yontoo layer runtime + virus help please Résolu

Question

Bonjour, 

voila mon problème, depuis quelques jour déjà mon pc a installer le programme yontoo layer runtime sans mon accord 
et de plus mon antivirus tourne en boucle sur un virus qu'il n'arrive pas a effacer, il effectu un scan a démarrage le supprime mais des que le pc a redémarrer il le détecte de nouveau et me demande de relancer un scan au démarage sans cesse. le virus est MBR:Alueron-K [RTK]

merci par avance de votre aide

Configuration: Windows 7 / Firefox 11.0 anti virus avast

Utilisateur anonyme · Answer

Bonjour

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 
Ou ici : https://forospyware.com 
>Renomme le pour l'enregistrer sur ton bureau en  asdehi (tout simplement pour que l'infection ne le contre pas)
-> Double clique combofix.exe.(ou clic droit sous vista «  exécuter en tant que... » )
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

 Avant d'utiliser ComboFix :  

->  Déconnecte toi d'Internet et referme les fenêtres de tous les programmes en cours.  

->  Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe ; (ou clic droit sous vista « exécuter en tant que... »)

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 


- Installe le console de récupération comme demandé ;utile en cas de plantage

- Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programme. Risque de figer l'ordinateur 

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message. 

/!\  Ne touche à rien tant que le scan n'est pas terminé.  /!\ : risque de figer l'ordinateur (plantage complet) 


::Si combofix détecte quelque chose et de demande a redémarrer tu acceptes


@+

kikiwonki · Answer

voila le rapport qui cest affiché par contre plus aucun programme ne se lance 
ca me dit que un marque de suppression sur un clé registre a été mise 
plus rien ne se lance


  ComboFix 12-04-13.01 - gerarg 13/04/2012  14:11:11.1.2 - x64
Microsoft Windows 7 Édition Familiale Premium   6.1.7601.1.1252.33.1036.18.3071.1357 [GMT 2:00]
Lancé depuis: c:\users\gerarg\Desktop\asdehi.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\~wJbQmiEnYI0qD1
c:\programdata\~wJbQmiEnYI0qD1r
c:\programdata\Tarma Installer
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setup.dll
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.dat
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.exe
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.ico
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\_Setup.dll
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\_Setupx.dll
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\Setup.dat
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\Setup.exe
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\Setup.ico
c:\programdata\wJbQmiEnYI0qD1
c:\users\gerarg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check
.
.
(((((((((((((((((((((((((((((   Fichiers créés du 2012-03-13 au 2012-04-13  ))))))))))))))))))))))))))))))))))))
.
.
2012-04-13 12:41 . 2012-04-13 12:41	--------	d-----w-	c:\users\Default\AppData\Local	emp
2012-04-11 02:52 . 2012-03-14 03:27	8669240	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{8BBD6EE1-2000-4DB5-BDBA-D48A4F0CAE14}\mpengine.dll
2012-04-05 19:12 . 2012-04-05 19:12	418464	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2012-03-22 09:55 . 2012-03-22 09:55	--------	d-----w-	c:\program files (x86)\hpmon
2012-03-22 09:54 . 2012-04-13 11:06	--------	d-----w-	c:\program files (x86)\SweetIM
2012-03-22 09:54 . 2012-03-22 09:54	--------	d-----w-	c:\programdata\SweetIM
2012-03-22 09:54 . 2012-03-22 09:54	--------	d-----w-	c:\users\gerarg\AppData\Roaming\pdfforge
2012-03-22 09:54 . 2012-03-14 16:23	65024	----a-w-	c:\windows\system32\pdfcmon.dll
2012-03-22 09:54 . 2005-04-15 18:58	1071088	----a-w-	c:\windows\SysWow64\MSCOMCTL.OCX
2012-03-22 09:54 . 2004-03-08 23:00	662288	----a-w-	c:\windows\SysWow64\MSCOMCT2.OCX
2012-03-22 09:54 . 1998-06-23 23:00	137000	----a-w-	c:\windows\SysWow64\MSMAPI32.OCX
2012-03-22 09:54 . 1998-07-13 00:08	119568	----a-w-	c:\windows\SysWow64\VB6FR.DLL
2012-03-22 09:54 . 1998-07-13 00:08	59904	----a-w-	c:\windows\SysWow64\MSCC2FR.DLL
2012-03-22 09:54 . 1998-07-13 00:08	141312	----a-w-	c:\windows\SysWow64\MSCMCFR.DLL
2012-03-22 09:54 . 2012-03-22 09:54	--------	d-----w-	c:\program files (x86)\PDFCreator
2012-03-22 09:54 . 1998-07-05 23:00	23552	----a-w-	c:\windows\SysWow64\MSMPIDE.DLL
2012-03-20 19:58 . 2012-03-20 19:58	--------	d-----w-	c:\users\gerarg\AppData\Roaming\Nero
2012-03-20 19:36 . 2012-03-20 19:36	592824	----a-w-	c:\program files (x86)\Mozilla Firefox\gkmedias.dll
2012-03-20 19:36 . 2012-03-20 19:36	44472	----a-w-	c:\program files (x86)\Mozilla Firefox\mozglue.dll
2012-03-18 17:26 . 2012-03-18 17:26	--------	d-----w-	c:\program files (x86)\Java
2012-03-18 11:19 . 2012-03-07 00:04	337240	----a-w-	c:\windows\system32\drivers\aswSP.sys
2012-03-18 11:19 . 2012-03-07 00:01	24408	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2012-03-18 11:19 . 2012-03-07 00:02	53080	----a-w-	c:\windows\system32\drivers\aswRdr2.sys
2012-03-18 11:19 . 2012-03-07 00:04	819032	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2012-03-18 11:19 . 2012-03-07 00:01	59224	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2012-03-18 11:19 . 2012-03-07 00:15	258520	----a-w-	c:\windows\system32\aswBoot.exe
2012-03-18 11:19 . 2012-03-07 00:01	69976	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2012-03-18 11:18 . 2012-03-07 00:15	41184	----a-w-	c:\windows\avastSS.scr
2012-03-18 11:18 . 2012-03-07 00:15	201352	----a-w-	c:\windows\SysWow64\aswBoot.exe
2012-03-16 18:27 . 2012-03-17 21:10	--------	dc----w-	c:\windows\system32\DRVSTORE
2012-03-16 18:27 . 2012-03-16 18:27	--------	d--h--w-	c:\programdata\Lavasoft
2012-03-16 18:27 . 2012-03-16 18:27	--------	d-----w-	c:\program files (x86)\Lavasoft
2012-03-16 18:18 . 2012-03-18 11:18	--------	d-----w-	c:\programdata\AVAST Software
2012-03-16 18:18 . 2012-03-18 11:18	--------	d-----w-	c:\program files\AVAST Software
.
.
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-05 19:12 . 2011-12-22 14:32	70304	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-18 17:26 . 2011-12-31 13:06	472808	----a-w-	c:\windows\SysWow64\deployJava1.dll
2012-02-23 08:18 . 2011-11-06 17:09	279656	------w-	c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{1392b8d2-5c05-419f-a8f6-b9f15a596612}"= "c:\program files (x86)\Freecorder\prxtbFree.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
2011-05-09 08:49	176936	----a-w-	c:\program files (x86)\Freecorder\prxtbFree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{1392b8d2-5c05-419f-a8f6-b9f15a596612}"= "c:\program files (x86)\Freecorder\prxtbFree.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"Hotkey Utility"="c:\program files (x86)\eMachines\Hotkey Utility\HotkeyUtility.exe" [2010-08-04 611872]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-25 98304]
"Freecorder FLV Service"="c:\program files (x86)\Freecorder\FLVSrvc.exe" [2011-03-24 167936]
"Hercules DJ Series"="c:\program files\Hercules\Audio\DJ Console Series\HDJSeriesCPL.exe" [2009-10-23 639784]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-07 4241512]
"SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2012-01-19 114992]
.
c:\users\gerarg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WiFi Station.lnk - c:\program files (x86)\Hercules\WiFiStation\WiFiN.exe [2011-4-11 130344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 253600]
R3 Bulk;HDJBulk;c:\windows\system32\Drivers\HDJBulk.sys [x]
R3 HDJMidi;DJ Control MP3 e2 MIDI;c:\windows\system32\DRIVERS\HDJMidi.sys [x]
R3 netr28ux;RT2870 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS
etr28ux.sys [x]
R3 RTL8192su;%RTL8192su.DeviceDesc.DispName%;c:\windows\system32\DRIVERS\RTL8192su.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers	susbflt.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Greg_Service;GRegService;c:\program files (x86)\eMachines\Registration\GregHSRW.exe [2009-08-28 1150496]
S2 HerculesDJControlMP3;Hercules DJ Control MP3;c:\program files\Hercules\Audio\DJ Console Series\HerculesDJControlMP3.EXE [2007-11-21 20480]
S2 HerculesWiFi;HerculesWiFi;c:\program files (x86)\Hercules\WiFiStation\HerculesWiFiService.exe [2010-03-05 72488]
S2 Updater Service;Updater Service;c:\program files\eMachines\eMachines Updater\UpdaterService.exe [2010-01-28 243232]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - WS2IFSL
.
Contenu du dossier 'Tâches planifiées'
.
2012-04-13 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 19:12]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15	135408	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-30 10806816]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&m=et1840&r=17360411p403pe474v1j5r4701t49n
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&m=et1840&r=17360411p403pe474v1j5r4701t49n
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\gerarg\AppData\Roaming\Mozilla\Firefox\Profiles\2mo4gwnr.default\
FF - prefs.js: browser.search.defaulturl - 
FF - prefs.js: browser.search.selectedEngine - SweetIM Search
FF - user.js: extentions.y2layers.installId - eacd105d-b7cb-4380-b702-3a273b2f968a
FF - user.js: extentions.y2layers.defaultEnableAppsList - Buzzdock,BuzzdockTease,DropDownDeals,DropDownDeals,
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
.
**************************************************************************
.
Heure de fin: 2012-04-13  15:05:46 - La machine a redémarré
ComboFix-quarantined-files.txt  2012-04-13 13:05
.
Avant-CF: 245 128 310 784 octets libres
Après-CF: 245 387 132 928 octets libres
.
- - End Of File - - 71ED9179B32DE9070D60BE5F9E805765

