Bonjour, Je vous demande votre aide parce que j'ai un cheval de troie qui m'a fait un fond noir et je n'ai ni documents, ni programmes, tout a disparu. J'ai analysé avec AVG, il a trouvé un cheval de troie qu'il a supprimé mais ça n'a rien changé. Par contre je ne me souviens pas ce que c'était et maintenant il ne trouve plus de problème. J'ai essayé Roggkiller et il a juste réussi à récuper mon fond d'écran, mais toujours pas de fichiers ni programmes. J'ai même plus internet explorer, j'ai du passer par l'icône MSN en bas pour me connecter à Internet. Est-ce que quelqu'un a déjà eu ce problème et comment récupérer mes données? Si c'est perdu, est-ce qu'on peut quand même récupérer les fichiers directement du disque dur ? Merci beaucoup pour votre réponse, c 'est très important!!!

Cheval de troie plus de fichiers ni programme

Réponse 1 / 6

Utilisateur anonyme
19 mai 2012 à 20:30

Bonsoir

[*] Télécharger sur le bureau https://www.luanagames.com/index.fr.html (by tigzy)
[*] Quitter tous les programmes
[*] Lancer RogueKiller.exe.
[*] Attendre que le Prescan ait fini ...
[*] Cliquer sur Scan. Cliquer sur Rapport et copier coller le contenu du rapport

@+

ptibout8
19 mai 2012 à 20:33

Bonsoir,

Merci mais j'ai déjà essayé Roguekiller il a juste récupéré mon fond d'écran mais rien d'autre :(

ptibout8
19 mai 2012 à 20:38

Quand je lance roguekiller il y a un message comme une fenêtre windows qui me dit : "Exception Processing Message c0000013 Parameters 75afbf7c 4 75afbf7c 75afbf7c " et je dois choisir entre annuler, recommencer et continuer je crois que c'est le cheval de troie qui met ça non ?

ptibout8
19 mai 2012 à 20:39

et si je mets "Continuer", il me dit "Il n'y a pas de disque dans le lecteur. Insérez un disque dans le lecteur"

Utilisateur anonyme
19 mai 2012 à 20:39

Fait ce qui t'es demandé ci dessous;merci

Réponse 2 / 6

Utilisateur anonyme
19 mai 2012 à 20:36

Re

Et bien poste moi ces différents rapports de Roguekiller;merci

@+

ptibout8
19 mai 2012 à 20:42

Rapport 1 :

RogueKiller V7.4.5 [18/05/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur: Almeida_ [Droits d'admin]
Mode: Recherche -- Date: 19/05/2012 20:08:51

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 14 ¤¤¤
[WallPP] HKCU\[...]\Desktop : Wallpaper () -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyComputer (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowSearch (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyDocs (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowUser (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowControlPanel (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowHelp (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowRun (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> FOUND

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤
[FAKED] ati1rvxx.sys : c:\windows\system32\drivers\ati1rvxx.sys --> CANNOT FIX
[FAKED] ati2mtaa.sys : c:\windows\system32\drivers\ati2mtaa.sys --> CANNOT FIX
[FAKED] atinxsxx.sys : c:\windows\system32\drivers\atinxsxx.sys --> CANNOT FIX
[FAKED] fltmgr.sys : c:\windows\system32\drivers\fltmgr.sys --> CANNOT FIX
[FAKED] mf.sys : c:\windows\system32\drivers\mf.sys --> CANNOT FIX
[FAKED] mtlstrm.sys : c:\windows\system32\drivers\mtlstrm.sys --> CANNOT FIX
[FAKED] nic1394.sys : c:\windows\system32\drivers\nic1394.sys --> CANNOT FIX
[FAKED] nwlnknb.sys : c:\windows\system32\drivers\nwlnknb.sys --> CANNOT FIX
[FAKED] slnt7554.sys : c:\windows\system32\drivers\slnt7554.sys --> CANNOT FIX

¤¤¤ Driver: [CHARGE] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost

¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: ST3250824AS +++++
--- User ---
[MBR] 1d19bf64fc55bfd58430331334b817c3
[BSP] f23cafe292ea0e62123b018565438d6b : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 64997 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 133114590 | Size: 173467 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[1].txt >>
RKreport[1].txt

ptibout8
19 mai 2012 à 20:44

Voici le dernier rapport
RogueKiller V7.4.5 [18/05/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur: Almeida_ [Droits d'admin]
Mode: Recherche -- Date: 19/05/2012 20:41:09

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 0 ¤¤¤

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤
[FAKED] ati1rvxx.sys : c:\windows\system32\drivers\ati1rvxx.sys --> CANNOT FIX
[FAKED] ati2mtaa.sys : c:\windows\system32\drivers\ati2mtaa.sys --> CANNOT FIX
[FAKED] atinxsxx.sys : c:\windows\system32\drivers\atinxsxx.sys --> CANNOT FIX
[FAKED] fltmgr.sys : c:\windows\system32\drivers\fltmgr.sys --> CANNOT FIX
[FAKED] mf.sys : c:\windows\system32\drivers\mf.sys --> CANNOT FIX
[FAKED] mtlstrm.sys : c:\windows\system32\drivers\mtlstrm.sys --> CANNOT FIX
[FAKED] nic1394.sys : c:\windows\system32\drivers\nic1394.sys --> CANNOT FIX
[FAKED] nwlnknb.sys : c:\windows\system32\drivers\nwlnknb.sys --> CANNOT FIX
[FAKED] slnt7554.sys : c:\windows\system32\drivers\slnt7554.sys --> CANNOT FIX

¤¤¤ Driver: [CHARGE] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost

¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: ST3250824AS +++++
--- User ---
[MBR] 1d19bf64fc55bfd58430331334b817c3
[BSP] f23cafe292ea0e62123b018565438d6b : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 64997 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 133114590 | Size: 173467 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[4].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt ; RKreport[4].txt

Utilisateur anonyme
19 mai 2012 à 20:46

Les anciens rapports de Roguekiller.

ptibout8
19 mai 2012 à 20:48

Rapport 2 :
RogueKiller V7.4.5 [18/05/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur: Almeida_ [Droits d'admin]
Mode: Suppression -- Date: 19/05/2012 20:09:36

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 14 ¤¤¤
[WallPP] HKCU\[...]\Desktop : Wallpaper () -> REPLACED (C:\Documents and Settings\Almeida_\Local Settings\Application Data\Microsoft\Wallpaper1.bmp)
[HJ] HKCU\[...]\Advanced : Start_ShowMyComputer (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowSearch (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowMyDocs (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowUser (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowMyPics (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowMyMusic (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowControlPanel (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowHelp (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowRun (0) -> REPLACED (1)
[HJ] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> REPLACED (1)

