MBR Physicaldrive0

Furiss Messages postés 5 Statut Membre -  
 Utilisateur anonyme -
Bonjour à tous ! Comme mon titre l'indique...mon ordinateur est infecté par ce virus MBR physicaldrive0 :/ J'ai essayé RogueKiller et Malwarebytes sans succès. J'ai parcouru de nombreux forums pour trouver une solution et là surprise il y a de nombreuses victimes mais la réponse est personnalisée en fonction du rapport publié par chaque victime après un scan donc impossible de l'appliquer. Quelqu'un est-il en mesure de m'aider à résoudre ce problème avant que je ne me résigne à formater le pc?

Merci à vous =D

10 réponses

  1. matros3000
     
    Pourquoi tu ne fais également pas de scan pour que l'on te constitues une réponse personnalisée?
    PS: peux-tu m'envoyer le rapport de Roguekiller?
    0
  2. Utilisateur anonyme
     
    bonjour,

    * Télécharge TDSSKiller sur ton bureau :

    https://support.kaspersky.com/downloads/utils/tdsskiller.exe

    * Lance le ( Utilisateurs de vista/Seven -> Clic droit puis " Exécuter en tant qu'administrateur " )

    * Clique sur [Start Scan] pour démarrer l'analyse.

    * Si des élements sont trouvés, cliques sur [Continue] puis sur [Reboot Now]

    * Un rapport s'ouvrira au redémarrage du PC.

    * Copie/Colle son contenu dans ta prochaine réponse.

    Note : Le rapport se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt.

    note :
    Conserve l'action proposée par défaut par l'outil :

    - Si TDSS.tdl2 : l'option Delete sera cochée.
    - Si TDSS.tdl3 ou TDSS.tdl4 : assure toi que Cure soit bien cochée.
    - Si "Suspicious object" ou Sptd ou ForgedFile.Multi.Generic : laisse l'option cochée sur Skip
    - Si Rootkit.Win32.ZAccess.* est détecté règle sur cure en haut , et delete en bas:D

    0
  3. Furiss Messages postés 5 Statut Membre
     
    Alors merci pour les réponses !
    Donc j'ai fais ce que tu m'as dit, le même virus a été détecté j'ai continué et reboot mais aucun rapport au démarrage ni dans le dossier TDSS. En revanche je l'ai relancé et là plus rien de détecté ni par TDSS ni par RogueKiller.

    Voici le dernier rapport Roguekiller:
    RogueKiller V6.2.4 [12/01/2012] par Tigzy
    mail: tigzyRK<at>gmail<dot>com
    Remontees: https://www.luanagames.com/index.fr.html
    Blog: http://tigzyrk.blogspot.com

    Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
    Demarrage : Mode normal
    Utilisateur: Shirley [Droits d'admin]
    Mode: Suppression -- Date : 08/10/2011 13:29:10

    ¤¤¤ Processus malicieux: 0 ¤¤¤

    ¤¤¤ Entrees de registre: 0 ¤¤¤

    ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

    ¤¤¤ Driver: [NOT LOADED] ¤¤¤

    ¤¤¤ Infection : ¤¤¤

    ¤¤¤ Fichier HOSTS: ¤¤¤

    ¤¤¤ MBR Verif: ¤¤¤

    +++++ PhysicalDrive0: +++++
    --- User ---
    [MBR] 70b8551c3e7147591f2fc9d7b0887f19
    [BSP] 0996eabae41d36395bc9810ed3609b75 : Windows XP MBR Code
    Partition table:
    0 - [XXXXXX] NTFS [HIDDEN!] Offset (sectors): 2048 | Size: 19327 Mo
    1 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 37750784 | Size: 104 Mo
    2 - [XXXXXX] NTFS [VISIBLE] Offset (sectors): 37955584 | Size: 490110 Mo
    3 - [XXXXXX] NTFS [VISIBLE] Offset (sectors): 995203072 | Size: 490650 Mo
    User = LL1 ... OK!
    User = LL2 ... OK!

    Termine : << RKreport[2].txt >>
    RKreport[1].txt ; RKreport[2].txt

    Le problème est réglé ou je me fais des illusions ^^ ?

    En tout cas merci beaucoup!
    0
  4. Utilisateur anonyme
     
    Tdsskiller n'a rien trouvé ?