Utilisateur anonyme · Answer

Re

Arrête ton PC .
Démarre le à nouveau


[*] Télécharger sur le bureau https://www.luanagames.com/index.fr.html (by tigzy) 
[*] Quitter tous les programmes 
[*] Lancer RogueKiller.exe. 
[*] Attendre que le Prescan ait fini ... 
[*] Cliquer sur Scan. Cliquer sur Rapport et copier coller le contenu du rapport



@+

kikiwonki · Answer

un redémarage supplémentaire a fixer le probleme de lancement des programmes

Utilisateur anonyme · Answer

Re

Ok;passe à Roguekiller

@+

kikiwonki · Answer

RogueKiller V7.3.2 [20/03/2012] par Tigzy mail: tigzyRKgmailcom Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html Blog: http://tigzyrk.blogspot.com Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 64 bits version Demarrage : Mode normal Utilisateur: gerarg [Droits d'admin] Mode: Recherche -- Date: 13/04/2012 16:44:34 ¤¤¤ Processus malicieux: 0 ¤¤¤ ¤¤¤ Entrees de registre: 2 ¤¤¤ [HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤ ¤¤¤ Driver: [NON CHARGE] ¤¤¤ ¤¤¤ Infection : Root.MBR ¤¤¤ ¤¤¤ Fichier HOSTS: ¤¤¤ 127.0.0.1 localhost ¤¤¤ MBR Verif: ¤¤¤ +++++ PhysicalDrive0: WDC WD3200AAJS-22L7A0 ATA Device +++++ --- User --- [MBR] abdf4f57939a8bb8e3a7791135b44f04 [BSP] 206085d6a729f42c48bfb5bc87d72ee5 : Acer tatooed MBR Code Partition table: 0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 14336 Mo 1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 29362176 | Size: 100 Mo 2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29566976 | Size: 290798 Mo User = LL1 ... OK! User != LL2 ... KO! --- LL2 --- [MBR] 0bfa04e9dec01a1ea69cc36b7cdc4fe5 [BSP] 206085d6a729f42c48bfb5bc87d72ee5 : Acer tatooed MBR Code Partition table: 0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 14336 Mo 1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29362176 | Size: 100 Mo 2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29566976 | Size: 290798 Mo 3 - [ACTIVE] NTFS (0x17) [HIDDEN!] Offset (sectors): 625140400 | Size: 0 Mo Termine : << RKreport[2].txt >> RKreport[1].txt ; RKreport[2].txt

Utilisateur anonyme · Answer

Re

 Télécharge TDSSKiller 

    *Créez un nouveau dossier sur votre bureau puis décompressez l'archive dedans
    * Lancez le programme en cliquant sur TDSSKiller.exe, l'analyse se fait automatiquement, si l'infection est détectée, des éléments cachés (= hidden) seront alors affichés.


Si TDSS.tdl2 est détecté: l'option delete sera cochée par défaut. 
Si TDSS.tdl3 est détecté: assure toi que Cure est bien cochée. 
Si TDSS.tdl4(\HardDisk0\MBR) est détecté: assure toi que Cure est bien cochée. 
Si Rootkit.Win32.ZAccess.* est détecté : règle sur "cure" en haut , et "delete" en bas 
Si Suspicious file est indiqué, laisse l''option cochée sur Skip 
une fois qu'il a terminé , redémarre s'il te le demande pour finir de nettoyer 

sinon , ferme TDSSKiller et le rapport s'affichera sur le bureau
    
Poste moi son rapport à l'issue; merci


@+

kikiwonki · Answer

il a détecté une menace qu'il a "cure" et a demander un redemarage seulement aucun rapport n'a été générer sur le bureau
si je relance il ne détecte plus rien

