Message RunDLL module introuvable Fermé

Question

Bonjour, 

j'ai un problème lorsque j'allume mon pc, j'ai un message RUNDLL avec un module introuvable AppData Que dois je faire ? Merci

Configuration: Windows 7 / Internet Explorer 9.0

g3n-h@ckm@n · Answer

salut 

telecharge et enregistre Pre_Scan sur ton bureau :

http://forums-fec.be/gen-hackman/Pre_Scan.exe

Avertissement :Il y aura une extinction du bureau pendant le scan --> pas de panique.

une fois telechargé lance-le , laisse faire le scan jusqu'à l'apparition de "Pre_scan_la_date_et_l'heure.txt" sur le bureau.

si l'outil est relancé plusieurs fois , il te proposera un menu et qu'aucune option n'est demandée, lance l'option "Kill"

si l'outil est bloqué par l'infection utilise cette version avec extension .pif :

http://forums-fec.be/gen-hackman/Pre_Scan.pif

ou cette version renommée winlogon.exe :

http://forums-fec.be/gen-hackman/winlogon.exe

si l'outil detecte un proxy et que tu n'en as pas installé clique sur "supprimer le proxy"

Il se peut qu'une multitude de fenêtres noires clignotent , laisse-le travailler

Poste Pre_Scan_la_date_et_l'heure.txt qui apparaitra sur le bureau en fin de scan


NE LE POSTE PAS SUR LE FORUM !!! (il est trop long)

Heberge le rapport sur http://pjjoint.malekal.com puis donne le lien obtenu en echange sur le forum où tu te fais aider

labonbon · Answer

mn antivirus m'indique que le lien que tu m'as donné peut nuire a mon pc ?

g3n-h@ckm@n · Answer

c'est normal si c est avast desactive aussi la sandbox dans 'protections supplementaires'

labonbon · Answer

j'ai sfr comme antivirus impossible de telecharger le lien que tu m'as donné meme en desactivant l'antivirus

g3n-h@ckm@n · Answer

passe par mozilla

labonbon · Answer

c normal que la fenetre clignote sans cesse ? et que je n'ai plus rien sur mn bureau -_-

labonbon · Answer

ça m'a fait tout buguer ....Vous avez pas plus simple comme solution pour enlever ce message RUN DLL ?

g3n-h@ckm@n · Answer

laisse tourner le programme au lieu de paniquer ...

labonbon · Answer

J'ai réesayé et c'est bon ça a tout scanné le rapport est la :

 http://pjjoint.malekal.com/files.php?id=20120413_s15f10t15h13w11

g3n-h@ckm@n · Answer

ton pc est une poubelle....

desinstalle IliviD
mets open office à jour

======================

fais glisser une icone n'importe quel fichier sur Pre_scan , pre_script va apparaitre

Lance Pre_script , une page vierge va s'ouvrir.

selectionne tout le texte en gras ci-dessous, puis (clic droit/copier ou ctrl+c) :
___________________________________________________
Kill::

Registry::
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
"HP Software Update"=-
"TkBellExe"=-
[HKU\S-1-5-21-3406759627-88820503-2420640948-1001\Software\Microsoft\Windows\CurrentVersion\Run] 
"AdobeBridge"=- 
[HKU\S-1-5-21-3406759627-88820503-2420640948-1001\Software\Microsoft\Internet Explorer\Toolbar] 
"Locked"=1
[-HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}] 
[-HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
[-HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}]

file::
C:\Windows\@úÅ 
C:\Users\Vivien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hj8ol0.exe.lnk 

folder::
C:\Program Files (x86)\iLivid     
C:\abb27314c276ab478a37841c 
C:\Users\Vivien\AppData\Local\Ilivid Player     

MBR::

clean::      

Reboot::        
___________________________________________________

colle-le ensuite (clic droit/coller ou ctrl+V) dans la page vierge.

puis onglet fichier => enregistrer (pas enregistrer sous...) , puis ferme le texte

des fenetres noires risquent de clignoter , c'est normal , c'est le programme qui travaille 

poste Pre_Script.txt qui apparaitra sur le bureau en fin de travail 

si ton bureau ne reapparait pas => ctrl+alt+supp , gestionnaire des taches => onglet fichier => nouvelle tache puis tape explorer

======================

Télécharge et enregistre ADWcleaner sur ton bureau :

ADWCleaner (Merci à Xplode)

Lance le,

clique sur suppression et poste son rapport.

labonbon · Answer

j'ai pas compris l'etape : fais glisser une icone n'importe quel fichier sur Pre_scan , pre_script va apparaitre ? je glisse sur l'icone de pre-scan mais ça m'ouvre le logiciel ?

par contre j'ai un nouveau message qui me dit que ma connexion n'est pas securisée et que dautre utilisateurs peuvent voir ce que je fais ??

g3n-h@ckm@n · Answer

désolé c'est une vieille fiche

relance pre_scan puis choisis script puis colle le texte , etC..

labonbon · Answer

Le rapport est le suivant :

# AdwCleaner v1.505 - Rapport créé le 13/04/2012 à 18:32:09
# Mis à jour le 07/04/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Vivien - VIVIEN-PC
# Exécuté depuis : C:\Users\Vivien\Downloads\adwcleaner(1).exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Users\Vivien\AppData\Roaming\GetRightToGo
Dossier Supprimé : C:\Users\Vivien\AppData\LocalLow\BabylonToolbar
Dossier Supprimé : C:\Users\Vivien\AppData\Local\Temp\AskSearch

***** [H. Navipromo] *****


***** [Registre] *****

Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Registre (x64)] *****


***** [Navigateurs] *****

-\ Internet Explorer v9.0.8112.16421

[OK] Le registre ne contient aucune entrée illégitime.

-\ Mozilla Firefox v11.0 (fr)

Nom du profil : default
Fichier : C:\Users\Vivien\AppData\Roaming\Mozilla\FireFox\Profiles\4rpcbihe.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[S1].txt - [1311 octets] - [13/04/2012 18:32:09]

########## EOF - C:\AdwCleaner[S1].txt - [1439 octets] ##########

g3n-h@ckm@n · Answer

ok et l'autre ?

labonbon · Answer

celui du script ?

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Script | 2.326 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Windows 7 Home Premium (64 bits) Service Pack 1

Switchs possibles :

processes:: | file:: | folder:: | Registry::
Driver:: | replace:: | DNS:: | Command:: 
txt:: | Host:: | NsLook:: | DLL:: | Unhide_Part::
list:: | IP:: | Kill:: | clean:: | Del_Part:: 
Reboot:: | MBR:: | Fixmbr:: | 40:: | Zip::
search:: | Tray:: | FF:: | Info::

Script : 18:22:19

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Modification du registre effectuée

¤

Supprimé : C:\Windows\@úÅ 
Supprimé : C:\Users\Vivien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hj8ol0.exe.lnk
Absent :  

¤

Absent : C:\Program Files (x86)\iLivid 
Supprimé : C:\abb27314c276ab478a37841c 
Supprimé : C:\Users\Vivien\AppData\Local\Ilivid Player 

¤

¤¤¤¤¤¤¤¤¤¤ | MBR

Windows Version:		Windows 7 Home Premium Edition
Windows Information:		Service Pack 1 (build 7601), 64-bit
Base Board Manufacturer:	Hewlett-Packard
BIOS Manufacturer:		Phoenix Technologies LTD
System Manufacturer:		HP-Pavilion
System Product Name:		WC884AA-ABF MS228fr
Logical Drives Mask:		0x0000001c

Analysis of file "C:\Pre_Scan\MBR.bin":
Unknown MBR code

¤


¤¤¤¤¤¤¤¤¤¤ | Nettoyage disque

Nettoyage du disque effectué

¤


Fin : 18:24:10

¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤

g3n-h@ckm@n · Answer

Relance Pre_scan , clique sur Tools puis TDssKiller 

l'outil va automatiquement télécharger la derniere version depuis le site de Kaspersky 

TDSSKiller va s'ouvrir , clique sur "Start Scan" 

Si TDSS.tdl2 est détecté l''option delete sera cochée par défaut. 
Si TDSS.tdl3 est détecté assure toi que Cure est bien cochée. 
Si TDSS.tdl4(\HardDisk0\MBR) est détecté assure toi que Cure est bien cochée. 
Si Suspicious file est indiqué, laisse l''option cochée sur Skip  
Si Rootkit.Win32.ZAccess.* est détecté règle sur "cure" en haut , et "delete" en bas 

une fois qu'il a terminé , redemarre s'il te le demande pour finir de nettoyer 

sinon , ferme tdssKiller et le rapport s'affichera sur le bureau 

&#9654 Copie/Colle son contenu dans ta prochaine réponse. 

¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_Developpement_¤¤¤¤¤¤¤¤¤¤ 
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_Scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

labonbon · Answer

TDssKiller n'y est pas sur le logiciel Pre scan ?

labonbon · Answer

j'ai rien dit ^^ jai trouvé par contre j'ai pas vu le passage du
TDSS.tdl2, TDSS.tdl3 etc 
ça a directement scanné et j'ai pas eu besoin  de redemarrer le rapport est le suivant :
21:20:55.0183 6864	TDSS rootkit removing tool 2.7.28.0 Apr 10 2012 16:54:05
21:20:57.0191 6864	============================================================
21:20:57.0191 6864	Current date / time: 2012/04/13 21:20:57.0191
21:20:57.0191 6864	SystemInfo:
21:20:57.0191 6864	
21:20:57.0191 6864	OS Version: 6.1.7601 ServicePack: 1.0
21:20:57.0191 6864	Product type: Workstation
21:20:57.0191 6864	ComputerName: VIVIEN-PC
21:20:57.0191 6864	UserName: Vivien
21:20:57.0191 6864	Windows directory: C:\Windows
21:20:57.0191 6864	System windows directory: C:\Windows
21:20:57.0191 6864	Running under WOW64
21:20:57.0191 6864	Processor architecture: Intel x64
21:20:57.0191 6864	Number of processors: 2
21:20:57.0191 6864	Page size: 0x1000
21:20:57.0191 6864	Boot type: Normal boot
21:20:57.0191 6864	============================================================
21:20:58.0955 6864	Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
21:20:58.0955 6864	\Device\Harddisk0\DR0:
21:20:58.0955 6864	MBR used
21:20:58.0955 6864	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
21:20:58.0955 6864	\Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x38A10000
21:20:58.0955 6864	\Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x38A42800, BlocksNum 0x1943000
21:20:59.0002 6864	Initialize success
21:20:59.0002 6864	============================================================
21:21:26.0685 5472	============================================================
21:21:26.0685 5472	Scan started
21:21:26.0685 5472	Mode: Manual; 
21:21:26.0685 5472	============================================================
21:21:29.0307 5472	1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
21:21:29.0525 5472	1394ohci - ok
21:21:29.0588 5472	ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
21:21:29.0603 5472	ACPI - ok
21:21:29.0619 5472	AcpiPmi         (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
21:21:29.0712 5472	AcpiPmi - ok
21:21:29.0806 5472	AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
21:21:29.0822 5472	AdobeARMservice - ok
21:21:29.0931 5472	AdobeFlashPlayerUpdateSvc (0d4c486a24a711a45fd83acdf4d18506) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
21:21:29.0946 5472	AdobeFlashPlayerUpdateSvc - ok
21:21:30.0040 5472	adp94xx         (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
21:21:30.0149 5472	adp94xx - ok
21:21:30.0196 5472	adpahci         (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
21:21:30.0243 5472	adpahci - ok
21:21:30.0290 5472	adpu320         (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
21:21:30.0383 5472	adpu320 - ok
21:21:30.0414 5472	AeLookupSvc     (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
21:21:30.0414 5472	AeLookupSvc - ok
21:21:30.0461 5472	AERTFilters     (3ac22a3dfa8a050e35f0e3cd99d0cdf2) C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE
21:21:30.0477 5472	AERTFilters - ok
21:21:30.0539 5472	AFD             (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
21:21:30.0664 5472	AFD - ok
21:21:30.0726 5472	agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
21:21:30.0804 5472	agp440 - ok
21:21:30.0820 5472	ALG             (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
21:21:31.0023 5472	ALG - ok
21:21:31.0132 5472	aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
21:21:31.0210 5472	aliide - ok
21:21:31.0257 5472	AMD External Events Utility (f238be4fa4e55eb67f17281fadf69851) C:\Windows\system32\atiesrxx.exe
21:21:31.0257 5472	AMD External Events Utility - ok
21:21:31.0288 5472	amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
21:21:31.0304 5472	amdide - ok
21:21:31.0335 5472	AmdK8           (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
21:21:31.0350 5472	AmdK8 - ok
21:21:31.0382 5472	AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
21:21:31.0382 5472	AmdPPM - ok
21:21:31.0413 5472	amdsata         (12a5062c06e03ff70db47800f91c7a13) C:\Windows\system32\DRIVERS\amdsata.sys
21:21:31.0413 5472	amdsata - ok
21:21:31.0475 5472	amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
21:21:31.0584 5472	amdsbs - ok
21:21:31.0616 5472	amdxata         (8a7f289b45ceacac761e14d5fac59eb9) C:\Windows\system32\DRIVERS\amdxata.sys
21:21:31.0631 5472	amdxata - ok
21:21:31.0678 5472	AppID           (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
21:21:31.0694 5472	AppID - ok
21:21:31.0740 5472	AppIDSvc        (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
21:21:31.0756 5472	AppIDSvc - ok
21:21:31.0787 5472	Appinfo         (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
21:21:31.0818 5472	Appinfo - ok
21:21:31.0865 5472	arc             (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
21:21:31.0943 5472	arc - ok
21:21:31.0974 5472	arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
21:21:31.0974 5472	arcsas - ok
21:21:32.0021 5472	AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
21:21:32.0021 5472	AsyncMac - ok
21:21:32.0068 5472	atapi           (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
21:21:32.0130 5472	atapi - ok
21:21:32.0224 5472	athr            (7d89b0c443f6068e5b27aa3b972069ff) C:\Windows\system32\DRIVERS\athrx.sys
21:21:32.0349 5472	athr - ok
21:21:32.0505 5472	atikmdag        (2db9047aac9d981f59ce06d04d70c4d8) C:\Windows\system32\DRIVERS\atikmdag.sys
21:21:32.0614 5472	atikmdag - ok
21:21:32.0661 5472	AtiPcie         (7c5d273e29dcc5505469b299c6f29163) C:\Windows\system32\DRIVERS\AtiPcie.sys
21:21:32.0692 5472	AtiPcie - ok
21:21:32.0739 5472	AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
21:21:32.0848 5472	AudioEndpointBuilder - ok
21:21:32.0864 5472	AudioSrv        (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
21:21:32.0879 5472	AudioSrv - ok
21:21:32.0926 5472	AxInstSV        (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
21:21:33.0020 5472	AxInstSV - ok
21:21:33.0066 5472	b06bdrv         (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
21:21:33.0160 5472	b06bdrv - ok
21:21:33.0207 5472	b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
21:21:33.0316 5472	b57nd60a - ok
21:21:33.0363 5472	BDESVC          (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
21:21:33.0441 5472	BDESVC - ok
21:21:33.0534 5472	Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
21:21:33.0550 5472	Beep - ok
21:21:33.0690 5472	BFE             (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
21:21:33.0831 5472	BFE - ok
21:21:33.0956 5472	BITS            (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
21:21:33.0987 5472	BITS - ok
21:21:34.0065 5472	blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
21:21:34.0065 5472	blbdrive - ok
21:21:34.0127 5472	bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
21:21:34.0221 5472	bowser - ok
21:21:34.0252 5472	BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:21:34.0346 5472	BrFiltLo - ok
21:21:34.0377 5472	BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:21:34.0455 5472	BrFiltUp - ok
21:21:34.0517 5472	Browser         (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
21:21:34.0673 5472	Browser - ok
21:21:34.0751 5472	Brserid         (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
21:21:34.0860 5472	Brserid - ok
21:21:34.0970 5472	BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
21:21:34.0970 5472	BrSerWdm - ok
21:21:35.0001 5472	BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
21:21:35.0079 5472	BrUsbMdm - ok
21:21:35.0110 5472	BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
21:21:35.0188 5472	BrUsbSer - ok
21:21:35.0266 5472	BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
21:21:35.0344 5472	BTHMODEM - ok
21:21:35.0391 5472	bthserv         (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
21:21:35.0406 5472	bthserv - ok
21:21:35.0438 5472	cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
21:21:35.0453 5472	cdfs - ok
21:21:35.0516 5472	cdrom           (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
21:21:35.0609 5472	cdrom - ok
21:21:35.0656 5472	CertPropSvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
21:21:35.0750 5472	CertPropSvc - ok