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤
[FAKED] ati1rvxx.sys : c:\windows\system32\drivers\ati1rvxx.sys --> CANNOT FIX
[FAKED] ati2mtaa.sys : c:\windows\system32\drivers\ati2mtaa.sys --> CANNOT FIX
[FAKED] atinxsxx.sys : c:\windows\system32\drivers\atinxsxx.sys --> CANNOT FIX
[FAKED] fltmgr.sys : c:\windows\system32\drivers\fltmgr.sys --> CANNOT FIX
[FAKED] mf.sys : c:\windows\system32\drivers\mf.sys --> CANNOT FIX
[FAKED] mtlstrm.sys : c:\windows\system32\drivers\mtlstrm.sys --> CANNOT FIX
[FAKED] nic1394.sys : c:\windows\system32\drivers\nic1394.sys --> CANNOT FIX
[FAKED] nwlnknb.sys : c:\windows\system32\drivers\nwlnknb.sys --> CANNOT FIX
[FAKED] slnt7554.sys : c:\windows\system32\drivers\slnt7554.sys --> CANNOT FIX

¤¤¤ Driver: [CHARGE] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost

¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: ST3250824AS +++++
--- User ---
[MBR] 1d19bf64fc55bfd58430331334b817c3
[BSP] f23cafe292ea0e62123b018565438d6b : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 64997 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 133114590 | Size: 173467 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

ptibout8
19 mai 2012 à 20:48

Rapport 3 :
RogueKiller V7.4.5 [18/05/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur: Almeida_ [Droits d'admin]
Mode: Recherche -- Date: 19/05/2012 20:38:52

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 0 ¤¤¤

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤
[FAKED] ati1rvxx.sys : c:\windows\system32\drivers\ati1rvxx.sys --> CANNOT FIX
[FAKED] ati2mtaa.sys : c:\windows\system32\drivers\ati2mtaa.sys --> CANNOT FIX
[FAKED] atinxsxx.sys : c:\windows\system32\drivers\atinxsxx.sys --> CANNOT FIX
[FAKED] fltmgr.sys : c:\windows\system32\drivers\fltmgr.sys --> CANNOT FIX
[FAKED] mf.sys : c:\windows\system32\drivers\mf.sys --> CANNOT FIX
[FAKED] mtlstrm.sys : c:\windows\system32\drivers\mtlstrm.sys --> CANNOT FIX
[FAKED] nic1394.sys : c:\windows\system32\drivers\nic1394.sys --> CANNOT FIX
[FAKED] nwlnknb.sys : c:\windows\system32\drivers\nwlnknb.sys --> CANNOT FIX
[FAKED] slnt7554.sys : c:\windows\system32\drivers\slnt7554.sys --> CANNOT FIX

¤¤¤ Driver: [CHARGE] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost

¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: ST3250824AS +++++
--- User ---
[MBR] 1d19bf64fc55bfd58430331334b817c3
[BSP] f23cafe292ea0e62123b018565438d6b : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 64997 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 133114590 | Size: 173467 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

Réponse 3 / 6

Utilisateur anonyme
19 mai 2012 à 20:50

Re

Je ne demande pas de passer Roguekiller mais de me mettre ces vieux rapports.

Que je présume tu n'as plus.

@+

ptibout8
19 mai 2012 à 20:52

Je comprends pas bien.
Il y a eu 2 rapports la 1ere fois (rapport 1 et 2 copiés plus haut) et rapport 3 et le dernier (voir plus haut). C'est pas ça qu'il faut ?

Réponse 4 / 6

Utilisateur anonyme
19 mai 2012 à 20:55

Re

Ok

Passe Roguekiller option RaccRAZ et poste moi son rapport

Merci
@+

ptibout8
19 mai 2012 à 21:01

Il est en cours et je crois qu'il est en train de tout récupérer ...;)

ptibout8
19 mai 2012 à 21:19

voilà le rapport :

RogueKiller V7.4.5 [18/05/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur: Almeida_ [Droits d'admin]
Mode: Raccourcis RAZ -- Date: 19/05/2012 21:14:43

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Driver: [CHARGE] ¤¤¤

¤¤¤ Attributs de fichiers restaures: ¤¤¤
Bureau: Success 66 / Fail 0
Lancement rapide: Success 5 / Fail 0
Programmes: Success 66932 / Fail 0
Menu demarrer: Success 153 / Fail 0
Dossier utilisateur: Success 18273 / Fail 0
Mes documents: Success 57 / Fail 0
Mes favoris: Success 171 / Fail 0
Mes images: Success 0 / Fail 0
Ma musique: Success 1355 / Fail 0
Mes videos: Success 33 / Fail 0
Disques locaux: Success 45454 / Fail 0
Sauvegarde: [FOUND] Success 113 / Fail 0

Lecteurs:
[A:] \Device\Floppy0 -- 0x2 --> Skipped
[C:] \Device\HarddiskVolume1 -- 0x3 --> Restored
[D:] \Device\HarddiskVolume2 -- 0x3 --> Restored
[E:] \Device\Harddisk1\DP(1)0-0+8 -- 0x2 --> Restored
[F:] \Device\Harddisk2\DP(1)0-0+9 -- 0x2 --> Restored
[G:] \Device\Harddisk3\DP(1)0-0+a -- 0x2 --> Restored
[H:] \Device\Harddisk4\DP(1)0-0+b -- 0x2 --> Restored
[I:] \Device\Harddisk5\DP(1)0-0+c -- 0x2 --> Restored
[J:] \Device\CdRom0 -- 0x5 --> Skipped

¤¤¤ Infection : Rogue.FakeHDD ¤¤¤

Termine : << RKreport[5].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt ; RKreport[4].txt ; RKreport[5].txt

Réponse 5 / 6

Utilisateur anonyme
19 mai 2012 à 21:20

Re

Télécharge TDSSKiller

*Créez un nouveau dossier sur votre bureau puis décompressez l'archive dedans
* Lancez le programme en cliquant sur TDSSKiller.exe, l'analyse se fait automatiquement, si l'infection est détectée, des éléments cachés (= hidden) seront alors affichés.

Si TDSS.tdl2 est détecté: l'option delete sera cochée par défaut.
Si TDSS.tdl3 est détecté: assure toi que Cure est bien cochée.
Si TDSS.tdl4(\HardDisk0\MBR) est détecté: assure toi que Cure est bien cochée.
Si Rootkit.Win32.ZAccess.* est détecté : règle sur "cure" en haut , et "delete" en bas
Si Suspicious file est indiqué, laisse l''option cochée sur Skip
une fois qu'il a terminé , redémarre s'il te le demande pour finir de nettoyer

