Infection ?

ckiller76 Messages postés 48 Statut Membre -  
 g3n-h@ckm@n -
Bonjour,

Mon ordinateur sous windows Xp pro rame depuis plusieurs jours. J'ai enlevé sous Malwayrebytes plusieurs choses malveillantes puis j'ai fait un scan avec avira. J'ai aussi enlevé un virus. Mais mon ordi rame toujours et à du mal à s'éteindre (un écran bleu apparaît). Voici un rapport Hijackthis. Merci de m'aider. Bonne journée

https://www.cjoint.com/?BDeirpDF31v

79 réponses

  • 1
  • 2
  • 3
  • 4
Résumé de la discussion

Problème majeur: un ordinateur sous Windows XP Pro rame depuis plusieurs jours et affiche un écran bleu, malgré des nettoyages avec Malwarebytes et un scan antivirus Avira.
Plusieurs réponses proposent une désinfection approfondie via des outils comme ComboFix pour neutraliser un rootkit persistant et l’analyse de fichiers suspects avec VirusTotal afin d’identifier des éléments malveillants résiduels.
D'autres échanges évoquent la vérification des binaires système et des entrées de démarrage, la mise à jour des navigateurs et des scripts de suppression, tout en notant que le processus peut nécessiter plusieurs essais.
Une nuance utile est que l’échange met en évidence l’importance d’installer des outils de sécurité et de suivre les résultats d’analyses, sans tirer de conclusion sur l’état du problème.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. H3RV3 Messages postés 3661 Statut Contributeur sécurité 280
     
    salut,

    Tu peux mettre les rapport de Malwarebytes et Avira puis faire ceci :

    ● Télécharge AdwCleaner (de Xplode) sur ton bureau.

    ● Lance le, clique sur [Suppression] puis patiente le temps du scan.

    ● Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

    Le rapport est sauvegardé dans C:\AdwCleaner[S1].txt
    0
  2. H3RV3 Messages postés 3661 Statut Contributeur sécurité 280
     
    OK, ton MBR a l'ai touché.

    Télécharge aswMBR.exe sur ton bureau.

    Lance aswMBR.exe, clique sur Scan puis sur Save log.

    Copie colle le rapport présent sur ton bureau dans ta réponse.
    0
  3. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  4. ckiller76 Messages postés 48 Statut Membre 1
     
    Voici le rapport

    aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
    Run date: 2012-04-04 12:09:25
    -----------------------------
    12:09:25.281 OS Version: Windows 5.1.2600 Service Pack 3
    12:09:25.281 Number of processors: 2 586 0x209
    12:09:25.281 ComputerName: CLAUDIE UserName: poste2
    12:09:26.718 Initialize success
    12:09:51.093 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
    12:09:51.093 Disk 0 Vendor: ST380011A 3.06 Size: 76319MB BusType: 3
    12:09:51.093 Device owAZEVAoRGRCZ -> DriverStartIo RGRCZ@J@ f74a0864
    12:09:51.125 Disk 0 MBR read successfully
    12:09:51.125 Disk 0 MBR scan
    12:09:51.125 Disk 0 Windows XP default MBR code found via API
    12:09:51.125 Disk 0 unknown MBR code
    12:09:51.125 Disk 0 MBR hidden
    12:09:51.140 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 76316 MB offset 63
    12:09:51.156 Disk 0 scanning sectors +156296385
    12:09:51.171 Disk 0 malicious Win32:MBRoot code @ sector 156296388 !
    12:09:51.187 Disk 0 PE file @ sector 156296410 !
    12:09:51.187 Disk 0 MBR [Win32:MBRoot] **ROOTKIT**
    12:09:51.187 Disk 0 trace - called modules:
    12:09:51.187 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x89611e78]<<
    12:09:51.187 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x898b0ab8]
    12:09:51.187 3 CLASSPNP.SYS[f7647fd7] -> nt!IofCallDriver -> \Device\00000060[0x8986ff18]
    12:09:51.203 5 ACPI.sys[f75ad620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x89873940]
    12:09:51.203 Scan finished successfully
    12:10:04.359 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\poste2\Bureau\MBR.dat"
    12:10:04.375 The log file has been saved successfully to "C:\Documents and Settings\poste2\Bureau\aswMBR.txt"
    0
  5. H3RV3 Messages postés 3661 Statut Contributeur sécurité 280
     
    OK, relance aswMBR et clique sur Fix.
    0
  6. ckiller76 Messages postés 48 Statut Membre 1
     
    ok c'est fait par contre il est noté please reboot ASAP. Est-ce normal ?
    0
  7. H3RV3 Messages postés 3661 Statut Contributeur sécurité 280
     
    Oui, redémarre ton PC et refais un scan avec aswMBR.
    0
  8. ckiller76 Messages postés 48 Statut Membre 1
     