kikiwonki · Answer

voila

16:56:51.0120 3044	TDSS rootkit removing tool 2.7.28.0 Apr 10 2012 16:54:05
16:56:51.0463 3044	============================================================
16:56:51.0463 3044	Current date / time: 2012/04/13 16:56:51.0463
16:56:51.0463 3044	SystemInfo:
16:56:51.0463 3044	
16:56:51.0463 3044	OS Version: 6.1.7601 ServicePack: 1.0
16:56:51.0463 3044	Product type: Workstation
16:56:51.0463 3044	ComputerName: GERARD
16:56:51.0463 3044	UserName: gerarg
16:56:51.0463 3044	Windows directory: C:\Windows
16:56:51.0463 3044	System windows directory: C:\Windows
16:56:51.0463 3044	Running under WOW64
16:56:51.0463 3044	Processor architecture: Intel x64
16:56:51.0463 3044	Number of processors: 2
16:56:51.0463 3044	Page size: 0x1000
16:56:51.0463 3044	Boot type: Normal boot
16:56:51.0463 3044	============================================================
16:56:52.0134 3044	Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:56:52.0165 3044	\Device\Harddisk0\DR0:
16:56:52.0165 3044	MBR used
16:56:52.0165 3044	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1C00800, BlocksNum 0x32000
16:56:52.0165 3044	\Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1C32800, BlocksNum 0x237F72B0
16:56:52.0181 3044	Initialize success
16:56:52.0181 3044	============================================================
16:57:05.0176 3724	============================================================
16:57:05.0176 3724	Scan started
16:57:05.0176 3724	Mode: Manual; 
16:57:05.0176 3724	============================================================
16:57:05.0659 3724	1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
16:57:05.0659 3724	1394ohci - ok
16:57:05.0737 3724	ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
16:57:05.0753 3724	ACPI - ok
16:57:05.0815 3724	AcpiPmi         (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
16:57:05.0831 3724	AcpiPmi - ok
16:57:05.0924 3724	AdobeFlashPlayerUpdateSvc (0d4c486a24a711a45fd83acdf4d18506) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
16:57:05.0924 3724	AdobeFlashPlayerUpdateSvc - ok
16:57:06.0002 3724	adp94xx         (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
16:57:06.0018 3724	adp94xx - ok
16:57:06.0049 3724	adpahci         (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
16:57:06.0049 3724	adpahci - ok
16:57:06.0080 3724	adpu320         (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
16:57:06.0080 3724	adpu320 - ok
16:57:06.0096 3724	AeLookupSvc     (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
16:57:06.0096 3724	AeLookupSvc - ok
16:57:06.0143 3724	AFD             (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
16:57:06.0158 3724	AFD - ok
16:57:06.0190 3724	agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
16:57:06.0205 3724	agp440 - ok
16:57:06.0236 3724	ALG             (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
16:57:06.0236 3724	ALG - ok
16:57:06.0252 3724	aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
16:57:06.0252 3724	aliide - ok
16:57:06.0299 3724	AMD External Events Utility (6a17a31af7d85435566970bc97f8385e) C:\Windows\system32\atiesrxx.exe
16:57:06.0299 3724	AMD External Events Utility - ok
16:57:06.0330 3724	amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
16:57:06.0330 3724	amdide - ok
16:57:06.0377 3724	AmdK8           (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
16:57:06.0377 3724	AmdK8 - ok
16:57:06.0533 3724	amdkmdag        (4b24b270904a9c11e6433f89c06c07d9) C:\Windows\system32\DRIVERS\atipmdag.sys
16:57:06.0642 3724	amdkmdag - ok
16:57:06.0673 3724	amdkmdap        (df0236c8eb72cf2698c9e74702d3e127) C:\Windows\system32\DRIVERS\atikmpag.sys
16:57:06.0673 3724	amdkmdap - ok
16:57:06.0689 3724	AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
16:57:06.0689 3724	AmdPPM - ok
16:57:06.0720 3724	amdsata         (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
16:57:06.0720 3724	amdsata - ok
16:57:06.0736 3724	amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
16:57:06.0736 3724	amdsbs - ok
16:57:06.0767 3724	amdxata         (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
16:57:06.0767 3724	amdxata - ok
16:57:06.0814 3724	AppID           (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
16:57:06.0814 3724	AppID - ok
16:57:06.0845 3724	AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
16:57:06.0845 3724	AppIDSvc - ok
16:57:06.0876 3724	Appinfo         (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
16:57:06.0876 3724	Appinfo - ok
16:57:06.0938 3724	arc             (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
16:57:06.0938 3724	arc - ok
16:57:06.0954 3724	arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
16:57:06.0954 3724	arcsas - ok
16:57:07.0001 3724	aswFsBlk        (b9da213b5271db5fce962d827e6d620d) C:\Windows\system32\drivers\aswFsBlk.sys
16:57:07.0001 3724	aswFsBlk - ok
16:57:07.0032 3724	aswMonFlt       (21c9835d0e5ad2ff0f16134bcb32cc71) C:\Windows\system32\drivers\aswMonFlt.sys
16:57:07.0032 3724	aswMonFlt - ok
16:57:07.0063 3724	aswRdr          (1b96a5867abd4fa6135d8298fcccf9c6) C:\Windows\System32\Drivers\aswrdr2.sys
16:57:07.0079 3724	aswRdr - ok
16:57:07.0126 3724	aswSnx          (6e98bb288696777a3a8a07a52b0eaee9) C:\Windows\system32\drivers\aswSnx.sys
16:57:07.0126 3724	aswSnx - ok
16:57:07.0157 3724	aswSP           (d9fb49f16e4eb02efecae8cbfe4bcb4c) C:\Windows\system32\drivers\aswSP.sys
16:57:07.0172 3724	aswSP - ok
16:57:07.0172 3724	aswTdi          (7352bb9a564b94bbd7c9cbf165f55006) C:\Windows\system32\drivers\aswTdi.sys
16:57:07.0188 3724	aswTdi - ok
16:57:07.0235 3724	AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
16:57:07.0235 3724	AsyncMac - ok
16:57:07.0266 3724	atapi           (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
16:57:07.0266 3724	atapi - ok
16:57:07.0313 3724	AtiHdmiService  (77c149e6d702737b2e372dee166faef8) C:\Windows\system32\drivers\AtiHdmi.sys
16:57:07.0313 3724	AtiHdmiService - ok
16:57:07.0360 3724	AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
16:57:07.0375 3724	AudioEndpointBuilder - ok
16:57:07.0391 3724	AudioSrv        (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
16:57:07.0406 3724	AudioSrv - ok
16:57:07.0469 3724	avast! Antivirus (4041d31508a2a084dfb42c595854090f) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
16:57:07.0469 3724	avast! Antivirus - ok
16:57:07.0547 3724	AxInstSV        (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
16:57:07.0547 3724	AxInstSV - ok
16:57:07.0609 3724	b06bdrv         (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
16:57:07.0625 3724	b06bdrv - ok
16:57:07.0656 3724	b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
16:57:07.0672 3724	b57nd60a - ok
16:57:07.0703 3724	BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
16:57:07.0703 3724	BDESVC - ok
16:57:07.0734 3724	Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
16:57:07.0734 3724	Beep - ok
16:57:07.0796 3724	BFE             (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
16:57:07.0812 3724	BFE - ok
16:57:07.0843 3724	BITS            (1ea7969e3271cbc59e1730697dc74682) C:\Windows\system32\qmgr.dll
16:57:07.0874 3724	BITS - ok
16:57:07.0906 3724	blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
16:57:07.0906 3724	blbdrive - ok
16:57:07.0937 3724	bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
16:57:07.0937 3724	bowser - ok
16:57:07.0968 3724	BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
16:57:07.0968 3724	BrFiltLo - ok
16:57:07.0984 3724	BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
16:57:07.0984 3724	BrFiltUp - ok
16:57:08.0015 3724	BridgeMP        (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
16:57:08.0015 3724	BridgeMP - ok
16:57:08.0046 3724	Browser         (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
16:57:08.0062 3724	Browser - ok
16:57:08.0077 3724	Brserid         (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
16:57:08.0077 3724	Brserid - ok
16:57:08.0093 3724	BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
16:57:08.0093 3724	BrSerWdm - ok
16:57:08.0124 3724	BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
16:57:08.0124 3724	BrUsbMdm - ok
16:57:08.0140 3724	BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
16:57:08.0140 3724	BrUsbSer - ok
16:57:08.0155 3724	BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
16:57:08.0155 3724	BTHMODEM - ok
16:57:08.0186 3724	bthserv         (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
16:57:08.0186 3724	bthserv - ok
16:57:08.0233 3724	Bulk            (d8bd549336593ca304b3524ff2f42717) C:\Windows\system32\Drivers\HDJBulk.sys
16:57:08.0249 3724	Bulk - ok
16:57:08.0311 3724	catchme - ok
16:57:08.0374 3724	cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
16:57:08.0374 3724	cdfs - ok
16:57:08.0420 3724	cdrom           (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
16:57:08.0420 3724	cdrom - ok
16:57:08.0467 3724	CertPropSvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
16:57:08.0467 3724	CertPropSvc - ok
16:57:08.0514 3724	circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
16:57:08.0514 3724	circlass - ok
16:57:08.0545 3724	CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
16:57:08.0545 3724	CLFS - ok
16:57:08.0608 3724	clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:57:08.0608 3724	clr_optimization_v2.0.50727_32 - ok
16:57:08.0654 3724	clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
16:57:08.0654 3724	clr_optimization_v2.0.50727_64 - ok
16:57:08.0717 3724	clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16:57:08.0717 3724	clr_optimization_v4.0.30319_32 - ok
16:57:08.0748 3724	clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
16:57:08.0748 3724	clr_optimization_v4.0.30319_64 - ok
16:57:08.0795 3724	CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
16:57:08.0795 3724	CmBatt - ok
16:57:08.0842 3724	cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
16:57:08.0842 3724	cmdide - ok
16:57:08.0888 3724	CNG             (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
16:57:08.0904 3724	CNG - ok
16:57:08.0920 3724	Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
