0296 4740 \Device\Harddisk0\DR0\TDLFS\dbg64 - copied to quarantine
11:41:24.0453 4740 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
11:41:24.0656 4740 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
11:41:24.0781 4740 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
11:41:24.0875 4740 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
11:41:25.0015 4740 \Device\Harddisk0\DR0\TDLFS\subid - copied to quarantine
11:41:25.0015 4740 \Device\Harddisk0\DR0\TDLFS\info - copied to quarantine
11:41:25.0015 4740 \Device\Harddisk0\DR0\TDLFS\mainfb.script - copied to quarantine
11:41:25.0046 4740 \Device\Harddisk0\DR0\TDLFS\com32 - copied to quarantine
11:41:25.0187 4740 \Device\Harddisk0\DR0\TDLFS\serf_conf - copied to quarantine
11:41:25.0218 4740 \Device\Harddisk0\DR0\TDLFS\bbr232 - copied to quarantine
11:41:25.0656 4740 \Device\Harddisk0\DR0\TDLFS\serf332 - copied to quarantine
11:41:28.0843 4740 \Device\Harddisk0\DR0\TDLFS\main - copied to quarantine
11:41:28.0890 4740 \Device\Harddisk0\DR0\TDLFS\bbr_conf - copied to quarantine
11:41:28.0937 4740 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - will be cured on reboot
11:41:28.0937 4740 \Device\Harddisk0\DR0 - ok
11:41:29.0343 4740 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - User select action: Cure
11:41:45.0843 3600 Deinitialize success
10:49:06.0500 2564 ============================================================
10:49:06.0500 2564 Current date / time: 2012/02/26 10:49:06.0500
10:49:06.0500 2564 SystemInfo:
10:49:06.0500 2564
10:49:06.0500 2564 OS Version: 5.1.2600 ServicePack: 3.0
10:49:06.0500 2564 Product type: Workstation
10:49:06.0500 2564 ComputerName: maisonreboud
10:49:06.0500 2564 UserName: Pascal
10:49:06.0500 2564 Windows directory: C:\WINDOWS
10:49:06.0500 2564 System windows directory: C:\WINDOWS
10:49:06.0500 2564 Processor architecture: Intel x86
10:49:06.0500 2564 Number of processors: 2
10:49:06.0500 2564 Page size: 0x1000
10:49:06.0500 2564 Boot type: Normal boot
10:49:06.0500 2564 ============================================================
10:49:08.0406 2564 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
10:49:08.0703 2564 \Device\Harddisk0\DR0:
10:49:08.0703 2564 MBR used
10:49:08.0703 2564 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0xF9CA3B, BlocksNum 0x2448CDC5
10:49:08.0734 2564 Initialize success
10:49:08.0734 2564 ============================================================
10:52:52.0171 5976 ============================================================
10:52:52.0171 5976 Scan started
10:52:52.0171 5976 Mode: Manual;
10:52:52.0171 5976 ============================================================
10:52:52.0390 5976 .redbook - ok
10:52:52.0562 5976 Aavmker4 (fdba5bb4c8171cda00b2233d5389ee5f) C:\WINDOWS\system32\drivers\Aavmker4.sys
10:52:52.0562 5976 Aavmker4 - ok
10:52:52.0578 5976 Abiosdsk - ok
10:52:52.0656 5976 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
10:52:52.0656 5976 abp480n5 - ok
10:52:52.0718 5976 ACPI (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\WINDOWS\system32\DRIVERS\ACPI.sys
10:52:52.0718 5976 ACPI - ok
10:52:52.0796 5976 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
10:52:52.0796 5976 ACPIEC - ok
10:52:52.0812 5976 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
10:52:52.0812 5976 adpu160m - ok
10:52:52.0875 5976 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
10:52:52.0890 5976 aec - ok
10:52:52.0937 5976 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\WINDOWS\system32\drivers\Afc.sys
10:52:52.0937 5976 Afc - ok
10:52:53.0015 5976 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
10:52:53.0015 5976 AFD - ok
10:52:53.0062 5976 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
10:52:53.0062 5976 agp440 - ok
10:52:53.0093 5976 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
10:52:53.0093 5976 agpCPQ - ok
10:52:53.0125 5976 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