21:21:35.0796 5472	circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
21:21:35.0874 5472	circlass - ok
21:21:35.0952 5472	CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
21:21:35.0968 5472	CLFS - ok
21:21:36.0030 5472	clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
21:21:36.0062 5472	clr_optimization_v2.0.50727_32 - ok
21:21:36.0124 5472	clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
21:21:36.0140 5472	clr_optimization_v2.0.50727_64 - ok
21:21:36.0218 5472	clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
21:21:36.0264 5472	clr_optimization_v4.0.30319_32 - ok
21:21:36.0358 5472	clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
21:21:36.0374 5472	clr_optimization_v4.0.30319_64 - ok
21:21:36.0420 5472	CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
21:21:36.0514 5472	CmBatt - ok
21:21:36.0561 5472	cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
21:21:36.0639 5472	cmdide - ok
21:21:36.0732 5472	CNG             (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
21:21:36.0842 5472	CNG - ok
21:21:36.0873 5472	Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
21:21:36.0966 5472	Compbatt - ok
21:21:37.0013 5472	CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
21:21:37.0091 5472	CompositeBus - ok
21:21:37.0122 5472	COMSysApp - ok
21:21:37.0154 5472	crcdisk         (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
21:21:37.0232 5472	crcdisk - ok
21:21:37.0310 5472	CryptSvc        (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
21:21:37.0325 5472	CryptSvc - ok
21:21:37.0372 5472	DcomLaunch      (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32pcss.dll
21:21:37.0372 5472	DcomLaunch - ok
21:21:37.0403 5472	defragsvc       (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
21:21:37.0497 5472	defragsvc - ok
21:21:37.0559 5472	DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
21:21:37.0637 5472	DfsC - ok
21:21:37.0684 5472	Dhcp            (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
21:21:37.0778 5472	Dhcp - ok
21:21:37.0809 5472	discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
21:21:37.0824 5472	discache - ok
21:21:37.0871 5472	Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
21:21:37.0949 5472	Disk - ok
21:21:37.0980 5472	Dnscache        (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
21:21:38.0012 5472	Dnscache - ok
21:21:38.0043 5472	dot3svc         (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
21:21:38.0136 5472	dot3svc - ok
21:21:38.0168 5472	DPS             (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
21:21:38.0183 5472	DPS - ok
21:21:38.0230 5472	drmkaud         (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
21:21:38.0230 5472	drmkaud - ok
21:21:38.0292 5472	DXGKrnl         (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
21:21:38.0339 5472	DXGKrnl - ok
21:21:38.0370 5472	EapHost         (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
21:21:38.0402 5472	EapHost - ok
21:21:38.0495 5472	ebdrv           (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
21:21:38.0589 5472	ebdrv - ok
21:21:38.0636 5472	EFS             (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
21:21:38.0636 5472	EFS - ok
21:21:38.0698 5472	ehRecvr         (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
21:21:38.0823 5472	ehRecvr - ok
21:21:38.0838 5472	ehSched         (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
21:21:38.0932 5472	ehSched - ok
21:21:38.0979 5472	elxstor         (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
21:21:39.0026 5472	elxstor - ok
21:21:39.0041 5472	ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
21:21:39.0119 5472	ErrDev - ok
21:21:39.0182 5472	EventSystem     (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
21:21:39.0197 5472	EventSystem - ok
21:21:39.0213 5472	exfat           (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
21:21:39.0244 5472	exfat - ok
21:21:39.0260 5472	ezSharedSvc - ok
21:21:39.0353 5472	F-Secure Gatekeeper (c898cf54315e594c33f915b053e2ec2b) C:\Program Files (x86)\SFR\Pack Sécurité\Anti-Virus\minifilter\fsgk.sys
21:21:39.0369 5472	F-Secure Gatekeeper - ok
21:21:39.0400 5472	F-Secure Gatekeeper Handler Starter (2346842f07e2ab64d1dc83a67fccdfa1) C:\Program Files (x86)\SFR\Pack Sécurité\Anti-Virus\fsgk32st.exe
21:21:39.0416 5472	F-Secure Gatekeeper Handler Starter - ok
21:21:39.0447 5472	F-Secure HIPS   (0923c7370d08aa0e167f24fdee24a333) C:\Program Files (x86)\SFR\Pack Sécurité\HIPS\drivers\fshs.sys
21:21:39.0447 5472	F-Secure HIPS - ok
21:21:39.0525 5472	fastfat         (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
21:21:39.0603 5472	fastfat - ok
21:21:39.0665 5472	Fax             (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
21:21:39.0728 5472	Fax - ok
21:21:39.0759 5472	fdc             (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
21:21:39.0821 5472	fdc - ok
21:21:39.0868 5472	fdPHost         (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
21:21:39.0868 5472	fdPHost - ok
21:21:39.0899 5472	FDResPub        (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
21:21:39.0977 5472	FDResPub - ok
21:21:40.0008 5472	FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
21:21:40.0086 5472	FileInfo - ok
21:21:40.0102 5472	Filetrace       (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
21:21:40.0118 5472	Filetrace - ok
21:21:40.0149 5472	flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
21:21:40.0211 5472	flpydisk - ok
21:21:40.0258 5472	FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
21:21:40.0352 5472	FltMgr - ok
21:21:40.0430 5472	FontCache       (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
21:21:40.0539 5472	FontCache - ok
21:21:40.0601 5472	FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
21:21:40.0617 5472	FontCache3.0.0.0 - ok
21:21:40.0664 5472	FsDepends       (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
21:21:40.0664 5472	FsDepends - ok
21:21:40.0773 5472	FSDFWD          (d40a0ee11b934e0472ab8a4bbf46d6d8) C:\Program Files (x86)\SFR\Pack Sécurité\FWES\Program\fsdfwd.exe
21:21:40.0804 5472	FSDFWD - ok
21:21:40.0866 5472	FSES            (740cce07189f9833bf865844ac49c0b1) C:\Windows\system32\drivers\fses.sys
21:21:40.0882 5472	FSES - ok
21:21:40.0944 5472	FSFW            (f68d7041a3a6f4707237891d476dd412) C:\Windows\system32\drivers\fsdfw.sys
21:21:40.0960 5472	FSFW - ok
21:21:41.0022 5472	FSMA            (8a556a81e9ff95bd9eb7207783e8fcf4) C:\Program Files (x86)\SFR\Pack Sécurité\Common\FSMA32.EXE
21:21:41.0022 5472	FSMA - ok
21:21:41.0085 5472	FSORSPClient    (42aef6a385354aca65fc210ce7ce4d7c) C:\Program Files (x86)\SFR\Pack Sécurité\ORSP Client\fsorsp.exe
21:21:41.0085 5472	FSORSPClient - ok
21:21:41.0132 5472	fsvista         (ca7903a77fe92a11045dab462574009f) C:\Program Files (x86)\SFR\Pack Sécurité\Anti-Virus\minifilter\fsvista.sys
21:21:41.0132 5472	fsvista - ok
21:21:41.0210 5472	Fs_Rec          (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
21:21:41.0288 5472	Fs_Rec - ok
21:21:41.0350 5472	fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
21:21:41.0428 5472	fvevol - ok
21:21:41.0459 5472	gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
21:21:41.0537 5472	gagp30kx - ok
21:21:41.0600 5472	GameConsoleService (c1bbce4b30b45410178ee674c818d10c) C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
21:21:41.0678 5472	GameConsoleService - ok
21:21:41.0771 5472	gpsvc           (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
21:21:41.0787 5472	gpsvc - ok
21:21:41.0834 5472	hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
21:21:41.0896 5472	hcw85cir - ok
21:21:41.0943 5472	HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
21:21:41.0958 5472	HDAudBus - ok
21:21:41.0974 5472	HidBatt         (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
21:21:41.0990 5472	HidBatt - ok
21:21:42.0036 5472	HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
21:21:42.0099 5472	HidBth - ok
21:21:42.0130 5472	HidIr           (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
21:21:42.0208 5472	HidIr - ok
21:21:42.0239 5472	hidserv         (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
21:21:42.0317 5472	hidserv - ok
21:21:42.0364 5472	HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
21:21:42.0395 5472	HidUsb - ok
21:21:42.0426 5472	hkmsvc          (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
21:21:42.0520 5472	hkmsvc - ok
21:21:42.0567 5472	HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
21:21:42.0582 5472	HomeGroupListener - ok