16:57:08.0935 3724	Compbatt - ok
16:57:08.0966 3724	CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
16:57:08.0966 3724	CompositeBus - ok
16:57:08.0982 3724	COMSysApp - ok
16:57:09.0013 3724	crcdisk         (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
16:57:09.0013 3724	crcdisk - ok
16:57:09.0060 3724	CryptSvc        (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
16:57:09.0060 3724	CryptSvc - ok
16:57:09.0122 3724	DcomLaunch      (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32pcss.dll
16:57:09.0138 3724	DcomLaunch - ok
16:57:09.0185 3724	defragsvc       (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
16:57:09.0200 3724	defragsvc - ok
16:57:09.0247 3724	DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
16:57:09.0247 3724	DfsC - ok
16:57:09.0294 3724	Dhcp            (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
16:57:09.0310 3724	Dhcp - ok
16:57:09.0341 3724	discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
16:57:09.0341 3724	discache - ok
16:57:09.0372 3724	Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
16:57:09.0388 3724	Disk - ok
16:57:09.0403 3724	Dnscache        (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
16:57:09.0403 3724	Dnscache - ok
16:57:09.0450 3724	dot3svc         (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
16:57:09.0466 3724	dot3svc - ok
16:57:09.0497 3724	DPS             (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
16:57:09.0497 3724	DPS - ok
16:57:09.0544 3724	drmkaud         (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
16:57:09.0544 3724	drmkaud - ok
16:57:09.0590 3724	DXGKrnl         (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
16:57:09.0606 3724	DXGKrnl - ok
16:57:09.0637 3724	EapHost         (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
16:57:09.0637 3724	EapHost - ok
16:57:09.0715 3724	ebdrv           (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
16:57:09.0778 3724	ebdrv - ok
16:57:09.0809 3724	EFS             (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
16:57:09.0809 3724	EFS - ok
16:57:09.0871 3724	ehRecvr         (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
16:57:09.0902 3724	ehRecvr - ok
16:57:09.0918 3724	ehSched         (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
16:57:09.0918 3724	ehSched - ok
16:57:09.0980 3724	elxstor         (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
16:57:09.0996 3724	elxstor - ok
16:57:10.0027 3724	ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
16:57:10.0027 3724	ErrDev - ok
16:57:10.0090 3724	EventSystem     (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
16:57:10.0105 3724	EventSystem - ok
16:57:10.0136 3724	exfat           (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
16:57:10.0152 3724	exfat - ok
16:57:10.0168 3724	fastfat         (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
16:57:10.0183 3724	fastfat - ok
16:57:10.0230 3724	Fax             (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
16:57:10.0246 3724	Fax - ok
16:57:10.0261 3724	fdc             (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
16:57:10.0261 3724	fdc - ok
16:57:10.0292 3724	fdPHost         (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
16:57:10.0308 3724	fdPHost - ok
16:57:10.0324 3724	FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
16:57:10.0324 3724	FDResPub - ok
16:57:10.0355 3724	FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
16:57:10.0355 3724	FileInfo - ok
16:57:10.0370 3724	Filetrace       (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
16:57:10.0370 3724	Filetrace - ok
16:57:10.0402 3724	flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
16:57:10.0402 3724	flpydisk - ok
16:57:10.0433 3724	FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
16:57:10.0448 3724	FltMgr - ok
16:57:10.0480 3724	FontCache       (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
16:57:10.0511 3724	FontCache - ok
16:57:10.0573 3724	FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16:57:10.0573 3724	FontCache3.0.0.0 - ok
16:57:10.0604 3724	FsDepends       (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
16:57:10.0620 3724	FsDepends - ok
16:57:10.0636 3724	Fs_Rec          (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
16:57:10.0636 3724	Fs_Rec - ok
16:57:10.0682 3724	fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
16:57:10.0682 3724	fvevol - ok
16:57:10.0698 3724	gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
16:57:10.0698 3724	gagp30kx - ok
16:57:10.0776 3724	GameConsoleService (ce16683cfd11fe70bde435dda5ea1fca) C:\Program Files (x86)\eMachines Games\eMachines Game Console\GameConsoleService.exe
16:57:10.0776 3724	GameConsoleService - ok
16:57:10.0901 3724	gpsvc           (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
16:57:10.0932 3724	gpsvc - ok
16:57:11.0026 3724	Greg_Service    (816fd5a6f3c2f3d600900096632fc60e) C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe
16:57:11.0026 3724	Greg_Service - ok
16:57:11.0104 3724	hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
16:57:11.0104 3724	hcw85cir - ok
16:57:11.0166 3724	HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
16:57:11.0182 3724	HdAudAddService - ok
16:57:11.0213 3724	HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
16:57:11.0213 3724	HDAudBus - ok
16:57:11.0260 3724	HDJMidi         (f10b45171f7e8618e0868f3a0c9efe84) C:\Windows\system32\DRIVERS\HDJMidi.sys
16:57:11.0275 3724	HDJMidi - ok
16:57:11.0353 3724	HerculesDJControlMP3 (4141c2cbd8d6c9f3f4004fe842c48e79) C:\Program Files\Hercules\Audio\DJ Console Series\HerculesDJControlMP3.EXE
16:57:11.0353 3724	HerculesDJControlMP3 - ok
16:57:11.0416 3724	HerculesWiFi    (c3293000e57269a790f77ab59a9eb3d8) C:\Program Files (x86)\Hercules\WiFiStation\HerculesWiFiService.exe
16:57:11.0416 3724	HerculesWiFi - ok
16:57:11.0494 3724	HidBatt         (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
16:57:11.0494 3724	HidBatt - ok
16:57:11.0525 3724	HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
16:57:11.0525 3724	HidBth - ok
16:57:11.0556 3724	HidIr           (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
16:57:11.0556 3724	HidIr - ok
16:57:11.0587 3724	hidserv         (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll
16:57:11.0587 3724	hidserv - ok
16:57:11.0634 3724	HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
16:57:11.0634 3724	HidUsb - ok
16:57:11.0665 3724	hkmsvc          (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
16:57:11.0665 3724	hkmsvc - ok
16:57:11.0696 3724	HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
16:57:11.0712 3724	HomeGroupListener - ok
16:57:11.0743 3724	HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
16:57:11.0759 3724	HomeGroupProvider - ok
16:57:11.0806 3724	HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
16:57:11.0806 3724	HpSAMD - ok
16:57:11.0852 3724	HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
16:57:11.0868 3724	HTTP - ok
16:57:11.0899 3724	hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
16:57:11.0915 3724	hwpolicy - ok
16:57:11.0946 3724	i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
16:57:11.0946 3724	i8042prt - ok
16:57:11.0977 3724	iaStorV         (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
16:57:11.0993 3724	iaStorV - ok
16:57:12.0071 3724	idsvc           (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
16:57:12.0102 3724	idsvc - ok
16:57:12.0258 3724	igfx            (a87261ef1546325b559374f5689cf5bc) C:\Windows\system32\DRIVERS\igdkmd64.sys
16:57:12.0383 3724	igfx - ok
16:57:12.0414 3724	iirsp           (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
16:57:12.0414 3724	iirsp - ok
16:57:12.0461 3724	IKEEXT          (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
16:57:12.0476 3724	IKEEXT - ok
16:57:12.0554 3724	IntcAzAudAddService (96b0a408842b0e214edcb41e89438999) C:\Windows\system32\drivers\RTKVHD64.sys
16:57:12.0570 3724	IntcAzAudAddService - ok
16:57:12.0601 3724	intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
16:57:12.0601 3724	intelide - ok
16:57:12.0632 3724	intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
16:57:12.0632 3724	intelppm - ok
16:57:12.0664 3724	IPBusEnum       (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
16:57:12.0664 3724	IPBusEnum - ok
16:57:12.0695 3724	IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:57:12.0695 3724	IpFilterDriver - ok
16:57:12.0742 3724	iphlpsvc        (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
16:57:12.0757 3724	iphlpsvc - ok
16:57:12.0773 3724	IPMIDRV         (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
16:57:12.0788 3724	IPMIDRV - ok
16:57:12.0820 3724	IPNAT           (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
16:57:12.0820 3724	IPNAT - ok
16:57:12.0835 3724	IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
16:57:12.0851 3724	IRENUM - ok
16:57:12.0866 3724	isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
16:57:12.0866 3724	isapnp - ok
16:57:12.0898 3724	iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
16:57:12.0898 3724	iScsiPrt - ok
16:57:12.0944 3724	kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
16:57:12.0944 3724	kbdclass - ok
16:57:12.0976 3724	kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
16:57:12.0976 3724	kbdhid - ok
16:57:13.0007 3724	KeyIso          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:13.0022 3724	KeyIso - ok
16:57:13.0038 3724	KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
16:57:13.0038 3724	KSecDD - ok
16:57:13.0100 3724	KSecPkg         (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
16:57:13.0100 3724	KSecPkg - ok
16:57:13.0132 3724	ksthunk         (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
16:57:13.0132 3724	ksthunk - ok
16:57:13.0178 3724	KtmRm           (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
16:57:13.0194 3724	KtmRm - ok
16:57:13.0241 3724	LanmanServer    (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\System32\srvsvc.dll
16:57:13.0256 3724	LanmanServer - ok
16:57:13.0303 3724	LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
16:57:13.0319 3724	LanmanWorkstation - ok