10:52:53.0125 5976 Aha154x - ok
10:52:53.0156 5976 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
10:52:53.0156 5976 aic78u2 - ok
10:52:53.0203 5976 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
10:52:53.0203 5976 aic78xx - ok
10:52:53.0281 5976 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
10:52:53.0296 5976 AliIde - ok
10:52:53.0421 5976 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
10:52:53.0421 5976 alim1541 - ok
10:52:53.0484 5976 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
10:52:53.0500 5976 amdagp - ok
10:52:53.0531 5976 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
10:52:53.0531 5976 amsint - ok
10:52:53.0593 5976 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
10:52:53.0593 5976 Arp1394 - ok
10:52:53.0656 5976 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
10:52:53.0656 5976 asc - ok
10:52:53.0671 5976 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
10:52:53.0671 5976 asc3350p - ok
10:52:53.0718 5976 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
10:52:53.0718 5976 asc3550 - ok
10:52:53.0765 5976 ASCTRM (d880831279ed91f9a4190a2db9539ea9) C:\WINDOWS\system32\drivers\ASCTRM.sys
10:52:53.0765 5976 ASCTRM - ok
10:52:53.0890 5976 aswFsBlk (581b82df5dbcc1dda6b775fac0d92472) C:\WINDOWS\system32\drivers\aswFsBlk.sys
10:52:53.0890 5976 aswFsBlk - ok
10:52:53.0953 5976 aswMon2 (4310e0977b48ec9bc5cca6931f806e6d) C:\WINDOWS\system32\drivers\aswMon2.sys
10:52:53.0968 5976 aswMon2 - ok
10:52:53.0984 5976 aswRdr (0b44ee90b3db93582b260a80b28b7ffd) C:\WINDOWS\system32\drivers\aswRdr.sys
10:52:53.0984 5976 aswRdr - ok
10:52:54.0078 5976 aswSnx (ca9601cd277a1e510b80422a40240a95) C:\WINDOWS\system32\drivers\aswSnx.sys
10:52:54.0078 5976 aswSnx - ok
10:52:54.0156 5976 aswSP (05ea22dde5ca7ee3a865046aff2f0229) C:\WINDOWS\system32\drivers\aswSP.sys
10:52:54.0156 5976 aswSP - ok
10:52:54.0203 5976 aswTdi (3ac73a9e7378848d1bde174b4bb39212) C:\WINDOWS\system32\drivers\aswTdi.sys
10:52:54.0203 5976 aswTdi - ok
10:52:54.0250 5976 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
10:52:54.0250 5976 AsyncMac - ok
10:52:54.0296 5976 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
10:52:54.0296 5976 atapi - ok
10:52:54.0312 5976 Atdisk - ok
10:52:54.0343 5976 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
10:52:54.0343 5976 Atmarpc - ok
10:52:54.0421 5976 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
10:52:54.0421 5976 audstub - ok
10:52:54.0531 5976 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
10:52:54.0531 5976 Beep - ok
10:52:54.0671 5976 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
10:52:54.0671 5976 cbidf - ok
10:52:54.0687 5976 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
10:52:54.0687 5976 cbidf2k - ok
10:52:54.0765 5976 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
10:52:54.0765 5976 CCDECODE - ok
10:52:54.0812 5976 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
10:52:54.0812 5976 cd20xrnt - ok
10:52:54.0828 5976 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
10:52:54.0843 5976 Cdaudio - ok
10:52:54.0890 5976 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
10:52:54.0890 5976 Cdfs - ok
10:52:54.0921 5976 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
10:52:54.0921 5976 Cdrom - ok
10:52:54.0968 5976 Changer - ok
10:52:55.0125 5976 CmdIde (e3726ad522d0bdae090671048c991ab3) C:\WINDOWS\system32\DRIVERS\cmdide.sys
10:52:55.0125 5976 CmdIde - ok
10:52:55.0187 5976 CoachAud (a456dd2ced6f8d0fb73b5bc38868ac7a) C:\WINDOWS\system32\DRIVERS\CoachAud.sys
10:52:55.0187 5976 CoachAud - ok
10:52:55.0234 5976 CoachUsb (fafa3c99864e9df18cb68725bbcf7bca) C:\WINDOWS\system32\DRIVERS\CoachUsb.sys
10:52:55.0234 5976 CoachUsb - ok
10:52:55.0281 5976 CoachVid (7aefe82c02d4933cee4b7cb78c409845) C:\WINDOWS\system32\DRIVERS\CoachVid.sys
10:52:55.0281 5976 CoachVid - ok
10:52:55.0375 5976 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