sinon , ferme TDSSKiller et le rapport s'affichera sur le bureau

Sinon il est enregistré ici : C:\TDSSKiller_N°Version_Date_Heure.txt

Poste moi son rapport à l'issue; merci

@+

ptibout8
19 mai 2012 à 21:31

Je crois qu'il a rien trouvé, voici lerapport (du C:) :
21:25:44.0796 3372 TDSS rootkit removing tool 2.7.35.0 May 16 2012 07:37:57
21:25:46.0812 3372 ============================================================
21:25:46.0812 3372 Current date / time: 2012/05/19 21:25:46.0812
21:25:46.0812 3372 SystemInfo:
21:25:46.0812 3372
21:25:46.0812 3372 OS Version: 5.1.2600 ServicePack: 3.0
21:25:46.0812 3372 Product type: Workstation
21:25:46.0812 3372 ComputerName: ALMEIDA
21:25:46.0828 3372 UserName: Almeida_
21:25:46.0828 3372 Windows directory: C:\WINDOWS
21:25:46.0828 3372 System windows directory: C:\WINDOWS
21:25:46.0828 3372 Processor architecture: Intel x86
21:25:46.0828 3372 Number of processors: 2
21:25:46.0828 3372 Page size: 0x1000
21:25:46.0828 3372 Boot type: Normal boot
21:25:46.0828 3372 ============================================================
21:26:05.0906 3372 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
21:26:06.0234 3372 ============================================================
21:26:06.0234 3372 \Device\Harddisk0\DR0:
21:26:06.0421 3372 MBR partitions:
21:26:06.0421 3372 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x7EF2A9F
21:26:06.0656 3372 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x7EF2B1D, BlocksNum 0x152CDBA3
21:26:06.0656 3372 ============================================================
21:26:06.0796 3372 C: <-> \Device\Harddisk0\DR0\Partition0
21:26:07.0015 3372 D: <-> \Device\Harddisk0\DR0\Partition1
21:26:07.0015 3372 ============================================================
21:26:07.0015 3372 Initialize success
21:26:07.0015 3372 ============================================================
21:26:36.0703 0736 ============================================================
21:26:36.0703 0736 Scan started
21:26:36.0703 0736 Mode: Manual;
21:26:36.0703 0736 ============================================================
21:26:37.0171 0736 3xHybrid (7585b94dd5a5e633cd0c083e86e46b0c) C:\WINDOWS\system32\DRIVERS\3xHybrid.sys
21:26:37.0406 0736 3xHybrid - ok
21:26:37.0484 0736 Abiosdsk - ok
21:26:37.0531 0736 abp480n5 - ok
21:26:37.0593 0736 ACPI (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\WINDOWS\system32\DRIVERS\ACPI.sys
21:26:37.0671 0736 ACPI - ok
21:26:37.0718 0736 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\drivers\ACPIEC.sys
21:26:37.0796 0736 ACPIEC - ok
21:26:37.0828 0736 adpu160m - ok
21:26:38.0000 0736 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
21:26:38.0093 0736 aec - ok
21:26:38.0156 0736 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
21:26:38.0859 0736 AFD - ok
21:26:38.0906 0736 Aha154x - ok
21:26:38.0968 0736 aic78u2 - ok
21:26:39.0031 0736 aic78xx - ok
21:26:39.0125 0736 Alerter (758fdc60d41716ef889d849989b4b1cd) C:\WINDOWS\system32\alrsvc.dll
21:26:39.0203 0736 Alerter - ok
21:26:39.0265 0736 ALG (5e9a6658a2a69ae7eb195113b7a2e7a9) C:\WINDOWS\System32\alg.exe
21:26:39.0265 0736 ALG - ok
21:26:39.0312 0736 AliIde - ok
21:26:39.0390 0736 amsint - ok
21:26:39.0531 0736 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
21:26:39.0546 0736 Apple Mobile Device - ok
21:26:39.0640 0736 AppMgmt (f36c9f78fc902c8dce4d3b576bb0435a) C:\WINDOWS\System32\appmgmts.dll
21:26:39.0718 0736 AppMgmt - ok
21:26:39.0750 0736 asc - ok
21:26:39.0828 0736 asc3350p - ok
21:26:39.0875 0736 asc3550 - ok
21:26:39.0953 0736 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
21:26:40.0015 0736 AsyncMac - ok
21:26:40.0062 0736 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
21:26:40.0078 0736 atapi - ok
21:26:40.0109 0736 Atdisk - ok
21:26:40.0203 0736 atirage3 (0ca49538c49fdf5b803238d4309393f9) C:\WINDOWS\system32\DRIVERS\atimpae.sys
21:26:40.0296 0736 atirage3 - ok
21:26:40.0343 0736 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
21:26:40.0421 0736 Atmarpc - ok
21:26:40.0468 0736 AudioSrv (b4005aef7873144634765b570dac466e) C:\WINDOWS\System32\audiosrv.dll
21:26:40.0484 0736 AudioSrv - ok
21:26:40.0578 0736 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
21:26:40.0593 0736 audstub - ok
21:26:41.0015 0736 AVGIDSAgent (6d440ff3f44ca72edfd6176c6d6a89c0) C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
21:26:41.0265 0736 AVGIDSAgent - ok
21:26:41.0375 0736 AVGIDSDriver (4fa401b33c1b50c816486f6951244a14) C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys
21:26:41.0468 0736 AVGIDSDriver - ok
21:26:41.0500 0736 AVGIDSEH (69578bc9d43d614c6b3455db4af19762) C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys
21:26:41.0531 0736 AVGIDSEH - ok
21:26:41.0718 0736 AVGIDSFilter (6df528406aa22201f392b9b19121cd6f) C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys
21:26:41.0750 0736 AVGIDSFilter - ok
21:26:41.0812 0736 AVGIDSShim (1e01c2166b5599802bcd61b9691f7476) C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys
21:26:41.0875 0736 AVGIDSShim - ok
21:26:41.0968 0736 Avgldx86 (bf8118cd5e2255387b715b534d64acd1) C:\WINDOWS\system32\DRIVERS\avgldx86.sys
21:26:42.0000 0736 Avgldx86 - ok
21:26:42.0046 0736 Avgmfx86 (1c77ef67f196466adc9924cb288afe87) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys
21:26:42.0078 0736 Avgmfx86 - ok
21:26:42.0125 0736 Avgrkx86 (f2038ed7284b79dcef581468121192a9) C:\WINDOWS\system32\DRIVERS\avgrkx86.sys
21:26:42.0140 0736 Avgrkx86 - ok
21:26:42.0234 0736 Avgtdix (a6d562b612216d8d02a35ebeb92366bd) C:\WINDOWS\system32\DRIVERS\avgtdix.sys
21:26:42.0375 0736 Avgtdix - ok
21:26:42.0484 0736 avgwd (6699ece24fe4b3f752a66c66a602ee86) C:\Program Files\AVG\AVG2012\avgwdsvc.exe