    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Furiss Messages postés 5 Statut Membre
     
    La première fois si j'ai eu un message demandant de reboot ce que j'ai fais et au redémarrage non il n'a plus rien trouvé.
    0
  7. Utilisateur anonyme
     
    envoie son premier rapport

    C:\TDSSKiller.N°
    0
  8. Furiss Messages postés 5 Statut Membre
     
    13:23:53.0711 1844 TDSS rootkit removing tool 2.7.44.0 Jul 2 2012 20:01:08
    13:23:53.0788 1844 ============================================================
    13:23:53.0788 1844 Current date / time: 2011/10/08 13:23:53.0788
    13:23:53.0788 1844 SystemInfo:
    13:23:53.0789 1844
    13:23:53.0789 1844 OS Version: 6.1.7601 ServicePack: 1.0
    13:23:53.0789 1844 Product type: Workstation
    13:23:53.0789 1844 ComputerName: SHIRLEYPC
    13:23:53.0789 1844 UserName: Shirley
    13:23:53.0789 1844 Windows directory: C:\Windows
    13:23:53.0789 1844 System windows directory: C:\Windows
    13:23:53.0789 1844 Running under WOW64
    13:23:53.0789 1844 Processor architecture: Intel x64
    13:23:53.0789 1844 Number of processors: 4
    13:23:53.0789 1844 Page size: 0x1000
    13:23:53.0789 1844 Boot type: Normal boot
    13:23:53.0789 1844 ============================================================
    13:23:54.0118 1844 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    13:23:54.0149 1844 ============================================================
    13:23:54.0149 1844 \Device\Harddisk0\DR0:
    13:23:54.0150 1844 MBR partitions:
    13:23:54.0150 1844 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x2400800, BlocksNum 0x32000
    13:23:54.0150 1844 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2432800, BlocksNum 0x390E7000
    13:23:54.0150 1844 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x3B519800, BlocksNum 0x391E85B0
    13:23:54.0150 1844 ============================================================
    13:23:54.0169 1844 C: <-> \Device\Harddisk0\DR0\Partition1
    13:23:54.0210 1844 D: <-> \Device\Harddisk0\DR0\Partition2
    13:23:54.0210 1844 ============================================================
    13:23:54.0210 1844 Initialize success
    13:23:54.0210 1844 ============================================================
    13:24:23.0555 4888 ============================================================
    13:24:23.0555 4888 Scan started
    13:24:23.0556 4888 Mode: Manual;
    13:24:23.0556 4888 ============================================================
    13:24:24.0294 4888 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
    13:24:24.0298 4888 1394ohci - ok
    13:24:24.0350 4888 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
    13:24:24.0354 4888 ACPI - ok
    13:24:24.0401 4888 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
    13:24:24.0402 4888 AcpiPmi - ok
    13:24:24.0499 4888 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    13:24:24.0500 4888 AdobeARMservice - ok
    13:24:24.0596 4888 AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    13:24:24.0598 4888 AdobeFlashPlayerUpdateSvc - ok
    13:24:24.0658 4888 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
    13:24:24.0664 4888 adp94xx - ok
    13:24:24.0699 4888 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
    13:24:24.0704 4888 adpahci - ok
    13:24:24.0729 4888 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
    13:24:24.0732 4888 adpu320 - ok
    13:24:24.0766 4888 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
    13:24:24.0768 4888 AeLookupSvc - ok
    13:24:24.0838 4888 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
    13:24:24.0844 4888 AFD - ok
    13:24:24.0877 4888 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
    13:24:24.0879 4888 agp440 - ok
    13:24:24.0897 4888 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
    13:24:24.0898 4888 ALG - ok
    13:24:24.0932 4888 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
    13:24:24.0933 4888 aliide - ok
    13:24:24.0970 4888 AMD External Events Utility (8f6c0ff277dbfe5ebed24e3543da7bfa) C:\Windows\system32\atiesrxx.exe
    13:24:24.0973 4888 AMD External Events Utility - ok
    13:24:25.0008 4888 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
    13:24:25.0009 4888 amdide - ok
    13:24:25.0039 4888 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
    13:24:25.0040 4888 AmdK8 - ok
    13:24:25.0456 4888 amdkmdag (9673319070166e26660eba4edf316fa2) C:\Windows\system32\DRIVERS\atipmdag.sys
    13:24:25.0515 4888 amdkmdag - ok
    13:24:25.0645 4888 amdkmdap (430d06d63952848e64cbbf23b5c1479e) C:\Windows\system32\DRIVERS\atikmpag.sys
    13:24:25.0649 4888 amdkmdap - ok
    13:24:25.0669 4888 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
    13:24:25.0671 4888 AmdPPM - ok
    13:24:25.0714 4888 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
    13:24:25.0716 4888 amdsata - ok