10:52:55.0390 5976 Cpqarray - ok
10:52:55.0406 5976 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
10:52:55.0421 5976 dac2w2k - ok
10:52:55.0437 5976 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
10:52:55.0437 5976 dac960nt - ok
10:52:55.0500 5976 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
10:52:55.0500 5976 Disk - ok
10:52:55.0578 5976 dmboot (f5deadd42335fb33edca74ecb2f36cba) C:\WINDOWS\system32\drivers\dmboot.sys
10:52:55.0609 5976 dmboot - ok
10:52:55.0703 5976 dmio (5a7c47c9b3f9fb92a66410a7509f0c71) C:\WINDOWS\system32\drivers\dmio.sys
10:52:55.0703 5976 dmio - ok
10:52:55.0734 5976 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
10:52:55.0734 5976 dmload - ok
10:52:55.0796 5976 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
10:52:55.0796 5976 DMusic - ok
10:52:55.0906 5976 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
10:52:55.0906 5976 dpti2o - ok
10:52:56.0000 5976 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
10:52:56.0000 5976 drmkaud - ok
10:52:56.0234 5976 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
10:52:56.0234 5976 Fastfat - ok
10:52:56.0250 5976 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
10:52:56.0250 5976 Fdc - ok
10:52:56.0312 5976 FETND5BV (fc3b2083e1fffc2bf6a3cd688dc728c8) C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys
10:52:56.0312 5976 FETND5BV - ok
10:52:56.0359 5976 Fips (31f923eb2170fc172c81abda0045d18c) C:\WINDOWS\system32\drivers\Fips.sys
10:52:56.0359 5976 Fips - ok
10:52:56.0390 5976 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
10:52:56.0390 5976 Flpydisk - ok
10:52:56.0468 5976 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
10:52:56.0468 5976 FltMgr - ok
10:52:56.0562 5976 fssfltr (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
10:52:56.0562 5976 fssfltr - ok
10:52:56.0640 5976 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
10:52:56.0640 5976 Fs_Rec - ok
10:52:56.0671 5976 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
10:52:56.0671 5976 Ftdisk - ok
10:52:56.0750 5976 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
10:52:56.0750 5976 GEARAspiWDM - ok
10:52:56.0828 5976 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
10:52:56.0828 5976 Gpc - ok
10:52:56.0953 5976 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
10:52:56.0953 5976 HDAudBus - ok
10:52:57.0046 5976 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
10:52:57.0062 5976 HidUsb - ok
10:52:57.0140 5976 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
10:52:57.0140 5976 hpn - ok
10:52:57.0187 5976 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
10:52:57.0187 5976 HTTP - ok
10:52:57.0265 5976 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
10:52:57.0265 5976 i2omgmt - ok
10:52:57.0296 5976 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
10:52:57.0296 5976 i2omp - ok
10:52:57.0343 5976 i8042prt (a09bdc4ed10e3b2e0ec27bb94af32516) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
10:52:57.0359 5976 i8042prt - ok
10:52:57.0406 5976 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
10:52:57.0406 5976 Imapi - ok
10:52:57.0500 5976 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
10:52:57.0500 5976 ini910u - ok
10:52:57.0640 5976 IntcAzAudAddService (fa9a9468f982835e99c1ec21257f7e60) C:\WINDOWS\system32\drivers\RtkHDAud.sys
10:52:57.0734 5976 IntcAzAudAddService - ok
10:52:57.0796 5976 IntelIde (4b6da2f0a4095857a9e3f3697399d575) C:\WINDOWS\system32\DRIVERS\intelide.sys
10:52:57.0796 5976 IntelIde - ok
10:52:57.0843 5976 intelppm (ad340800c35a42d4de1641a37feea34c) C:\WINDOWS\system32\DRIVERS\intelppm.sys
10:52:57.0859 5976 intelppm - ok
10:52:57.0890 5976 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
10:52:57.0890 5976 Ip6Fw - ok
10:52:57.0937 5976 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
10:52:57.0937 5976 IpFilterDriver - ok
10:52:57.0968 5976 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
