Virus system check
Résolu
flochon19
Messages postés
22
Statut
Membre
-
g3n-h@ckm@n -
g3n-h@ckm@n -
bonsoir,
notre pc est infecté par system check, j'ai lancé Pre Scan et posté le rapport sur pjjoint.malekal et voici le lien:
https://pjjoint.malekal.com/files.php?id=20120326_k10e11c5d14d9
est-ce que quelqu'un peut m'aider à partir de ce lien.
d'avance merci
notre pc est infecté par system check, j'ai lancé Pre Scan et posté le rapport sur pjjoint.malekal et voici le lien:
https://pjjoint.malekal.com/files.php?id=20120326_k10e11c5d14d9
est-ce que quelqu'un peut m'aider à partir de ce lien.
d'avance merci
22 réponses
- 1
- 2
Suivant
-
-
c'est quoi ce dossier Tracing ?
================
regarde dans c:\Pre_scan tu dois avoir un fichier qui se nomme reboot , confirme-moi
================
tu installes N'IMPORTE QUOI...c'est une maladie ces barres d'outils chez vous !!!
et arrête le porno ca pourrit les navigateur , la preuve.
bref
supprime pre_scan , retelecharge-le ici car il y a eu une erreur de codage et pour la suite , si tu réutilises celui-ci , il y aura un message d'erreur :
http://www.box.com/s/530ae3ccc9402294d814
================
desinstalle WebMediaPlayer
desinstalle Ask.com/Ask Toolbar
desinstalle tout Java
desinstalle WebScout toolbar
desinstalle adobe reader 9
desinstalle ConduitEngine
desinstalle Eazel-FR Toolbar
desinstalle Softonic et arrete de telecharger chez eux ils ditribuent des ADWARES dans les intalleurs qu ils te font telecharger :
https://www.youtube.com/watch?v=sm-FBF2OQTA
================
relance pre_scan et choisis script , une page vierge va s'ouvrir.
selectionne tout le texte en gras ci-dessous, puis (clic droit/copier ou ctrl+c) :
___________________________________________________
Kill::
Registry::
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SM_IAN"=-
"QuickTime Task"=-
"HP Software Update"=-
[HKU\S-1-5-21-1597630779-1744249760-3803648878-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"pdhlzjpdpr"=-
"GjbWkqNJBC.exe"=-
[-HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
[-HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a8f9752d-e2b8-4e7a-86b5-499f4330e2fe}]
[-HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E87806B5-E908-45FD-AF5E-957D83E58E68}]
[-HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[-HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
[-HKCR\Applications\_C6D74A90F984843360BEB0.exe]
[-HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}]
[-HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}]
[-HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}]
[-HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]
[-HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\541a5ae1-3c6e-4f5b-9422-097f848c0877]
[-HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70441FD0-CBDD-447F-BAD7-40EF3A51181A}]
[-HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF034EA-7B46-48D3-8895-8A14B32AE445}]
[-HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7}]
[-HKCU\Software\BearShare]
[-HKCU\Software\HardDriveEraser]
[-HKCU\Software\Save Tube Video]
[-HKCU\Software\SkyMedia]
[-HKCU\Software\WebMediaPlayer]
[-HKLM\Software\AskTBar]
[-HKLM\Software\conduitEngine]
[-HKLM\Software\WebMediaPlayer]
[HKLM\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring"=DWORD:00000000
txt::
C:\Windows\System32\Tasks\{11AF5AF3-7030-4EFE-B0F1-658B887AAD5C}
C:\Windows\System32\Tasks\{29207C44-8E9E-47EB-B442-317B736DBF11}
C:\Windows\System32\Tasks\{7B7C3143-2A97-451E-910E-51D56A4F0297}
C:\Windows\System32\Tasks\{C5411C47-12DF-4177-A45F-71139B38070C}
C:\Windows\System32\Tasks\{DEF56929-7371-4033-9ABE-AEBEA125CC87}
file::
c:\users\flochon\appdata\local\pdhlzjpdpr.exe
C:\ProgramData\GjbWkqNJBC.exe
C:\Windows\Installer\{9061CEF2-51F5-42C9-8A70-9ED351C6597A}\_C6D74A90F984843360BEB0.exe
C:\Users\Flochon\Desktop\softonic_ggl_1.5.11.5.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visitez eBay.be.lnk
C:\Users\Flochon\AppData\Local\cdcbxgo_s2m.xml
command::
for %%a in (
"*.jpd"
"*.jpg"
"*.htm"
"*.emf"
) do if exist "C:\Users\Flochon\AppData\Local\Temp\Low\%%~a" (
attrib -H "C:\Users\Flochon\AppData\Local\Temp\Low\%%~a"
del /f /q "C:\Users\Flochon\AppData\Local\Temp\Low\%%~a">nul 2>&1
echo Supprime : C:\Users\Flochon\AppData\Local\Temp\Low\%%~a >> %Homedrive%\Pre_script.txt )
folder::
C:\Program Files\ConduitEngine
C:\Program Files\Eazel-FR
C:\Program Files\Softonic
C:\Program Files\WebMediaPlayer
C:\Users\Flochon\AppData\Roaming\Mozilla\Firefox\Profiles\opntlxeq.default\extensions\ffxtlbra@softonic.com
C:\04e9d5f1c4bedea71e19e55d82
C:\2e4c6f20a67af34847532cecbf6b9b
C:\39b69b0d6982ab1cd2c0
C:\45d7d30966c669574888b565798c
C:\525b5989a02872f5e9df7e
C:\5e76d7a7bda70158042b8fa1da79c3
C:\8f92a5098d92f505ce4a05561004c904
C:\bdc7d93ddb104b39840b1e372708
C:\d874694120b79893ac
C:\df64bc1eae9da40da57c79f5be59717d
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebMediaPlayer
C:\ProgramData\6279
C:\Users\Flochon\AppData\Local\Conduit
C:\Program Files\Ask.com
C:\Program Files\AskTBar
C:\Program Files\ConduitEngine
C:\Program Files\WebMediaPlayer
search::
epurcbefrver20.dll
clean::
Reboot::
___________________________________________________
colle-le ensuite (clic droit/coller ou ctrl+V) dans la page vierge.
puis onglet fichier => enregistrer (pas enregistrer sous...) , puis ferme le texte
des fenetres noires risquent de clignoter , c'est normal , c'est le programme qui travaille
poste Pre_Script.txt qui apparaitra sur le bureau en fin de travail
=======================
relance Pre_scan , choisis Tools , puis TDSSkiller
l'outil va telecharger la derniere version directement chez Kaspersky
L'écran de TDSSKiller s'affiche:
Illustration
- Laisser cochées les 2 options par défaut -Visible via l'onglet "change parameter".
Illustration
▶ Et coche les 2 options supplémentaires:
Illustration
▶ Clique sur Start scan pour lancer l'analyse.
- Si une menace est détectée (Threats detected) vérifie que, suivant le cas:
En général, laisse les options proposées par défaut par l'outil
l'option "delete" (effacer) est bien cochée pour la famille TDL2
l'option "delete" (effacer) est bien cochée pour tout objet de la forme chiffre_aléatoire:chiffre_aléatoire.exe
l'option "delete" (effacer) est bien cochée pour tout service de la forme chiffre et/ou lettre aléatoire (hidden file)
l'option "cure" (réparer ) pour la famille TDL3.
l'option "cure" (réparer ) pour la famille tdl4(\HardDisk0\MBR).
l'option "cure" (réparer) pour la famille Rootkit.Win32.ZAccess
▶ puis clique sur Continue.
- laisse l'action par défaut "skip" (sauter) pour les "suspicious objects. low risks", avant de savoir ce que c'est, puis clique sur Continue.
Illustration
En fin d'analyse il peut être demandé de relancer la machine:
▶ clique sur Reboot Now.
▶ Si aucun reboot n'est demandé, clique sur le bouton Report et poste le contenu du fichier qui s'affiche.
▶ Si un reboot est demandé, aprés redémarrage tu trouveras le contenu du rapport de TDSSKiller ici:
SystemDrive\TDSSKiller.Version_Date_Heure_log.txt)
[SystemDrive représente la partition sur laquelle est installé le système, généralement C:]
-
et pourquoi tu l as supprimé ? tu vas meme pas pouvoir faire le script faut que tu refasses un scan , car pour le script , le progreamme utilise des modules qu il a installés dans le dossier PRe_scan...
première fois qu'on me la fait celle-là !! -
désolé de l'avoir supprimer mais il était marqué que je devais supprimer pre scan...!!!???
je referai un scan ce soir en espérant que les liens fonctionnent car hier pas possible... -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
-
c'était inscrit dans la conversatin tout au-dessus....
je refais un scan -
-
-
est-ce que je dois m'enregistrer sur le lien que vous m'avez donné pour vous envoyer le reboot?
-
voilà j'ai réussi à tout faire est-ce qu'il y a des rapports à vus envoyer???
si pas merci pour votre aide
flochon -
▶ Télécharge Sur cette page : AdwCleaner (de Xplode)
▶ clique sur Télécharger et enregistre le fichier sur ton Bureau
▶ Double-clique sur l'icône AdwCleaner0.exe pour lancer l'installation
==================================
▶▶▶ Sous Vista et Windows 7 /!\ :
il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur
==================================
Sur le menu principal :
▶ clique sur Suppression et patiente le temps de l'analyse
▶ poste le contenu du rapport que tu trouveras dans ton disque dur c:\ADwcleaner[Sx].txt ou son contenu s'il s'ouvre. -
voilà j'ai fais la procédure indiquée ci-dessus et posté sur votre adresse.