21:26:42.0531 0736 avgwd - ok
21:26:42.0609 0736 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
21:26:42.0687 0736 Beep - ok
21:26:42.0781 0736 BITS (baa0b6e647c1ad593e9bae5cc31bcffb) C:\WINDOWS\system32\qmgr.dll
21:26:42.0828 0736 BITS - ok
21:26:42.0921 0736 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe
21:26:42.0968 0736 Bonjour Service - ok
21:26:43.0015 0736 Browser (06b54a7b1ef7cb16bfd0e208d343fa71) C:\WINDOWS\System32\browser.dll
21:26:43.0031 0736 Browser - ok
21:26:43.0078 0736 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
21:26:43.0171 0736 cbidf2k - ok
21:26:43.0281 0736 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
21:26:43.0343 0736 CCDECODE - ok
21:26:43.0390 0736 cd20xrnt - ok
21:26:43.0546 0736 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
21:26:43.0671 0736 Cdaudio - ok
21:26:43.0734 0736 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
21:26:43.0812 0736 Cdfs - ok
21:26:43.0890 0736 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
21:26:43.0953 0736 Cdrom - ok
21:26:43.0984 0736 Changer - ok
21:26:44.0062 0736 CiSvc (793ef38a5fd086c3c8e48a8a861562ed) C:\WINDOWS\system32\cisvc.exe
21:26:44.0156 0736 CiSvc - ok
21:26:44.0218 0736 ClipSrv (8b30cbb0c07d49b2658fb190946b0e7e) C:\WINDOWS\system32\clipsrv.exe
21:26:44.0296 0736 ClipSrv - ok
21:26:44.0343 0736 CmdIde - ok
21:26:44.0406 0736 COMSysApp - ok
21:26:44.0546 0736 Cpqarray - ok
21:26:44.0640 0736 CryptSvc (7a6d0b71035e123fdda2156a25578ad3) C:\WINDOWS\System32\cryptsvc.dll
21:26:44.0656 0736 CryptSvc - ok
21:26:44.0687 0736 dac2w2k - ok
21:26:44.0765 0736 dac960nt - ok
21:26:44.0875 0736 DcomLaunch (0203b1aad358f206cb0a3c1f93cce17a) C:\WINDOWS\system32\rpcss.dll
21:26:44.0921 0736 DcomLaunch - ok
21:26:45.0015 0736 Dhcp (318f535dc05551d96deeb90b6d6904de) C:\WINDOWS\System32\dhcpcsvc.dll
21:26:45.0046 0736 Dhcp - ok
21:26:45.0093 0736 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
21:26:45.0187 0736 Disk - ok
21:26:45.0218 0736 dmadmin - ok
21:26:45.0421 0736 dmboot (f5deadd42335fb33edca74ecb2f36cba) C:\WINDOWS\system32\drivers\dmboot.sys
21:26:45.0625 0736 dmboot - ok
21:26:45.0765 0736 dmio (5a7c47c9b3f9fb92a66410a7509f0c71) C:\WINDOWS\system32\drivers\dmio.sys
21:26:45.0875 0736 dmio - ok
21:26:45.0906 0736 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
21:26:45.0953 0736 dmload - ok
21:26:46.0000 0736 dmserver (6797c23d6b79935482d7f0e8ca5e5b67) C:\WINDOWS\System32\dmserver.dll
21:26:46.0000 0736 dmserver - ok
21:26:46.0062 0736 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
21:26:46.0140 0736 DMusic - ok
21:26:46.0218 0736 Dnscache (1a1e59377fb6cacd711cc5073c4a7d79) C:\WINDOWS\System32\dnsrslvr.dll
21:26:46.0218 0736 Dnscache - ok
21:26:46.0312 0736 Dot3svc (3fcf86f03d0302443c21ce6e5bbf7a25) C:\WINDOWS\System32\dot3svc.dll
21:26:46.0531 0736 Dot3svc - ok
21:26:46.0562 0736 dpti2o - ok
21:26:46.0640 0736 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
21:26:46.0687 0736 drmkaud - ok
21:26:46.0765 0736 EapHost (8b5fc9087d2cab110bc2ed5cc5e7b8ac) C:\WINDOWS\System32\eapsvc.dll
21:26:46.0968 0736 EapHost - ok
21:26:47.0046 0736 ERSvc (94f948cb12c4d35483f1e815deb16c7b) C:\WINDOWS\System32\ersvc.dll
21:26:47.0078 0736 ERSvc - ok
21:26:47.0140 0736 Eventlog (c3fb1d70cb88722267949694ba51759e) C:\WINDOWS\system32\services.exe
21:26:47.0203 0736 Eventlog - ok
21:26:47.0265 0736 EventSystem (ec16ae9b37eacf871629227a3f3913fd) C:\WINDOWS\system32\es.dll
21:26:47.0312 0736 EventSystem - ok
21:26:47.0375 0736 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
21:26:47.0531 0736 Fastfat - ok
21:26:47.0578 0736 FastUserSwitchingCompatibility (1b8542f338cdd86929a084a455837158) C:\WINDOWS\System32\shsvcs.dll
21:26:47.0625 0736 FastUserSwitchingCompatibility - ok
21:26:47.0671 0736 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
21:26:47.0718 0736 Fdc - ok
21:26:47.0765 0736 FETNDIS (e9648254056bce81a85380c0c3647dc4) C:\WINDOWS\system32\DRIVERS\fetnd5.sys
21:26:47.0828 0736 FETNDIS - ok
21:26:47.0890 0736 Fips (31f923eb2170fc172c81abda0045d18c) C:\WINDOWS\system32\drivers\Fips.sys
21:26:48.0343 0736 Fips - ok
21:26:48.0796 0736 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
21:26:49.0109 0736 Flpydisk - ok
21:26:49.0640 0736 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
21:26:49.0984 0736 FltMgr - ok
21:26:50.0093 0736 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
21:26:50.0125 0736 Fs_Rec - ok
21:26:51.0609 0736 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
21:26:51.0781 0736 Ftdisk - ok
21:26:52.0000 0736 gagp30kx (3a74c423cf6bcca6982715878f450a3b) C:\WINDOWS\system32\DRIVERS\gagp30kx.sys
21:26:52.0312 0736 gagp30kx - ok
21:26:52.0421 0736 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
21:26:52.0437 0736 GEARAspiWDM - ok
21:26:52.0562 0736 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
21:26:52.0796 0736 Gpc - ok
21:26:53.0531 0736 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
21:26:53.0593 0736 gupdate - ok
21:26:53.0625 0736 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe
21:26:53.0640 0736 gupdatem - ok
21:26:53.0734 0736 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
21:26:53.0781 0736 gusvc - ok
21:26:53.0937 0736 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
21:26:54.0015 0736 HDAudBus - ok
21:26:54.0093 0736 helpsvc (1247f83b705af0e796330442f7967cf8) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
21:26:54.0109 0736 helpsvc - ok
21:26:54.0156 0736 HidServ (a3b9b4a68bc839ce5a264d5908092261) C:\WINDOWS\System32\hidserv.dll
21:26:54.0171 0736 HidServ - ok
21:26:54.0250 0736 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