10:52:57.0968 5976 IpInIp - ok
10:52:58.0031 5976 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
10:52:58.0046 5976 IpNat - ok
10:52:58.0078 5976 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
10:52:58.0078 5976 IPSec - ok
10:52:58.0125 5976 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
10:52:58.0125 5976 IRENUM - ok
10:52:58.0171 5976 isapnp (355836975a67b6554bca60328cd6cb74) C:\WINDOWS\system32\DRIVERS\isapnp.sys
10:52:58.0171 5976 isapnp - ok
10:52:58.0296 5976 Kbdclass (16813155807c6881f4bfbf6657424659) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
10:52:58.0296 5976 Kbdclass - ok
10:52:58.0328 5976 kbdhid (94c59cb884ba010c063687c3a50dce8e) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
10:52:58.0343 5976 kbdhid - ok
10:52:58.0375 5976 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
10:52:58.0375 5976 kmixer - ok
10:52:58.0437 5976 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
10:52:58.0437 5976 KSecDD - ok
10:52:58.0500 5976 L8042Kbd (0c6e346cde730cf1356dd69ad6e9bc42) C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys
10:52:58.0500 5976 L8042Kbd - ok
10:52:58.0562 5976 L8042mou (8a5993705add14352c9a279fa8338334) C:\WINDOWS\system32\DRIVERS\L8042mou.Sys
10:52:58.0562 5976 L8042mou - ok
10:52:58.0593 5976 lbrtfdc - ok
10:52:58.0687 5976 LHidFilt (7f9c7b28cf1c859e1c42619eea946dc8) C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys
10:52:58.0687 5976 LHidFilt - ok
10:52:58.0781 5976 LMouFilt (ab33792a87285344f43b5ce23421bab0) C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys
10:52:58.0781 5976 LMouFilt - ok
10:52:58.0859 5976 LMouKE (9837e55673818ecd8febb47f7f77521a) C:\WINDOWS\system32\DRIVERS\LMouKE.Sys
10:52:58.0859 5976 LMouKE - ok
10:52:58.0890 5976 LUsbFilt (77030525cd86a93f1af34fa9b96d33ce) C:\WINDOWS\system32\Drivers\LUsbFilt.Sys
10:52:58.0890 5976 LUsbFilt - ok
10:52:58.0953 5976 LVUSBSta (90259f3a20fbaec1a08d74ef5415b9d8) C:\WINDOWS\system32\drivers\lvusbsta.sys
10:52:58.0968 5976 LVUSBSta - ok
10:52:59.0000 5976 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\WINDOWS\system32\drivers\mbam.sys
10:52:59.0000 5976 MBAMProtector - ok
10:52:59.0125 5976 MHNDRV (7f2f1d2815a6449d346fcccbc569fbd6) C:\WINDOWS\system32\DRIVERS\mhndrv.sys
10:52:59.0125 5976 MHNDRV - ok
10:52:59.0156 5976 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
10:52:59.0156 5976 mnmdd - ok
10:52:59.0265 5976 Modem (510ade9327fe84c10254e1902697e25f) C:\WINDOWS\system32\drivers\Modem.sys
10:52:59.0265 5976 Modem - ok
10:52:59.0312 5976 Mouclass (027c01bd7ef3349aaebc883d8a799efb) C:\WINDOWS\system32\DRIVERS\mouclass.sys
10:52:59.0312 5976 Mouclass - ok
10:52:59.0359 5976 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
10:52:59.0359 5976 mouhid - ok
10:52:59.0437 5976 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
10:52:59.0453 5976 MountMgr - ok
10:52:59.0484 5976 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
10:52:59.0484 5976 mraid35x - ok
10:52:59.0515 5976 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
10:52:59.0515 5976 MRxDAV - ok
10:52:59.0593 5976 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
10:52:59.0609 5976 MRxSmb - ok
10:52:59.0703 5976 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
10:52:59.0703 5976 Msfs - ok
10:52:59.0796 5976 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
10:52:59.0796 5976 MSKSSRV - ok
10:52:59.0812 5976 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
10:52:59.0828 5976 MSPCLOCK - ok
10:52:59.0859 5976 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
10:52:59.0859 5976 MSPQM - ok
10:52:59.0921 5976 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
10:52:59.0921 5976 mssmbios - ok
10:52:59.0984 5976 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
10:52:59.0984 5976 MSTEE - ok
10:53:00.0046 5976 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
10:53:00.0046 5976 Mup - ok
10:53:00.0093 5976 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