    Bon appétit je reviens après.
    0
  9. ckiller76 Messages postés 48 Statut Membre 1
     
    aswMBR version 0.9.9.1665 Copyright(c) 2011 AVAST Software
    Run date: 2012-04-04 12:41:12
    -----------------------------
    12:41:12.906 OS Version: Windows 5.1.2600 Service Pack 3
    12:41:12.906 Number of processors: 2 586 0x209
    12:41:12.906 ComputerName: CLAUDIE UserName: poste2
    12:41:24.218 Initialize success
    12:42:02.031 AVAST engine defs: 12040400
    12:43:37.046 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
    12:43:37.046 Disk 0 Vendor: ST380011A 3.06 Size: 76319MB BusType: 3
    12:43:37.046 Device owAZEVAoRGRCZ -> DriverStartIo RGRCZ@J@ f74a0864
    12:43:37.234 Disk 0 MBR read successfully
    12:43:37.234 Disk 0 MBR scan
    12:43:37.953 Disk 0 Win32:MBRoot-J [Trj]
    12:43:37.953 Disk 0 Windows XP default MBR code found via API
    12:43:37.953 Disk 0 MBR hidden
    12:43:37.968 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 76316 MB offset 63
    12:43:38.984 Disk 0 MBR [Win32:MBRoot] **ROOTKIT**
    12:43:38.984 Disk 0 trace - called modules:
    12:43:38.984 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x898295a8]<<
    12:43:38.984 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x898afab8]
    12:43:39.000 3 CLASSPNP.SYS[f7647fd7] -> nt!IofCallDriver -> \Device\00000060[0x8988bf18]
    12:43:39.000 5 ACPI.sys[f75ad620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x898b1940]
    12:43:41.390 AVAST engine scan C:\WINDOWS
    12:44:48.968 AVAST engine scan C:\WINDOWS\system32
    12:52:25.031 AVAST engine scan C:\WINDOWS\system32\drivers
    12:52:55.656 AVAST engine scan C:\Documents and Settings\poste2
    13:01:14.812 AVAST engine scan C:\Documents and Settings\All Users
    13:01:45.890 Scan finished successfully
    13:05:10.843 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\poste2\Bureau\MBR.dat"
    13:05:10.859 The log file has been saved successfully to "C:\Documents and Settings\poste2\Bureau\aswMBRbis.txt"
    0
  10. H3RV3 Messages postés 3661 Statut Contributeur sécurité 280
     
    Il est encore là, essaie avec cet outil :

    Puis essaie ceci :

    Télécharge ce fichier sur ton bureau ==> http://www.pandasecurity.com/resources/tools/yorkyt.exe

    Lance le, il va t'inviter à redémarrer ton PC. Fais le et laisse travailler au redémarrage. Il est possible qu'il faille que redémarre entre temps.

    Copie colle le rapport yorkyt.log
    0
  11. ckiller76 Messages postés 48 Statut Membre 1
     