21:21:42.0614 5472	HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
21:21:42.0629 5472	HomeGroupProvider - ok
21:21:42.0754 5472	HP Support Assistant Service (13bb1114451c63bfb41ba7daa4d70a29) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
21:21:42.0770 5472	HP Support Assistant Service - ok
21:21:42.0848 5472	HPDrvMntSvc.exe (bcc4a8b2e2e902f52e7f2e7d8e125765) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
21:21:42.0863 5472	HPDrvMntSvc.exe - ok
21:21:42.0894 5472	hpqwmiex        (ec9739a46f1f83c6e52a7a4697f44a65) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
21:21:42.0941 5472	hpqwmiex - ok
21:21:43.0050 5472	HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
21:21:43.0222 5472	HpSAMD - ok
21:21:43.0331 5472	HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
21:21:43.0378 5472	HTTP - ok
21:21:43.0425 5472	hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
21:21:43.0487 5472	hwpolicy - ok
21:21:43.0550 5472	i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
21:21:43.0628 5472	i8042prt - ok
21:21:43.0674 5472	iaStorV         (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
21:21:43.0784 5472	iaStorV - ok
21:21:43.0862 5472	idsvc           (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
21:21:43.0908 5472	idsvc - ok
21:21:43.0940 5472	iirsp           (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
21:21:44.0049 5472	iirsp - ok
21:21:44.0127 5472	IKEEXT          (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
21:21:44.0252 5472	IKEEXT - ok
21:21:44.0345 5472	IntcAzAudAddService (430aab6c09af99d5beb311795349e9dd) C:\Windows\system32\drivers\RTKVHD64.sys
21:21:44.0486 5472	IntcAzAudAddService - ok
21:21:44.0532 5472	intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
21:21:44.0595 5472	intelide - ok
21:21:44.0642 5472	intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
21:21:44.0720 5472	intelppm - ok
21:21:44.0735 5472	IPBusEnum       (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
21:21:44.0829 5472	IPBusEnum - ok
21:21:44.0860 5472	IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:21:44.0876 5472	IpFilterDriver - ok
21:21:44.0938 5472	iphlpsvc        (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
21:21:45.0047 5472	iphlpsvc - ok
21:21:45.0094 5472	IPMIDRV         (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
21:21:45.0188 5472	IPMIDRV - ok
21:21:45.0219 5472	IPNAT           (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
21:21:45.0234 5472	IPNAT - ok
21:21:45.0266 5472	IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
21:21:45.0281 5472	IRENUM - ok
21:21:45.0328 5472	isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
21:21:45.0406 5472	isapnp - ok
21:21:45.0437 5472	iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
21:21:45.0546 5472	iScsiPrt - ok
21:21:45.0578 5472	JMCR            (41e6c1f0f85f6f75e53a56dd6bf809ab) C:\Windows\system32\DRIVERS\jmcr.sys
21:21:45.0624 5472	JMCR - ok
21:21:45.0656 5472	kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
21:21:45.0656 5472	kbdclass - ok
21:21:45.0671 5472	kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
21:21:45.0749 5472	kbdhid - ok
21:21:45.0796 5472	KeyIso          (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
21:21:45.0796 5472	KeyIso - ok
21:21:45.0812 5472	KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
21:21:45.0827 5472	KSecDD - ok
21:21:45.0874 5472	KSecPkg         (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
21:21:45.0890 5472	KSecPkg - ok
21:21:45.0905 5472	ksthunk         (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
21:21:45.0921 5472	ksthunk - ok
21:21:45.0952 5472	KtmRm           (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
21:21:45.0999 5472	KtmRm - ok
21:21:46.0077 5472	LanmanServer    (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
21:21:46.0170 5472	LanmanServer - ok
21:21:46.0202 5472	LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
21:21:46.0295 5472	LanmanWorkstation - ok
21:21:46.0358 5472	LightScribeService (2238b91ac1a12cc6cc4c4fed41258b2a) c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
21:21:46.0358 5472	LightScribeService - ok
21:21:46.0404 5472	lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
21:21:46.0420 5472	lltdio - ok
21:21:46.0451 5472	lltdsvc         (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
21:21:46.0482 5472	lltdsvc - ok
21:21:46.0514 5472	lmhosts         (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
21:21:46.0592 5472	lmhosts - ok
21:21:46.0638 5472	LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
21:21:46.0716 5472	LSI_FC - ok
21:21:46.0748 5472	LSI_SAS         (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
21:21:46.0841 5472	LSI_SAS - ok
21:21:46.0857 5472	LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:21:46.0935 5472	LSI_SAS2 - ok
21:21:46.0966 5472	LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:21:46.0982 5472	LSI_SCSI - ok
21:21:47.0013 5472	luafv           (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
21:21:47.0091 5472	luafv - ok
21:21:47.0138 5472	Mcx2Svc         (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
21:21:47.0153 5472	Mcx2Svc - ok
21:21:47.0278 5472	megasas         (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
21:21:47.0294 5472	megasas - ok
21:21:47.0356 5472	MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
21:21:47.0372 5472	MegaSR - ok
21:21:47.0481 5472	MMCSS           (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
21:21:47.0481 5472	MMCSS - ok
21:21:47.0590 5472	Modem           (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
21:21:47.0637 5472	Modem - ok
21:21:47.0746 5472	monitor         (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
21:21:47.0762 5472	monitor - ok
21:21:47.0871 5472	mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
21:21:47.0949 5472	mouclass - ok
21:21:48.0027 5472	mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
21:21:48.0027 5472	mouhid - ok
21:21:48.0058 5472	mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
21:21:48.0152 5472	mountmgr - ok
21:21:48.0183 5472	mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
21:21:48.0292 5472	mpio - ok
21:21:48.0339 5472	mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
21:21:48.0354 5472	mpsdrv - ok
21:21:48.0417 5472	MpsSvc          (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
21:21:48.0417 5472	MpsSvc - ok
21:21:48.0464 5472	MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
21:21:48.0479 5472	MRxDAV - ok
21:21:48.0510 5472	mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
21:21:48.0604 5472	mrxsmb - ok
21:21:48.0651 5472	mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:21:48.0776 5472	mrxsmb10 - ok
21:21:48.0807 5472	mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:21:48.0900 5472	mrxsmb20 - ok
21:21:48.0947 5472	msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
21:21:49.0041 5472	msahci - ok
21:21:49.0072 5472	msdsm           (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
21:21:49.0150 5472	msdsm - ok
21:21:49.0181 5472	MSDTC           (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
21:21:49.0212 5472	MSDTC - ok
21:21:49.0244 5472	Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
21:21:49.0322 5472	Msfs - ok
21:21:49.0509 5472	mshidkmdf       (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
21:21:49.0509 5472	mshidkmdf - ok
21:21:49.0556 5472	msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
21:21:49.0634 5472	msisadrv - ok
21:21:49.0665 5472	MSiSCSI         (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
21:21:49.0712 5472	MSiSCSI - ok
21:21:49.0727 5472	msiserver - ok
21:21:49.0758 5472	MSKSSRV         (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
21:21:49.0758 5472	MSKSSRV - ok
21:21:49.0790 5472	MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
21:21:49.0805 5472	MSPCLOCK - ok
21:21:49.0821 5472	MSPQM           (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
21:21:49.0821 5472	MSPQM - ok
21:21:49.0868 5472	MsRPC           (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
21:21:49.0883 5472	MsRPC - ok
21:21:49.0930 5472	mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
21:21:49.0946 5472	mssmbios - ok
21:21:49.0961 5472	MSTEE           (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
21:21:49.0961 5472	MSTEE - ok
21:21:50.0008 5472	MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
21:21:50.0070 5472	MTConfig - ok
21:21:50.0102 5472	Mup             (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