    13:24:25.0746 4888 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
    13:24:25.0749 4888 amdsbs - ok
    13:24:25.0765 4888 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
    13:24:25.0766 4888 amdxata - ok
    13:24:25.0803 4888 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
    13:24:25.0805 4888 AppID - ok
    13:24:25.0838 4888 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
    13:24:25.0838 4888 AppIDSvc - ok
    13:24:25.0873 4888 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
    13:24:25.0874 4888 Appinfo - ok
    13:24:25.0890 4888 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
    13:24:25.0892 4888 arc - ok
    13:24:25.0923 4888 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
    13:24:25.0926 4888 arcsas - ok
    13:24:26.0000 4888 aspnet_state (9217d874131ae6ff8f642f124f00a555) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
    13:24:26.0002 4888 aspnet_state - ok
    13:24:26.0019 4888 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
    13:24:26.0021 4888 AsyncMac - ok
    13:24:26.0060 4888 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
    13:24:26.0062 4888 atapi - ok
    13:24:26.0112 4888 AtiHdmiService (fb7602c5c508be281368aae0b61b51c6) C:\Windows\system32\drivers\AtiHdmi.sys
    13:24:26.0114 4888 AtiHdmiService - ok
    13:24:26.0189 4888 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
    13:24:26.0199 4888 AudioEndpointBuilder - ok
    13:24:26.0208 4888 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
    13:24:26.0215 4888 AudioSrv - ok
    13:24:26.0257 4888 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
    13:24:26.0259 4888 AxInstSV - ok
    13:24:26.0316 4888 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
    13:24:26.0322 4888 b06bdrv - ok
    13:24:26.0359 4888 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
    13:24:26.0363 4888 b57nd60a - ok
    13:24:26.0388 4888 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
    13:24:26.0390 4888 BDESVC - ok
    13:24:26.0412 4888 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
    13:24:26.0413 4888 Beep - ok
    13:24:26.0491 4888 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
    13:24:26.0501 4888 BFE - ok
    13:24:26.0577 4888 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
    13:24:26.0603 4888 BITS - ok
    13:24:26.0653 4888 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
    13:24:26.0655 4888 blbdrive - ok
    13:24:26.0688 4888 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
    13:24:26.0690 4888 bowser - ok
    13:24:26.0699 4888 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
    13:24:26.0701 4888 BrFiltLo - ok
    13:24:26.0708 4888 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
    13:24:26.0709 4888 BrFiltUp - ok
    13:24:26.0758 4888 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
    13:24:26.0761 4888 Browser - ok
    13:24:26.0791 4888 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
    13:24:26.0796 4888 Brserid - ok
    13:24:26.0815 4888 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
    13:24:26.0817 4888 BrSerWdm - ok
    13:24:26.0827 4888 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
    13:24:26.0828 4888 BrUsbMdm - ok
    13:24:26.0858 4888 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
    13:24:26.0859 4888 BrUsbSer - ok
    13:24:26.0873 4888 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
    13:24:26.0875 4888 BTHMODEM - ok
    13:24:26.0915 4888 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
    13:24:26.0917 4888 bthserv - ok
    13:24:26.0935 4888 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
    13:24:26.0937 4888 cdfs - ok
    13:24:26.0982 4888 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
    13:24:26.0985 4888 cdrom - ok
    13:24:27.0025 4888 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
    13:24:27.0026 4888 CertPropSvc - ok
    13:24:27.0040 4888 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
    13:24:27.0042 4888 circlass - ok
    13:24:27.0074 4888 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
    13:24:27.0077 4888 CLFS - ok
    13:24:27.0133 4888 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    13:24:27.0134 4888 clr_optimization_v2.0.50727_32 - ok
    13:24:27.0170 4888 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
    13:24:27.0172 4888 clr_optimization_v2.0.50727_64 - ok
    13:24:27.0230 4888 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    13:24:27.0233 4888 clr_optimization_v4.0.30319_32 - ok
    13:24:27.0259 4888 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    13:24:27.0274 4888 clr_optimization_v4.0.30319_64 - ok
    13:24:27.0305 4888 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
    13:24:27.0307 4888 CmBatt - ok
    13:24:27.0335 4888 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
    13:24:27.0337 4888 cmdide - ok