    2012-04-04 13:39:03: ****************************************************
    2012-04-04 13:39:03: Starting UP ... v 0.0.0.192
    2012-04-04 13:39:03: ****************************************************
    2012-04-04 13:39:03: Listing processes...
    2012-04-04 13:39:03: :[System Process]:0
    2012-04-04 13:39:03: :System:4
    2012-04-04 13:39:03: :smss.exe:468
    2012-04-04 13:39:03: :csrss.exe:516
    2012-04-04 13:39:03: :winlogon.exe:548
    2012-04-04 13:39:03: :services.exe:592
    2012-04-04 13:39:03: :lsass.exe:612
    2012-04-04 13:39:03: :svchost.exe:792
    2012-04-04 13:39:03: :svchost.exe:860
    2012-04-04 13:39:03: :svchost.exe:928
    2012-04-04 13:39:03: :svchost.exe:1024
    2012-04-04 13:39:03: :svchost.exe:1076
    2012-04-04 13:39:03: :spoolsv.exe:1200
    2012-04-04 13:39:03: :sched.exe:1260
    2012-04-04 13:39:03: :svchost.exe:1312
    2012-04-04 13:39:03: :explorer.exe:1848
    2012-04-04 13:39:03: :SMax4PNP.exe:384
    2012-04-04 13:39:03: :type32.exe:400
    2012-04-04 13:39:03: :hpwuschd2.exe:320
    2012-04-04 13:39:03: :DivXUpdate.exe:520
    2012-04-04 13:39:03: :avgnt.exe:616
    2012-04-04 13:39:03: :jusched.exe:820
    2012-04-04 13:39:03: :msnmsgr.exe:992
    2012-04-04 13:39:03: :9props.exe:1032
    2012-04-04 13:39:03: :hpqtra08.exe:740
    2012-04-04 13:39:03: :ONENOTEM.EXE:1768
    2012-04-04 13:39:03: :aswMBR.exe:2056
    2012-04-04 13:39:03: :hpqste08.exe:2404
    2012-04-04 13:39:03: :avguard.exe:2532
    2012-04-04 13:39:03: :jqs.exe:2628
    2012-04-04 13:39:03: :mdm.exe:2652
    2012-04-04 13:39:03: :SMAgent.exe:2836
    2012-04-04 13:39:03: :svchost.exe:2892
    2012-04-04 13:39:03: :WLIDSVC.EXE:2948
    2012-04-04 13:39:03: :WLIDSVCM.EXE:3320
    2012-04-04 13:39:03: :avshadow.exe:3432
    2012-04-04 13:39:03: :alg.exe:132
    2012-04-04 13:39:03: :chrome.exe:1684
    2012-04-04 13:39:03: :chrome.exe:1468
    2012-04-04 13:39:03: :chrome.exe:1932
    2012-04-04 13:39:03: :chrome.exe:1592
    2012-04-04 13:39:03: :chrome.exe:2512
    2012-04-04 13:39:03: :chrome.exe:2692
    2012-04-04 13:39:03: :yorkyt.exe:3644
    2012-04-04 13:39:03: :wmiprvse.exe:3760
    2012-04-04 13:39:03:
    2012-04-04 13:39:03: Setting restore point
    2012-04-04 13:39:14: Determining autonomous or dropped mode...
    2012-04-04 13:39:14: Autonomus mode
    2012-04-04 13:39:15: Installing drivers...
    2012-04-04 13:39:18: Checking that it installed...
    2012-04-04 13:39:18: Driver is installed...
    2012-04-04 13:39:18: cmd.exe /c start "C:\Documents and Settings\poste2\Mes documents\Downloads\yorkyt.exe"
    2012-04-04 13:40:14: Restarting...
    2012-04-04 13:44:37: ****************************************************
    2012-04-04 13:44:37: Starting UP ... v 0.0.0.192
    2012-04-04 13:44:37: ****************************************************
    2012-04-04 13:44:38: Listing processes...
    2012-04-04 13:44:38: :[System Process]:0
    2012-04-04 13:44:38: :System:4
    2012-04-04 13:44:38: :smss.exe:592
    2012-04-04 13:44:38: :csrss.exe:660
    2012-04-04 13:44:38: :winlogon.exe:692
    2012-04-04 13:44:38: :services.exe:744
    2012-04-04 13:44:38: :savedump.exe:760
    2012-04-04 13:44:38: :lsass.exe:772
    2012-04-04 13:44:38: :svchost.exe:1192
    2012-04-04 13:44:38: :svchost.exe:1340
    2012-04-04 13:44:38: :svchost.exe:1444
    2012-04-04 13:44:38: :svchost.exe:1532
    2012-04-04 13:44:38: :svchost.exe:1684
    2012-04-04 13:44:38: :spoolsv.exe:1888
    2012-04-04 13:44:39: :sched.exe:1940
    2012-04-04 13:44:39: :svchost.exe:256
    2012-04-04 13:44:39: :WgaTray.exe:780
    2012-04-04 13:44:39: :explorer.exe:1240
    2012-04-04 13:44:39: :yorkyt.exe:1780
    2012-04-04 13:44:39: :SMax4PNP.exe:2180
    2012-04-04 13:44:39: :type32.exe:2212
    2012-04-04 13:44:39: :hpwuschd2.exe:2356
    2012-04-04 13:44:39: :DivXUpdate.exe:2428
    2012-04-04 13:44:39: :avgnt.exe:2464
    2012-04-04 13:44:39: :jusched.exe:2476
    2012-04-04 13:44:39: :msnmsgr.exe:2684
    2012-04-04 13:44:39: :GoogleToolbarNotifier.exe:2712
    2012-04-04 13:44:39: :9props.exe:2736
    2012-04-04 13:44:39: :hpqtra08.exe:2768
    2012-04-04 13:44:39: :ONENOTEM.EXE:2780
    2012-04-04 13:44:39: :hpqste08.exe:2860
    2012-04-04 13:44:39: :avguard.exe:2912
    2012-04-04 13:44:39: :GoogleUpdaterService.exe:2984
    2012-04-04 13:44:39: :jqs.exe:3016
    2012-04-04 13:44:39: :mdm.exe:3052
    2012-04-04 13:44:39: :SMAgent.exe:3144
    2012-04-04 13:44:39: :svchost.exe:3168
    2012-04-04 13:44:39: :taskmgr.exe:3272
    2012-04-04 13:44:39: :WLIDSVC.EXE:3372
    2012-04-04 13:44:39: :wuauclt.exe:3612
    2012-04-04 13:44:39: :WLIDSVCM.EXE:3724
    2012-04-04 13:44:39: :avshadow.exe:3904
    2012-04-04 13:44:39: :wmiprvse.exe:4064
    2012-04-04 13:44:39: :alg.exe:1412
    2012-04-04 13:44:39: :HPZipm12.exe:2808
    2012-04-04 13:44:39:
    2012-04-04 13:44:39: RUN mode
    2012-04-04 13:44:39: Determining autonomous or dropped mode...
    2012-04-04 13:44:39: Autonomus mode
    2012-04-04 13:44:39: Waiting for Explorer.exe...
    2012-04-04 13:45:09: Launching parsers...
    2012-04-04 13:45:13: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\KDCOM.DLL kdcom.dll
    2012-04-04 13:45:13: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\BOOTVID.DLL bootvid.dll
    2012-04-04 13:45:13: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DASBOOT.SYS
    2012-04-04 13:45:13: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DASBOOTD.SYS
    2012-04-04 13:45:14: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DASBOOTK.SYS
    2012-04-04 13:45:14: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DASBOOTI.SYS
    2012-04-04 13:45:14: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DASBOOTS.SYS
    2012-04-04 13:45:14: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\ACPI.SYS ACPI.sys
    2012-04-04 13:45:14: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\WMILIB.SYS WmiLib.sys
    2012-04-04 13:45:14: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\PCI.SYS pci.sys
    2012-04-04 13:45:14: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\ISAPNP.SYS isapnp.sys
    2012-04-04 13:45:14: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\PCIIDE.SYS pciide.sys
    2012-04-04 13:45:14: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\PCIIDEX.SYS pciidex.sys
    2012-04-04 13:45:14: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\MOUNTMGR.SYS mountmgr.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\FTDISK.SYS ftdisk.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DMLOAD.SYS dmload.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DMIO.SYS dmio.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\PARTMGR.SYS partmgr.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\SFSYNC02.SYS sfsync02.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\VOLSNAP.SYS volsnap.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\ATAPI.SYS atapi.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DISK.SYS scsidisk.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\CLASSPNP.SYS Classpnp.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\FLTMGR.SYS fltMgr.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\SR.SYS sr.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\PXHELP20.SYS PxHelp20.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\KSECDD.SYS ksecdd.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\NTFS.SYS ntfs.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\NDIS.SYS NDIS.SYS
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\SFVFS02.SYS sfvfs02.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\SFHLP02.SYS sfhlp02.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\SFDRV01.SYS sfdrv01.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\MUP.SYS MUP.SYS
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DASBOOTF.SYS
    2012-04-04 13:45:15: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SMBIOS.SYS SMBios.sys
    2012-04-04 13:45:15: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\INTELPPM.SYS intelppm.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\VIDEOPRT.SYS videoprt.sys
    2012-04-04 13:45:15: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\IALMNT5.SYS ialmnt5.sys
    2012-04-04 13:45:15: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\USBPORT.SYS usbport.sys
    2012-04-04 13:45:15: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\USBUHCI.SYS USBUHCI.sys
    2012-04-04 13:45:15: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\USBEHCI.SYS USBEHCI.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\E100B325.SYS E100B325.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\I8042PRT.SYS i8042prt.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\KBDCLASS.SYS kbdclass.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\MOUCLASS.SYS mouclass.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\FDC.SYS fdc.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SERIAL.SYS serial.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SERENUM.SYS serenum.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\PARPORT.SYS parport.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\CDROM.SYS cdrom.sys
    2012-04-04 13:45:16: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\KS.SYS ks.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\REDBOOK.SYS redbook.sys
    2012-04-04 13:45:16: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DRMK.SYS drmk.sys