21:21:50.0102 5472	Mup - ok
21:21:50.0164 5472	napagent        (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
21:21:50.0164 5472	napagent - ok
21:21:50.0211 5472	NativeWifiP     (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS
wifi.sys
21:21:50.0226 5472	NativeWifiP - ok
21:21:50.0289 5472	NDIS            (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers
dis.sys
21:21:50.0289 5472	NDIS - ok
21:21:50.0320 5472	NdisCap         (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS
discap.sys
21:21:50.0320 5472	NdisCap - ok
21:21:50.0367 5472	NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS
distapi.sys
21:21:50.0367 5472	NdisTapi - ok
21:21:50.0414 5472	Ndisuio         (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS
disuio.sys
21:21:50.0429 5472	Ndisuio - ok
21:21:50.0460 5472	NdisWan         (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS
diswan.sys
21:21:50.0476 5472	NdisWan - ok
21:21:50.0492 5472	NDProxy         (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
21:21:50.0507 5472	NDProxy - ok
21:21:50.0523 5472	NetBIOS         (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS
etbios.sys
21:21:50.0585 5472	NetBIOS - ok
21:21:50.0648 5472	NetBT           (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS
etbt.sys
21:21:50.0663 5472	NetBT - ok
21:21:50.0710 5472	Netlogon        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
21:21:50.0710 5472	Netlogon - ok
21:21:50.0757 5472	Netman          (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32
etman.dll
21:21:50.0788 5472	Netman - ok
21:21:50.0819 5472	netprofm        (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32
etprofm.dll
21:21:50.0819 5472	netprofm - ok
21:21:50.0882 5472	NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
21:21:50.0897 5472	NetTcpPortSharing - ok
21:21:50.0944 5472	nfrd960         (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS
frd960.sys
21:21:51.0022 5472	nfrd960 - ok
21:21:51.0084 5472	NlaSvc          (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32
lasvc.dll
21:21:51.0084 5472	NlaSvc - ok
21:21:51.0131 5472	Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
21:21:51.0147 5472	Npfs - ok
21:21:51.0178 5472	nsi             (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32
sisvc.dll
21:21:51.0240 5472	nsi - ok
21:21:51.0272 5472	nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers
siproxy.sys
21:21:51.0350 5472	nsiproxy - ok
21:21:51.0428 5472	Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
21:21:51.0521 5472	Ntfs - ok
21:21:51.0552 5472	Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
21:21:51.0552 5472	Null - ok
21:21:51.0599 5472	nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers
vraid.sys
21:21:51.0615 5472	nvraid - ok
21:21:51.0646 5472	nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers
vstor.sys
21:21:51.0771 5472	nvstor - ok
21:21:51.0802 5472	nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers
v_agp.sys
21:21:51.0880 5472	nv_agp - ok
21:21:51.0989 5472	odserv          (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
21:21:52.0036 5472	odserv - ok
21:21:52.0145 5472	ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
21:21:52.0161 5472	ohci1394 - ok
21:21:52.0223 5472	ose             (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
21:21:52.0270 5472	ose - ok
21:21:52.0348 5472	p2pimsvc        (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
21:21:52.0364 5472	p2pimsvc - ok
21:21:52.0395 5472	p2psvc          (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
21:21:52.0395 5472	p2psvc - ok
21:21:52.0442 5472	Parport         (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
21:21:52.0520 5472	Parport - ok
21:21:52.0551 5472	partmgr         (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
21:21:52.0566 5472	partmgr - ok
21:21:52.0582 5472	PcaSvc          (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
21:21:52.0660 5472	PcaSvc - ok
21:21:52.0738 5472	PCDSRVC{F36B3A4C-F95654BD-06000000}_0 (51209fbdb13a46e05c1b0077a9310264) c:\program files\pc-doctor for windows\pcdsrvc_x64.pkms
21:21:53.0003 5472	PCDSRVC{F36B3A4C-F95654BD-06000000}_0 - ok
21:21:53.0097 5472	pci             (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
21:21:53.0097 5472	pci - ok
21:21:53.0128 5472	pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
21:21:53.0253 5472	pciide - ok
21:21:53.0284 5472	pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
21:21:53.0378 5472	pcmcia - ok
21:21:53.0424 5472	pcw             (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
21:21:53.0502 5472	pcw - ok
21:21:53.0534 5472	PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
21:21:53.0580 5472	PEAUTH - ok
21:21:53.0627 5472	PerfHost        (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
21:21:53.0705 5472	PerfHost - ok
21:21:53.0799 5472	pla             (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
21:21:53.0955 5472	pla - ok
21:21:54.0002 5472	PlugPlay        (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
21:21:54.0048 5472	PlugPlay - ok
21:21:54.0080 5472	PNRPAutoReg     (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
21:21:54.0158 5472	PNRPAutoReg - ok
21:21:54.0189 5472	PNRPsvc         (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
21:21:54.0189 5472	PNRPsvc - ok
21:21:54.0236 5472	PolicyAgent     (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
21:21:54.0267 5472	PolicyAgent - ok
21:21:54.0298 5472	Power           (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
21:21:54.0376 5472	Power - ok
21:21:54.0438 5472	PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERSaspptp.sys
21:21:54.0454 5472	PptpMiniport - ok
21:21:54.0485 5472	Processor       (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
21:21:54.0501 5472	Processor - ok
21:21:54.0532 5472	ProfSvc         (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
21:21:54.0548 5472	ProfSvc - ok
21:21:54.0594 5472	ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
21:21:54.0594 5472	ProtectedStorage - ok
21:21:54.0626 5472	Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
21:21:54.0704 5472	Psched - ok
21:21:54.0782 5472	ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
21:21:54.0875 5472	ql2300 - ok
21:21:54.0906 5472	ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
21:21:54.0922 5472	ql40xx - ok
21:21:54.0953 5472	QWAVE           (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
21:21:55.0031 5472	QWAVE - ok
21:21:55.0062 5472	QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
21:21:55.0078 5472	QWAVEdrv - ok
21:21:55.0109 5472	RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERSasacd.sys
21:21:55.0109 5472	RasAcd - ok
21:21:55.0156 5472	RasAgileVpn     (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
21:21:55.0218 5472	RasAgileVpn - ok
21:21:55.0265 5472	RasAuto         (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32asauto.dll
21:21:55.0359 5472	RasAuto - ok
21:21:55.0421 5472	Rasl2tp         (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERSasl2tp.sys
21:21:55.0499 5472	Rasl2tp - ok
21:21:55.0608 5472	RasMan          (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32asmans.dll
21:21:55.0749 5472	RasMan - ok
21:21:55.0780 5472	RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERSaspppoe.sys
21:21:55.0796 5472	RasPppoe - ok
21:21:55.0827 5472	RasSstp         (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERSassstp.sys
21:21:55.0905 5472	RasSstp - ok
21:21:55.0952 5472	rdbss           (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERSdbss.sys
21:21:56.0045 5472	rdbss - ok
21:21:56.0108 5472	rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERSdpbus.sys
21:21:56.0170 5472	rdpbus - ok
21:21:56.0217 5472	RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
21:21:56.0217 5472	RDPCDD - ok
21:21:56.0248 5472	RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\driversdpencdd.sys
21:21:56.0264 5472	RDPENCDD - ok
21:21:56.0279 5472	RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\driversdprefmp.sys
21:21:56.0279 5472	RDPREFMP - ok
21:21:56.0326 5472	RDPWD           (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
21:21:56.0435 5472	RDPWD - ok
21:21:56.0482 5472	rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\driversdyboost.sys
21:21:56.0560 5472	rdyboost - ok
21:21:56.0591 5472	RemoteAccess    (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
21:21:56.0685 5472	RemoteAccess - ok