16:57:13.0366 3724	lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
16:57:13.0381 3724	lltdio - ok
16:57:13.0412 3724	lltdsvc         (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
16:57:13.0428 3724	lltdsvc - ok
16:57:13.0444 3724	lmhosts         (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
16:57:13.0459 3724	lmhosts - ok
16:57:13.0506 3724	LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
16:57:13.0506 3724	LSI_FC - ok
16:57:13.0537 3724	LSI_SAS         (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
16:57:13.0537 3724	LSI_SAS - ok
16:57:13.0553 3724	LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
16:57:13.0568 3724	LSI_SAS2 - ok
16:57:13.0568 3724	LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
16:57:13.0584 3724	LSI_SCSI - ok
16:57:13.0615 3724	luafv           (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
16:57:13.0615 3724	luafv - ok
16:57:13.0646 3724	Mcx2Svc         (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
16:57:13.0646 3724	Mcx2Svc - ok
16:57:13.0678 3724	megasas         (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
16:57:13.0678 3724	megasas - ok
16:57:13.0693 3724	MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
16:57:13.0709 3724	MegaSR - ok
16:57:13.0740 3724	MMCSS           (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
16:57:13.0740 3724	MMCSS - ok
16:57:13.0756 3724	Modem           (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
16:57:13.0756 3724	Modem - ok
16:57:13.0787 3724	monitor         (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
16:57:13.0787 3724	monitor - ok
16:57:13.0818 3724	mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
16:57:13.0818 3724	mouclass - ok
16:57:13.0849 3724	mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
16:57:13.0849 3724	mouhid - ok
16:57:13.0880 3724	mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
16:57:13.0880 3724	mountmgr - ok
16:57:13.0927 3724	mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
16:57:13.0927 3724	mpio - ok
16:57:13.0943 3724	mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
16:57:13.0943 3724	mpsdrv - ok
16:57:14.0005 3724	MpsSvc          (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
16:57:14.0036 3724	MpsSvc - ok
16:57:14.0068 3724	MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
16:57:14.0068 3724	MRxDAV - ok
16:57:14.0099 3724	mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
16:57:14.0099 3724	mrxsmb - ok
16:57:14.0130 3724	mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:57:14.0161 3724	mrxsmb10 - ok
16:57:14.0177 3724	mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:57:14.0177 3724	mrxsmb20 - ok
16:57:14.0208 3724	msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
16:57:14.0208 3724	msahci - ok
16:57:14.0255 3724	msdsm           (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
16:57:14.0255 3724	msdsm - ok
16:57:14.0286 3724	MSDTC           (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
16:57:14.0317 3724	MSDTC - ok
16:57:14.0333 3724	Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
16:57:14.0333 3724	Msfs - ok
16:57:14.0364 3724	mshidkmdf       (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
16:57:14.0364 3724	mshidkmdf - ok
16:57:14.0380 3724	msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
16:57:14.0380 3724	msisadrv - ok
16:57:14.0426 3724	MSiSCSI         (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
16:57:14.0426 3724	MSiSCSI - ok
16:57:14.0442 3724	msiserver - ok
16:57:14.0458 3724	MSKSSRV         (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
16:57:14.0458 3724	MSKSSRV - ok
16:57:14.0489 3724	MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
16:57:14.0489 3724	MSPCLOCK - ok
16:57:14.0520 3724	MSPQM           (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
16:57:14.0520 3724	MSPQM - ok
16:57:14.0551 3724	MsRPC           (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
16:57:14.0551 3724	MsRPC - ok
16:57:14.0582 3724	mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
16:57:14.0582 3724	mssmbios - ok
16:57:14.0598 3724	MSTEE           (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
16:57:14.0598 3724	MSTEE - ok
16:57:14.0614 3724	MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
16:57:14.0614 3724	MTConfig - ok
16:57:14.0645 3724	Mup             (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
16:57:14.0645 3724	Mup - ok
16:57:14.0676 3724	napagent        (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
16:57:14.0707 3724	napagent - ok
16:57:14.0738 3724	NativeWifiP     (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS
wifi.sys
16:57:14.0754 3724	NativeWifiP - ok
16:57:14.0801 3724	NDIS            (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers
dis.sys
16:57:14.0832 3724	NDIS - ok
16:57:14.0863 3724	NdisCap         (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS
discap.sys
16:57:14.0863 3724	NdisCap - ok
16:57:14.0894 3724	NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS
distapi.sys
16:57:14.0894 3724	NdisTapi - ok
16:57:14.0941 3724	Ndisuio         (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS
disuio.sys
16:57:14.0941 3724	Ndisuio - ok
16:57:14.0972 3724	NdisWan         (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS
diswan.sys
16:57:14.0972 3724	NdisWan - ok
16:57:15.0004 3724	NDProxy         (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
16:57:15.0019 3724	NDProxy - ok
16:57:15.0097 3724	Nero BackItUp Scheduler 4.0 (7d2633295eb6ff2b938185874884059d) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
16:57:15.0128 3724	Nero BackItUp Scheduler 4.0 - ok
16:57:15.0191 3724	NetBIOS         (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS
etbios.sys
16:57:15.0206 3724	NetBIOS - ok
16:57:15.0253 3724	NetBT           (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS
etbt.sys
16:57:15.0253 3724	NetBT - ok
16:57:15.0300 3724	Netlogon        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:15.0300 3724	Netlogon - ok
16:57:15.0347 3724	Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32
etman.dll
16:57:15.0362 3724	Netman - ok
16:57:15.0378 3724	netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32
etprofm.dll
16:57:15.0394 3724	netprofm - ok
16:57:15.0472 3724	netr28ux        (53d7442aa919c91d055dbd44635f32b1) C:\Windows\system32\DRIVERS
etr28ux.sys
16:57:15.0487 3724	netr28ux - ok
16:57:15.0534 3724	NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:57:15.0534 3724	NetTcpPortSharing - ok
16:57:15.0581 3724	nfrd960         (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS
frd960.sys
16:57:15.0581 3724	nfrd960 - ok
16:57:15.0628 3724	NlaSvc          (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32
lasvc.dll
16:57:15.0643 3724	NlaSvc - ok
16:57:15.0659 3724	Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
16:57:15.0659 3724	Npfs - ok
16:57:15.0690 3724	nsi             (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32
sisvc.dll
16:57:15.0690 3724	nsi - ok
16:57:15.0706 3724	nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers
siproxy.sys
16:57:15.0706 3724	nsiproxy - ok
16:57:15.0752 3724	Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
16:57:15.0799 3724	Ntfs - ok
16:57:15.0815 3724	Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
16:57:15.0815 3724	Null - ok
16:57:15.0846 3724	nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers
vraid.sys
16:57:15.0846 3724	nvraid - ok
16:57:15.0877 3724	nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers
vstor.sys
16:57:15.0877 3724	nvstor - ok
16:57:15.0893 3724	nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers
v_agp.sys
16:57:15.0893 3724	nv_agp - ok
16:57:15.0908 3724	ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
16:57:15.0908 3724	ohci1394 - ok
16:57:15.0940 3724	p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
16:57:15.0955 3724	p2pimsvc - ok
16:57:16.0002 3724	p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
16:57:16.0018 3724	p2psvc - ok
16:57:16.0049 3724	Parport         (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
16:57:16.0049 3724	Parport - ok
16:57:16.0096 3724	partmgr         (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
16:57:16.0096 3724	partmgr - ok
16:57:16.0111 3724	PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
16:57:16.0127 3724	PcaSvc - ok
16:57:16.0158 3724	pci             (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
16:57:16.0158 3724	pci - ok
16:57:16.0174 3724	pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
16:57:16.0174 3724	pciide - ok
16:57:16.0205 3724	pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
16:57:16.0220 3724	pcmcia - ok
16:57:16.0236 3724	pcw             (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
16:57:16.0236 3724	pcw - ok
16:57:16.0267 3724	PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
16:57:16.0283 3724	PEAUTH - ok
16:57:16.0330 3724	PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
16:57:16.0330 3724	PerfHost - ok
16:57:16.0408 3724	pla             (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
16:57:16.0439 3724	pla - ok
16:57:16.0501 3724	PlugPlay        (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
16:57:16.0517 3724	PlugPlay - ok
16:57:16.0532 3724	PNRPAutoReg     (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
16:57:16.0548 3724	PNRPAutoReg - ok
16:57:16.0564 3724	PNRPsvc         (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
16:57:16.0579 3724	PNRPsvc - ok
16:57:16.0626 3724	PolicyAgent     (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
16:57:16.0642 3724	PolicyAgent - ok
16:57:16.0673 3724	Power           (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
16:57:16.0688 3724	Power - ok
16:57:16.0735 3724	PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERSaspptp.sys
16:57:16.0735 3724	PptpMiniport - ok
16:57:16.0766 3724	Processor       (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
16:57:16.0766 3724	Processor - ok
16:57:16.0813 3724	ProfSvc         (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
16:57:16.0829 3724	ProfSvc - ok