    2012-04-04 13:45:16: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\PORTCLS.SYS portcls.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SMWDM.SYS smwdm.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\AEAUDIO.SYS AEAudio.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SF.SYS sf.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\AUDSTUB.SYS audstub.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\RASL2TP.SYS rasl2tp.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\NDISTAPI.SYS NDISTAPI.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\NDISWAN.SYS NDISWAN.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\RASPPPOE.SYS raspppoe.sys
    2012-04-04 13:45:16: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\TDI.SYS tdi.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\RASPPTP.SYS RASPPTP.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\PSCHED.SYS PSCHED.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\MSGPC.SYS MSGPC.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\PTILINK.SYS ptilink.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\RASPTI.SYS raspti.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\RDPDR.SYS RDPDR.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\TERMDD.SYS termdd.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SWENUM.SYS swenum.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\UPDATE.SYS update.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\MSSMBIOS.SYS smbios.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\NDPROXY.SYS ndproxy.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\IALMKCHW.SYS ialmkchw.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\IALMSBW.SYS ialmsbw.sys
    2012-04-04 13:45:16: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\USBD.SYS usbd.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\USBHUB.SYS usbhub.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\FLPYDISK.SYS floppy.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\CDAUDIO.SYS cdaudio.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\FS_REC.SYS fs_rec.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\NULL.SYS null.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\BEEP.SYS beep.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\VGA.SYS vga.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\MNMDD.SYS videosim.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\RDPCDD.SYS RDPCDD.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\MSFS.SYS MSFS.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\NPFS.SYS npfs.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\RASACD.SYS rasacd.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\IPSEC.SYS ipsec.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\TCPIP.SYS tcpip.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\NETBT.SYS netbt.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\IPNAT.SYS IPNAT.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\WANARP.SYS WANARP.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\AFD.SYS afd.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\NETBIOS.SYS NETBIOS.SYS
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\PROCESSR.SYS processr.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SSMDRV.SYS ssmdrv.sys
    2012-04-04 13:45:16: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\RDBSS.SYS RDBSS.Sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\MRXSMB.SYS MRXSMB.Sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\IMAPI.SYS IMAPI.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\FIPS.SYS fips.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\AVKMGR.SYS avkmgr.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\AVIPBB.SYS avipbb.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\CDFS.SYS cdfs.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\WMILIB.SYS WmiLib.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\ATAPI.SYS atapi.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DXAPI.SYS dxapi.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\WATCHDOG.SYS watchdog.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\WIN32K.SYS win32k.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DXGTHK.SYS dxgthk.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\DRIVERS\DXG.SYS dxg.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\IALMRNT5.DLL imdispdrv.dll
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\IALMDNT5.DLL ialmdnt5.dll
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\VGA.DLL vga.dll
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\IALMDEV5.DLL ialmdev5.dll
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\IALMDD5.DLL ialmdd5.dll
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\XPSEC.SYS ipsec.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\XCPIP.SYS tcpip.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\SYSTEM32\ATMFD.DLL ATMFD.DLL
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\AVGNTFLT.SYS avgntflt.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\NDISUIO.SYS NDISUIO.SYS
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\MRXDAV.SYS MRxDAV.Sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\WDMAUD.SYS WDMAUD.SYS
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SYSAUDIO.SYS sysaudio.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SPLITTER.SYS splitter.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\AEC.SYS aec.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SWMIDI.SYS swmidi.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\DMUSIC.SYS DMusic.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\MIDISYN.SYS MidiSyn.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\KMIXER.SYS kmixer.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\DRMKAUD.SYS drmkaud.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\PARVDM.SYS parvdm.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\SRV.SYS SRV.SYS
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\TDTCP.SYS tdtcp.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\RDPWD.SYS RDPWD.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\HTTP.SYS http.sys
    2012-04-04 13:45:17: Looking at \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\DRIVERS\PRSBDRVR.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ntdll.dll ntdll.dll
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\SMBios.sys SMBios.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\intelppm.sys intelppm.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ialmnt5.sys ialmnt5.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\videoprt.sys videoprt.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\usbuhci.sys USBUHCI.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\usbport.sys usbport.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\usbehci.sys USBEHCI.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\e100b325.sys E100B325.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\i8042prt.sys i8042prt.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\kbdclass.sys kbdclass.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\mouclass.sys mouclass.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\fdc.sys fdc.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\serial.sys serial.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\serenum.sys serenum.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\parport.sys parport.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\cdrom.sys cdrom.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\redbook.sys redbook.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ks.sys ks.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\smwdm.sys smwdm.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\portcls.sys portcls.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\drmk.sys drmk.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\aeaudio.sys AEAudio.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\sf.sys sf.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\audstub.sys audstub.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\rasl2tp.sys rasl2tp.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ndistapi.sys NDISTAPI.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ndiswan.sys NDISWAN.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\raspppoe.sys raspppoe.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\raspptp.sys RASPPTP.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\tdi.sys tdi.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\psched.sys PSCHED.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\msgpc.sys MSGPC.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ptilink.sys ptilink.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\raspti.sys raspti.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\rdpdr.sys RDPDR.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\termdd.sys termdd.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\swenum.sys swenum.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\update.sys update.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\mssmbios.sys smbios.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ndproxy.sys ndproxy.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ialmkchw.sys ialmkchw.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ialmsbw.sys ialmsbw.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\usbhub.sys usbhub.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\usbd.sys usbd.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\flpydisk.sys floppy.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\cdaudio.sys cdaudio.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\fs_rec.sys fs_rec.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\null.sys null.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\beep.sys beep.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\vga.sys vga.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\mnmdd.sys videosim.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\rdpcdd.sys RDPCDD.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\msfs.sys MSFS.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\npfs.sys npfs.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\rasacd.sys rasacd.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ipsec.sys ipsec.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\tcpip.sys tcpip.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\netbt.sys netbt.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ipnat.sys IPNAT.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\wanarp.sys WANARP.SYS