10:53:00.0109 5976 NABTSFEC - ok
10:53:00.0187 5976 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
10:53:00.0187 5976 NDIS - ok
10:53:00.0234 5976 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
10:53:00.0250 5976 NdisIP - ok
10:53:00.0359 5976 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
10:53:00.0359 5976 NdisTapi - ok
10:53:00.0390 5976 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
10:53:00.0390 5976 Ndisuio - ok
10:53:00.0421 5976 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
10:53:00.0437 5976 NdisWan - ok
10:53:00.0484 5976 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
10:53:00.0484 5976 NDProxy - ok
10:53:00.0656 5976 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
10:53:00.0656 5976 NetBIOS - ok
10:53:00.0718 5976 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
10:53:00.0718 5976 NetBT - ok
10:53:00.0812 5976 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
10:53:00.0812 5976 NIC1394 - ok
10:53:00.0843 5976 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
10:53:00.0843 5976 Npfs - ok
10:53:00.0890 5976 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
10:53:00.0906 5976 Ntfs - ok
10:53:00.0968 5976 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
10:53:00.0968 5976 Null - ok
10:53:01.0093 5976 nv (dc0b33c6c7321714be4e6c1a005a75d9) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
10:53:01.0187 5976 nv - ok
10:53:01.0234 5976 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
10:53:01.0234 5976 NwlnkFlt - ok
10:53:01.0265 5976 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
10:53:01.0265 5976 NwlnkFwd - ok
10:53:01.0312 5976 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
10:53:01.0312 5976 ohci1394 - ok
10:53:01.0359 5976 Parport (8fd0bdbea875d06ccf6c945ca9abaf75) C:\WINDOWS\system32\drivers\Parport.sys
10:53:01.0359 5976 Parport - ok
10:53:01.0406 5976 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
10:53:01.0406 5976 PartMgr - ok
10:53:01.0453 5976 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
10:53:01.0453 5976 ParVdm - ok
10:53:01.0531 5976 PCAMPR5 (b670c5d89f0726b7a2a7dfb4e968cdf8) C:\WINDOWS\system32\PCAMPR5.SYS
10:53:01.0593 5976 PCAMPR5 - ok
10:53:01.0671 5976 PCANDIS5 (ecd2f9d67b06606064daf6961a6d5efe) C:\WINDOWS\system32\PCANDIS5.SYS
10:53:01.0671 5976 PCANDIS5 - ok
10:53:01.0796 5976 PCI (043410877bda580c528f45165f7125bc) C:\WINDOWS\system32\DRIVERS\pci.sys
10:53:01.0796 5976 PCI - ok
10:53:01.0812 5976 PCIDump - ok
10:53:01.0875 5976 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys
10:53:01.0875 5976 PCIIde - ok
10:53:01.0906 5976 Pcmcia (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\WINDOWS\system32\drivers\Pcmcia.sys
10:53:01.0906 5976 Pcmcia - ok
10:53:01.0921 5976 PDCOMP - ok
10:53:01.0953 5976 PDFRAME - ok
10:53:01.0984 5976 PDRELI - ok
10:53:02.0031 5976 PDRFRAME - ok
10:53:02.0109 5976 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
10:53:02.0109 5976 perc2 - ok
10:53:02.0140 5976 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
10:53:02.0140 5976 perc2hib - ok
10:53:02.0312 5976 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
10:53:02.0312 5976 PptpMiniport - ok
10:53:02.0328 5976 Processor (e19c9632ac828f6f214391e2bdda11cb) C:\WINDOWS\system32\DRIVERS\processr.sys
10:53:02.0343 5976 Processor - ok
10:53:02.0359 5976 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
10:53:02.0359 5976 PSched - ok
10:53:02.0390 5976 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
10:53:02.0390 5976 Ptilink - ok
10:53:02.0484 5976 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys
10:53:02.0484 5976 PxHelp20 - ok
10:53:02.0546 5976 QCMerced (e7ac7b1e8ae57c3d55c661187ceebf11) C:\WINDOWS\system32\DRIVERS\LVCM.sys
10:53:02.0562 5976 QCMerced - ok
10:53:02.0640 5976 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
10:53:02.0640 5976 ql1080 - ok
10:53:02.0687 5976 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