-
lol hello le fichier adwcleaner ne me sert à rien de mon coté c est ici qu il fallait le mettre :)
# AdwCleaner v1.503 - Rapport créé le 31/03/2012 à 09:47:20
# Mis à jour le 24/03/2012 par Xplode
# Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Nom d'utilisateur : Flochon - PC-DE-FLOCHON
# Exécuté depuis : C:\Users\Flochon\Desktop\adwcleaner.exe
# Option [Suppression]
***** [Services] *****
***** [Fichiers / Dossiers] *****
Dossier Supprimé : C:\Users\Flochon\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\Flochon\AppData\LocalLow\ConduitEngine
Dossier Supprimé : C:\Users\Flochon\AppData\LocalLow\PriceGong
Dossier Supprimé : C:\Users\Flochon\AppData\LocalLow\Toolbar4
Dossier Supprimé : C:\Users\Flochon\AppData\Local\Temp\AskSearch
Fichier Supprimé : C:\Windows\system32\conduitEngine.tmp
***** [H. Navipromo] *****
***** [Registre] *****
[*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2009791
[*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2095689
Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
Clé Supprimée : HKCU\Software\AppDataLow\Software\conduitEngine
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\conduitEngine
Clé Supprimée : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
Clé Supprimée : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
Clé Supprimée : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Clé Supprimée : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
Clé Supprimée : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
Clé Supprimée : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{258C9770-1713-4021-8D7E-1F184A2BD754}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
***** [Navigateurs] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Le registre ne contient aucune entrée illégitime.
-\\ Mozilla Firefox v10.0.2 (fr)
Nom du profil : default
Fichier : C:\Users\Flochon\AppData\Roaming\Mozilla\FireFox\Profiles\opntlxeq.default\prefs.js
C:\Users\Flochon\AppData\Roaming\Mozilla\FireFox\Profiles\opntlxeq.default\user.js ... Supprimé !
Supprimée : user_pref("extensions.softonic_i.aflt", "SD");
Supprimée : user_pref("extensions.softonic_i.dfltLng", "fr");
Supprimée : user_pref("extensions.softonic_i.excTlbr", false);
Supprimée : user_pref("extensions.softonic_i.id", "071ee346000000000000001a73a85a50");
Supprimée : user_pref("extensions.softonic_i.instlDay", "15425");
Supprimée : user_pref("extensions.softonic_i.instlRef", "MON00012");
Supprimée : user_pref("extensions.softonic_i.newTab", false);
Supprimée : user_pref("extensions.softonic_i.prdct", "softonic");
Supprimée : user_pref("extensions.softonic_i.prtnrId", "softonic");
Supprimée : user_pref("extensions.softonic_i.smplGrp", "eng7");
Supprimée : user_pref("extensions.softonic_i.tlbrId", "fr12JANdefault");
Supprimée : user_pref("extensions.softonic_i.tlbrSrchUrl", "hxxp://search.softonic.com/MON00012/tb_v1?SearchSour[...]
Supprimée : user_pref("extensions.softonic_i.vrsn", "1.5.11.5");
Supprimée : user_pref("extensions.softonic_i.vrsnTs", "1.5.11.514:58:31");
Supprimée : user_pref("extensions.softonic_i.vrsni", "1.5.11.5");
-\\ Google Chrome v [Impossible d'obtenir la version]
Fichier : C:\Users\Flochon\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Le fichier ne contient aucune entrée illégitime.
*************************
AdwCleaner[S1].txt - [9683 octets] - [31/03/2012 09:47:20]
########## EOF - C:\AdwCleaner[S1].txt - [9811 octets] ##########
-
-
-
18:52:55.0444 2308 TDSS rootkit removing tool 2.7.23.0 Mar 26 2012 13:40:18
18:52:55.0616 2308 ============================================================
18:52:55.0616 2308 Current date / time: 2012/03/29 18:52:55.0616
18:52:55.0616 2308 SystemInfo:
18:52:55.0616 2308
18:52:55.0616 2308 OS Version: 6.0.6002 ServicePack: 2.0
18:52:55.0616 2308 Product type: Workstation
18:52:55.0616 2308 ComputerName: PC-DE-FLOCHON
18:52:55.0616 2308 UserName: Flochon
18:52:55.0616 2308 Windows directory: C:\Windows
18:52:55.0616 2308 System windows directory: C:\Windows
18:52:55.0616 2308 Processor architecture: Intel x86
18:52:55.0616 2308 Number of processors: 2
18:52:55.0616 2308 Page size: 0x1000
18:52:55.0616 2308 Boot type: Normal boot
18:52:55.0616 2308 ============================================================
18:53:01.0247 2308 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
18:53:01.0247 2308 \Device\Harddisk0\DR0:
18:53:01.0247 2308 MBR used
18:53:01.0247 2308 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x11AB2ED5
18:53:01.0247 2308 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x11AB2F14, BlocksNum 0xF65BAD
18:53:01.0357 2308 Initialize success
18:53:01.0357 2308 ============================================================
18:53:13.0041 4628 ============================================================
18:53:13.0041 4628 Scan started
18:53:13.0041 4628 Mode: Manual; SigCheck; TDLFS;
18:53:13.0041 4628 ============================================================
18:53:14.0351 4628 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
18:53:14.0757 4628 ACPI - ok
18:53:15.0100 4628 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
18:53:15.0147 4628 adp94xx - ok
18:53:15.0381 4628 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
18:53:15.0428 4628 adpahci - ok
18:53:15.0724 4628 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
18:53:15.0740 4628 adpu160m - ok
18:53:16.0005 4628 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
18:53:16.0036 4628 adpu320 - ok
18:53:16.0161 4628 AeLookupSvc (9d1fda9e086ba64e3c93c9de32461bcf) C:\Windows\System32\aelupsvc.dll
18:53:16.0504 4628 AeLookupSvc - ok
18:53:16.0769 4628 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
18:53:17.0347 4628 AFD - ok
18:53:17.0721 4628 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
18:53:17.0737 4628 agp440 - ok
18:53:17.0955 4628 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
18:53:18.0002 4628 aic78xx - ok
18:53:18.0158 4628 ALG (a1545b731579895d8cc44fc0481c1192) C:\Windows\System32\alg.exe
18:53:18.0376 4628 ALG - ok
18:53:18.0595 4628 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
18:53:18.0610 4628 aliide - ok
18:53:18.0844 4628 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
18:53:18.0860 4628 amdagp - ok
18:53:19.0156 4628 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
18:53:19.0172 4628 amdide - ok
18:53:19.0421 4628 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
18:53:19.0733 4628 AmdK7 - ok
18:53:19.0999 4628 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys
18:53:20.0092 4628 AmdK8 - ok
18:53:20.0279 4628 Appinfo (c6d704c7f0434dc791aac37cac4b6e14) C:\Windows\System32\appinfo.dll
18:53:20.0373 4628 Appinfo - ok
18:53:20.0779 4628 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
18:53:20.0794 4628 arc - ok
18:53:21.0091 4628 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
18:53:21.0122 4628 arcsas - ok
18:53:21.0387 4628 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
18:53:21.0465 4628 AsyncMac - ok
18:53:21.0746 4628 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
18:53:21.0777 4628 atapi - ok
18:53:21.0902 4628 AudioEndpointBuilder (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll
18:53:22.0011 4628 AudioEndpointBuilder - ok
18:53:22.0058 4628 Audiosrv (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll
18:53:22.0120 4628 Audiosrv - ok
18:53:22.0307 4628 avg9wd (c4d15594db5be042d3346ea58df87d89) C:\Program Files\AVG\AVG9\avgwdsvc.exe
18:53:22.0526 4628 avg9wd - ok
18:53:22.0775 4628 AvgLdx86 (b8c187439d27aba430dd69fdcf1fa657) C:\Windows\system32\Drivers\avgldx86.sys
18:53:22.0807 4628 AvgLdx86 - ok
18:53:23.0056 4628 AvgMfx86 (80ff2b1b7eeda966394f0baa895bbf4b) C:\Windows\system32\Drivers\avgmfx86.sys
18:53:23.0087 4628 AvgMfx86 - ok
18:53:23.0353 4628 AvgTdiX (9a7a93388f503a34e7339ae7f9997449) C:\Windows\system32\Drivers\avgtdix.sys
18:53:23.0384 4628 AvgTdiX - ok
18:53:23.0758 4628 BCM43XV (746f59822a5187510471fc46889b8cc9) C:\Windows\system32\DRIVERS\bcmwl6.sys
18:53:23.0867 4628 BCM43XV - ok
18:53:23.0930 4628 BCM43XX (746f59822a5187510471fc46889b8cc9) C:\Windows\system32\DRIVERS\bcmwl6.sys
18:53:23.0992 4628 BCM43XX - ok
18:53:24.0257 4628 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
18:53:24.0351 4628 Beep - ok
18:53:24.0476 4628 BFE (c789af0f724fda5852fb9a7d3a432381) C:\Windows\System32\bfe.dll