    13:24:27.0395 4888 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
    13:24:27.0401 4888 CNG - ok
    13:24:27.0410 4888 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
    13:24:27.0411 4888 Compbatt - ok
    13:24:27.0451 4888 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
    13:24:27.0453 4888 CompositeBus - ok
    13:24:27.0456 4888 COMSysApp - ok
    13:24:27.0471 4888 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
    13:24:27.0472 4888 crcdisk - ok
    13:24:27.0540 4888 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
    13:24:27.0544 4888 CryptSvc - ok
    13:24:27.0782 4888 cvhsvc (72794d112cbaff3bc0c29bf7350d4741) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
    13:24:27.0796 4888 cvhsvc - ok
    13:24:27.0866 4888 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
    13:24:27.0875 4888 DcomLaunch - ok
    13:24:27.0918 4888 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
    13:24:27.0923 4888 defragsvc - ok
    13:24:27.0977 4888 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
    13:24:27.0979 4888 DfsC - ok
    13:24:28.0017 4888 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
    13:24:28.0022 4888 Dhcp - ok
    13:24:28.0040 4888 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
    13:24:28.0042 4888 discache - ok
    13:24:28.0074 4888 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
    13:24:28.0076 4888 Disk - ok
    13:24:28.0116 4888 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
    13:24:28.0120 4888 Dnscache - ok
    13:24:28.0167 4888 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
    13:24:28.0172 4888 dot3svc - ok
    13:24:28.0195 4888 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
    13:24:28.0198 4888 DPS - ok
    13:24:28.0218 4888 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
    13:24:28.0219 4888 drmkaud - ok
    13:24:28.0308 4888 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
    13:24:28.0322 4888 DXGKrnl - ok
    13:24:28.0344 4888 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
    13:24:28.0347 4888 EapHost - ok
    13:24:28.0575 4888 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
    13:24:28.0608 4888 ebdrv - ok
    13:24:28.0721 4888 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
    13:24:28.0723 4888 EFS - ok
    13:24:28.0813 4888 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
    13:24:28.0822 4888 ehRecvr - ok
    13:24:28.0861 4888 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
    13:24:28.0863 4888 ehSched - ok
    13:24:28.0927 4888 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
    13:24:28.0935 4888 elxstor - ok
    13:24:28.0967 4888 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
    13:24:28.0968 4888 ErrDev - ok
    13:24:29.0014 4888 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
    13:24:29.0020 4888 EventSystem - ok
    13:24:29.0067 4888 ewusbnet (6bb25543428878bafbc2f8446343b160) C:\Windows\system32\DRIVERS\ewusbnet.sys
    13:24:29.0070 4888 ewusbnet - ok
    13:24:29.0111 4888 ew_hwusbdev (86f7951bbcee4a86e79a97306bd14318) C:\Windows\system32\DRIVERS\ew_hwusbdev.sys
    13:24:29.0113 4888 ew_hwusbdev - ok
    13:24:29.0141 4888 ew_usbenumfilter (55e0eda185869f7ea67ea97fd0655b39) C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys
    13:24:29.0142 4888 ew_usbenumfilter - ok
    13:24:29.0176 4888 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
    13:24:29.0179 4888 exfat - ok
    13:24:29.0208 4888 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
    13:24:29.0211 4888 fastfat - ok
    13:24:29.0286 4888 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
    13:24:29.0296 4888 Fax - ok
    13:24:29.0307 4888 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
    13:24:29.0308 4888 fdc - ok
    13:24:29.0330 4888 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
    13:24:29.0332 4888 fdPHost - ok
    13:24:29.0346 4888 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
    13:24:29.0348 4888 FDResPub - ok
    13:24:29.0365 4888 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
    13:24:29.0367 4888 FileInfo - ok
    13:24:29.0378 4888 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
    13:24:29.0379 4888 Filetrace - ok
    13:24:29.0395 4888 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
    13:24:29.0396 4888 flpydisk - ok
    13:24:29.0445 4888 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
    13:24:29.0450 4888 FltMgr - ok
    13:24:29.0537 4888 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
    13:24:29.0554 4888 FontCache - ok
    13:24:29.0633 4888 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    13:24:29.0635 4888 FontCache3.0.0.0 - ok
    13:24:29.0649 4888 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
    13:24:29.0651 4888 FsDepends - ok
    13:24:29.0689 4888 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