21:21:56.0716 5472	RemoteRegistry  (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32egsvc.dll
21:21:56.0810 5472	RemoteRegistry - ok
21:21:56.0841 5472	RpcEptMapper    (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
21:21:56.0997 5472	RpcEptMapper - ok
21:21:57.0028 5472	RpcLocator      (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
21:21:57.0106 5472	RpcLocator - ok
21:21:57.0153 5472	RpcSs           (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32pcss.dll
21:21:57.0153 5472	RpcSs - ok
21:21:57.0293 5472	rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERSspndr.sys
21:21:57.0309 5472	rspndr - ok
21:21:57.0356 5472	RTL8167         (3b01789ee4eaee97f5eb46b711387d5e) C:\Windows\system32\DRIVERS\Rt64win7.sys
21:21:57.0371 5472	RTL8167 - ok
21:21:57.0418 5472	SamSs           (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
21:21:57.0418 5472	SamSs - ok
21:21:57.0465 5472	sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
21:21:57.0496 5472	sbp2port - ok
21:21:57.0543 5472	SCardSvr        (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
21:21:57.0621 5472	SCardSvr - ok
21:21:57.0668 5472	scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
21:21:57.0668 5472	scfilter - ok
21:21:57.0730 5472	Schedule        (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
21:21:57.0855 5472	Schedule - ok
21:21:57.0886 5472	SCPolicySvc     (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
21:21:57.0886 5472	SCPolicySvc - ok
21:21:57.0917 5472	SDRSVC          (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
21:21:58.0011 5472	SDRSVC - ok
21:21:58.0089 5472	SeaPort         (16a252022535b680046f6e34e136d378) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
21:21:58.0104 5472	SeaPort - ok
21:21:58.0182 5472	secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
21:21:58.0260 5472	secdrv - ok
21:21:58.0292 5472	seclogon        (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
21:21:58.0385 5472	seclogon - ok
21:21:58.0416 5472	SENS            (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
21:21:58.0416 5472	SENS - ok
21:21:58.0448 5472	SensrSvc        (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
21:21:58.0526 5472	SensrSvc - ok
21:21:58.0541 5472	Serenum         (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
21:21:58.0619 5472	Serenum - ok
21:21:58.0650 5472	Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
21:21:58.0728 5472	Serial - ok
21:21:58.0775 5472	sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
21:21:58.0853 5472	sermouse - ok
21:21:58.0916 5472	SessionEnv      (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
21:21:58.0994 5472	SessionEnv - ok
21:21:59.0025 5472	sffdisk         (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
21:21:59.0025 5472	sffdisk - ok
21:21:59.0056 5472	sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
21:21:59.0056 5472	sffp_mmc - ok
21:21:59.0087 5472	sffp_sd         (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
21:21:59.0087 5472	sffp_sd - ok
21:21:59.0118 5472	sfloppy         (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
21:21:59.0181 5472	sfloppy - ok
21:21:59.0228 5472	SharedAccess    (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
21:21:59.0321 5472	SharedAccess - ok
21:21:59.0384 5472	ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
21:21:59.0493 5472	ShellHWDetection - ok
21:21:59.0524 5472	SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:21:59.0602 5472	SiSRaid2 - ok
21:21:59.0649 5472	SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
21:21:59.0727 5472	SiSRaid4 - ok
21:21:59.0774 5472	Smb             (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
21:21:59.0789 5472	Smb - ok
21:21:59.0836 5472	SNMPTRAP        (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
21:21:59.0930 5472	SNMPTRAP - ok
21:21:59.0961 5472	spldr           (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
21:22:00.0023 5472	spldr - ok
21:22:00.0086 5472	Spooler         (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
21:22:00.0148 5472	Spooler - ok
21:22:00.0273 5472	sppsvc          (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
21:22:00.0398 5472	sppsvc - ok
21:22:00.0429 5472	sppuinotify     (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
21:22:00.0522 5472	sppuinotify - ok
21:22:00.0585 5472	srv             (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
21:22:00.0710 5472	srv - ok
21:22:00.0741 5472	srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
21:22:00.0834 5472	srv2 - ok
21:22:00.0881 5472	srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
21:22:00.0975 5472	srvnet - ok
21:22:01.0006 5472	SSDPSRV         (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
21:22:01.0022 5472	SSDPSRV - ok
21:22:01.0037 5472	SstpSvc         (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
21:22:01.0053 5472	SstpSvc - ok
21:22:01.0100 5472	ss_bus          (f5cb1651a046370739995015122c0b7e) C:\Windows\system32\DRIVERS\ss_bus.sys
21:22:01.0146 5472	ss_bus - ok
21:22:01.0178 5472	ss_mdfl         (7e08ae04093bce4ac93ea179b58526f9) C:\Windows\system32\DRIVERS\ss_mdfl.sys
21:22:01.0224 5472	ss_mdfl - ok
21:22:01.0271 5472	ss_mdm          (052bf246422b007d3b827ed2a306c859) C:\Windows\system32\DRIVERS\ss_mdm.sys
21:22:01.0302 5472	ss_mdm - ok
21:22:01.0380 5472	StarOpen - ok
21:22:01.0427 5472	stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
21:22:01.0443 5472	stexstor - ok
21:22:01.0505 5472	stisvc          (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
21:22:01.0630 5472	stisvc - ok
21:22:01.0661 5472	swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
21:22:01.0739 5472	swenum - ok
21:22:01.0895 5472	SwitchBoard     (f577910a133a592234ebaad3f3afa258) C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
21:22:01.0926 5472	SwitchBoard - ok
21:22:02.0004 5472	swprv           (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
21:22:02.0160 5472	swprv - ok
21:22:02.0223 5472	SysMain         (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
21:22:02.0254 5472	SysMain - ok
21:22:02.0301 5472	TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
21:22:02.0410 5472	TabletInputService - ok
21:22:02.0441 5472	TapiSrv         (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32	apisrv.dll
21:22:02.0550 5472	TapiSrv - ok
21:22:02.0582 5472	TBS             (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32	bssvc.dll
21:22:02.0660 5472	TBS - ok
21:22:02.0753 5472	Tcpip           (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers	cpip.sys
21:22:03.0050 5472	Tcpip - ok
21:22:03.0112 5472	TCPIP6          (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS	cpip.sys
21:22:03.0128 5472	TCPIP6 - ok
21:22:03.0174 5472	tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers	cpipreg.sys
21:22:03.0190 5472	tcpipreg - ok
21:22:03.0221 5472	TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers	dpipe.sys
21:22:03.0237 5472	TDPIPE - ok
21:22:03.0268 5472	TDTCP           (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers	dtcp.sys
21:22:03.0284 5472	TDTCP - ok
21:22:03.0362 5472	tdx             (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS	dx.sys
21:22:03.0393 5472	tdx - ok
21:22:03.0486 5472	TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers	ermdd.sys
21:22:03.0642 5472	TermDD - ok
21:22:03.0674 5472	TermService     (2e648163254233755035b46dd7b89123) C:\Windows\System32	ermsrv.dll
21:22:03.0783 5472	TermService - ok
21:22:03.0830 5472	Themes          (f0344071948d1a1fa732231785a0664c) C:\Windows\system32	hemeservice.dll
21:22:03.0908 5472	Themes - ok
21:22:03.0923 5472	THREADORDER     (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
21:22:03.0939 5472	THREADORDER - ok
21:22:03.0954 5472	TrkWks          (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32	rkwks.dll
21:22:04.0032 5472	TrkWks - ok
21:22:04.0079 5472	TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
21:22:04.0079 5472	TrustedInstaller - ok
21:22:04.0142 5472	tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS	ssecsrv.sys
21:22:04.0142 5472	tssecsrv - ok
21:22:04.0204 5472	TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers	susbflt.sys
21:22:04.0220 5472	TsUsbFlt - ok
21:22:04.0266 5472	tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS	unnel.sys
21:22:04.0282 5472	tunnel - ok
21:22:04.0313 5472	uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
21:22:04.0329 5472	uagp35 - ok
21:22:04.0376 5472	udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