18:53:24.0554 4628 BFE - ok
18:53:24.0694 4628 BITS (93952506c6d67330367f7e7934b6a02f) C:\Windows\System32\qmgr.dll
18:53:24.0881 4628 BITS - ok
18:53:25.0069 4628 blbdrive - ok
18:53:25.0287 4628 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
18:53:25.0349 4628 bowser - ok
18:53:25.0646 4628 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
18:53:25.0708 4628 BrFiltLo - ok
18:53:25.0942 4628 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
18:53:26.0067 4628 BrFiltUp - ok
18:53:26.0192 4628 Browser (a3629a0c4226f9e9c72faaeebc3ad33c) C:\Windows\System32\browser.dll
18:53:26.0363 4628 Browser - ok
18:53:26.0597 4628 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
18:53:26.0753 4628 Brserid - ok
18:53:27.0019 4628 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
18:53:27.0190 4628 BrSerWdm - ok
18:53:27.0518 4628 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
18:53:27.0658 4628 BrUsbMdm - ok
18:53:28.0033 4628 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
18:53:28.0376 4628 BrUsbSer - ok
18:53:29.0686 4628 BthEnum (6d39c954799b63ba866910234cf7d726) C:\Windows\system32\DRIVERS\BthEnum.sys
18:53:29.0998 4628 BthEnum - ok
18:53:30.0544 4628 BTHMODEM (9a966a8e86d1771911ae34a20d11bff3) C:\Windows\system32\DRIVERS\bthmodem.sys
18:53:30.0669 4628 BTHMODEM - ok
18:53:31.0215 4628 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys
18:53:31.0355 4628 BthPan - ok
18:53:31.0730 4628 BTHPORT (611ff3f2f095c8d4a6d4cfd9dcc09793) C:\Windows\system32\Drivers\BTHport.sys
18:53:31.0948 4628 BTHPORT - ok
18:53:32.0167 4628 BthServ (a4c8377fa4a994e07075107dbe2e3dce) C:\Windows\System32\bthserv.dll
18:53:32.0323 4628 BthServ - ok
18:53:32.0650 4628 BTHUSB (d330803eab2a15caec7f011f1d4cb30e) C:\Windows\system32\Drivers\BTHUSB.sys
18:53:32.0775 4628 BTHUSB - ok
18:53:33.0087 4628 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
18:53:33.0290 4628 cdfs - ok
18:53:33.0773 4628 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
18:53:33.0914 4628 cdrom - ok
18:53:34.0070 4628 CertPropSvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll
18:53:34.0210 4628 CertPropSvc - ok
18:53:34.0475 4628 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
18:53:34.0694 4628 circlass - ok
18:53:34.0850 4628 CLCapSvc (dbafc6734c054feef9087754bd80f847) C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
18:53:34.0881 4628 CLCapSvc ( UnsignedFile.Multi.Generic ) - warning
18:53:34.0881 4628 CLCapSvc - detected UnsignedFile.Multi.Generic (1)
18:53:35.0021 4628 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
18:53:35.0084 4628 CLFS - ok
18:53:35.0255 4628 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:53:35.0349 4628 clr_optimization_v2.0.50727_32 - ok
18:53:35.0474 4628 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:53:35.0755 4628 clr_optimization_v4.0.30319_32 - ok
18:53:35.0895 4628 CLSched (e67f8f036fd882e4ab62501c0d45b536) C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
18:53:35.0973 4628 CLSched ( UnsignedFile.Multi.Generic ) - warning
18:53:35.0973 4628 CLSched - detected UnsignedFile.Multi.Generic (1)
18:53:36.0394 4628 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
18:53:36.0535 4628 CmBatt - ok
18:53:36.0971 4628 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
18:53:37.0034 4628 cmdide - ok
18:53:37.0174 4628 Com4Qlb (a5aaa656403e5e7afa9647ce73dbf944) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
18:53:37.0424 4628 Com4Qlb ( UnsignedFile.Multi.Generic ) - warning
18:53:37.0424 4628 Com4Qlb - detected UnsignedFile.Multi.Generic (1)
18:53:37.0798 4628 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
18:53:37.0861 4628 Compbatt - ok
18:53:38.0079 4628 COMSysApp - ok
18:53:38.0360 4628 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
18:53:38.0407 4628 crcdisk - ok
18:53:38.0812 4628 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
18:53:38.0953 4628 Crusoe - ok
18:53:39.0436 4628 CryptSvc (fb27772beaf8e1d28ccd825c09da939b) C:\Windows\system32\cryptsvc.dll
18:53:39.0545 4628 CryptSvc - ok
18:53:39.0623 4628 DcomLaunch (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll
18:53:39.0764 4628 DcomLaunch - ok
18:53:40.0045 4628 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
18:53:40.0169 4628 DfsC - ok
18:53:40.0559 4628 DFSR (2cc3dcfb533a1035b13dcab6160ab38b) C:\Windows\system32\DFSR.exe
18:53:40.0934 4628 DFSR - ok
18:53:41.0183 4628 Dhcp (9028559c132146fb75eb7acf384b086a) C:\Windows\System32\dhcpcsvc.dll
18:53:41.0293 4628 Dhcp - ok
18:53:41.0589 4628 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
18:53:41.0620 4628 disk - ok
18:53:41.0745 4628 Dnscache (57d762f6f5974af0da2be88a3349baaa) C:\Windows\System32\dnsrslvr.dll
18:53:41.0932 4628 Dnscache - ok
18:53:42.0041 4628 dot3svc (324fd74686b1ef5e7c19a8af49e748f6) C:\Windows\System32\dot3svc.dll
18:53:42.0197 4628 dot3svc - ok
18:53:42.0431 4628 DPS (a622e888f8aa2f6b49e9bc466f0e5def) C:\Windows\system32\dps.dll
18:53:42.0572 4628 DPS - ok
18:53:42.0853 4628 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
18:53:42.0977 4628 drmkaud - ok
18:53:43.0274 4628 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
18:53:43.0367 4628 DXGKrnl - ok
18:53:43.0742 4628 E100B (c0b00e55cf82d122d25983c7a6a53dea) C:\Windows\system32\DRIVERS\e100b325.sys
18:53:43.0945 4628 E100B - ok
18:53:44.0428 4628 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
18:53:44.0647 4628 E1G60 - ok
18:53:44.0943 4628 eabfiltr (e88b0cfcecf745211bba87f44f85d0dd) C:\Windows\system32\DRIVERS\eabfiltr.sys
18:53:44.0990 4628 eabfiltr - ok
18:53:45.0161 4628 EapHost (c0b95e40d85cd807d614e264248a45b9) C:\Windows\System32\eapsvc.dll
18:53:45.0286 4628 EapHost - ok
18:53:45.0583 4628 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
18:53:45.0629 4628 Ecache - ok
18:53:45.0785 4628 ehRecvr (9be3744d295a7701eb425332014f0797) C:\Windows\ehome\ehRecvr.exe
18:53:45.0941 4628 ehRecvr - ok
18:53:46.0082 4628 ehSched (ad1870c8e5d6dd340c829e6074bf3c3f) C:\Windows\ehome\ehsched.exe
18:53:46.0238 4628 ehSched - ok
18:53:46.0519 4628 ehstart (c27c4ee8926e74aa72efcab24c5242c3) C:\Windows\ehome\ehstart.dll
18:53:46.0597 4628 ehstart - ok
18:53:46.0955 4628 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
18:53:47.0002 4628 elxstor - ok
18:53:47.0330 4628 EMDMgmt (4e6b23dfc917ea39306b529b773950f4) C:\Windows\system32\emdmgmt.dll
18:53:47.0720 4628 EMDMgmt - ok
18:53:47.0876 4628 EraserUtilRebootDrv - ok
18:53:48.0281 4628 EventSystem (67058c46504bc12d821f38cf99b7b28f) C:\Windows\system32\es.dll
18:53:48.0453 4628 EventSystem - ok
18:53:48.0718 4628 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
18:53:48.0843 4628 exfat - ok
18:53:49.0124 4628 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
18:53:49.0264 4628 fastfat - ok
18:53:49.0685 4628 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
18:53:49.0841 4628 fdc - ok
18:53:49.0966 4628 fdPHost (6629b5f0e98151f4afdd87567ea32ba3) C:\Windows\system32\fdPHost.dll
18:53:50.0060 4628 fdPHost - ok
18:53:50.0169 4628 FDResPub (89ed56dce8e47af40892778a5bd31fd2) C:\Windows\system32\fdrespub.dll
18:53:50.0309 4628 FDResPub - ok
18:53:50.0809 4628 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
18:53:50.0840 4628 FileInfo - ok
18:53:51.0339 4628 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
18:53:51.0464 4628 Filetrace - ok
18:53:51.0745 4628 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
18:53:52.0010 4628 flpydisk - ok
18:53:52.0369 4628 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
18:53:52.0415 4628 FltMgr - ok
18:53:52.0727 4628 FontCache (8ce364388c8eca59b14b539179276d44) C:\Windows\system32\FntCache.dll
18:53:52.0852 4628 FontCache - ok
18:53:53.0008 4628 FontCache3.0.0.0 (c7fbdd1ed42f82bfa35167a5c9803ea3) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
18:53:53.0055 4628 FontCache3.0.0.0 - ok
18:53:53.0305 4628 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\Windows\system32\DRIVERS\fssfltr.sys
18:53:53.0336 4628 fssfltr - ok
18:53:53.0710 4628 fsssvc (4ce9dac1518ff7e77bd213e6394b9d77) C:\Program Files\Windows Live\Family Safety\fsssvc.exe
18:53:54.0209 4628 fsssvc - ok
18:53:54.0662 4628 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
18:53:54.0740 4628 Fs_Rec - ok
18:53:55.0067 4628 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