    13:24:29.0690 4888 Fs_Rec - ok
    13:24:29.0727 4888 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
    13:24:29.0730 4888 fvevol - ok
    13:24:29.0759 4888 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
    13:24:29.0761 4888 gagp30kx - ok
    13:24:29.0840 4888 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
    13:24:29.0852 4888 gpsvc - ok
    13:24:29.0970 4888 Greg_Service (816fd5a6f3c2f3d600900096632fc60e) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
    13:24:29.0986 4888 Greg_Service - ok
    13:24:30.0084 4888 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
    13:24:30.0091 4888 hcw85cir - ok
    13:24:30.0152 4888 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
    13:24:30.0158 4888 HdAudAddService - ok
    13:24:30.0207 4888 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
    13:24:30.0209 4888 HDAudBus - ok
    13:24:30.0225 4888 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
    13:24:30.0227 4888 HidBatt - ok
    13:24:30.0246 4888 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
    13:24:30.0248 4888 HidBth - ok
    13:24:30.0277 4888 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
    13:24:30.0279 4888 HidIr - ok
    13:24:30.0299 4888 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
    13:24:30.0301 4888 hidserv - ok
    13:24:30.0335 4888 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
    13:24:30.0337 4888 HidUsb - ok
    13:24:30.0370 4888 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
    13:24:30.0372 4888 hkmsvc - ok
    13:24:30.0416 4888 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
    13:24:30.0421 4888 HomeGroupListener - ok
    13:24:30.0462 4888 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
    13:24:30.0467 4888 HomeGroupProvider - ok
    13:24:30.0498 4888 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
    13:24:30.0500 4888 HpSAMD - ok
    13:24:30.0583 4888 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
    13:24:30.0594 4888 HTTP - ok
    13:24:30.0640 4888 hwdatacard (6e05228393cd614b983568ec40c262c3) C:\Windows\system32\DRIVERS\ewusbmdm.sys
    13:24:30.0643 4888 hwdatacard - ok
    13:24:30.0664 4888 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
    13:24:30.0665 4888 hwpolicy - ok
    13:24:30.0711 4888 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
    13:24:30.0713 4888 i8042prt - ok
    13:24:30.0772 4888 iaStor (631fa8935163b01fc0c02966cb3adb92) C:\Windows\system32\DRIVERS\iaStor.sys
    13:24:30.0778 4888 iaStor - ok
    13:24:30.0839 4888 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
    13:24:30.0845 4888 iaStorV - ok
    13:24:30.0950 4888 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
    13:24:30.0963 4888 idsvc - ok
    13:24:30.0993 4888 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
    13:24:30.0994 4888 iirsp - ok
    13:24:31.0081 4888 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
    13:24:31.0094 4888 IKEEXT - ok
    13:24:31.0261 4888 IntcAzAudAddService (dcf6afba140af3f880a427c2656be44d) C:\Windows\system32\drivers\RTKVHD64.sys
    13:24:31.0286 4888 IntcAzAudAddService - ok
    13:24:31.0407 4888 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
    13:24:31.0409 4888 intelide - ok
    13:24:31.0480 4888 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
    13:24:31.0481 4888 intelppm - ok
    13:24:31.0534 4888 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
    13:24:31.0537 4888 IPBusEnum - ok
    13:24:31.0573 4888 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    13:24:31.0574 4888 IpFilterDriver - ok
    13:24:31.0629 4888 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
    13:24:31.0638 4888 iphlpsvc - ok
    13:24:31.0671 4888 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
    13:24:31.0673 4888 IPMIDRV - ok
    13:24:31.0691 4888 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
    13:24:31.0693 4888 IPNAT - ok
    13:24:31.0707 4888 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
    13:24:31.0708 4888 IRENUM - ok
    13:24:31.0739 4888 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
    13:24:31.0740 4888 isapnp - ok
    13:24:31.0787 4888 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
    13:24:31.0792 4888 iScsiPrt - ok
    13:24:31.0822 4888 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
    13:24:31.0824 4888 kbdclass - ok
    13:24:31.0858 4888 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
    13:24:31.0859 4888 kbdhid - ok
    13:24:31.0895 4888 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
    13:24:31.0897 4888 KeyIso - ok
    13:24:31.0911 4888 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
    13:24:31.0913 4888 KSecDD - ok
    13:24:31.0932 4888 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
    13:24:31.0934 4888 KSecPkg - ok
    13:24:31.0957 4888 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