16:57:16.0876 3724	ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:16.0876 3724	ProtectedStorage - ok
16:57:16.0922 3724	Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
16:57:16.0922 3724	Psched - ok
16:57:16.0985 3724	ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
16:57:17.0016 3724	ql2300 - ok
16:57:17.0047 3724	ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
16:57:17.0047 3724	ql40xx - ok
16:57:17.0078 3724	QWAVE           (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
16:57:17.0094 3724	QWAVE - ok
16:57:17.0110 3724	QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
16:57:17.0110 3724	QWAVEdrv - ok
16:57:17.0125 3724	RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERSasacd.sys
16:57:17.0125 3724	RasAcd - ok
16:57:17.0156 3724	RasAgileVpn     (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
16:57:17.0156 3724	RasAgileVpn - ok
16:57:17.0203 3724	RasAuto         (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32asauto.dll
16:57:17.0203 3724	RasAuto - ok
16:57:17.0234 3724	Rasl2tp         (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERSasl2tp.sys
16:57:17.0250 3724	Rasl2tp - ok
16:57:17.0281 3724	RasMan          (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32asmans.dll
16:57:17.0297 3724	RasMan - ok
16:57:17.0312 3724	RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERSaspppoe.sys
16:57:17.0328 3724	RasPppoe - ok
16:57:17.0328 3724	RasSstp         (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERSassstp.sys
16:57:17.0344 3724	RasSstp - ok
16:57:17.0375 3724	rdbss           (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERSdbss.sys
16:57:17.0375 3724	rdbss - ok
16:57:17.0390 3724	rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERSdpbus.sys
16:57:17.0406 3724	rdpbus - ok
16:57:17.0422 3724	RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
16:57:17.0422 3724	RDPCDD - ok
16:57:17.0437 3724	RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\driversdpencdd.sys
16:57:17.0437 3724	RDPENCDD - ok
16:57:17.0453 3724	RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\driversdprefmp.sys
16:57:17.0468 3724	RDPREFMP - ok
16:57:17.0500 3724	RDPWD           (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
16:57:17.0500 3724	RDPWD - ok
16:57:17.0546 3724	rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\driversdyboost.sys
16:57:17.0546 3724	rdyboost - ok
16:57:17.0578 3724	RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
16:57:17.0578 3724	RemoteAccess - ok
16:57:17.0609 3724	RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32egsvc.dll
16:57:17.0624 3724	RemoteRegistry - ok
16:57:17.0671 3724	RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
16:57:17.0671 3724	RpcEptMapper - ok
16:57:17.0702 3724	RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
16:57:17.0702 3724	RpcLocator - ok
16:57:17.0749 3724	RpcSs           (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32pcss.dll
16:57:17.0765 3724	RpcSs - ok
16:57:17.0796 3724	rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERSspndr.sys
16:57:17.0796 3724	rspndr - ok
16:57:17.0827 3724	RTL8167         (b49dc435ae3695bac5623dd94b05732d) C:\Windows\system32\DRIVERS\Rt64win7.sys
16:57:17.0827 3724	RTL8167 - ok
16:57:17.0890 3724	RTL8192su       (45959f6069c2de97caa697320b22926f) C:\Windows\system32\DRIVERS\RTL8192su.sys
16:57:17.0905 3724	RTL8192su - ok
16:57:17.0952 3724	SamSs           (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:17.0952 3724	SamSs - ok
16:57:17.0983 3724	sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
16:57:17.0983 3724	sbp2port - ok
16:57:18.0014 3724	SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
16:57:18.0030 3724	SCardSvr - ok
16:57:18.0077 3724	scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
16:57:18.0077 3724	scfilter - ok
16:57:18.0124 3724	Schedule        (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
16:57:18.0155 3724	Schedule - ok
16:57:18.0186 3724	SCPolicySvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
16:57:18.0202 3724	SCPolicySvc - ok
16:57:18.0233 3724	SDRSVC          (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
16:57:18.0248 3724	SDRSVC - ok
16:57:18.0295 3724	secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
16:57:18.0311 3724	secdrv - ok
16:57:18.0342 3724	seclogon        (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
16:57:18.0342 3724	seclogon - ok
16:57:18.0373 3724	SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\system32\sens.dll
16:57:18.0373 3724	SENS - ok
16:57:18.0404 3724	SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
16:57:18.0404 3724	SensrSvc - ok
16:57:18.0467 3724	Serenum         (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
16:57:18.0467 3724	Serenum - ok
16:57:18.0498 3724	Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
16:57:18.0498 3724	Serial - ok
16:57:18.0529 3724	sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
16:57:18.0529 3724	sermouse - ok
16:57:18.0560 3724	SessionEnv      (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
16:57:18.0576 3724	SessionEnv - ok
16:57:18.0607 3724	sffdisk         (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
16:57:18.0607 3724	sffdisk - ok
16:57:18.0623 3724	sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
16:57:18.0623 3724	sffp_mmc - ok
16:57:18.0638 3724	sffp_sd         (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
16:57:18.0638 3724	sffp_sd - ok
16:57:18.0654 3724	sfloppy         (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
16:57:18.0654 3724	sfloppy - ok
16:57:18.0685 3724	SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
16:57:18.0701 3724	SharedAccess - ok
16:57:18.0732 3724	ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
16:57:18.0748 3724	ShellHWDetection - ok
16:57:18.0763 3724	SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
16:57:18.0779 3724	SiSRaid2 - ok
16:57:18.0794 3724	SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
16:57:18.0794 3724	SiSRaid4 - ok
16:57:18.0826 3724	Smb             (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
16:57:18.0826 3724	Smb - ok
16:57:18.0857 3724	SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
16:57:18.0857 3724	SNMPTRAP - ok
16:57:18.0888 3724	spldr           (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
16:57:18.0888 3724	spldr - ok
16:57:18.0935 3724	Spooler         (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
16:57:18.0950 3724	Spooler - ok
16:57:19.0044 3724	sppsvc          (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
16:57:19.0091 3724	sppsvc - ok
16:57:19.0122 3724	sppuinotify     (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
16:57:19.0122 3724	sppuinotify - ok
16:57:19.0169 3724	srv             (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
16:57:19.0184 3724	srv - ok
16:57:19.0216 3724	srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
16:57:19.0231 3724	srv2 - ok
16:57:19.0247 3724	srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
16:57:19.0247 3724	srvnet - ok
16:57:19.0278 3724	SSDPSRV         (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
16:57:19.0294 3724	SSDPSRV - ok
16:57:19.0325 3724	SstpSvc         (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
16:57:19.0325 3724	SstpSvc - ok
16:57:19.0372 3724	stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
16:57:19.0372 3724	stexstor - ok
16:57:19.0418 3724	stisvc          (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
16:57:19.0450 3724	stisvc - ok
16:57:19.0465 3724	swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
16:57:19.0465 3724	swenum - ok
16:57:19.0512 3724	swprv           (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
16:57:19.0528 3724	swprv - ok
16:57:19.0606 3724	SysMain         (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
16:57:19.0652 3724	SysMain - ok
16:57:19.0684 3724	TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
16:57:19.0699 3724	TabletInputService - ok
16:57:19.0730 3724	TapiSrv         (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32	apisrv.dll
16:57:19.0762 3724	TapiSrv - ok
16:57:19.0793 3724	TBS             (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32	bssvc.dll
16:57:19.0793 3724	TBS - ok
16:57:19.0871 3724	Tcpip           (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers	cpip.sys
16:57:19.0902 3724	Tcpip - ok
16:57:19.0949 3724	TCPIP6          (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS	cpip.sys
16:57:19.0964 3724	TCPIP6 - ok
16:57:20.0011 3724	tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers	cpipreg.sys
16:57:20.0011 3724	tcpipreg - ok
16:57:20.0042 3724	TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers	dpipe.sys
16:57:20.0042 3724	TDPIPE - ok
16:57:20.0058 3724	TDTCP           (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers	dtcp.sys
16:57:20.0058 3724	TDTCP - ok
16:57:20.0105 3724	tdx             (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS	dx.sys
16:57:20.0105 3724	tdx - ok
16:57:20.0136 3724	TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers	ermdd.sys
16:57:20.0136 3724	TermDD - ok
16:57:20.0183 3724	TermService     (2e648163254233755035b46dd7b89123) C:\Windows\System32	ermsrv.dll
16:57:20.0198 3724	TermService - ok
16:57:20.0230 3724	Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32	hemeservice.dll
16:57:20.0245 3724	Themes - ok
16:57:20.0261 3724	THREADORDER     (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
16:57:20.0261 3724	THREADORDER - ok
16:57:20.0292 3724	TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32	rkwks.dll
16:57:20.0308 3724	TrkWks - ok
16:57:20.0354 3724	TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
16:57:20.0354 3724	TrustedInstaller - ok
16:57:20.0401 3724	tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS	ssecsrv.sys
16:57:20.0401 3724	tssecsrv - ok
16:57:20.0464 3724	TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers	susbflt.sys
16:57:20.0464 3724	TsUsbFlt - ok
16:57:20.0510 3724	tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS	unnel.sys
16:57:20.0510 3724	tunnel - ok