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\afd.sys afd.sys
    2012-04-04 13:45:17: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\netbios.sys NETBIOS.SYS
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\processr.sys processr.sys
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ssmdrv.sys ssmdrv.sys
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\rdbss.sys RDBSS.Sys
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\mrxsmb.sys MRXSMB.Sys
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\imapi.sys IMAPI.sys
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\fips.sys fips.sys
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\avkmgr.sys avkmgr.sys
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\avipbb.sys avipbb.sys
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\smss.exe smss.exe
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\autochk.exe AutoChk.Exe
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\sfcfiles.dll sfcfiles.dll
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\advapi32.dll advapi32.dll
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\comdlg32.dll comdlg32.dll
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\gdi32.dll gdi32
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\imagehlp.dll IMAGEHLP.DLL
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\kernel32.dll kernel32
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\lz32.dll LZ32.DLL
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ole32.dll OLE32.DLL
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\oleaut32.dll
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\olecli32.dll OLECLI32.DLL
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\olecnv32.dll OLECNV32.DLL
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\olesvr32.dll OLESVR32.DLL
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\olethk32.dll OLETHK32.DLL
    2012-04-04 13:45:18: Looking at \Device\HarddiskVolume1\WINDOWS\system32\rpcrt4.dll rpcrt4.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\shell32.dll SHELL32.DLL
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\url.dll URL.DLL
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\urlmon.dll UrlMon.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\user32.dll user32
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\version.dll VERSION.DLL
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wininet.dll wininet.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wldap32.dll WLDAP32.DLL
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\comctl32.dll COMCTL32.DLL
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\shlwapi.dll SHLWAPI.DLL
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msvcrt.dll msvcrt.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mpr.dll mpr.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ntvdm.exe NTVDM.EXE
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wow32.dll WOW32.DLL
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\secur32.dll security.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\iertutil.dll IeRtUtil.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ieframe.dll IEFRAME.DLL
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\normaliz.dll normaliz.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\apphelp.dll Apphelp
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\userenv.dll userenv.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\cdfs.sys cdfs.sys
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\atapi.sys atapi.sys
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\wmilib.sys WmiLib.sys
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\win32k.sys win32k.sys
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\dxapi.sys dxapi.sys
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\watchdog.sys watchdog.sys
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\csrss.exe CSRSS.Exe
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\csrsrv.dll CSRSrv.DLL
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\basesrv.dll basesrv
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\winsrv.dll winsrv.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\dxg.sys dxg.sys
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\dxgthk.sys dxgthk.sys
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ialmrnt5.dll imdispdrv.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ialmdnt5.dll ialmdnt5.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\vga.dll vga.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ialmdev5.dll ialmdev5.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ialmdd5.dll ialmdd5.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\winlogon.exe WINLOGON.EXE
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\authz.dll authz.dll
    2012-04-04 13:45:19: Looking at \Device\HarddiskVolume1\WINDOWS\system32\crypt32.dll CRYPT32.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msasn1.dll msasn1.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\nddeapi.dll NDDEAPI.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\profmap.dll userenv.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\netapi32.dll NetApi32.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\psapi.dll PSAPI
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\regapi.dll regapi.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\setupapi.dll SETUPAPI.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\winsta.dll winsta.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wintrust.dll WINTRUST.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ws2_32.dll ws2_32.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ws2help.dll ws2help.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\imm32.dll imm32
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\kbdfr.dll kbdfr.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msctfime.ime MSCTFIME.IME
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\kbdus.dll kbdus.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msgina.dll MSGINA.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\odbc32.dll ODBC32
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\sxs.dll SXS.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll comctl32.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\WindowsShell.Manifest
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\odbcint.dll ODBCINT
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\shsvcs.dll SHSVCS.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\sfc.dll sfc.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\sfc_os.dll sfc.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\xpsec.sys ipsec.sys
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\services.exe services.exe
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\xcpip.sys tcpip.sys
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\savedump.exe savedump.exe
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ncobjapi.dll NCObjAPI.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\lsass.exe lsass.exe
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msvcp60.dll MSVCP60.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dbgeng.dll DbgEng.Dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\lsasrv.dll lsasrv.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\scesrv.dll scesrv
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\umpnpmgr.dll Umpnpmgr.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ntdsapi.dll ntdsapi.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dnsapi.dll dnsapi
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\shimeng.dll ShimEngineDLL(IAT)
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dbghelp.dll DBGHELP.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\AppPatch\acadproc.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\samlib.dll SAMLib.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\samsrv.dll samsrv.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\cryptdll.dll cryptdll.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\AppPatch\acgenral.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\AppPatch\acgenral.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\winmm.dll WINMM.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msacm32.dll msfltr32.acm