18:53:55.0114 4628 gagp30kx - ok
18:53:55.0411 4628 gpsvc (cd5d0aeee35dfd4e986a5aa1500a6e66) C:\Windows\System32\gpsvc.dll
18:53:55.0567 4628 gpsvc - ok
18:53:55.0894 4628 HBtnKey (de15777902a5d9121857d155873a1d1b) C:\Windows\system32\DRIVERS\cpqbttn.sys
18:53:55.0941 4628 HBtnKey - ok
18:53:56.0440 4628 HdAudAddService (a08f4808fb19a40792a6056848187afe) C:\Windows\system32\drivers\CHDART.sys
18:53:56.0549 4628 HdAudAddService - ok
18:53:56.0986 4628 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
18:53:57.0127 4628 HDAudBus - ok
18:53:57.0485 4628 HidBth (fcb3f4be408f72c1bd81bcaba87fc22f) C:\Windows\system32\DRIVERS\hidbth.sys
18:53:57.0563 4628 HidBth - ok
18:53:57.0829 4628 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
18:53:58.0125 4628 HidIr - ok
18:53:58.0297 4628 hidserv (84067081f3318162797385e11a8f0582) C:\Windows\system32\hidserv.dll
18:53:58.0390 4628 hidserv - ok
18:53:58.0687 4628 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
18:53:58.0827 4628 HidUsb - ok
18:53:58.0999 4628 hkmsvc (d8ad255b37da92434c26e4876db7d418) C:\Windows\system32\kmsvc.dll
18:53:59.0108 4628 hkmsvc - ok
18:53:59.0201 4628 HP Health Check Service (a19b0bb5a7eb6df2dd4a0711d36955ee) c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
18:53:59.0233 4628 HP Health Check Service ( UnsignedFile.Multi.Generic ) - warning
18:53:59.0233 4628 HP Health Check Service - detected UnsignedFile.Multi.Generic (1)
18:53:59.0560 4628 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
18:53:59.0591 4628 HpCISSs - ok
18:53:59.0779 4628 hpqwmiex (04c1dcbb226c6ae647b794833ce3ceb6) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
18:53:59.0825 4628 hpqwmiex ( UnsignedFile.Multi.Generic ) - warning
18:53:59.0825 4628 hpqwmiex - detected UnsignedFile.Multi.Generic (1)
18:54:00.0387 4628 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
18:54:00.0496 4628 HSFHWAZL - ok
18:54:00.0902 4628 HSF_DPV (0d7a055a840c3099c37d576573a42cd5) C:\Windows\system32\DRIVERS\HSX_DPV.sys
18:54:01.0120 4628 HSF_DPV - ok
18:54:01.0463 4628 HSXHWAZL (bcc074692882c056b0e1ac97f3331a02) C:\Windows\system32\DRIVERS\HSXHWAZL.sys
18:54:01.0510 4628 HSXHWAZL - ok
18:54:01.0807 4628 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
18:54:01.0994 4628 HTTP - ok
18:54:02.0275 4628 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
18:54:02.0306 4628 i2omp - ok
18:54:02.0555 4628 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
18:54:02.0696 4628 i8042prt - ok
18:54:03.0055 4628 ialm (496db78e6a0c4c44023d9a92b4a7ac31) C:\Windows\system32\DRIVERS\igdkmd32.sys
18:54:03.0398 4628 ialm - ok
18:54:04.0084 4628 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
18:54:05.0005 4628 iaStorV - ok
18:54:05.0239 4628 IDriverT (1cf03c69b49acb70c722df92755c0c8c) C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
18:54:05.0348 4628 IDriverT ( UnsignedFile.Multi.Generic ) - warning
18:54:05.0348 4628 IDriverT - detected UnsignedFile.Multi.Generic (1)
18:54:05.0566 4628 idsvc (98477b08e61945f974ed9fdc4cb6bdab) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:54:05.0738 4628 idsvc - ok
18:54:06.0019 4628 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
18:54:06.0050 4628 iirsp - ok
18:54:06.0284 4628 IKEEXT (9908d8a397b76cd8d31d0d383c5773c9) C:\Windows\System32\ikeext.dll
18:54:06.0440 4628 IKEEXT - ok
18:54:06.0799 4628 intelide (97469037714070e45194ed318d636401) C:\Windows\system32\drivers\intelide.sys
18:54:06.0830 4628 intelide - ok
18:54:07.0267 4628 intelppm (ce44cc04262f28216dd4341e9e36a16f) C:\Windows\system32\DRIVERS\intelppm.sys
18:54:07.0438 4628 intelppm - ok
18:54:07.0625 4628 IPBusEnum (9ac218c6e6105477484c6fdbe7d409a4) C:\Windows\system32\ipbusenum.dll
18:54:07.0703 4628 IPBusEnum - ok
18:54:08.0093 4628 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:54:08.0171 4628 IpFilterDriver - ok
18:54:08.0359 4628 iphlpsvc (1998bd97f950680bb55f55a7244679c2) C:\Windows\System32\iphlpsvc.dll
18:54:08.0468 4628 iphlpsvc - ok
18:54:08.0655 4628 IpInIp - ok
18:54:09.0045 4628 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
18:54:09.0201 4628 IPMIDRV - ok
18:54:09.0716 4628 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
18:54:09.0809 4628 IPNAT - ok
18:54:10.0246 4628 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
18:54:10.0449 4628 IRENUM - ok
18:54:11.0104 4628 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
18:54:11.0135 4628 isapnp - ok
18:54:11.0479 4628 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
18:54:11.0603 4628 iScsiPrt - ok
18:54:11.0884 4628 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
18:54:11.0915 4628 iteatapi - ok
18:54:12.0181 4628 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
18:54:12.0227 4628 iteraid - ok
18:54:12.0508 4628 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
18:54:12.0539 4628 kbdclass - ok
18:54:12.0851 4628 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
18:54:12.0945 4628 kbdhid - ok
18:54:13.0054 4628 KeyIso (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
18:54:13.0163 4628 KeyIso - ok
18:54:13.0507 4628 KSecDD (2b2f1638466e8cb091400c9019cc730e) C:\Windows\system32\Drivers\ksecdd.sys
18:54:13.0600 4628 KSecDD - ok
18:54:13.0834 4628 KtmRm (8078f8f8f7a79e2e6b494523a828c585) C:\Windows\system32\msdtckrm.dll
18:54:14.0084 4628 KtmRm - ok
18:54:14.0333 4628 LanmanServer (1bf5eebfd518dd7298434d8c862f825d) C:\Windows\system32\srvsvc.dll
18:54:14.0864 4628 LanmanServer - ok
18:54:15.0051 4628 LanmanWorkstation (1db69705b695b987082c8baec0c6b34f) C:\Windows\System32\wkssvc.dll
18:54:15.0223 4628 LanmanWorkstation - ok
18:54:15.0410 4628 LightScribeService (31d8b705dcd5f2366186e731f87c7a71) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
18:54:15.0566 4628 LightScribeService - ok
18:54:15.0909 4628 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
18:54:16.0034 4628 lltdio - ok
18:54:16.0330 4628 lltdsvc (2d5a428872f1442631d0959a34abff63) C:\Windows\System32\lltdsvc.dll
18:54:16.0549 4628 lltdsvc - ok
18:54:16.0767 4628 lmhosts (35d40113e4a5b961b6ce5c5857702518) C:\Windows\System32\lmhsvc.dll
18:54:17.0141 4628 lmhosts - ok
18:54:17.0516 4628 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
18:54:17.0563 4628 LSI_FC - ok
18:54:18.0155 4628 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
18:54:18.0202 4628 LSI_SAS - ok
18:54:18.0811 4628 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
18:54:18.0935 4628 LSI_SCSI - ok
18:54:19.0357 4628 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
18:54:19.0637 4628 luafv - ok
18:54:19.0778 4628 Mcx2Svc (aef9babb8a506bc4ce0451a64aaded46) C:\Windows\system32\Mcx2Svc.dll
18:54:19.0871 4628 Mcx2Svc - ok
18:54:20.0511 4628 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\Windows\system32\DRIVERS\mdmxsdk.sys
18:54:20.0714 4628 mdmxsdk - ok
18:54:21.0322 4628 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
18:54:21.0400 4628 megasas - ok
18:54:21.0634 4628 MMCSS (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll
18:54:21.0728 4628 MMCSS - ok
18:54:22.0211 4628 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
18:54:22.0305 4628 Modem - ok
18:54:22.0913 4628 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
18:54:22.0976 4628 monitor - ok
18:54:23.0303 4628 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
18:54:23.0350 4628 mouclass - ok
18:54:23.0678 4628 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
18:54:23.0756 4628 mouhid - ok
18:54:24.0208 4628 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
18:54:24.0239 4628 MountMgr - ok
18:54:24.0567 4628 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
18:54:24.0614 4628 mpio - ok
18:54:24.0941 4628 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
18:54:25.0019 4628 mpsdrv - ok
18:54:25.0285 4628 MpsSvc (5de62c6e9108f14f6794060a9bdecaec) C:\Windows\system32\mpssvc.dll
18:54:25.0456 4628 MpsSvc - ok
18:54:25.0784 4628 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
18:54:25.0815 4628 Mraid35x - ok
18:54:26.0158 4628 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
18:54:26.0221 4628 MRxDAV - ok
18:54:26.0501 4628 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
18:54:26.0579 4628 mrxsmb - ok
18:54:26.0938 4628 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:54:27.0032 4628 mrxsmb10 - ok