21:22:04.0391 5472	udfs - ok
21:22:04.0438 5472	UI0Detect       (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
21:22:04.0594 5472	UI0Detect - ok
21:22:04.0641 5472	uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
21:22:04.0656 5472	uliagpkx - ok
21:22:04.0688 5472	umbus           (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
21:22:04.0688 5472	umbus - ok
21:22:04.0719 5472	UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
21:22:04.0797 5472	UmPass - ok
21:22:04.0828 5472	upnphost        (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
21:22:04.0844 5472	upnphost - ok
21:22:04.0890 5472	usbccgp         (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
21:22:04.0890 5472	usbccgp - ok
21:22:04.0937 5472	usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
21:22:04.0953 5472	usbcir - ok
21:22:04.0984 5472	usbehci         (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
21:22:05.0015 5472	usbehci - ok
21:22:05.0046 5472	usbfilter       (6648c6d7323a2ce0c4776c36cefbcb14) C:\Windows\system32\DRIVERS\usbfilter.sys
21:22:05.0046 5472	usbfilter - ok
21:22:05.0093 5472	usbhub          (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
21:22:05.0124 5472	usbhub - ok
21:22:05.0156 5472	usbohci         (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\DRIVERS\usbohci.sys
21:22:05.0358 5472	usbohci - ok
21:22:05.0436 5472	usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
21:22:05.0452 5472	usbprint - ok
21:22:05.0483 5472	usbscan         (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
21:22:05.0499 5472	usbscan - ok
21:22:05.0530 5472	USBSTOR         (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:22:05.0546 5472	USBSTOR - ok
21:22:05.0577 5472	usbuhci         (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
21:22:05.0577 5472	usbuhci - ok
21:22:05.0639 5472	usbvideo        (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys
21:22:05.0655 5472	usbvideo - ok
21:22:05.0686 5472	UxSms           (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
21:22:05.0702 5472	UxSms - ok
21:22:05.0748 5472	VaultSvc        (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
21:22:05.0748 5472	VaultSvc - ok
21:22:05.0811 5472	vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
21:22:05.0811 5472	vdrvroot - ok
21:22:05.0858 5472	vds             (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
21:22:06.0045 5472	vds - ok
21:22:06.0076 5472	vga             (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
21:22:06.0138 5472	vga - ok
21:22:06.0170 5472	VgaSave         (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
21:22:06.0170 5472	VgaSave - ok
21:22:06.0216 5472	vhdmp           (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
21:22:06.0232 5472	vhdmp - ok
21:22:06.0263 5472	viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
21:22:06.0279 5472	viaide - ok
21:22:06.0310 5472	volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
21:22:06.0404 5472	volmgr - ok
21:22:06.0450 5472	volmgrx         (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
21:22:06.0482 5472	volmgrx - ok
21:22:06.0497 5472	volsnap         (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
21:22:06.0513 5472	volsnap - ok
21:22:06.0560 5472	vsmraid         (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
21:22:06.0560 5472	vsmraid - ok
21:22:06.0622 5472	VSS             (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
21:22:06.0700 5472	VSS - ok
21:22:06.0747 5472	vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
21:22:06.0747 5472	vwifibus - ok
21:22:06.0778 5472	vwififlt        (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
21:22:06.0778 5472	vwififlt - ok
21:22:06.0809 5472	vwifimp         (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
21:22:06.0825 5472	vwifimp - ok
21:22:06.0840 5472	W32Time         (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
21:22:06.0950 5472	W32Time - ok
21:22:06.0996 5472	WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
21:22:07.0074 5472	WacomPen - ok
21:22:07.0121 5472	WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
21:22:07.0137 5472	WANARP - ok
21:22:07.0152 5472	Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
21:22:07.0152 5472	Wanarpv6 - ok
21:22:07.0308 5472	WatAdminSvc     (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
21:22:07.0527 5472	WatAdminSvc - ok
21:22:07.0589 5472	wbengine        (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
21:22:07.0730 5472	wbengine - ok
21:22:07.0761 5472	WbioSrvc        (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
21:22:07.0854 5472	WbioSrvc - ok
21:22:07.0886 5472	wcncsvc         (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
21:22:07.0979 5472	wcncsvc - ok
21:22:08.0010 5472	WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
21:22:08.0073 5472	WcsPlugInService - ok
21:22:08.0120 5472	Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
21:22:08.0135 5472	Wd - ok
21:22:08.0166 5472	WDC_SAM         (a3d04ebf5227886029b4532f20d026f7) C:\Windows\system32\DRIVERS\wdcsam64.sys
21:22:08.0198 5472	WDC_SAM - ok
21:22:08.0276 5472	WDDMService     (6209c98eaa7d003dbea3eb3245211342) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
21:22:08.0276 5472	WDDMService - ok
21:22:08.0322 5472	Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
21:22:08.0432 5472	Wdf01000 - ok
21:22:08.0556 5472	WDFME           (a787a567b3470c91c487ece90cf7509c) C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDFME\WDFME.exe
21:22:08.0588 5472	WDFME - ok
21:22:08.0650 5472	WdiServiceHost  (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
21:22:08.0666 5472	WdiServiceHost - ok
21:22:08.0681 5472	WdiSystemHost   (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
21:22:08.0681 5472	WdiSystemHost - ok
21:22:08.0697 5472	WDSC            (3e2b446bfd98ee3ab236fe9e84f35489) C:\Program Files (x86)\Western Digital\WD Smartware\Front Parlor\WDSC.exe
21:22:08.0744 5472	WDSC - ok
21:22:08.0790 5472	WebClient       (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
21:22:08.0884 5472	WebClient - ok
21:22:08.0931 5472	Wecsvc          (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
21:22:09.0024 5472	Wecsvc - ok
21:22:09.0056 5472	wercplsupport   (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
21:22:09.0056 5472	wercplsupport - ok
21:22:09.0071 5472	WerSvc          (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
21:22:09.0087 5472	WerSvc - ok
21:22:09.0134 5472	WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
21:22:09.0149 5472	WfpLwf - ok
21:22:09.0165 5472	WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
21:22:09.0180 5472	WIMMount - ok
21:22:09.0212 5472	WinDefend - ok
21:22:09.0212 5472	WinHttpAutoProxySvc - ok
21:22:09.0274 5472	Winmgmt         (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
21:22:09.0352 5472	Winmgmt - ok
21:22:09.0446 5472	WinRM           (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
21:22:09.0633 5472	WinRM - ok
21:22:09.0711 5472	WinUsb          (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
21:22:09.0711 5472	WinUsb - ok
21:22:09.0758 5472	Wlansvc         (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
21:22:09.0882 5472	Wlansvc - ok
21:22:09.0914 5472	WmiAcpi         (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
21:22:09.0976 5472	WmiAcpi - ok
21:22:10.0038 5472	wmiApSrv        (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
21:22:10.0132 5472	wmiApSrv - ok
21:22:10.0163 5472	WMPNetworkSvc - ok
21:22:10.0194 5472	WPCSvc          (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
21:22:10.0288 5472	WPCSvc - ok
21:22:10.0335 5472	WPDBusEnum      (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
21:22:10.0350 5472	WPDBusEnum - ok
21:22:10.0397 5472	ws2ifsl         (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
21:22:10.0413 5472	ws2ifsl - ok
21:22:10.0428 5472	wscsvc          (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
21:22:10.0444 5472	wscsvc - ok
21:22:10.0460 5472	WSearch - ok
21:22:10.0538 5472	wuauserv        (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
21:22:10.0616 5472	wuauserv - ok
21:22:10.0662 5472	WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
21:22:10.0662 5472	WudfPf - ok
21:22:10.0709 5472	WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
21:22:10.0865 5472	WUDFRd - ok
21:22:10.0881 5472	wudfsvc         (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
21:22:10.0959 5472	wudfsvc - ok
21:22:11.0006 5472	W