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\uxtheme.dll UxTheme.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msapsspc.dll MSAPSSPC.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msvcrt40.dll msvcrt40.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\faultrep.dll FAULTREP.DLL
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\schannel.dll schannel.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wtsapi32.dll wtsapi32.dll
    2012-04-04 13:45:20: Looking at \Device\HarddiskVolume1\WINDOWS\system32\digest.dll digest.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msnsspc.dll MSNSSPC.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\oleacc.dll OLEACC.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msprivs.dll mspriv.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\WindowsLogon.manifest
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\kerberos.dll kerberos.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msv1_0.dll MSV1_0.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\rasapi32.dll rasapi32.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\rasman.dll Rasman.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\iphlpapi.dll iphlpapi.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\tapi32.dll TAPI32.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\rtutils.dll RTUTILS.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\netlogon.dll NetLogon.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\w32time.dll w32time.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wdigest.dll WDIGEST.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\rsaenh.dll rsaenh.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\atmfd.dll ATMFD.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\winscard.dll winscard.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msctf.dll MSCTF.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\scecli.dll scecli
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\avgntflt.sys avgntflt.sys
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\svchost.exe svchost.exe
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ntmarta.dll ntmarta.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\rpcss.dll rpcss.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\eventlog.dll Eventlog.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\xpsp2res.dll xpsp2res.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\termsrv.dll termsrv.exe
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\icaapi.dll icaapi.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mstlsapi.dll mstlsapi.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\activeds.dll ADs
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\adsldpc.dll adsldpc
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\atl.dll ATL.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mswsock.dll mswsock.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\hnetcfg.dll HNETCFG.DLL
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wshtcpip.dll wshtcpip.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\winrnr.dll winrnr
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\rasadhlp.dll rasadhlp.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\ndisuio.sys NDISUIO.SYS
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dhcpcsvc.dll dhcpcsvc.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dnsrslvr.dll dnsrslvr.dll
    2012-04-04 13:45:21: Looking at \Device\HarddiskVolume1\WINDOWS\Resources\Themes\Luna\luna.msstyles luna.mst
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\cscdll.dll CSCDLL.DLL
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dimsntfy.dll dimsntfy.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wlnotify.dll WlNotify.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\winspool.drv winspool.drv
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\WgaLogon.dll WgaLogon.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\clbcatq.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\comres.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msxml3.dll MSXML3.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msxml3r.dll MSXML3R.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\lmhsvc.dll lmhsvc.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wzcsvc.dll wzcsvc.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wmi.dll wmi.DLL
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\eapolqec.dll EapolQec.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\qutil.dll QUtil.DLL
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dot3api.dll dot3api.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\esent.dll esent.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\rastls.dll rastls.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\cryptui.dll CRYPTUI.DLL
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mprapi.dll mprapi.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\riched20.dll riched20.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\schedsvc.dll schedsvc.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\raschap.dll raschap.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msidle.dll MSIDLE.DLL
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\spoolsv.exe spoolsv.exe
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\audiosrv.dll audiosrv.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\sched.exe
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msvcp100.dll msvcp100.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msvcr100.dll msvcr100_clr0400.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\grdcore.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\rctext.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\sched.xml
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\scewxmlw.dll scewxml.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\cfglib.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wkssvc.dll WKSSVC.DLL
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\gpipc.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\gpgen.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\gpschd.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\schedr.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\avevtlog.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\sqlite3.dll sqlite3.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\guardmsg.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\mrxdav.sys MRxDAV.Sys
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\webclnt.dll davsvc.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\cscui.dll cscui.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\powrprof.dll POWRPROF.DLL
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dpcdll.dll Dpcdll.dll
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wdmaud.drv WDMAUD.DRV
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\wdmaud.sys WDMAUD.SYS
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\sysaudio.sys sysaudio.sys
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\splitter.sys splitter.sys
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\aec.sys aec.sys
    2012-04-04 13:45:22: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\swmidi.sys swmidi.sys
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\dmusic.sys DMusic.sys
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\MidiSyn.sys MidiSyn.sys
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\userinit.exe USERINIT.EXE
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\Program Files\Google\Update\GoogleUpdate.exe GoogleUpdate.exe
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\WgaTray.exe WgaTray.exe
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\explorer.exe EXPLORER.EXE
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\browseui.dll BROWSEUI.DLL
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemprox.dll wbemprox.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\kmixer.sys kmixer.sys
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemcomn.dll wbemcomn.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\drmkaud.sys drmkaud.sys
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\LegitCheckControl.dll LegitCheckControl.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\shdocvw.dll SHDOCVW.DLL
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\pstorec.dll pstorec.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msacm32.drv msacm32.acm
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\midimap.dll midimap.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\cryptnet.dll CRYPTNET.DLL
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\sensapi.dll SensApi.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\winhttp.dll winhttp.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\desk.cpl DESK.CPL
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\themeui.dll ThemeUI.DLL
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msimg32.dll gdiext
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\actxprxy.dll ActXPrxy.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\cmd.exe Cmd.Exe
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\Documents and Settings\poste2\Mes documents\Downloads\yorkyt.exe
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wsock32.dll wsock32.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msimtf.dll MSIMTF.DLL
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\linkinfo.dll LINKINFO.DLL