18:54:27.0344 4628 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:54:27.0406 4628 mrxsmb20 - ok
18:54:27.0671 4628 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys
18:54:27.0718 4628 msahci - ok
18:54:28.0202 4628 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
18:54:28.0233 4628 msdsm - ok
18:54:28.0373 4628 MSDTC (fd7520cc3a80c5fc8c48852bb24c6ded) C:\Windows\System32\msdtc.exe
18:54:29.0122 4628 MSDTC - ok
18:54:29.0387 4628 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
18:54:29.0481 4628 Msfs - ok
18:54:30.0043 4628 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
18:54:30.0074 4628 msisadrv - ok
18:54:30.0370 4628 MSiSCSI (85466c0757a23d9a9aecdc0755203cb2) C:\Windows\system32\iscsiexe.dll
18:54:30.0495 4628 MSiSCSI - ok
18:54:30.0511 4628 msiserver - ok
18:54:31.0010 4628 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
18:54:31.0166 4628 MSKSSRV - ok
18:54:31.0540 4628 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
18:54:31.0665 4628 MSPCLOCK - ok
18:54:32.0133 4628 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
18:54:32.0211 4628 MSPQM - ok
18:54:32.0773 4628 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
18:54:32.0804 4628 MsRPC - ok
18:54:33.0334 4628 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
18:54:33.0365 4628 mssmbios - ok
18:54:33.0631 4628 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
18:54:33.0724 4628 MSTEE - ok
18:54:34.0208 4628 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
18:54:34.0270 4628 Mup - ok
18:54:34.0473 4628 napagent (e4eaf0c5c1b41b5c83386cf212ca9584) C:\Windows\system32\qagentRT.dll
18:54:34.0582 4628 napagent - ok
18:54:34.0847 4628 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
18:54:34.0941 4628 NativeWifiP - ok
18:54:35.0315 4628 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
18:54:35.0393 4628 NDIS - ok
18:54:35.0674 4628 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
18:54:35.0737 4628 NdisTapi - ok
18:54:35.0955 4628 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
18:54:36.0033 4628 Ndisuio - ok
18:54:36.0283 4628 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
18:54:36.0376 4628 NdisWan - ok
18:54:36.0673 4628 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
18:54:36.0735 4628 NDProxy - ok
18:54:37.0016 4628 Nero BackItUp Scheduler 3 (40d7d0a208ee863bca8d89e299216f15) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
18:54:37.0203 4628 Nero BackItUp Scheduler 3 - ok
18:54:37.0609 4628 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
18:54:37.0718 4628 NetBIOS - ok
18:54:38.0186 4628 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
18:54:38.0342 4628 netbt - ok
18:54:38.0498 4628 Netlogon (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
18:54:38.0529 4628 Netlogon - ok
18:54:38.0654 4628 Netman (c8052711daecc48b982434c5116ca401) C:\Windows\System32\netman.dll
18:54:38.0779 4628 Netman - ok
18:54:38.0888 4628 netprofm (2ef3bbe22e5a5acd1428ee387a0d0172) C:\Windows\System32\netprofm.dll
18:54:39.0013 4628 netprofm - ok
18:54:39.0153 4628 NetTcpPortSharing (d6c4e4a39a36029ac0813d476fbd0248) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:54:39.0200 4628 NetTcpPortSharing - ok
18:54:39.0418 4628 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
18:54:39.0449 4628 nfrd960 - ok
18:54:39.0621 4628 NlaSvc (2997b15415f9bbe05b5a4c1c85e0c6a2) C:\Windows\System32\nlasvc.dll
18:54:39.0730 4628 NlaSvc - ok
18:54:39.0964 4628 NMIndexingService (eba1b4bf2e2375abdadedb649f283541) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
18:54:40.0136 4628 NMIndexingService - ok
18:54:40.0401 4628 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
18:54:40.0463 4628 Npfs - ok
18:54:40.0604 4628 nsi (8bb86f0c7eea2bded6fe095d0b4ca9bd) C:\Windows\system32\nsisvc.dll
18:54:40.0713 4628 nsi - ok
18:54:40.0931 4628 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
18:54:41.0009 4628 nsiproxy - ok
18:54:41.0384 4628 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
18:54:41.0571 4628 Ntfs - ok
18:54:41.0836 4628 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
18:54:41.0977 4628 ntrigdigi - ok
18:54:42.0211 4628 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
18:54:42.0289 4628 Null - ok
18:54:42.0601 4628 NVENETFD (a1108084b0d2fc43dcc401735770e2a3) C:\Windows\system32\DRIVERS\nvmfdx32.sys
18:54:42.0803 4628 NVENETFD - ok
18:54:43.0677 4628 nvlddmkm (b36c3b866b0d47e2e2856ec8fd746e39) C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:54:47.0624 4628 nvlddmkm - ok
18:54:48.0232 4628 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
18:54:48.0326 4628 nvraid - ok
18:54:48.0716 4628 nvsmu (9aebc32f9d6e02ebee0369ab296fe7c8) C:\Windows\system32\DRIVERS\nvsmu.sys
18:54:48.0778 4628 nvsmu - ok
18:54:49.0028 4628 nvstor (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys
18:54:49.0090 4628 nvstor - ok
18:54:49.0371 4628 nvsvc (cf672c71844a3b407eb86042829bce09) C:\Windows\system32\nvvsvc.exe
18:54:49.0418 4628 nvsvc - ok
18:54:49.0652 4628 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
18:54:49.0699 4628 nv_agp - ok
18:54:49.0948 4628 NwlnkFlt - ok
18:54:50.0151 4628 NwlnkFwd - ok
18:54:50.0447 4628 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:54:50.0837 4628 odserv - ok
18:54:51.0087 4628 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
18:54:51.0149 4628 ohci1394 - ok
18:54:51.0290 4628 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:54:51.0399 4628 ose - ok
18:54:51.0571 4628 p2pimsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
18:54:51.0711 4628 p2pimsvc - ok
18:54:51.0758 4628 p2psvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
18:54:51.0836 4628 p2psvc - ok
18:54:52.0085 4628 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
18:54:52.0226 4628 Parport - ok
18:54:52.0460 4628 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
18:54:52.0491 4628 partmgr - ok
18:54:52.0694 4628 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
18:54:52.0834 4628 Parvdm - ok
18:54:53.0021 4628 PcaSvc (c6276ad11f4bb49b58aa1ed88537f14a) C:\Windows\System32\pcasvc.dll
18:54:53.0115 4628 PcaSvc - ok
18:54:53.0349 4628 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
18:54:53.0396 4628 pci - ok
18:54:53.0708 4628 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys
18:54:53.0739 4628 pciide - ok
18:54:54.0035 4628 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
18:54:54.0067 4628 pcmcia - ok
18:54:54.0363 4628 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
18:54:54.0659 4628 PEAUTH - ok
18:54:54.0878 4628 pla (b1689df169143f57053f795390c99db3) C:\Windows\system32\pla.dll
18:54:55.0143 4628 pla - ok
18:54:55.0268 4628 PLFlash DeviceIoControl Service (875e4e0661f3a5994df9e5e3a0a4f96b) C:\Windows\system32\IoctlSvc.exe
18:54:55.0283 4628 PLFlash DeviceIoControl Service ( UnsignedFile.Multi.Generic ) - warning
18:54:55.0283 4628 PLFlash DeviceIoControl Service - detected UnsignedFile.Multi.Generic (1)
18:54:55.0393 4628 PlugPlay (c5e7f8a996ec0a82d508fd9064a5569e) C:\Windows\system32\umpnpmgr.dll
18:54:55.0533 4628 PlugPlay - ok
18:54:55.0767 4628 PNRPAutoReg (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
18:54:55.0876 4628 PNRPAutoReg - ok
18:54:55.0939 4628 PNRPsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll
18:54:56.0048 4628 PNRPsvc - ok
18:54:56.0157 4628 PolicyAgent (d0494460421a03cd5225cca0059aa146) C:\Windows\System32\ipsecsvc.dll
18:54:56.0313 4628 PolicyAgent - ok
18:54:56.0547 4628 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
18:54:56.0641 4628 PptpMiniport - ok
18:54:56.0953 4628 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
18:54:57.0093 4628 Processor - ok
18:54:57.0233 4628 ProfSvc (0508faa222d28835310b7bfca7a77346) C:\Windows\system32\profsvc.dll
18:54:57.0358 4628 ProfSvc - ok
18:54:57.0436 4628 ProtectedStorage (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
18:54:57.0467 4628 ProtectedStorage - ok
18:54:57.0748 4628 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
18:54:57.0811 4628 PSched - ok
18:54:58.0045 4628 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\Windows\system32\Drivers\PxHelp20.sys
18:54:58.0060 4628 PxHelp20 - ok
18:54:58.0341 4628 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
18:54:58.0497 4628 ql2300 - ok