21:26:54.0296 0736 HidUsb - ok
21:26:54.0390 0736 hkmsvc (17b3c3d40cdba40c2e331d28be4de27f) C:\WINDOWS\System32\kmsvc.dll
21:26:54.0453 0736 hkmsvc - ok
21:26:54.0484 0736 hpn - ok
21:26:54.0578 0736 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
21:26:54.0750 0736 HTTP - ok
21:26:54.0812 0736 HTTPFilter (bd31cface38d1800abdb43f4260af0d5) C:\WINDOWS\System32\w3ssl.dll
21:26:54.0828 0736 HTTPFilter - ok
21:26:54.0875 0736 i2omgmt - ok
21:26:54.0937 0736 i2omp - ok
21:26:55.0015 0736 i8042prt (a09bdc4ed10e3b2e0ec27bb94af32516) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
21:26:55.0109 0736 i8042prt - ok
21:26:55.0140 0736 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
21:26:55.0265 0736 Imapi - ok
21:26:55.0375 0736 ImapiService (c4221678bbaa55239c23632875759961) C:\WINDOWS\system32\imapi.exe
21:26:55.0546 0736 ImapiService - ok
21:26:55.0609 0736 ini910u - ok
21:26:56.0250 0736 IntcAzAudAddService (b12a9fc49cd2765a43829d834f518aed) C:\WINDOWS\system32\drivers\RtkHDAud.sys
21:26:56.0500 0736 IntcAzAudAddService - ok
21:26:56.0671 0736 IntelIde - ok
21:26:56.0750 0736 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
21:26:57.0078 0736 Ip6Fw - ok
21:26:57.0265 0736 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
21:26:57.0484 0736 IpFilterDriver - ok
21:26:57.0593 0736 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
21:26:57.0718 0736 IpInIp - ok
21:26:57.0781 0736 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
21:26:58.0093 0736 IpNat - ok
21:26:58.0687 0736 iPod Service (178fe38b7740f598391eb2f51ae4ccac) C:\Program Files\iPod\bin\iPodService.exe
21:26:58.0750 0736 iPod Service - ok
21:26:58.0828 0736 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
21:26:59.0078 0736 IPSec - ok
21:26:59.0156 0736 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
21:26:59.0531 0736 IRENUM - ok
21:26:59.0859 0736 isapnp (355836975a67b6554bca60328cd6cb74) C:\WINDOWS\system32\DRIVERS\isapnp.sys
21:27:00.0031 0736 isapnp - ok
21:27:00.0609 0736 ISWKL (08a811bfd207dfdec588881c18bacbaa) C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys
21:27:00.0640 0736 ISWKL - ok
21:27:01.0156 0736 IswSvc (5b2ccef06f96dfb22893ab8f0b3f891d) C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
21:27:01.0218 0736 IswSvc - ok
21:27:01.0328 0736 JavaQuickStarterService (5e06a9d23727daf96faa796f1135fdcd) C:\Program Files\Java\jre6\bin\jqs.exe
21:27:01.0359 0736 JavaQuickStarterService - ok
21:27:01.0406 0736 Kbdclass (16813155807c6881f4bfbf6657424659) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
21:27:01.0468 0736 Kbdclass - ok
21:27:01.0546 0736 kbdhid (94c59cb884ba010c063687c3a50dce8e) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
21:27:01.0625 0736 kbdhid - ok
21:27:01.0671 0736 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
21:27:01.0703 0736 kmixer - ok
21:27:01.0750 0736 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
21:27:01.0859 0736 KSecDD - ok
21:27:01.0921 0736 lanmanserver (1db8078a32e03ac8f5eb5e6dcac2aa34) C:\WINDOWS\System32\srvsvc.dll
21:27:01.0937 0736 lanmanserver - ok
21:27:02.0000 0736 lanmanworkstation (ad54ead46d92f413be189aabc1c59490) C:\WINDOWS\System32\wkssvc.dll
21:27:02.0015 0736 lanmanworkstation - ok
21:27:02.0062 0736 lbrtfdc - ok
21:27:02.0171 0736 LmHosts (0f357c079ac529a844ab5b18e4eef881) C:\WINDOWS\System32\lmhsvc.dll
21:27:02.0187 0736 LmHosts - ok
21:27:02.0234 0736 Messenger (e67a66a3781c1a483f0f8992664cbe0d) C:\WINDOWS\System32\msgsvc.dll
21:27:02.0328 0736 Messenger - ok
21:27:02.0375 0736 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
21:27:02.0406 0736 mnmdd - ok
21:27:02.0484 0736 mnmsrvc (d3a2870cd96cda7bcff3dc54f64087ad) C:\WINDOWS\system32\mnmsrvc.exe
21:27:02.0562 0736 mnmsrvc - ok
21:27:02.0609 0736 Modem (510ade9327fe84c10254e1902697e25f) C:\WINDOWS\system32\drivers\Modem.sys
21:27:02.0671 0736 Modem - ok
21:27:02.0718 0736 Mouclass (027c01bd7ef3349aaebc883d8a799efb) C:\WINDOWS\system32\DRIVERS\mouclass.sys
21:27:02.0781 0736 Mouclass - ok
21:27:02.0843 0736 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
21:27:02.0890 0736 mouhid - ok
21:27:02.0953 0736 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
21:27:02.0984 0736 MountMgr - ok
21:27:03.0031 0736 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys
21:27:03.0062 0736 MPE - ok
21:27:03.0109 0736 mraid35x - ok
21:27:03.0203 0736 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
21:27:03.0265 0736 MRxDAV - ok
21:27:03.0359 0736 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
21:27:04.0125 0736 MRxSmb - ok
21:27:04.0187 0736 MSDTC (8648d670ae0d95c95e7bbb5b80661796) C:\WINDOWS\system32\msdtc.exe
21:27:04.0234 0736 MSDTC - ok
21:27:04.0296 0736 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
21:27:04.0343 0736 Msfs - ok
21:27:04.0390 0736 MSIServer - ok
21:27:04.0484 0736 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
21:27:04.0546 0736 MSKSSRV - ok
21:27:04.0578 0736 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
21:27:04.0656 0736 MSPCLOCK - ok
21:27:04.0703 0736 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
21:27:04.0750 0736 MSPQM - ok
21:27:04.0812 0736 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
21:27:04.0859 0736 mssmbios - ok
21:27:04.0906 0736 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
21:27:04.0937 0736 MSTEE - ok
21:27:04.0984 0736 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\WINDOWS\system32\DRIVERS\ASACPI.sys
21:27:05.0046 0736 MTsensor - ok
21:27:05.0093 0736 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
21:27:05.0187 0736 Mup - ok
21:27:05.0250 0736 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
21:27:05.0296 0736 NABTSFEC - ok