16:57:20.0542 3724	uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
16:57:20.0542 3724	uagp35 - ok
16:57:20.0588 3724	udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
16:57:20.0588 3724	udfs - ok
16:57:20.0620 3724	UI0Detect       (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
16:57:20.0635 3724	UI0Detect - ok
16:57:20.0666 3724	uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
16:57:20.0666 3724	uliagpkx - ok
16:57:20.0698 3724	umbus           (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
16:57:20.0713 3724	umbus - ok
16:57:20.0744 3724	UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
16:57:20.0744 3724	UmPass - ok
16:57:20.0791 3724	Updater Service (f9ec9acd504d823d9b9ca98a4f8d3ca2) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
16:57:20.0807 3724	Updater Service - ok
16:57:20.0838 3724	upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
16:57:20.0854 3724	upnphost - ok
16:57:20.0885 3724	usbccgp         (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
16:57:20.0885 3724	usbccgp - ok
16:57:20.0932 3724	usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
16:57:20.0932 3724	usbcir - ok
16:57:20.0963 3724	usbehci         (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
16:57:20.0963 3724	usbehci - ok
16:57:20.0994 3724	usbhub          (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
16:57:21.0010 3724	usbhub - ok
16:57:21.0025 3724	usbohci         (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
16:57:21.0025 3724	usbohci - ok
16:57:21.0056 3724	usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
16:57:21.0072 3724	usbprint - ok
16:57:21.0103 3724	USBSTOR         (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:57:21.0103 3724	USBSTOR - ok
16:57:21.0119 3724	usbuhci         (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\DRIVERS\usbuhci.sys
16:57:21.0119 3724	usbuhci - ok
16:57:21.0150 3724	UxSms           (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
16:57:21.0150 3724	UxSms - ok
16:57:21.0197 3724	VaultSvc        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:21.0212 3724	VaultSvc - ok
16:57:21.0228 3724	vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
16:57:21.0228 3724	vdrvroot - ok
16:57:21.0275 3724	vds             (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
16:57:21.0306 3724	vds - ok
16:57:21.0337 3724	vga             (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
16:57:21.0337 3724	vga - ok
16:57:21.0353 3724	VgaSave         (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
16:57:21.0353 3724	VgaSave - ok
16:57:21.0400 3724	vhdmp           (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
16:57:21.0400 3724	vhdmp - ok
16:57:21.0415 3724	viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
16:57:21.0431 3724	viaide - ok
16:57:21.0446 3724	volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
16:57:21.0446 3724	volmgr - ok
16:57:21.0478 3724	volmgrx         (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
16:57:21.0493 3724	volmgrx - ok
16:57:21.0524 3724	volsnap         (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
16:57:21.0524 3724	volsnap - ok
16:57:21.0556 3724	vsmraid         (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
16:57:21.0571 3724	vsmraid - ok
16:57:21.0634 3724	VSS             (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
16:57:21.0665 3724	VSS - ok
16:57:21.0680 3724	vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
16:57:21.0680 3724	vwifibus - ok
16:57:21.0727 3724	vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
16:57:21.0727 3724	vwififlt - ok
16:57:21.0758 3724	W32Time         (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
16:57:21.0774 3724	W32Time - ok
16:57:21.0790 3724	WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
16:57:21.0805 3724	WacomPen - ok
16:57:21.0836 3724	WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:57:21.0852 3724	WANARP - ok
16:57:21.0852 3724	Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:57:21.0868 3724	Wanarpv6 - ok
16:57:21.0930 3724	WatAdminSvc     (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
16:57:21.0946 3724	WatAdminSvc - ok
16:57:22.0008 3724	wbengine        (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
16:57:22.0055 3724	wbengine - ok
16:57:22.0086 3724	WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
16:57:22.0102 3724	WbioSrvc - ok
16:57:22.0133 3724	wcncsvc         (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
16:57:22.0148 3724	wcncsvc - ok
16:57:22.0164 3724	WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
16:57:22.0180 3724	WcsPlugInService - ok
16:57:22.0211 3724	Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
16:57:22.0211 3724	Wd - ok
16:57:22.0242 3724	Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
16:57:22.0258 3724	Wdf01000 - ok
16:57:22.0273 3724	WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
16:57:22.0273 3724	WdiServiceHost - ok
16:57:22.0289 3724	WdiSystemHost   (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
16:57:22.0289 3724	WdiSystemHost - ok
16:57:22.0320 3724	WebClient       (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
16:57:22.0336 3724	WebClient - ok
16:57:22.0367 3724	Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
16:57:22.0382 3724	Wecsvc - ok
16:57:22.0398 3724	wercplsupport   (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
16:57:22.0398 3724	wercplsupport - ok
16:57:22.0429 3724	WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
16:57:22.0445 3724	WerSvc - ok
16:57:22.0492 3724	WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
16:57:22.0492 3724	WfpLwf - ok
16:57:22.0507 3724	WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
16:57:22.0523 3724	WIMMount - ok
16:57:22.0554 3724	WinDefend - ok
16:57:22.0570 3724	WinHttpAutoProxySvc - ok
16:57:22.0616 3724	Winmgmt         (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
16:57:22.0616 3724	Winmgmt - ok
16:57:22.0679 3724	WinRM           (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
16:57:22.0726 3724	WinRM - ok
16:57:22.0788 3724	WinUsb          (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
16:57:22.0788 3724	WinUsb - ok
16:57:22.0835 3724	Wlansvc         (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
16:57:22.0866 3724	Wlansvc - ok
16:57:22.0882 3724	WmiAcpi         (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
16:57:22.0882 3724	WmiAcpi - ok
16:57:22.0928 3724	wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
16:57:22.0944 3724	wmiApSrv - ok
16:57:22.0975 3724	WMPNetworkSvc - ok
16:57:23.0006 3724	WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
16:57:23.0006 3724	WPCSvc - ok
16:57:23.0038 3724	WPDBusEnum      (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
16:57:23.0053 3724	WPDBusEnum - ok
16:57:23.0084 3724	ws2ifsl         (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
16:57:23.0084 3724	ws2ifsl - ok
16:57:23.0116 3724	wscsvc          (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll
16:57:23.0116 3724	wscsvc - ok
16:57:23.0131 3724	WSearch - ok
16:57:23.0225 3724	wuauserv        (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
16:57:23.0256 3724	wuauserv - ok
16:57:23.0303 3724	WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
16:57:23.0318 3724	WudfPf - ok
16:57:23.0350 3724	WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
16:57:23.0350 3724	WUDFRd - ok
16:57:23.0381 3724	wudfsvc         (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
16:57:23.0381 3724	wudfsvc - ok
16:57:23.0428 3724	WwanSvc         (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
16:57:23.0443 3724	WwanSvc - ok
16:57:23.0490 3724	MBR (0x1B8)     (70e629b51c16b3c007730c6ae57144c9) \Device\Harddisk0\DR0
16:57:23.0521 3724	\Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
16:57:23.0521 3724	\Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
16:57:23.0568 3724	Boot (0x1200)   (1b018d123c71e25aec2f14de7b72121f) \Device\Harddisk0\DR0\Partition0
16:57:23.0568 3724	\Device\Harddisk0\DR0\Partition0 - ok
16:57:23.0568 3724	Boot (0x1200)   (c9123aaca2471887b0c0d78dfb6f4486) \Device\Harddisk0\DR0\Partition1
16:57:23.0568 3724	\Device\Harddisk0\DR0\Partition1 - ok
16:57:23.0568 3724	============================================================
16:57:23.0568 3724	Scan finished
16:57:23.0568 3724	============================================================
16:57:23.0584 2980	Detected object count: 1
16:57:23.0584 2980	Actual detected object count: 1
16:57:58.0777 2980	\Device\Harddisk0\DR0\# - copied to quarantine
16:57:58.0777 2980	\Device\Harddisk0\DR0 - copied to quarantine
16:57:58.0933 2980	\Device\Harddisk0\DR0\TDLFS\mbr - copied to quarantine
16:57:58.0933 2980	\Device\Harddisk0\DR0\TDLFS\vbr - copied to quarantine
16:57:58.0949 2980	\Device\Harddisk0\DR0\TDLFS\bid - copied to quarantine
16:57:58.0949 2980	\Device\Harddisk0\DR0\TDLFS\affid - copied to quarantine
16:57:58.0949 2980	\Device\Harddisk0\DR0\TDLFS\boot - copied to quarantine
16:57:58.0949 2980	\Device\Harddisk0\DR0\TDLFS\cmd32 - copied to quarantine
16:58:00.0946 2980	\Device\Harddisk0\DR0\TDLFS\cmd64 - copied to quarantine
16:58:01.0040 2980	\Device\Harddisk0\DR0\TDLFS\dbg32 - copied to quarantine
16:58:01.0102 2980	\Device\Harddisk0\DR0\TDLFS\dbg64 - copied to quarantine
16:58:01.0128 2980	\Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
16:58:01.0204 2980	\Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
16:58:01.0254 2980	\Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
16:58:01.0285 2980	\Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
16:58:01.0314 2980	\Device\Harddisk0\DR0\TDLFS\subid - copied to quarantine
16:58:01.0316 2980	\Device\Harddisk0\DR0\TDLFS\info - copied to quarantine
16:58:01.0317 2980	\Device\Harddisk0\DR0\TDLFS\main - copied to quarantine
16:58:01.0319 2980	\Device\Harddisk0\DR0\TDLFS\mainfb.script - copied to quarantine
16:58:01.0348 2980	\Device\Harddisk0\DR0\TDLFS\com64 - copied to quarantine
16:58:01.0407 2980	\Device\Harddisk0\DR0\TDLFS\bbr232 - copied to quarantine
16:58:02.0932 2980	\Device\Harddisk0\DR0\TDLFS\serf332 - copied to quara