18:54:58.0731 4628 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
18:54:58.0778 4628 ql40xx - ok
18:54:58.0934 4628 QWAVE (e9ecae663f47e6cb43962d18ab18890f) C:\Windows\system32\qwave.dll
18:54:59.0012 4628 QWAVE - ok
18:54:59.0230 4628 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
18:54:59.0324 4628 QWAVEdrv - ok
18:54:59.0449 4628 RapiMgr (8f97d374ad1857e1eed85a79f29a1d3d) C:\Windows\WindowsMobile\rapimgr.dll
18:54:59.0480 4628 RapiMgr - ok
18:54:59.0714 4628 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
18:54:59.0807 4628 RasAcd - ok
18:54:59.0995 4628 RasAuto (f6a452eb4ceadbb51c9e0ee6b3ecef0f) C:\Windows\System32\rasauto.dll
18:55:00.0151 4628 RasAuto - ok
18:55:00.0369 4628 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
18:55:00.0525 4628 Rasl2tp - ok
18:55:00.0634 4628 RasMan (75d47445d70ca6f9f894b032fbc64fcf) C:\Windows\System32\rasmans.dll
18:55:00.0712 4628 RasMan - ok
18:55:00.0899 4628 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
18:55:00.0962 4628 RasPppoe - ok
18:55:01.0243 4628 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
18:55:01.0321 4628 RasSstp - ok
18:55:01.0539 4628 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
18:55:01.0601 4628 rdbss - ok
18:55:01.0913 4628 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
18:55:02.0007 4628 RDPCDD - ok
18:55:02.0444 4628 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
18:55:02.0600 4628 rdpdr - ok
18:55:02.0849 4628 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
18:55:02.0927 4628 RDPENCDD - ok
18:55:03.0193 4628 RDPWD (79c6df8477250f5c54f7c5ae1d6b814e) C:\Windows\system32\drivers\RDPWD.sys
18:55:03.0255 4628 RDPWD - ok
18:55:03.0395 4628 RemoteAccess (bcdd6b4804d06b1f7ebf29e53a57ece9) C:\Windows\System32\mprdim.dll
18:55:03.0520 4628 RemoteAccess - ok
18:55:03.0692 4628 RemoteRegistry (9e6894ea18daff37b63e1005f83ae4ab) C:\Windows\system32\regsvc.dll
18:55:03.0785 4628 RemoteRegistry - ok
18:55:04.0097 4628 RFCOMM (6482707f9f4da0ecbab43b2e0398a101) C:\Windows\system32\DRIVERS\rfcomm.sys
18:55:04.0175 4628 RFCOMM - ok
18:55:04.0425 4628 rimmptsk (355aac141b214bef1dbc1483afd9bd50) C:\Windows\system32\DRIVERS\rimmptsk.sys
18:55:04.0456 4628 rimmptsk - ok
18:55:04.0831 4628 rimsptsk (a4216c71dd4f60b26418ccfd99cd0815) C:\Windows\system32\DRIVERS\rimsptsk.sys
18:55:04.0893 4628 rimsptsk - ok
18:55:05.0252 4628 rismxdp (c663af77e2f4eabf8eb08b388d2f1f36) C:\Windows\system32\DRIVERS\rixdptsk.sys
18:55:05.0330 4628 rismxdp - ok
18:55:05.0595 4628 RoxMediaDB9 (08fb7d968805001c7adcbb14b0651fa2) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
18:55:05.0798 4628 RoxMediaDB9 ( UnsignedFile.Multi.Generic ) - warning
18:55:05.0798 4628 RoxMediaDB9 - detected UnsignedFile.Multi.Generic (1)
18:55:06.0047 4628 RpcLocator (5123f83cbc4349d065534eeb6bbdc42b) C:\Windows\system32\locator.exe
18:55:06.0125 4628 RpcLocator - ok
18:55:06.0375 4628 RpcSs (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll
18:55:06.0484 4628 RpcSs - ok
18:55:07.0077 4628 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
18:55:07.0217 4628 rspndr - ok
18:55:07.0389 4628 SamSs (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe
18:55:07.0420 4628 SamSs - ok
18:55:07.0795 4628 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
18:55:07.0841 4628 sbp2port - ok
18:55:08.0044 4628 SCardSvr (77b7a11a0c3d78d3386398fbbea1b632) C:\Windows\System32\SCardSvr.dll
18:55:08.0169 4628 SCardSvr - ok
18:55:08.0372 4628 Schedule (1a58069db21d05eb2ab58ee5753ebe8d) C:\Windows\system32\schedsvc.dll
18:55:08.0653 4628 Schedule - ok
18:55:08.0793 4628 SCPolicySvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll
18:55:08.0871 4628 SCPolicySvc - ok
18:55:09.0167 4628 sdbus (8f36b54688c31eed4580129040c6a3d3) C:\Windows\system32\DRIVERS\sdbus.sys
18:55:09.0464 4628 sdbus - ok
18:55:09.0620 4628 SDRSVC (716313d9f6b0529d03f726d5aaf6f191) C:\Windows\System32\SDRSVC.dll
18:55:09.0791 4628 SDRSVC - ok
18:55:10.0181 4628 SE2Bbus (62af804ebb0cc6a34ddd1b0aacacd47f) C:\Windows\system32\DRIVERS\SE2Bbus.sys
18:55:10.0275 4628 SE2Bbus ( UnsignedFile.Multi.Generic ) - warning
18:55:10.0275 4628 SE2Bbus - detected UnsignedFile.Multi.Generic (1)
18:55:10.0571 4628 SE2Bmdfl (fef0bc327f083210c5a5dd890bf41c0a) C:\Windows\system32\DRIVERS\SE2Bmdfl.sys
18:55:10.0681 4628 SE2Bmdfl ( UnsignedFile.Multi.Generic ) - warning
18:55:10.0681 4628 SE2Bmdfl - detected UnsignedFile.Multi.Generic (1)
18:55:10.0930 4628 SE2Bmdm (00cfa9a63e3915bee7e3fbc23213b8fd) C:\Windows\system32\DRIVERS\SE2Bmdm.sys
18:55:11.0024 4628 SE2Bmdm ( UnsignedFile.Multi.Generic ) - warning
18:55:11.0039 4628 SE2Bmdm - detected UnsignedFile.Multi.Generic (1)
18:55:11.0258 4628 SE2Bmgmt (46147915da4525a95e9404b646df91ef) C:\Windows\system32\DRIVERS\SE2Bmgmt.sys
18:55:11.0336 4628 SE2Bmgmt ( UnsignedFile.Multi.Generic ) - warning
18:55:11.0336 4628 SE2Bmgmt - detected UnsignedFile.Multi.Generic (1)
18:55:11.0835 4628 se2Bnd5 (dbaaf0de434f4d88db40db3afab301fe) C:\Windows\system32\DRIVERS\se2Bnd5.sys
18:55:11.0960 4628 se2Bnd5 ( UnsignedFile.Multi.Generic ) - warning
18:55:11.0960 4628 se2Bnd5 - detected UnsignedFile.Multi.Generic (1)
18:55:12.0209 4628 SE2Bobex (98b2f0e34d1f3aee840f741c161c01ee) C:\Windows\system32\DRIVERS\SE2Bobex.sys
18:55:12.0256 4628 SE2Bobex ( UnsignedFile.Multi.Generic ) - warning
18:55:12.0256 4628 SE2Bobex - detected UnsignedFile.Multi.Generic (1)
18:55:12.0553 4628 se2Bunic (29acfcc6afba06dfd7c66c5c33087f9c) C:\Windows\system32\DRIVERS\se2Bunic.sys
18:55:12.0615 4628 se2Bunic ( UnsignedFile.Multi.Generic ) - warning
18:55:12.0615 4628 se2Bunic - detected UnsignedFile.Multi.Generic (1)
18:55:12.0740 4628 SeaPort (16a252022535b680046f6e34e136d378) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
18:55:12.0802 4628 SeaPort - ok
18:55:13.0036 4628 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
18:55:13.0177 4628 secdrv - ok
18:55:13.0301 4628 seclogon (fd5199d4d8a521005e4b5ee7fe00fa9b) C:\Windows\system32\seclogon.dll
18:55:13.0395 4628 seclogon - ok
18:55:13.0473 4628 SENS (a9bbab5759771e523f55563d6cbe140f) C:\Windows\System32\sens.dll
18:55:13.0567 4628 SENS - ok
18:55:13.0801 4628 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
18:55:13.0925 4628 Serenum - ok
18:55:14.0237 4628 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
18:55:14.0378 4628 Serial - ok
18:55:14.0674 4628 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
18:55:14.0752 4628 sermouse - ok
18:55:14.0939 4628 SessionEnv (d2193326f729b163125610dbf3e17d57) C:\Windows\system32\sessenv.dll
18:55:15.0033 4628 SessionEnv - ok
18:55:15.0376 4628 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\DRIVERS\sffdisk.sys
18:55:15.0423 4628 sffdisk - ok
18:55:15.0657 4628 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
18:55:15.0813 4628 sffp_mmc - ok
18:55:16.0265 4628 sffp_sd (9f66a46c55d6f1ccabc79bb7afccc545) C:\Windows\system32\DRIVERS\sffp_sd.sys
18:55:16.0359 4628 sffp_sd - ok
18:55:16.0593 4628 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
18:55:16.0718 4628 sfloppy - ok
18:55:16.0905 4628 SharedAccess (e1499bd0ff76b1b2fbbf1af339d91165) C:\Windows\System32\ipnathlp.dll
18:55:17.0045 4628 SharedAccess - ok
18:55:17.0186 4628 ShellHWDetection (c7230fbee14437716701c15be02c27b8) C:\Windows\System32\shsvcs.dll
18:55:17.0311 4628 ShellHWDetection - ok
18:55:17.0513 4628 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys
18:55:17.0545 4628 sisagp - ok
18:55:17.0623 4628 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
18:55:17.0654 4628 SiSRaid2 - ok
18:55:17.0950 4628 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
18:55:17.0981 4628 SiSRaid4 - ok
18:55:18.0293 4628 slsvc (862bb4cbc05d80c5b45be430e5ef872f) C:\Windows\system32\SLsvc.exe
18:55:19.0058 4628 slsvc - ok
18:55:19.0167 4628 SLUINotify (6edc422215cd78aa8a9cde6b30abbd35) C:\Windows\system32\SLUINotify.dll
18:55:19.0261 4628 SLUINotify - ok
18:55:19.0510 4628 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
18:55:19.0588 4628 Smb - ok
18:55:19.0791 4628 SNMPTRAP (2a146a055b4401c16ee62d18b8e2a032) C:\Windows\System32\snmptrap.exe
18:55:19.0838 4628 SNMPTRAP - ok
18:55:19.0994 4628 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
18:55:20.0041 4628 spldr - ok
18:55:20.0165 4628 Spooler (8554097e5136c3bf9f69fe578a1b35f4) C:\Windows\System32\spoolsv.exe
18:55:20.0290 4628 Spooler - ok