21:27:05.0421 0736 napagent (69e4fbbabaeee1bff422e091da3171da) C:\WINDOWS\System32\qagentrt.dll
21:27:05.0515 0736 napagent - ok
21:27:05.0578 0736 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
21:27:05.0687 0736 NDIS - ok
21:27:05.0750 0736 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
21:27:05.0781 0736 NdisIP - ok
21:27:05.0828 0736 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
21:27:06.0281 0736 NdisTapi - ok
21:27:06.0343 0736 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
21:27:06.0453 0736 Ndisuio - ok
21:27:06.0500 0736 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
21:27:06.0546 0736 NdisWan - ok
21:27:06.0609 0736 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
21:27:06.0703 0736 NDProxy - ok
21:27:06.0765 0736 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
21:27:06.0796 0736 NetBIOS - ok
21:27:06.0859 0736 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
21:27:07.0000 0736 NetBT - ok
21:27:07.0062 0736 NetDDE (5c9b1d83755b36237b70f95df3d46a52) C:\WINDOWS\system32\netdde.exe
21:27:07.0125 0736 NetDDE - ok
21:27:07.0171 0736 NetDDEdsdm (5c9b1d83755b36237b70f95df3d46a52) C:\WINDOWS\system32\netdde.exe
21:27:07.0187 0736 NetDDEdsdm - ok
21:27:07.0265 0736 Netlogon (91e6024d6d4dcdecdb36c43ecf9bbecb) C:\WINDOWS\system32\lsass.exe
21:27:07.0265 0736 Netlogon - ok
21:27:07.0375 0736 Netman (be0cb143fa427d93440ded18db8c918b) C:\WINDOWS\System32\netman.dll
21:27:07.0390 0736 Netman - ok
21:27:07.0468 0736 Nla (6f5f546a92c7b6ae45db1d6910781eb0) C:\WINDOWS\System32\mswsock.dll
21:27:07.0500 0736 Nla - ok
21:27:07.0609 0736 nosGetPlusHelper (9865516d33bc66fddac9db4087d4b6aa) C:\Program Files\NOS\bin\getPlus_Helper_3004.dll
21:27:07.0625 0736 nosGetPlusHelper - ok
21:27:07.0687 0736 NPF (b48dc6abcd3aeff8618350ccbdc6b09a) C:\WINDOWS\system32\drivers\npf.sys
21:27:07.0703 0736 NPF - ok
21:27:07.0843 0736 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
21:27:08.0015 0736 Npfs - ok
21:27:08.0140 0736 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
21:27:08.0218 0736 Ntfs - ok
21:27:08.0250 0736 NtLmSsp (91e6024d6d4dcdecdb36c43ecf9bbecb) C:\WINDOWS\system32\lsass.exe
21:27:08.0265 0736 NtLmSsp - ok
21:27:08.0421 0736 NtmsSvc (037d92b3a7853a183fcab77fb1d13d6c) C:\WINDOWS\system32\ntmssvc.dll
21:27:08.0578 0736 NtmsSvc - ok
21:27:08.0625 0736 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
21:27:08.0640 0736 Null - ok
21:27:09.0406 0736 nv (30913cbf518396912e54c2c9f1dd0f09) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
21:27:09.0968 0736 nv - ok
21:27:10.0078 0736 nvsvc (c0204c1a7a2d2433d48f49e4ecc09ab6) C:\WINDOWS\system32\nvsvc32.exe
21:27:10.0109 0736 nvsvc - ok
21:27:10.0156 0736 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
21:27:10.0171 0736 NwlnkFlt - ok
21:27:10.0218 0736 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
21:27:10.0234 0736 NwlnkFwd - ok
21:27:10.0312 0736 Parport (8fd0bdbea875d06ccf6c945ca9abaf75) C:\WINDOWS\system32\DRIVERS\parport.sys
21:27:10.0375 0736 Parport - ok
21:27:10.0421 0736 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
21:27:10.0484 0736 PartMgr - ok
21:27:10.0515 0736 ParVdm (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
21:27:10.0562 0736 ParVdm - ok
21:27:10.0640 0736 PCI (043410877bda580c528f45165f7125bc) C:\WINDOWS\system32\DRIVERS\pci.sys
21:27:10.0703 0736 PCI - ok
21:27:10.0750 0736 PCIDump - ok
21:27:10.0828 0736 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys
21:27:10.0906 0736 PCIIde - ok
21:27:10.0968 0736 Pcmcia (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\WINDOWS\system32\drivers\Pcmcia.sys
21:27:11.0031 0736 Pcmcia - ok
21:27:11.0062 0736 PDCOMP - ok
21:27:11.0109 0736 PDFRAME - ok
21:27:11.0140 0736 PDRELI - ok
21:27:11.0203 0736 PDRFRAME - ok
21:27:11.0234 0736 perc2 - ok
21:27:11.0296 0736 perc2hib - ok
21:27:11.0484 0736 PlugPlay (c3fb1d70cb88722267949694ba51759e) C:\WINDOWS\system32\services.exe
21:27:11.0500 0736 PlugPlay - ok
21:27:11.0546 0736 PolicyAgent (91e6024d6d4dcdecdb36c43ecf9bbecb) C:\WINDOWS\system32\lsass.exe
21:27:11.0562 0736 PolicyAgent - ok
21:27:11.0625 0736 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
21:27:11.0671 0736 PptpMiniport - ok
21:27:11.0718 0736 Processor (e19c9632ac828f6f214391e2bdda11cb) C:\WINDOWS\system32\DRIVERS\processr.sys
21:27:11.0781 0736 Processor - ok
21:27:11.0812 0736 ProtectedStorage (91e6024d6d4dcdecdb36c43ecf9bbecb) C:\WINDOWS\system32\lsass.exe
21:27:11.0812 0736 ProtectedStorage - ok
21:27:11.0875 0736 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
21:27:11.0968 0736 PSched - ok
21:27:12.0015 0736 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
21:27:12.0046 0736 Ptilink - ok
21:27:12.0078 0736 ql1080 - ok
21:27:12.0125 0736 Ql10wnt - ok
21:27:12.0187 0736 ql12160 - ok
21:27:12.0234 0736 ql1240 - ok
21:27:12.0312 0736 ql1280 - ok
21:27:12.0375 0736 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
21:27:12.0406 0736 RasAcd - ok
21:27:12.0484 0736 RasAuto (78da9ccdac683ef5aa87d1c919f6d221) C:\WINDOWS\System32\rasauto.dll
21:27:12.0531 0736 RasAuto - ok
21:27:12.0578 0736 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
21:27:12.0609 0736 Rasl2tp - ok
21:27:12.0687 0736 RasMan (0a48df90b4784f9b90a2671af992c914) C:\WINDOWS\System32\rasmans.dll
21:27:12.0718 0736 RasMan - ok
21:27:12.0796 0736 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
21:27:12.0828 0736 RasPppoe - ok
21:27:12.0875 0736 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
21:27:12.0890 0736 Raspti - ok
21:27:12.0984 0736 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
21:27:13.0046 0736 Rdbss - ok