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wbem\wbemdisp.dll WBEMDISP.DLL
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ntshrui.dll ntshrui.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wbem\wmiutils.dll wmiutils.dll
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\verclsid.exe verclsid.exe
    2012-04-04 13:45:23: Looking at \Device\HarddiskVolume1\WINDOWS\system32\spoolss.dll spoolss.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\localspl.dll localspl.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\cnbjmon.dll CNBJMON.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\E_FLM9BE.DLL EBPMON25.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\netshell.dll netshell.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\HPTcpMon.dll tcpmon.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\credui.dll credui.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\hpzjrd01.dll hpzjrd01.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dot3dlg.dll dot3dlg.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\onex.dll onex.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\HPTcpMUI.dll tcpmonui.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\eappcfg.dll eappcfg.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\eappprxy.dll eappprxy.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\HPTcpMib.dll tcpmon.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mgmtapi.dll mgmtapi.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\snmpapi.dll snmpapi.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wsnmp32.dll wsnmp32.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\webcheck.dll WEBCHECK.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\hpz3l054.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\pjlmon.dll PJLMON.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\es.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msonpmon.dll MSPCORE.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe SMax4PNP.EXE
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mlang.dll MLANG.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll MSVCR80.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msi.dll msi.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\tcpmon.dll tcpmon.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\stobject.dll stobject.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\Program Files\Analog Devices\SoundMAX\SMWDMIF.dll SMWDMIF.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\batmeter.dll BATMETER.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\usbmon.dll DynaMon.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dsound.dll dsound.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\WPDShServiceObj.dll WPDSHSERVICEOBJ.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\spool\prtprocs\w32x86\hpzpp054.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll PrintFilterPipelinePrxy.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\Program Files\Microsoft Hardware\Keyboard\type32.exe Type32.exe
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mydocs.dll mydocs.dll
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll MSPCORE.DLL
    2012-04-04 13:45:24: Looking at \Device\HarddiskVolume1\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe GoogleQuickSearchBox.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\win32spl.dll win32spl.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\PortableDeviceTypes.dll PORTABLEDEVICETYPES.DLL
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Microsoft Hardware\Keyboard\ITRes.dll ITRes.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\netrap.dll NetRap.DLL
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\HP\HP Software Update\hpwuschd2.exe hpwuSchd.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Microsoft Hardware\Keyboard\Type32.dll Type32.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\inetpp.dll inetpp.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mfc42.dll MFC42.DLL
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\PortableDeviceApi.dll PortableDeviceApi.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Microsoft Hardware\Keyboard\MSHCmd.dll MSHCmd.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mfc42loc.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\QuickTime\QTTask.exe QTTask.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\shfolder.dll shfolder.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Microsoft Hardware\Keyboard\ITHook.dll ITHook.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\hid.dll hid.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Microsoft Hardware\Keyboard\psapi.dll PSAPI
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Google\Quick Search Box\bin\1.2.1150.158\qsb.dll qsb.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe AdobeARM.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\drivers\smwdm.sys smwdm.sys
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\ksuser.dll ksuser.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Microsoft Office\Office12\MSOHEVI.DLL MsoHevI.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Analog Devices\SoundMAX\SMax4.exe SMax4.EXE
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\DivX\DivX Update\DivXUpdate.exe DivXUpdate.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Analog Devices\SoundMAX\SMax4Wiz.exe SMax4Wiz.EXE
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\cabinet.dll cabinet.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Google\Google Updater\GoogleUpdater.exe GoogleUpdater.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\avgnt.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlus.dll gdiplus
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Google\Google Updater\2.4.2432.1652\cires.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll MSVCP80.DLL
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Fichiers communs\Java\Java Update\jusched.exe jusched.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe AcroRd32.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\dumprep.exe DUMPREP.EXE
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\WINDOWS\system32\usp10.dll Uniscribe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Documents and Settings\poste2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe GoogleUpdate.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\DivX\DivX Update\DivXUpdateCheck.dll DivXUpdate.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Adobe\Reader 10.0\Reader\reader_sl.exe AcroSpeedLaunch.exe
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Google\Google Updater\2.4.2432.1652\ci.dll ci.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Program Files\Google\Quick Search Box\bin\1.2.1150.158\rlz.dll
    2012-04-04 13:45:25: Looking at \Device\HarddiskVolume1\Documents and Settings\poste2\Local Settings\Application Data\Google\Update\1.3.21.111\goopdate.dll goopdate.dll
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcp90.dll MSVCP90.DLL
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Documents and Settings\poste2\Local Settings\Application Data\Google\Update\1.3.21.111\GoogleCrashHandler.exe GoogleUpdate.exe
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_31a54e43\msvcr90.dll MSVCR90.DLL
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mstask.dll mstask.dll
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll GoogleToolbarNotifier.exe
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Internet Explorer\iexplore.exe IEXPLORE.EXE
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mfc100u.dll MFC100U.DLL
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Windows Live\Messenger\msnmsgr.exe msnmsgr.exe
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Mozilla Firefox\firefox.exe firefox.exe
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mfc100fra.dll MFC100FRA.DLL
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\ccwkrlib.dll
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\system32\mmcshext.dll mmcshext.dll
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\system32\hhsetup.dll HHSetup.dll
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Windows Live\Messenger\uccapi.dll UccApi.DLL
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Windows Live\Messenger\vvpltfrm.dll vvpltfrm.dll
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe AcroRd32.exe
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe GoogleToolbarNotifier.exe
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\gtn.dll GoogleToolbarNotifier.exe
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\SFR\Kit\9props.exe 9props.exe
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\system32\oledlg.dll OLEDLG.DLL
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\system32\msisip.dll MSISIP.DLL
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\system32\wshext.dll wshext.dll
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Avira\AntiVir Desktop\rcimage.dll
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\WINDOWS\system32\windowspowershell\v1.0\pwrshsip.dll pwrshsip.dll
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll xapauthenticodesip.dll
    2012-04-04 13:45:26: Looking at \Device\HarddiskVolume1\Program Files\HP\Digital Imaging\bin\hpqtra08.exe HPQTRA00.EXE
    2012-04-04 13:45:27: Looking at \Device\HarddiskVolume1\Prog
    0
  12. H3RV3 Messages postés 3661 Statut Contributeur sécurité 280
     