18:55:20.0524 4628 sptd (1a606a8d611816adc47d2b25dbedcb1f) C:\Windows\system32\Drivers\sptd.sys
18:55:20.0524 4628 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 1a606a8d611816adc47d2b25dbedcb1f
18:55:20.0602 4628 sptd ( LockedFile.Multi.Generic ) - warning
18:55:20.0602 4628 sptd - detected LockedFile.Multi.Generic (1)
18:55:20.0821 4628 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
18:55:20.0914 4628 srv - ok
18:55:21.0257 4628 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
18:55:21.0335 4628 srv2 - ok
18:55:21.0569 4628 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
18:55:21.0647 4628 srvnet - ok
18:55:21.0819 4628 SSDPSRV (03d50b37234967433a5ea5ba72bc0b62) C:\Windows\System32\ssdpsrv.dll
18:55:21.0913 4628 SSDPSRV - ok
18:55:22.0069 4628 SstpSvc (6f1a32e7b7b30f004d9a20afadb14944) C:\Windows\system32\sstpsvc.dll
18:55:22.0131 4628 SstpSvc - ok
18:55:22.0427 4628 StarPortLite (61b8922afc74f1ebb31e34f43320d2cc) C:\Windows\system32\DRIVERS\StarPortLite.sys
18:55:22.0459 4628 StarPortLite - ok
18:55:22.0615 4628 stisvc (5de7d67e49b88f5f07f3e53c4b92a352) C:\Windows\System32\wiaservc.dll
18:55:22.0724 4628 stisvc - ok
18:55:22.0786 4628 stllssvr (a9a23c8af361f7a93fd632e91a8c346f) C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
18:55:22.0880 4628 stllssvr - ok
18:55:23.0145 4628 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
18:55:23.0176 4628 swenum - ok
18:55:23.0332 4628 swprv (f21fd248040681cca1fb6c9a03aaa93d) C:\Windows\System32\swprv.dll
18:55:23.0457 4628 swprv - ok
18:55:23.0644 4628 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
18:55:23.0675 4628 Symc8xx - ok
18:55:23.0847 4628 SymIM - ok
18:55:24.0112 4628 SymIMMP - ok
18:55:24.0424 4628 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
18:55:24.0440 4628 Sym_hi - ok
18:55:24.0674 4628 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
18:55:24.0689 4628 Sym_u3 - ok
18:55:25.0048 4628 SynTP (8327106d1c93e9a7b98e63b9fcc24bb7) C:\Windows\system32\DRIVERS\SynTP.sys
18:55:25.0095 4628 SynTP - ok
18:55:25.0220 4628 SysMain (9a51b04e9886aa4ee90093586b0ba88d) C:\Windows\system32\sysmain.dll
18:55:25.0391 4628 SysMain - ok
18:55:25.0438 4628 TabletInputService (2dca225eae15f42c0933e998ee0231c3) C:\Windows\System32\TabSvc.dll
18:55:25.0547 4628 TabletInputService - ok
18:55:25.0657 4628 TapiSrv (d7673e4b38ce21ee54c59eeeb65e2483) C:\Windows\System32\tapisrv.dll
18:55:25.0735 4628 TapiSrv - ok
18:55:25.0797 4628 TBS (cb05822cd9cc6c688168e113c603dbe7) C:\Windows\System32\tbssvc.dll
18:55:25.0906 4628 TBS - ok
18:55:26.0312 4628 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys
18:55:26.0437 4628 Tcpip - ok
18:55:26.0764 4628 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys
18:55:26.0873 4628 Tcpip6 - ok
18:55:27.0248 4628 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
18:55:27.0341 4628 tcpipreg - ok
18:55:27.0560 4628 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
18:55:27.0653 4628 TDPIPE - ok
18:55:27.0872 4628 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
18:55:27.0965 4628 TDTCP - ok
18:55:28.0293 4628 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
18:55:28.0402 4628 tdx - ok
18:55:28.0621 4628 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
18:55:28.0667 4628 TermDD - ok
18:55:28.0823 4628 TermService (bb95da09bef6e7a131bff3ba5032090d) C:\Windows\System32\termsrv.dll
18:55:28.0948 4628 TermService - ok
18:55:29.0057 4628 Themes (c7230fbee14437716701c15be02c27b8) C:\Windows\system32\shsvcs.dll
18:55:29.0120 4628 Themes - ok
18:55:29.0245 4628 THREADORDER (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll
18:55:29.0323 4628 THREADORDER - ok
18:55:29.0401 4628 TrkWks (ec74e77d0eb004bd3a809b5f8fb8c2ce) C:\Windows\System32\trkwks.dll
18:55:29.0494 4628 TrkWks - ok
18:55:29.0541 4628 TrustedInstaller (97d9d6a04e3ad9b6c626b9931db78dba) C:\Windows\servicing\TrustedInstaller.exe
18:55:29.0603 4628 TrustedInstaller - ok
18:55:29.0853 4628 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
18:55:29.0931 4628 tssecsrv - ok
18:55:30.0149 4628 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
18:55:30.0243 4628 tunmp - ok
18:55:30.0477 4628 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
18:55:30.0524 4628 tunnel - ok
18:55:30.0836 4628 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys
18:55:30.0883 4628 uagp35 - ok
18:55:31.0179 4628 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
18:55:31.0257 4628 udfs - ok
18:55:31.0444 4628 UI0Detect (ecef404f62863755951e09c802c94ad5) C:\Windows\system32\UI0Detect.exe
18:55:31.0553 4628 UI0Detect - ok
18:55:31.0834 4628 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
18:55:31.0865 4628 uliagpkx - ok
18:55:32.0131 4628 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
18:55:32.0177 4628 uliahci - ok
18:55:32.0489 4628 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
18:55:32.0536 4628 UlSata - ok
18:55:32.0817 4628 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
18:55:32.0848 4628 ulsata2 - ok
18:55:33.0129 4628 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
18:55:33.0223 4628 umbus - ok
18:55:33.0410 4628 upnphost (68308183f4ae0be7bf8ecd07cb297999) C:\Windows\System32\upnphost.dll
18:55:33.0503 4628 upnphost - ok
18:55:33.0753 4628 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
18:55:33.0815 4628 usbccgp - ok
18:55:34.0049 4628 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
18:55:34.0205 4628 usbcir - ok
18:55:34.0471 4628 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
18:55:34.0533 4628 usbehci - ok
18:55:34.0783 4628 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
18:55:34.0876 4628 usbhub - ok
18:55:35.0110 4628 usbohci (ce697fee0d479290d89bec80dfe793b7) C:\Windows\system32\DRIVERS\usbohci.sys
18:55:35.0188 4628 usbohci - ok
18:55:35.0453 4628 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
18:55:35.0531 4628 usbprint - ok
18:55:35.0781 4628 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:55:36.0233 4628 USBSTOR - ok
18:55:36.0857 4628 usbuhci (325dbbacb8a36af9988ccf40eac228cc) C:\Windows\system32\DRIVERS\usbuhci.sys
18:55:36.0982 4628 usbuhci - ok
18:55:37.0294 4628 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
18:55:37.0419 4628 usbvideo - ok
18:55:37.0528 4628 UxSms (1509e705f3ac1d474c92454a5c2dd81f) C:\Windows\System32\uxsms.dll
18:55:37.0591 4628 UxSms - ok
18:55:37.0684 4628 vds (cd88d1b7776dc17a119049742ec07eb4) C:\Windows\System32\vds.exe
18:55:37.0918 4628 vds - ok
18:55:38.0230 4628 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
18:55:38.0371 4628 vga - ok
18:55:38.0620 4628 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
18:55:38.0698 4628 VgaSave - ok
18:55:38.0948 4628 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
18:55:38.0979 4628 viaagp - ok
18:55:39.0275 4628 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
18:55:39.0416 4628 ViaC7 - ok
18:55:39.0712 4628 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys
18:55:39.0743 4628 viaide - ok
18:55:40.0040 4628 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
18:55:40.0071 4628 volmgr - ok
18:55:40.0289 4628 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
18:55:40.0352 4628 volmgrx - ok
18:55:40.0601 4628 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
18:55:40.0664 4628 volsnap - ok
18:55:40.0913 4628 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
18:55:40.0945 4628 vsmraid - ok
18:55:41.0147 4628 VSS (db3d19f850c6eb32bdcb9bc0836acddb) C:\Windows\system32\vssvc.exe
18:55:41.0475 4628 VSS - ok
18:55:41.0631 4628 W32Time (96ea68b9eb310a69c25ebb0282b2b9de) C:\Windows\system32\w32time.dll
18:55:41.0725 4628 W32Time - ok
18:55:41.0912 4628 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
18:55:42.0052 4628 WacomPen - ok
18:55:42.0302 4628 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
18:55:42.0380 4628 Wanarp - ok
18:55:42.0380 4628 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
18:55:42.0442 4628 Wanarpv6 - ok
18:55:42.0567 4628 WcesComm (59e19bd13c3bdb857646b9e436ba27f7) C:\Windows\WindowsMobile\wcescomm.dll
18:55:42.0629 4628 WcesComm - ok
18:55:42.0754 4628 wcncsvc (a3cd60fd826381b49f03832590e069af) C:\Windows\System32\wcncsvc.dll
18:55:42.0926 4628 wcncsvc - ok
18:55:42.0988 4628 WcsPlugInService (11bcb7afcdd7aadacb5746f544d3a9c7) C:\Windows\System32\WcsPlugInService.dll