Utilisateur anonyme · Answer

Re

Le rapport est incomplet.
Pour transmettre le rapport clique sur ce lien : 

 
http://pjjoint.malekal.com/

https://www.cjoint.com/

Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier (Fichier demandé )
Clique sur Ouvrir. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.

@+

kikiwonki · Answer

http://cjoint.com/?3DnsaIyoSte

Utilisateur anonyme · Answer

Re

Inscris toi avant tout  

Pour de plus amples informations, fait ceci stp

Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

Serveur N°2

Ou

http://www.premiumorange.com/zeb-help-process/zhpdiag.html 
en bas de la page ZHP avec un numéro de version.
 
Une fois le téléchargement achevé, dé zippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

Double-clique sur l'icône pour lancer le programme. Sous Vista ou Seven clic droit «  exécuter en tant que administrateur »


Clique sur  la loupe   pour lancer l'analyse.

Laisse l'outil travailler, il peut être assez long. 

Ferme ZHPDiag en fin d'analyse. 


Pour transmettre le rapport clique sur ce lien : 

 
http://pjjoint.malekal.com/

https://www.cjoint.com/

Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag). 

Sélectionne le fichier ZHPDiag.txt. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.

Merci

A+

kikiwonki · Answer

voici le rapport de zhpdiag comme demander

http://cjoint.com/?BDntPQWuZSo

encore merci pour ton aide

Utilisateur anonyme · Answer

Re

1)Télécharge AdwCleaner ( d'Xplode ) sur ton bureau. 
Lance le, clique sur  [Suppression] puis patiente le temps du scan. 
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse. 

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt 

Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start= 


2)Télécharge Malwaresbytes anti malware ici  
http://www.malwarebytes.org/mbam.php

Bouton »Download free version »
 
* Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et  mets le à jour .   

(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/ 

* Potasse le tuto pour te familiariser avec le prg : 

https://forum.pcastuces.com/sujet.asp?f=31&s=3 

(cela dis, il est très simple d'utilisation). 

relance Malwaresbytes en suivant scrupuleusement ces consignes : 

! Déconnecte toi et ferme toutes applications en cours ! 

* Lance Malwarebyte's.   Sous Vista et Seven   (clic droit de la souris « exécuter en tant que administrateur »)

*Procèdes à une mise à jour

*Fais un examen dit "Complet"

--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ). 
--> à la fin tu cliques sur  "Afficher les résultats" "   . 
--> Vérifie que tous les objets infectés soient validés, puis  clique sur " supprimer la sélection "   . 

 Note   : si il faut redémarrer ton PC pour finir le nettoyage, fais le ! 


 Poste le rapport sauvegardé après la suppression des objets infectés   (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)


@+

kikiwonki · Answer

salut
voici pour le premier rapport de adw cleaner

http://cjoint.com/?BDojQrWhKgR

je fait suivre le deuxieme des qu'il a fini

kikiwonki · Answer

voila pour malware apparement aucun souci détecté

 Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Version de la base de données: v2012.04.14.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
gerarg :: GERARD [administrateur]

14/04/2012 09:47:08
mbam-log-2012-04-14 (09-47-08).txt

Type d'examen: Examen complet
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 324616
Temps écoulé: 32 minute(s), 30 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

Utilisateur anonyme · Answer

Bonjour

Poste moi un nouveau rapport ZHPDiag;merci

@+

kikiwonki · Answer

bonjour 

voila le lien 
http://cjoint.com/?BDomJsCAbWj

merci

Utilisateur anonyme · Answer

Re

Utilisation de l'outil ZHPFix : 

* Copie  tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 
-------------------------------------------------------------------------------------------------


[HKLM\Software\Freeze.com]     
O43 - CFD: 22/03/2012 - 11:54:09 - [0,002] ----D C:\Users\gerarg\AppData\Roaming\pdfforge     
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}] 
C:\Users\gerarg\AppData\Roaming\pdfforge     
[HKCU\Software\AppDataLow\Software\Freecorder]     
[HKLM\Software\Freecorder]     
O43 - CFD: 17/03/2012 - 23:11:13 - [10,258] ----D C:\Program Files (x86)\Freecorder     
O43 - CFD: 17/03/2012 - 23:11:13 - [10,258] ----D C:\Program Files (x86)\Freecorder     
C:\Program Files (x86)\Freecorder     
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freecorder     
C:\Users\gerarg\AppData\LocalLow\Freecorder     
FirewallRAZ
Emptytemp

--------------------------------------------------------------------------------------------
Puis lance  ZHPFix depuis le raccourci du bureau. Sous Vista :Clic droit sur l'icône ZHPFix.exe  
 « Exécuter en tant qu'administrateur »
. 

* Une fois l'outil ZHPFix ouvert, clique sur le bouton [ H ] ( "coller les lignes Helper" ) . 

*Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

*Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes  
- Clique sur le bouton « GO » pour lancer le nettoyage, 


-> laisse travailler l'outil et ne touche à rien ... 


-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le ! 

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ... 

( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt ) 



A+

kikiwonki · Answer

voici le nouveau rapport


Rapport de ZHPFix 1.12.3372 par Nicolas Coolman, Update du 22/11/2011
Fichier d'export Registre : 
Run by gerarg at 14/04/2012 17:01:30
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Clé(s) du Registre ==========
ABSENT Key: HKLM\Software\Freeze.com
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
SUPPRIME Key: HKCU\Software\AppDataLow\Software\Freecorder
ABSENT Key: HKLM\Software\Freecorder

========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz : 
ABSENT Valeur Domain Profile: FirewallRaz : 
SUPPRIME FirewallRaz (Domain) : NetPres-In-TCP-NoScope
SUPPRIME FirewallRaz (Domain) : NetPres-Out-TCP-NoScope
SUPPRIME FirewallRaz (None) : NetPres-WSD-In-UDP
SUPPRIME FirewallRaz (None) : NetPres-WSD-Out-UDP
SUPPRIME FirewallRaz (Public) : NetPres-In-TCP
SUPPRIME FirewallRaz (Public) : NetPres-Out-TCP
SUPPRIME FirewallRaz (None) : {B0F403A8-EAB0-4DD8-BAA0-AEB4BF4FDD73}
SUPPRIME FirewallRaz (Public) : {F5483342-D860-4DFB-A190-63E0166DEE1C}
SUPPRIME FirewallRaz (Public) : {BF01E13D-ED0D-4F9D-BE6C-CC0C7C836F40}
SUPPRIME FirewallRaz (Domain) : {8F1A79D4-BA30-483C-AC05-3C93993A1E75}
SUPPRIME FirewallRaz (Domain) : {20B00F73-FE95-43EF-8CD6-3EEBED7E2BAF}

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\gerarg\AppData\Roaming\pdfforge
SUPPRIME Reboot Folder**: C:\Program Files (x86)\Freecorder
SUPPRIME Folder: c:\programdata\microsoft\windows\start menu\programs\freecorder
SUPPRIME Folder: c:\users\gerarg\appdata\locallow\freecorder
SUPPRIME Temporaires Windows: : 74

========== Fichier(s) ==========
ABSENT Folder/File: c:\users\gerarg\appdata\roaming\pdfforge
SUPPRIME Temporaires Windows: : 16


========== Récapitulatif ==========
5 : Clé(s) du Registre
13 : Valeur(s) du Registre
5 : Dossier(s)
2 : Fichier(s)


End of clean in 00mn 03s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 14/04/2012 17:01:30 [2168]

Utilisateur anonyme · Answer

Re

As tu encore des problèmes?

@+

kikiwonki · Answer

non plus aucun 
tout va parfaitement bien 

merci infiniment pour ton aide

Yontoo layer runtime + virus help please - Page 2

Discussions similaires

Newsletters