    Le rapport est top grand, peux-tu l'héberger ici : http://pjjoint.malekal.com/
    0
  13. H3RV3 Messages postés 3661 Statut Contributeur sécurité 280
     
    OK, tu peux refaire un scan avec aswMBR stp.
    0
  14. ckiller76 Messages postés 48 Statut Membre 1
     
    ok
    0
  15. H3RV3 Messages postés 3661 Statut Contributeur sécurité 280
     
    Peux-tu faire çà :

    ● Télécharge TDSSKiller sur ton bureau

    ● Sous XP : Double clique sur tdsskiller.exe
    ● Sous Vista/7 : Fais un clic droit sur tdsskiller.exe et sélectionne "Exécuter en tant qu'administrateur"

    ● Clique sur "Start Scan" pour démarrer le scan

    ● En cas de détection, clique sur "Continue" puis sur "Reboot Now"

    ● Un rapport va s'ouvrir, copie/colle le dans ta réponse

    Le rapport est sauvegardé dans C:\TDSSKiller.N°deversion_Date_Heure_log.txt
    0
  16. H3RV3 Messages postés 3661 Statut Contributeur sécurité 280
     
    OK, cette fois çà a l'air bon.
    Peux-tu repasser TDSSKiller pour vérification.
    0
  • 1
  • 2
  • 3
  • 4