    13:24:31.0958 4888 ksthunk - ok
    13:24:32.0000 4888 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
    13:24:32.0007 4888 KtmRm - ok
    13:24:32.0050 4888 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
    13:24:32.0056 4888 LanmanServer - ok
    13:24:32.0088 4888 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
    13:24:32.0092 4888 LanmanWorkstation - ok
    13:24:32.0135 4888 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
    13:24:32.0136 4888 lltdio - ok
    13:24:32.0170 4888 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
    13:24:32.0176 4888 lltdsvc - ok
    13:24:32.0193 4888 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
    13:24:32.0195 4888 lmhosts - ok
    13:24:32.0227 4888 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
    13:24:32.0229 4888 LSI_FC - ok
    13:24:32.0251 4888 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
    13:24:32.0252 4888 LSI_SAS - ok
    13:24:32.0273 4888 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
    13:24:32.0275 4888 LSI_SAS2 - ok
    13:24:32.0295 4888 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
    13:24:32.0297 4888 LSI_SCSI - ok
    13:24:32.0322 4888 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
    13:24:32.0324 4888 luafv - ok
    13:24:32.0352 4888 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
    13:24:32.0355 4888 Mcx2Svc - ok
    13:24:32.0372 4888 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
    13:24:32.0373 4888 megasas - ok
    13:24:32.0403 4888 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
    13:24:32.0408 4888 MegaSR - ok
    13:24:32.0436 4888 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
    13:24:32.0439 4888 MMCSS - ok
    13:24:32.0452 4888 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
    13:24:32.0453 4888 Modem - ok
    13:24:32.0487 4888 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
    13:24:32.0488 4888 monitor - ok
    13:24:32.0536 4888 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys
    13:24:32.0538 4888 mouclass - ok
    13:24:32.0570 4888 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
    13:24:32.0572 4888 mouhid - ok
    13:24:32.0624 4888 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
    13:24:32.0626 4888 mountmgr - ok
    13:24:32.0712 4888 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    13:24:32.0714 4888 MozillaMaintenance - ok
    13:24:32.0747 4888 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
    13:24:32.0750 4888 mpio - ok
    13:24:32.0776 4888 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
    13:24:32.0778 4888 mpsdrv - ok
    13:24:32.0854 4888 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
    13:24:32.0866 4888 MpsSvc - ok
    13:24:32.0910 4888 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
    13:24:32.0912 4888 MRxDAV - ok
    13:24:32.0955 4888 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
    13:24:32.0958 4888 mrxsmb - ok
    13:24:33.0004 4888 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    13:24:33.0009 4888 mrxsmb10 - ok
    13:24:33.0026 4888 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    13:24:33.0029 4888 mrxsmb20 - ok
    13:24:33.0063 4888 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
    13:24:33.0064 4888 msahci - ok
    13:24:33.0103 4888 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
    13:24:33.0106 4888 msdsm - ok
    13:24:33.0135 4888 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
    13:24:33.0139 4888 MSDTC - ok
    13:24:33.0170 4888 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
    13:24:33.0172 4888 Msfs - ok
    13:24:33.0186 4888 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
    13:24:33.0187 4888 mshidkmdf - ok
    13:24:33.0212 4888 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
    13:24:33.0213 4888 msisadrv - ok
    13:24:33.0250 4888 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
    13:24:33.0254 4888 MSiSCSI - ok
    13:24:33.0257 4888 msiserver - ok
    13:24:33.0271 4888 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
    13:24:33.0272 4888 MSKSSRV - ok
    13:24:33.0279 4888 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
    13:24:33.0281 4888 MSPCLOCK - ok
    13:24:33.0292 4888 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
    13:24:33.0293 4888 MSPQM - ok
    13:24:33.0349 4888 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
    13:24:33.0354 4888 MsRPC - ok
    13:24:33.0367 4888 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
    13:24:33.0368 4888 mssmbios - ok
    13:24:33.0380 4888 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
    13:24:33.0381 4888 MSTEE - ok
    13:24:33.0396 4888 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
    13:24:33.0398 4888 MTConfig - ok
    13:24:33.0417 4888 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