21:27:13.0093 0736 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
21:27:13.0109 0736 RDPCDD - ok
21:27:13.0234 0736 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
21:27:13.0328 0736 rdpdr - ok
21:27:13.0421 0736 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
21:27:14.0187 0736 RDPWD - ok
21:27:14.0250 0736 RDSessMgr (9f63d9c5b238ed1c375d417eff3d5be7) C:\WINDOWS\system32\sessmgr.exe
21:27:14.0328 0736 RDSessMgr - ok
21:27:14.0375 0736 redbook (d8eb2a7904db6c916eb5361878ddcbae) C:\WINDOWS\system32\DRIVERS\redbook.sys
21:27:14.0421 0736 redbook - ok
21:27:14.0484 0736 RemoteAccess (7da370c31673c99497bd07068ee6e354) C:\WINDOWS\System32\mprdim.dll
21:27:14.0531 0736 RemoteAccess - ok
21:27:14.0593 0736 RemoteRegistry (e598d81197e2e0ec42a0c55772bb00e8) C:\WINDOWS\system32\regsvc.dll
21:27:14.0609 0736 RemoteRegistry - ok
21:27:14.0703 0736 rpcapd (b60f58f175de20a6739194e85b035178) C:\Program Files\WinPcap\rpcapd.exe
21:27:14.0718 0736 rpcapd - ok
21:27:14.0828 0736 RpcLocator (499c59a2584f6d4ea41e944da571d993) C:\WINDOWS\system32\locator.exe
21:27:14.0875 0736 RpcLocator - ok
21:27:14.0953 0736 RpcSs (0203b1aad358f206cb0a3c1f93cce17a) C:\WINDOWS\system32\rpcss.dll
21:27:14.0984 0736 RpcSs - ok
21:27:15.0046 0736 RSVP (414964844f4793acb868d057e8ed997e) C:\WINDOWS\system32\rsvp.exe
21:27:15.0171 0736 RSVP - ok
21:27:15.0250 0736 SamSs (91e6024d6d4dcdecdb36c43ecf9bbecb) C:\WINDOWS\system32\lsass.exe
21:27:15.0250 0736 SamSs - ok
21:27:15.0312 0736 SCardSvr (67949cc8a865296c1333c96a4e1a2d66) C:\WINDOWS\System32\SCardSvr.exe
21:27:15.0390 0736 SCardSvr - ok
21:27:15.0453 0736 Schedule (55f5c5c1be1a78e285033e432ba01597) C:\WINDOWS\system32\schedsvc.dll
21:27:15.0468 0736 Schedule - ok
21:27:15.0546 0736 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
21:27:15.0609 0736 Secdrv - ok
21:27:15.0656 0736 seclogon (5ac311c0af2af5ec221670bb8dc479d3) C:\WINDOWS\System32\seclogon.dll
21:27:15.0671 0736 seclogon - ok
21:27:15.0718 0736 SENS (3531366f38f453d08fe72e7b32dfe786) C:\WINDOWS\system32\sens.dll
21:27:15.0734 0736 SENS - ok
21:27:15.0796 0736 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
21:27:15.0875 0736 serenum - ok
21:27:16.0015 0736 Serial (93d313c31f7ad9ea2b75f26075413c7c) C:\WINDOWS\system32\DRIVERS\serial.sys
21:27:16.0125 0736 Serial - ok
21:27:16.0171 0736 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
21:27:16.0328 0736 Sfloppy - ok
21:27:16.0531 0736 SharedAccess (f4ce708a7d17a625de6c0fd746d50e88) C:\WINDOWS\System32\ipnathlp.dll
21:27:16.0625 0736 SharedAccess - ok
21:27:16.0796 0736 ShellHWDetection (1b8542f338cdd86929a084a455837158) C:\WINDOWS\System32\shsvcs.dll
21:27:16.0812 0736 ShellHWDetection - ok
21:27:16.0875 0736 Simbad - ok
21:27:16.0953 0736 SIS163u (4edc881c138e778feb9bd24cbc6b33ed) C:\WINDOWS\system32\DRIVERS\sis163u.sys
21:27:16.0984 0736 SIS163u - ok
21:27:17.0015 0736 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
21:27:17.0046 0736 SLIP - ok
21:27:17.0093 0736 Sparrow - ok
21:27:17.0156 0736 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
21:27:17.0218 0736 splitter - ok
21:27:17.0265 0736 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
21:27:17.0281 0736 Spooler - ok
21:27:17.0343 0736 sr (39626e6dc1fb39434ec40c42722b660a) C:\WINDOWS\system32\DRIVERS\sr.sys
21:27:17.0406 0736 sr - ok
21:27:17.0484 0736 srservice (6ed29124a1c83bd0cf6b26bd01ca6f6f) C:\WINDOWS\system32\srsvc.dll
21:27:17.0500 0736 srservice - ok
21:27:17.0593 0736 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
21:27:17.0671 0736 Srv - ok
21:27:17.0718 0736 SSDPSRV (ea9e0db8684cef2fd3badd671df5a112) C:\WINDOWS\System32\ssdpsrv.dll
21:27:17.0734 0736 SSDPSRV - ok
21:27:17.0828 0736 stisvc (d76b0e8a4ecad1adcc75fd14a7acc54c) C:\WINDOWS\system32\wiaservc.dll
21:27:17.0859 0736 stisvc - ok
21:27:17.0921 0736 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
21:27:17.0984 0736 streamip - ok
21:27:18.0015 0736 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
21:27:18.0046 0736 swenum - ok
21:27:18.0109 0736 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
21:27:18.0171 0736 swmidi - ok
21:27:18.0203 0736 SwPrv - ok
21:27:18.0296 0736 symc810 - ok
21:27:18.0375 0736 symc8xx - ok
21:27:18.0453 0736 sym_hi - ok
21:27:18.0515 0736 sym_u3 - ok
21:27:18.0640 0736 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
21:27:18.0687 0736 sysaudio - ok
21:27:18.0765 0736 SysmonLog (0899061318a6b1d9596aabfc77f45e44) C:\WINDOWS\system32\smlogsvc.exe
21:27:18.0828 0736 SysmonLog - ok
21:27:18.0921 0736 TapiSrv (8e5231171ad6595ff002e848cc54fcd7) C:\WINDOWS\System32\tapisrv.dll
21:27:18.0953 0736 TapiSrv - ok
21:27:19.0031 0736 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
21:27:19.0125 0736 Tcpip - ok
21:27:19.0234 0736 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
21:27:19.0296 0736 TDPIPE - ok
21:27:19.0359 0736 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
21:27:19.0453 0736 TDTCP - ok
21:27:19.0531 0736 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
21:27:19.0546 0736 TermDD - ok
21:27:19.0625 0736 TermService (710bc85a8c22626ee094439e3ea0d38c) C:\WINDOWS\System32\termsrv.dll
21:27:19.0656 0736 TermService - ok
21:27:19.0734 0736 Themes (1b8542f338cdd86929a084a455837158) C:\WINDOWS\System32\shsvcs.dll
21:27:19.0750 0736 Themes - ok
21:27:19.0812 0736 TlntSvr (d859a9d2f026ce5804485068ffd6eaf2) C:\WINDOWS\system32\tlntsvr.exe
21:27:19.0859 0736 TlntSvr - ok
21:27:19.0890 0736 TosIde - ok
21:27:19.0984 0736 TrkWks (e1a84a5067627407a53c2c4f8d8a1d2e) C:\WINDOWS\system32\trkwks.dll
21:27:20.0015 0736 TrkWks - ok
21:27:20.0109 0736 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
21:27:20.0156 0736 Udfs - ok
21:27:20.0203 0736 ultra - ok