g3n-h@ckm@n · Answer

fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.


&#9654 Télécharge ici :

Malwarebytes  

&#9654 Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

relance malwarebytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

&#9654 Lance Malwarebyte's .

Fais un examen dit "Complet" .

&#9654 Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
&#9654 à la fin tu cliques sur "résultat" .
&#9654 Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

&#9654 Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !


&#9654 Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

labonbon · Answer

Voila j'ai fait l'analyse complete 

Le voici :

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Version de la base de données: v2012.04.13.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Vivien :: VIVIEN-PC [administrateur]

13/04/2012 23:41:35
mbam-log-2012-04-13 (23-41-35).txt

Type d'examen: Examen complet
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 517286
Temps écoulé: 1 heure(s), 53 minute(s), 40 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 1
C:\Program Files (x86)\NirSoft\IE PassView\iepv.exe (PUP.PSW.Passview) -> Mis en quarantaine et supprimé avec succès.

(fin)

g3n-h@ckm@n · Answer

ok encore des soucis ?

labonbon · Answer

Juste pour savoir quel logiciel antivirus je garde et lequel je vire car j'ai entendu que si il yen a plusieurs c'est pas forcement bon ? j'ai le pack sfr securité est ce un bon ativirus ?

g3n-h@ckm@n · Answer

re

non c'est un veau

au · Answer

MDR pk un veau ? lequel me conseille tu alors ?

au · Answer

le pack sfr vient de mettre en quarantaine pre_scan il a cru que c'etait un virus

g3n-h@ckm@n · Answer

lol tu changes de pseudo ?

labonbon · Answer

euh pas fait expres j'ai validé le message..
du coup j'ai fait l'analyse sur mon portable et l'antivirus que tu m'as conseillé m'a detecté 3 virus...

g3n-h@ckm@n · Answer

non mais sur ce pc du depart , encore des soucis ?

labonbon · Answer

Non merci beaucoup pour l'aide en tout cas !

g3n-h@ckm@n · Answer

le menage 

https://gen-hackman.kanak.fr/

labonbon · Answer

Re j'ai fait la 1 ere partie et j'ai un probleme car les 3 derniers abode flash ne veulent pas s'installer bien que je fasse le téléchargement. ils écrivent pourtant "installation réussi" . De plus abode flash player me redemande de l'installer a chaque fois que j'ouvre une page internet alors que je le réinstalle a chaque fois.... les rapports au debut : WhyIGotInfected v1.5.2(by Tigzy) ******************************** Run : 17/04/2012 13:40:26 [Normal Mode] Machine : VIVIEN-PC (2 CPUs) [Vivien : ADMIN] OS: Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (x64) ~~ Plugins check: ~~ UPTODATE [Microsoft Windows 7 Édition Familiale Premium ] Current : Service Pack 1 -- Latest : Service Pack 1 UPTODATE [Firefox (x86)] Current : 11.0 -- Latest : 11.0 UPTODATE [Internet Explorer] Current : 9.0.8112.16421 -- Latest : 9.0.8112.16421 UPTODATE [Internet Explorer (x86)] Current : 9.0.8112.16421 -- Latest : 9.0.8112.16421 OUTDATED [Java (x86)] Current : 1.6.0_29 -- Latest : 1.6.0_31 UPTODATE [Adobe Reader (x86)] Current : 10 -- Latest : 10 OUTDATED [Adobe Flash] Current : 11.2.202.233 -- Latest : 11.2.202.228 OUTDATED [Adobe Flash (x86)] Current : 11.2.202.233 -- Latest : 11.2.202.228 OUTDATED [Adobe Flash ActiveX] Current : 11.2.202.233 -- Latest : 11.2.202.228 OUTDATED [Adobe Flash ActiveX (x86)] Current : 11.2.202.233 -- Latest : 11.2.202.228 Finished WIGIReport[0].txt et le deuxieme : WhyIGotInfected v1.5.2(by Tigzy) ******************************** Run : 17/04/2012 14:06:09 [Normal Mode] Machine : VIVIEN-PC (2 CPUs) [Vivien : ADMIN] OS: Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (x64) ~~ Plugins check: ~~ UPTODATE [Microsoft Windows 7 Édition Familiale Premium ] Current : Service Pack 1 -- Latest : Service Pack 1 UPTODATE [Firefox (x86)] Current : 11.0 -- Latest : 11.0 UPTODATE [Internet Explorer] Current : 9.0.8112.16421 -- Latest : 9.0.8112.16421 UPTODATE [Internet Explorer (x86)] Current : 9.0.8112.16421 -- Latest : 9.0.8112.16421 UPTODATE [Java (x86)] Current : 1.6.0_31 -- Latest : 1.6.0_31 UPTODATE [Adobe Reader (x86)] Current : 10 -- Latest : 10 OUTDATED [Adobe Flash] Current : 11.2.202.233 -- Latest : 11.2.202.228 OUTDATED [Adobe Flash ActiveX] Current : 11.2.202.233 -- Latest : 11.2.202.228 OUTDATED [Adobe Flash ActiveX (x86)] Current : 11.2.202.233 -- Latest : 11.2.202.228 Finished WIGIReport[0].txt ; WIGIReport[1].txt ; WIGIReport[2].txt ; WIGIReport[3].txt ; WIGIReport[4].txt ;

g3n-h@ckm@n · Answer

ok t'en as fait plein du coup on sait pas quel est le dernier

labonbon · Answer

le dernier rapport : 

WhyIGotInfected v1.5.2(by Tigzy)
********************************

Run : 17/04/2012 17:27:21 [Normal Mode]
Machine : VIVIEN-PC (2 CPUs) [Vivien : ADMIN]
OS: Microsoft Windows 7 Édition Familiale Premium  Service Pack 1 (x64)

~~ Plugins check: ~~

UPTODATE [Microsoft Windows 7 Édition Familiale Premium ] Current : Service Pack 1 -- Latest : Service Pack 1
UPTODATE [Firefox (x86)] Current : 11.0 -- Latest : 11.0
UPTODATE [Internet Explorer] Current : 9.0.8112.16421 -- Latest : 9.0.8112.16421
UPTODATE [Internet Explorer (x86)] Current : 9.0.8112.16421 -- Latest : 9.0.8112.16421
UPTODATE [Java (x86)] Current : 1.6.0_31 -- Latest : 1.6.0_31
UPTODATE [Adobe Reader (x86)] Current : 10 -- Latest : 10
OUTDATED [Adobe Flash] Current : 11.2.202.233 -- Latest : 11.2.202.228
OUTDATED [Adobe Flash ActiveX] Current : 11.2.202.233 -- Latest : 11.2.202.228
OUTDATED [Adobe Flash ActiveX (x86)] Current : 11.2.202.233 -- Latest : 11.2.202.228


Finished
<C:\Users\Vivien\Desktop\WIGIReport[5].txt>
WIGIReport[0].txt ; WIGIReport[1].txt ; WIGIReport[2].txt ; WIGIReport[3].txt ; WIGIReport[4].txt ; 
WIGIReport[5].txt

labonbon · Answer

LE Rapport de DelFix

# DelFix v8.8 - Rapport créé le 17/04/2012 à 17:53:45
# Mis à jour le 12/02/12 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Vivien - VIVIEN-PC (Administrateur)
# Exécuté depuis : C:\Users\Vivien\Downloads\delfix(1).exe
# Option [Suppression]


~~~~~~ Dossiers(s) ~~~~~~


~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\AdwCleaner[S1].txt
Supprimé : C:\Users\Vivien\Downloads\adwcleaner(1).exe
Supprimé : C:\Users\Vivien\Downloads\adwcleaner.exe
Supprimé : C:\Users\Vivien\Downloads\WhyIGotInfected(1).exe
Supprimé : C:\Users\Vivien\Downloads\WhyIGotInfected.exe

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\Software\g3n-h@ckm@n
Clé Supprimée : HKLM\SOFTWARE\AdwCleaner

~~~~~~ Autres ~~~~~~

-> Prefetch Vidé

*************************

DelFix[S1].txt - [824 octets] - [17/04/2012 17:53:45]

########## EOF - C:\DelFix[S1].txt - [947 octets] ##########

g3n-h@ckm@n · Answer

ca dit quoi pour les vidéos ?

labonbon · Answer

ça dit :
Pour regarder cette vidéo, vous devez disposer d'Adobe Flash Player. 
Télécharger le lecteur sur le site d'Adobe 
Quand je le télécharge ça met bien installé mais quand je retourne sur you tube il me réecrit la même chose... et ça marche toujours pas

g3n-h@ckm@n · Answer

redemarre le pc voir ?

labonbon · Answer

apres puisque je fais le nettoyage de C cleaner qui est en route,  il est à 0% lui par contre depuis un bon moment il travaille mais le % n'augmente pas

g3n-h@ckm@n · Answer

oui quand ca a jamais été fait , la premiere fois c'est long ^^

labonbon · Answer

j'ai redemarrer le pc et sayé je peux lire a nouveaux les videos de you tube faut il que je refasse le procedé de la 1ere partie ?

g3n-h@ckm@n · Answer

continue.....;

labonbon · Answer

je continue Ccleaner qui est tjs a 0% depuis cet aprem...

g3n-h@ckm@n · Answer

relance le en mode sans echec

labonbon · Answer

comment on fait mode sans echec avec ccleaner ?

g3n-h@ckm@n · Answer

Comment aller en Mode sans échec :

&#9654 Redémarres ton ordi 
&#9654 Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" 
&#9654 Tu verras un écran avec options de démarrage apparaître 
&#9654 Choisis la première option : Sans Échec, et valide avec "Entrée"

Message RunDLL module introuvable

45 réponses

Discussions similaires