    13:24:33.0419 4888 Mup - ok
    13:24:33.0465 4888 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
    13:24:33.0473 4888 napagent - ok
    13:24:33.0519 4888 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
    13:24:33.0523 4888 NativeWifiP - ok
    13:24:33.0710 4888 NAUpdate (934bb0d23a25c8c136570800a5a149b6) C:\Program Files (x86)\Nero\Update\NASvc.exe
    13:24:33.0721 4888 NAUpdate - ok
    13:24:33.0844 4888 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
    13:24:33.0857 4888 NDIS - ok
    13:24:33.0876 4888 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
    13:24:33.0877 4888 NdisCap - ok
    13:24:33.0897 4888 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
    13:24:33.0898 4888 NdisTapi - ok
    13:24:33.0927 4888 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
    13:24:33.0929 4888 Ndisuio - ok
    13:24:33.0962 4888 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
    13:24:33.0965 4888 NdisWan - ok
    13:24:33.0995 4888 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
    13:24:33.0997 4888 NDProxy - ok
    13:24:34.0129 4888 Nero BackItUp Scheduler 4.0 (7d2633295eb6ff2b938185874884059d) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
    13:24:34.0143 4888 Nero BackItUp Scheduler 4.0 - ok
    13:24:34.0155 4888 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
    13:24:34.0157 4888 NetBIOS - ok
    13:24:34.0203 4888 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
    13:24:34.0206 4888 NetBT - ok
    13:24:34.0245 4888 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
    13:24:34.0247 4888 Netlogon - ok
    13:24:34.0306 4888 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
    13:24:34.0313 4888 Netman - ok
    13:24:34.0388 4888 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    13:24:34.0392 4888 NetMsmqActivator - ok
    13:24:34.0396 4888 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    13:24:34.0398 4888 NetPipeActivator - ok
    13:24:34.0438 4888 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
    13:24:34.0445 4888 netprofm - ok
    13:24:34.0450 4888 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    13:24:34.0451 4888 NetTcpActivator - ok
    13:24:34.0455 4888 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
    13:24:34.0457 4888 NetTcpPortSharing - ok
    13:24:34.0494 4888 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
    13:24:34.0495 4888 nfrd960 - ok
    13:24:34.0557 4888 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
    13:24:34.0563 4888 NlaSvc - ok
    13:24:34.0581 4888 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
    13:24:34.0583 4888 Npfs - ok
    13:24:34.0606 4888 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
    13:24:34.0608 4888 nsi - ok
    13:24:34.0615 4888 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
    13:24:34.0616 4888 nsiproxy - ok
    13:24:34.0738 4888 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
    13:24:34.0757 4888 Ntfs - ok
    13:24:34.0848 4888 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
    13:24:34.0849 4888 Null - ok
    13:24:34.0900 4888 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
    13:24:34.0903 4888 nvraid - ok
    13:24:34.0920 4888 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
    13:24:34.0924 4888 nvstor - ok
    13:24:34.0969 4888 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
    13:24:34.0972 4888 nv_agp - ok
    13:24:35.0002 4888 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
    13:24:35.0004 4888 ohci1394 - ok
    13:24:35.0106 4888 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
    13:24:35.0109 4888 ose - ok
    13:24:35.0478 4888 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
    13:24:35.0541 4888 osppsvc - ok
    13:24:35.0658 4888 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
    13:24:35.0665 4888 p2pimsvc - ok
    13:24:35.0695 4888 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
    13:24:35.0703 4888 p2psvc - ok
    13:24:35.0737 4888 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
    13:24:35.0740 4888 Parport - ok
    13:24:35.0773 4888 partmgr (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys
    13:24:35.0775 4888 partmgr - ok
    13:24:35.0800 4888 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
    13:24:35.0805 4888 PcaSvc - ok
    13:24:35.0845 4888 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
    13:24:35.0848 4888 pci - ok
    13:24:35.0878 4888 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
    13:24:35.0880 4888 pciide - ok
    13:24:35.0908 4888 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
    13:24:35.0911 4888 pcmcia - ok
    13:24:35.0928 4888 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
    13:24:35.0929 4888 pcw - ok
    13:24:35.0983 4888 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
    13:24:35.0992 4888 PEAUTH - ok