18:55:43.0082 4628 WcsPlugInService - ok
18:55:43.0300 4628 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
18:55:43.0331 4628 Wd - ok
18:55:43.0565 4628 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
18:55:43.0628 4628 Wdf01000 - ok
18:55:43.0799 4628 WdiServiceHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll
18:55:43.0877 4628 WdiServiceHost - ok
18:55:43.0893 4628 WdiSystemHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll
18:55:43.0971 4628 WdiSystemHost - ok
18:55:44.0033 4628 WebClient (04c37d8107320312fbae09926103d5e2) C:\Windows\System32\webclnt.dll
18:55:44.0143 4628 WebClient - ok
18:55:44.0221 4628 Wecsvc (ae3736e7e8892241c23e4ebbb7453b60) C:\Windows\system32\wecsvc.dll
18:55:44.0392 4628 Wecsvc - ok
18:55:44.0501 4628 wercplsupport (670ff720071ed741206d69bd995ea453) C:\Windows\System32\wercplsupport.dll
18:55:44.0595 4628 wercplsupport - ok
18:55:44.0673 4628 WerSvc (32b88481d3b326da6deb07b1d03481e7) C:\Windows\System32\WerSvc.dll
18:55:44.0751 4628 WerSvc - ok
18:55:45.0141 4628 winachsf (3b4522d0e750bac8fe7ae61622a57014) C:\Windows\system32\DRIVERS\HSX_CNXT.sys
18:55:45.0359 4628 winachsf - ok
18:55:45.0500 4628 WinDefend (4575aa12561c5648483403541d0d7f2b) C:\Program Files\Windows Defender\mpsvc.dll
18:55:45.0625 4628 WinDefend - ok
18:55:45.0656 4628 WinHttpAutoProxySvc - ok
18:55:45.0859 4628 Winmgmt (6b2a1d0e80110e3d04e6863c6e62fd8a) C:\Windows\system32\wbem\WMIsvc.dll
18:55:45.0952 4628 Winmgmt - ok
18:55:46.0139 4628 WinRM (7cfe68bdc065e55aa5e8421607037511) C:\Windows\system32\WsmSvc.dll
18:55:46.0358 4628 WinRM - ok
18:55:46.0654 4628 winusb (676f4b665bdd8053eaa53ac1695b8074) C:\Windows\system32\DRIVERS\winusb.sys
18:55:46.0717 4628 winusb - ok
18:55:46.0904 4628 Wlansvc (c008405e4feeb069e30da1d823910234) C:\Windows\System32\wlansvc.dll
18:55:47.0091 4628 Wlansvc - ok
18:55:47.0450 4628 wlidsvc (0a70f4022ec2e14c159efc4f69aa2477) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
18:55:47.0668 4628 wlidsvc - ok
18:55:47.0980 4628 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
18:55:48.0089 4628 WmiAcpi - ok
18:55:48.0214 4628 wmiApSrv (43be3875207dcb62a85c8c49970b66cc) C:\Windows\system32\wbem\WmiApSrv.exe
18:55:48.0323 4628 wmiApSrv - ok
18:55:48.0448 4628 WMPNetworkSvc (3978704576a121a9204f8cc49a301a9b) C:\Program Files\Windows Media Player\wmpnetwk.exe
18:55:48.0776 4628 WMPNetworkSvc - ok
18:55:48.0963 4628 WPCSvc (cfc5a04558f5070cee3e3a7809f3ff52) C:\Windows\System32\wpcsvc.dll
18:55:49.0150 4628 WPCSvc - ok
18:55:49.0275 4628 WPDBusEnum (801fbdb89d472b3c467eb112a0fc9246) C:\Windows\system32\wpdbusenum.dll
18:55:49.0322 4628 WPDBusEnum - ok
18:55:50.0741 4628 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
18:55:50.0819 4628 WpdUsb - ok
18:55:51.0131 4628 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
18:55:51.0225 4628 WPFFontCache_v0400 - ok
18:55:51.0475 4628 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
18:55:51.0553 4628 ws2ifsl - ok
18:55:51.0677 4628 wscsvc (1ca6c40261ddc0425987980d0cd2aaab) C:\Windows\System32\wscsvc.dll
18:55:51.0755 4628 wscsvc - ok
18:55:51.0818 4628 WSearch - ok
18:55:52.0036 4628 wuauserv (6298277b73c77fa99106b271a7525163) C:\Windows\system32\wuaueng.dll
18:55:52.0333 4628 wuauserv - ok
18:55:52.0613 4628 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
18:55:52.0691 4628 WUDFRd - ok
18:55:52.0879 4628 wudfsvc (575a4190d989f64732119e4114045a4f) C:\Windows\System32\WUDFSvc.dll
18:55:52.0972 4628 wudfsvc - ok
18:55:53.0175 4628 XAudio (88af537264f2b818da15479ceeaf5d7c) C:\Windows\system32\DRIVERS\xaudio.sys
18:55:53.0222 4628 XAu
-
-
▶ Télécharge Malwarebytes' Anti-Malware (MBAM).
Malwarebytes : clique pour la version FREE
ou : lien mirroir
▶ enregistre l'exécutable sur le bureau. (attention! ne pas télécharger Registry booster ou autre chose que MBAM.)
▶ Installe-le puis configure-le comme ceci :
Configuration
si tu n'as rien modifié fais directement quitter sinon enregistrer
▶ Si MBAM est déjà installé, aller directement à la mise à jour puis à l'analyse.
▶▶▶ Ce logiciel gratuit est à garder.
===================================================
Uniquement en cas de problème de mise à jour:
Télécharger mises à jour manuelles MBAM
▶ Exécute le fichier après l'installation de MBAM
===================================================
Connecter les supports amovibles (clés usb etc.) avant de lancer l'analyse.
▶ Double clique sur le fichier téléchargé pour lancer le processus d'installation.
▶ Dans l'onglet "Mise à jour", clique sur le bouton "Recherche de mise à jour": si le pare-feu demande l'autorisation à MBAM de se connecter, accepte.
▶ Une fois la mise à jour terminée, rends-toi dans l'onglet "Recherche".
▶ Sélectionne "Exécuter un examen complet"
▶ Clique sur "Rechercher"
▶ L'analyse démarre, le scan est relativement long, c'est normal.
A la fin de l'analyse, un message s'affiche :
Citation :
L'examen s'est terminé normalement. Clique sur 'Afficher les résultats' pour afficher tous les objets trouvés.
▶ Clique sur "Ok" pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
▶ Ferme tes navigateurs.
▶ Si des malwares ont été détectés, clique sur Afficher les résultats.
▶ Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse.
▶ Copie-colle ce rapport et poste-le dans ta prochaine réponse.
Si MBAM demande à redémarrer le pc : ▶ fais-le.
Si au redémarrage Windows te dit qu'il a bloqué certains programmes de démarrage : ▶ clique sur la bulle puis sur Exécuter les programmes bloqués/Malwarebytes Anti-Malware.
-
voici le rapport:
Malwarebytes Anti-Malware 1.60.1.1000
www.malwarebytes.org
Version de la base de données: v2012.03.31.10
Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Flochon :: PC-DE-FLOCHON [administrateur]
31/03/2012 20:58:56
mbam-log-2012-03-31 (20-58-56).txt
Type d'examen: Examen complet
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 380658
Temps écoulé: 4 heure(s), 5 minute(s), 51 seconde(s)
Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)
Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)
Clé(s) du Registre détectée(s): 4
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} (Adware.ShoppingReport2) -> Mis en quarantaine et supprimé avec succès.
HKCU\Software\SkyMedia (Adware.SkyMedia) -> Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\WebMediaPlayer (Rogue.WebMedia) -> Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\WebMediaPlayer.exe (Adware.EGDAccess) -> Mis en quarantaine et supprimé avec succès.
Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)
Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)
Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)
Fichier(s) détecté(s): 1
C:\Windows\System32\nvs2.inf (Adware.EGDAccess) -> Mis en quarantaine et supprimé avec succès.
(fin) -
-
-
voici le rapport
WhyIGotInfected v1.5.2(by Tigzy)
********************************
Run : 3/04/2012 21:17:08 [Normal Mode]
Machine : PC-DE-FLOCHON (2 CPUs) [Flochon : ADMIN]
OS: Microsoft® Windows Vista(TM) Édition Familiale Premium Service Pack 2 (x86)
~~ Plugins check: ~~
UPTODATE [Microsoft® Windows Vista(TM) Édition Familiale Premium ] Current : Service Pack 2 -- Latest : Service Pack 2
UPTODATE [Firefox] Current : 11.0 -- Latest : 11.0
UPTODATE [Internet Explorer] Current : 9.0.8112.16421 -- Latest : 9.0.8112.16421
UPTODATE [Adobe Flash] Current : 11.2.202.228 -- Latest : 11.2.202.228
UPTODATE [Adobe Flash ActiveX] Current : 11.2.202.228 -- Latest : 11.2.202.228
UPTODATE [Adobe Flash FF Plugin] Current : 11.2.202.228 -- Latest : 11.2.202.228
Finished
<C:\Users\Flochon\Desktop\WIGIReport[0].txt>
WIGIReport[0].txt -
# DelFix v8.8 - Rapport créé le 03/04/2012 à 21:28:40
# Mis à jour le 12/02/12 par Xplode
# Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Nom d'utilisateur : Flochon - PC-DE-FLOCHON (Administrateur)
# Exécuté depuis : C:\Users\Flochon\Desktop\delfix.exe
# Option [Suppression]
~~~~~~ Dossiers(s) ~~~~~~
~~~~~~ Fichier(s) ~~~~~~
~~~~~~ Registre ~~~~~~
~~~~~~ Autres ~~~~~~
-> Prefetch Vidé
*************************
DelFix[R1].txt - [1310 octets] - [03/04/2012 21:27:54]
DelFix[S1].txt - [1399 octets] - [03/04/2012 21:28:01]
DelFix[S2].txt - [599 octets] - [03/04/2012 21:28:40]
########## EOF - C:\DelFix[S2].txt - [722 octets] ##########
-
-
- 1
- 2
Suivant