10:53:02.0687 5976 Ql10wnt - ok
10:53:02.0703 5976 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
10:53:02.0718 5976 ql12160 - ok
10:53:02.0734 5976 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
10:53:02.0734 5976 ql1240 - ok
10:53:02.0781 5976 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
10:53:02.0781 5976 ql1280 - ok
10:53:02.0828 5976 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
10:53:02.0828 5976 RasAcd - ok
10:53:02.0921 5976 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
10:53:02.0921 5976 Rasl2tp - ok
10:53:02.0953 5976 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
10:53:02.0953 5976 RasPppoe - ok
10:53:03.0046 5976 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
10:53:03.0046 5976 Raspti - ok
10:53:03.0140 5976 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
10:53:03.0140 5976 Rdbss - ok
10:53:03.0203 5976 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
10:53:03.0203 5976 RDPCDD - ok
10:53:03.0296 5976 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
10:53:03.0296 5976 rdpdr - ok
10:53:03.0375 5976 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
10:53:03.0390 5976 RDPWD - ok
10:53:03.0578 5976 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
10:53:03.0578 5976 Secdrv - ok
10:53:03.0671 5976 Serial (93d313c31f7ad9ea2b75f26075413c7c) C:\WINDOWS\system32\drivers\Serial.sys
10:53:03.0671 5976 Serial - ok
10:53:03.0781 5976 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
10:53:03.0781 5976 Sfloppy - ok
10:53:03.0828 5976 Simbad - ok
10:53:03.0906 5976 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
10:53:03.0906 5976 sisagp - ok
10:53:03.0968 5976 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
10:53:03.0968 5976 SLIP - ok
10:53:04.0015 5976 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
10:53:04.0015 5976 Sparrow - ok
10:53:04.0062 5976 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
10:53:04.0062 5976 splitter - ok
10:53:04.0093 5976 sr (39626e6dc1fb39434ec40c42722b660a) C:\WINDOWS\system32\DRIVERS\sr.sys
10:53:04.0093 5976 sr - ok
10:53:04.0171 5976 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
10:53:04.0171 5976 Srv - ok
10:53:04.0265 5976 ssm_bus (df5c19f053eff7f8ba25d73aea899656) C:\WINDOWS\system32\DRIVERS\ssm_bus.sys
10:53:04.0265 5976 ssm_bus - ok
10:53:04.0328 5976 ssm_mdfl (5347169fa449eabc4d0728ae39fab926) C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys
10:53:04.0328 5976 ssm_mdfl - ok
10:53:04.0375 5976 ssm_mdm (7aae23dd105eed15c4f45fc269fa42a9) C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys
10:53:04.0375 5976 ssm_mdm - ok
10:53:04.0437 5976 StarOpen (306521935042fc0a6988d528643619b3) C:\WINDOWS\system32\drivers\StarOpen.sys
10:53:04.0437 5976 StarOpen - ok
10:53:04.0515 5976 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
10:53:04.0515 5976 streamip - ok
10:53:04.0562 5976 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
10:53:04.0562 5976 swenum - ok
10:53:04.0609 5976 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
10:53:04.0609 5976 swmidi - ok
10:53:04.0718 5976 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
10:53:04.0718 5976 symc810 - ok
10:53:04.0734 5976 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
10:53:04.0734 5976 symc8xx - ok
10:53:04.0781 5976 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
10:53:04.0781 5976 sym_hi - ok
10:53:04.0812 5976 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
10:53:04.0812 5976 sym_u3 - ok
10:53:04.0875 5976 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
10:53:04.0890 5976 sysaudio - ok
10:53:05.0015 5976 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
10:53:05.0015 5976 Tcpip - ok
10:53:05.0093 5976 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
10:53:05.0093 5976 TDPIPE - ok
10:53:05.0109 5976 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
10:53:05.0109 5976 TDTCP - ok