21:27:20.0265 0736 UMWdf - ok
21:27:20.0359 0736 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
21:27:20.0421 0736 Update - ok
21:27:20.0500 0736 upnphost (bd8166a495b02308f364b36249475f22) C:\WINDOWS\System32\upnphost.dll
21:27:20.0546 0736 upnphost - ok
21:27:20.0593 0736 UPS (1edc93d7bd731b5ca6248ae245099b60) C:\WINDOWS\System32\ups.exe
21:27:20.0640 0736 UPS - ok
21:27:20.0687 0736 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\WINDOWS\system32\Drivers\usbaapl.sys
21:27:21.0109 0736 USBAAPL - ok
21:27:21.0156 0736 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
21:27:21.0171 0736 usbccgp - ok
21:27:21.0218 0736 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
21:27:21.0250 0736 usbehci - ok
21:27:21.0312 0736 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
21:27:21.0359 0736 usbhub - ok
21:27:21.0421 0736 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
21:27:21.0500 0736 usbprint - ok
21:27:21.0546 0736 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
21:27:21.0593 0736 usbscan - ok
21:27:21.0640 0736 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
21:27:21.0687 0736 usbstor - ok
21:27:21.0718 0736 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
21:27:21.0765 0736 usbuhci - ok
21:27:21.0828 0736 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
21:27:21.0875 0736 VgaSave - ok
21:27:21.0921 0736 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
21:27:21.0953 0736 ViaIde - ok
21:27:22.0000 0736 VolSnap (46de1126684369bace4849e4fc8c43ca) C:\WINDOWS\system32\drivers\VolSnap.sys
21:27:22.0046 0736 VolSnap - ok
21:27:22.0125 0736 Vsdatant (558cee3d9c470651f1843d51b42d761b) C:\WINDOWS\system32\vsdatant.sys
21:27:22.0171 0736 Vsdatant - ok
21:27:22.0234 0736 vsmon - ok
21:27:22.0343 0736 VSS (5a4da252b2c0550ab83d129c02cf6c19) C:\WINDOWS\System32\vssvc.exe
21:27:22.0406 0736 VSS - ok
21:27:22.0484 0736 W32Time (c1f726ee0b043b074a68992bc4aef8fd) C:\WINDOWS\system32\w32time.dll
21:27:22.0500 0736 W32Time - ok
21:27:22.0593 0736 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
21:27:22.0625 0736 Wanarp - ok
21:27:22.0656 0736 WDICA - ok
21:27:22.0750 0736 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
21:27:22.0828 0736 wdmaud - ok
21:27:22.0875 0736 WebClient (714670e64fbe6d28d99871ed9a52a334) C:\WINDOWS\System32\webclnt.dll
21:27:22.0890 0736 WebClient - ok
21:27:22.0968 0736 winmgmt (5e9deae9980ff34bcd6dde2e9e2bf911) C:\WINDOWS\system32\wbem\WMIsvc.dll
21:27:23.0000 0736 winmgmt - ok
21:27:23.0140 0736 WmdmPmSN (aa370f0d5b900e13d40e9cb834b5da10) C:\WINDOWS\system32\mspmsnsv.dll
21:27:23.0171 0736 WmdmPmSN - ok
21:27:23.0281 0736 Wmi (31c1fd0bbdc5b81c21edba4331edae55) C:\WINDOWS\System32\advapi32.dll
21:27:23.0328 0736 Wmi - ok
21:27:23.0421 0736 WmiApSrv (4e8e8a58f56b25d0795f484e5eb7f898) C:\WINDOWS\system32\wbem\wmiapsrv.exe
21:27:23.0484 0736 WmiApSrv - ok
21:27:23.0578 0736 wscsvc (c1fd85db4a80a98d60ecb7a828e77fe0) C:\WINDOWS\system32\wscsvc.dll
21:27:23.0593 0736 wscsvc - ok
21:27:23.0703 0736 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
21:27:23.0781 0736 WSTCODEC - ok
21:27:23.0828 0736 wuauserv (75d6c5c3d2c93b1f9931e5dfb693ae2a) C:\WINDOWS\system32\wuauserv.dll
21:27:23.0828 0736 wuauserv - ok
21:27:24.0187 0736 WZCSVC (c336e54ee0c291a02f004667db1e66cb) C:\WINDOWS\System32\wzcsvc.dll
21:27:24.0281 0736 WZCSVC - ok
21:27:24.0359 0736 X10Hid (81e8da36ce70858898d5eb81e28a47d2) C:\WINDOWS\system32\Drivers\x10hid.sys
21:27:24.0515 0736 X10Hid - ok
21:27:24.0609 0736 x10nets (5a0c788c5bc5f2c993cb60940adcf95e) C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
21:27:24.0625 0736 x10nets - ok
21:27:24.0906 0736 xmlprov (f92a87fdda0c11c8604fbc2b864fa726) C:\WINDOWS\System32\xmlprov.dll
21:27:24.0968 0736 xmlprov - ok
21:27:25.0156 0736 MBR (0x1B8) (c99c3199cfaa4cbdcd91493f6d113a50) \Device\Harddisk0\DR0
21:27:26.0359 0736 \Device\Harddisk0\DR0 - ok
21:27:26.0390 0736 Boot (0x1200) (efeadae4da450175ac866084e6fe925f) \Device\Harddisk0\DR0\Partition0
21:27:26.0406 0736 \Device\Harddisk0\DR0\Partition0 - ok
21:27:26.0468 0736 Boot (0x1200) (8b6ff9bedfaf9ae08b57a37ad0fed532) \Device\Harddisk0\DR0\Partition1
21:27:26.0468 0736 \Device\Harddisk0\DR0\Partition1 - ok
21:27:26.0468 0736 ============================================================
21:27:26.0468 0736 Scan finished
21:27:26.0468 0736 ============================================================
21:27:26.0562 3216 Detected object count: 0
21:27:26.0562 3216 Actual detected object count: 0

Réponse 6 / 6

Utilisateur anonyme
19 mai 2012 à 21:35

Re

Ok de ce côté.

Télécharge Malwaresbytes anti malware ici
http://www.malwarebytes.org/mbam.php

Bouton »Download free version »

* Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

* Potasse le tuto pour te familiariser avec le prg :

https://forum.pcastuces.com/sujet.asp?f=31&s=3

(cela dis, il est très simple d'utilisation).

relance Malwaresbytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

* Lance Malwarebyte's. Sous Vista et Seven (clic droit de la souris « exécuter en tant que administrateur »)

*Procèdes à une mise à jour

*Fais un examen dit "Complet"

--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "Afficher les résultats" " .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .

Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

@+

ptibout8
19 mai 2012 à 21:50

Il me dit que c'est téléchargé mais je ne le trouve pas . Il ne m'a pas demandé où l'enregistrer. aucune trace du téléchargement!

Utilisateur anonyme
19 mai 2012 à 21:51

Et bien tu reprends et regarde ou il est enregistré

Cheval de troie plus de fichiers ni programme

6 réponses

Discussions similaires