10:53:05.0140 5976 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
10:53:05.0140 5976 TermDD - ok
10:53:05.0359 5976 TosIde (b411668322c3bf4e690888706b999679) C:\WINDOWS\system32\DRIVERS\toside.sys
10:53:05.0359 5976 TosIde - ok
10:53:05.0437 5976 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
10:53:05.0437 5976 Udfs - ok
10:53:05.0500 5976 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
10:53:05.0500 5976 ultra - ok
10:53:05.0593 5976 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
10:53:05.0593 5976 Update - ok
10:53:05.0703 5976 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
10:53:05.0703 5976 USBAAPL - ok
10:53:05.0765 5976 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
10:53:05.0765 5976 usbaudio - ok
10:53:05.0812 5976 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
10:53:05.0812 5976 usbccgp - ok
10:53:05.0890 5976 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
10:53:05.0890 5976 usbehci - ok
10:53:05.0921 5976 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
10:53:05.0921 5976 usbhub - ok
10:53:05.0984 5976 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
10:53:05.0984 5976 usbohci - ok
10:53:06.0015 5976 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
10:53:06.0015 5976 usbprint - ok
10:53:06.0031 5976 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
10:53:06.0031 5976 usbscan - ok
10:53:06.0062 5976 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
10:53:06.0078 5976 USBSTOR - ok
10:53:06.0125 5976 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
10:53:06.0140 5976 usbuhci - ok
10:53:06.0156 5976 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
10:53:06.0156 5976 VgaSave - ok
10:53:06.0234 5976 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
10:53:06.0234 5976 viaagp - ok
10:53:06.0265 5976 ViaIde (a5d8b6c8d43786d4215c1df6fab0aae0) C:\WINDOWS\system32\DRIVERS\viaidexp.sys
10:53:06.0265 5976 ViaIde - ok
10:53:06.0343 5976 viamraid (fbf18f9f5fb852c2976723587b44f346) C:\WINDOWS\system32\DRIVERS\viamraid.sys
10:53:06.0343 5976 viamraid - ok
10:53:06.0390 5976 VolSnap (46de1126684369bace4849e4fc8c43ca) C:\WINDOWS\system32\drivers\VolSnap.sys
10:53:06.0390 5976 VolSnap - ok
10:53:06.0500 5976 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
10:53:06.0500 5976 Wanarp - ok
10:53:06.0593 5976 wanatw (0a716c08cb13c3a8f4f51e882dbf7416) C:\WINDOWS\system32\DRIVERS\wanatw4.sys
10:53:06.0593 5976 wanatw - ok
10:53:06.0671 5976 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
10:53:06.0718 5976 Wdf01000 - ok
10:53:06.0765 5976 WDICA - ok
10:53:06.0843 5976 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
10:53:06.0843 5976 wdmaud - ok
10:53:07.0046 5976 WpdUsb (bbaeaca1ffa3c86361cf0998474f6c3a) C:\WINDOWS\system32\Drivers\wpdusb.sys
10:53:07.0046 5976 WpdUsb - ok
10:53:07.0125 5976 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
10:53:07.0125 5976 WSTCODEC - ok
10:53:07.0250 5976 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
10:53:07.0281 5976 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
10:53:07.0281 5976 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
10:53:07.0312 5976 Boot (0x1200) (1161ab23bb551cfb7e74da8b71c1cd0f) \Device\Harddisk0\DR0\Partition0
10:53:07.0312 5976 \Device\Harddisk0\DR0\Partition0 - ok
10:53:07.0328 5976 ============================================================
10:53:07.0328 5976 Scan finished
10:53:07.0328 5976 ============================================================
10:53:07.0359 4740 Detected object count: 1
10:53:07.0359 4740 Actual detected object count: 1
11:41:14.0265 4740 \Device\Harddisk0\DR0\# - copied to quarantine
11:41:14.0265 4740 \Device\Harddisk0\DR0 - copied to quarantine
11:41:14.0296 4740 \Device\Harddisk0\DR0\TDLFS\mbr - copied to quarantine
11:41:14.0312 4740 \Device\Harddisk0\DR0\TDLFS\vbr - copied to quarantine
11:41:14.0312 4740 \Device\Harddisk0\DR0\TDLFS\bid - copied to quarantine
11:41:14.0312 4740 \Device\Harddisk0\DR0\TDLFS\affid - copied to quarantine
11:41:14.0312 4740 \Device\Harddisk0\DR0\TDLFS\boot - copied to quarantine
11:41:14.0312 4740 \Device\Harddisk0\DR0\TDLFS\cmd32 - copied to quarantine
11:41:23.0750 4740 \Device\Harddisk0\DR0\TDLFS\cmd64 - copied to quarantine
11:41:24.0093 4740 \Device\Harddisk0\DR0\TDLFS\dbg32 - copied to quarantine
11:41:24.0296 4740 \Device\Harddisk0\DR0\TDLFS\dbg64 - copied to quarantine
11:41:24.0453 4740 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
11:41:24.0656 4740 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
11:41:24.0781 4740 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
11:41:24.0875 4740 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
11:41:25.0015 4740 \Device\Harddisk0\DR0\TDLFS\subid - copied to quarantine
11:41:25.0015 4740 \Device\Harddisk0\DR0\TDLFS\info - copied to quarantine
11:41:25.0015 4740 \Device\Harddisk0\DR0\TDLFS\mainfb.script - copied to quarantine
11:41:25.0046 4740 \Device\Harddisk0\DR0\TDLFS\com32 - copied to quarantine
11:41:25.0187 4740 \Device\Harddisk0\DR0\TDLFS\serf_conf - copied to quarantine
11:41:25.0218 4740 \Device\Harddisk0\DR0\TDLFS\bbr232 - copied to quarantine
11:41:25.0656 4740 \Device\Harddisk0\DR0\TDLFS\serf332 - copied to quarantine
11:41:28.0843 4740 \Device\Harddisk0\DR0\TDLFS\main - copied to quarantine
11:41:28.0890 4740 \Device\Harddisk0\DR0\TDLFS\bbr_conf - copied to quarantine
11:41:28.0937 4740 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - will be cured on reboot
11:41:28.0937 4740 \Device\Harddisk0\DR0 - ok
11:41:29.0343 4740 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - User select action: Cure
11:41:45.0843 3600 Deinitialize success
/!\ A l'attention de ceux qui passent sur ce sujet /!\
Le logiciel qui suit n'est pas à utiliser à la légère et peut faire des dégâts s'il est mal utilisé ! Ne le faites que si un helpeur du forum qui connait bien cet outil vous l'a recommandé.
/!\ Désactive tous tes logiciels de protection (Antivirus, Antispywares) /!\
* Télécharge combofix(de sUBs) sur ton Bureau.
* Double-clique sur ComboFix.exe afin de le lancer.
* Il va te demander d'installer la console de récupération : accepte. (important en cas de problème)
/!\ Ne touche ni à la souris, ni au clavier durant le scan /!\
* Lorsque la recherche sera terminée, un rapport apparaîtra.
* Héberge le rapport C:\Combofix.txt sur le site pjjoint.malekal.com ou cijoint.fr ou toofiles puis copie/colle le lien fournit dans ta prochaine réponse sur le forum
#Si combofix ne veut pas se lancer renommes le en ccm.exe et éxécutes le en mode sans échec .
Tutoriel officiel de Combofix : Tuto Combofix
Le logiciel qui suit n'est pas à utiliser à la légère et peut faire des dégâts s'il est mal utilisé ! Ne le faites que si un helpeur du forum qui connait bien cet outil vous l'a recommandé.
/!\ Désactive tous tes logiciels de protection (Antivirus, Antispywares) /!\
* Télécharge combofix(de sUBs) sur ton Bureau.
* Double-clique sur ComboFix.exe afin de le lancer.
* Il va te demander d'installer la console de récupération : accepte. (important en cas de problème)
/!\ Ne touche ni à la souris, ni au clavier durant le scan /!\
* Lorsque la recherche sera terminée, un rapport apparaîtra.
* Héberge le rapport C:\Combofix.txt sur le site pjjoint.malekal.com ou cijoint.fr ou toofiles puis copie/colle le lien fournit dans ta prochaine réponse sur le forum
#Si combofix ne veut pas se lancer renommes le en ccm.exe et éxécutes le en mode sans échec .
Tutoriel officiel de Combofix : Tuto Combofix
je viens d'envoyer le rapport. Je suis un peu inquiète, est-ce que cela ne craint rien au niveau des données confidentielles dans les éléments que je viens d'envoyer? Merci de ta réponse.
Ne t'inquiete pas pour tes données sur le rapport.Ton adresse ou ton n°de tel n'apparaisse pas .
De toute façon sans rapport pas d'aide :)
De toute façon sans rapport pas d'aide :)