    13:24:36.0067 4888 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
    13:24:36.0069 4888 PerfHost - ok
    13:24:36.0194 4888 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
    13:24:36.0216 4888 pla - ok
    13:24:36.0281 4888 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
    13:24:36.0289 4888 PlugPlay - ok
    13:24:36.0306 4888 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
    13:24:36.0309 4888 PNRPAutoReg - ok
    13:24:36.0343 4888 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
    13:24:36.0347 4888 PNRPsvc - ok
    13:24:36.0409 4888 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
    13:24:36.0417 4888 PolicyAgent - ok
    13:24:36.0454 4888 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
    13:24:36.0459 4888 Power - ok
    13:24:36.0527 4888 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
    13:24:36.0529 4888 PptpMiniport - ok
    13:24:36.0556 4888 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
    13:24:36.0558 4888 Processor - ok
    13:24:36.0586 4888 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
    13:24:36.0591 4888 ProfSvc - ok
    13:24:36.0620 4888 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
    13:24:36.0622 4888 ProtectedStorage - ok
    13:24:36.0667 4888 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
    13:24:36.0670 4888 Psched - ok
    13:24:36.0780 4888 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
    13:24:36.0799 4888 ql2300 - ok
    13:24:36.0909 4888 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
    13:24:36.0912 4888 ql40xx - ok
    13:24:36.0949 4888 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
    13:24:36.0954 4888 QWAVE - ok
    13:24:36.0965 4888 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
    13:24:36.0967 4888 QWAVEdrv - ok
    13:24:36.0979 4888 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
    13:24:36.0980 4888 RasAcd - ok
    13:24:37.0003 4888 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
    13:24:37.0005 4888 RasAgileVpn - ok
    13:24:37.0028 4888 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
    13:24:37.0031 4888 RasAuto - ok
    13:24:37.0075 4888 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
    13:24:37.0077 4888 Rasl2tp - ok
    13:24:37.0115 4888 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
    13:24:37.0122 4888 RasMan - ok
    13:24:37.0146 4888 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
    13:24:37.0148 4888 RasPppoe - ok
    13:24:37.0165 4888 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
    13:24:37.0167 4888 RasSstp - ok
    13:24:37.0220 4888 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
    13:24:37.0225 4888 rdbss - ok
    13:24:37.0240 4888 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
    13:24:37.0241 4888 rdpbus - ok
    13:24:37.0265 4888 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
    13:24:37.0266 4888 RDPCDD - ok
    13:24:37.0281 4888 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
    13:24:37.0282 4888 RDPENCDD - ok
    13:24:37.0297 4888 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
    13:24:37.0298 4888 RDPREFMP - ok
    13:24:37.0333 4888 RDPWD (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
    13:24:37.0336 4888 RDPWD - ok
    13:24:37.0386 4888 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
    13:24:37.0389 4888 rdyboost - ok
    13:24:37.0419 4888 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
    13:24:37.0421 4888 RemoteAccess - ok
    13:24:37.0437 4888 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
    13:24:37.0441 4888 RemoteRegistry - ok
    13:24:37.0517 4888 RichVideo (f12a68ed55053940cadd59ca5e3468dd) C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
    13:24:37.0521 4888 RichVideo - ok
    13:24:37.0539 4888 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
    13:24:37.0542 4888 RpcEptMapper - ok
    13:24:37.0554 4888 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
    13:24:37.0556 4888 RpcLocator - ok
    13:24:37.0628 4888 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
    13:24:37.0635 4888 RpcSs - ok
    13:24:37.0691 4888 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
    13:24:37.0693 4888 rspndr - ok
    13:24:37.0738 4888 RTL8167 (7ea8d2eb9bbfd2ab8a3117a1e96d3b3a) C:\Windows\system32\DRIVERS\Rt64win7.sys
    13:24:37.0743 4888 RTL8167 - ok
    13:24:37.0770 4888 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
    13:24:37.0771 4888 SamSs - ok
    13:24:37.0807 4888 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
    13:24:37.0809 4888 sbp2port - ok
    13:24:37.0841 4888 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
    13:24:37.0846 4888 SCardSvr - ok
    13:24:37.0878 4888 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
    13:24:37.0879 4888 scfilter - ok
    13:24:37.0976 4888 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
    13:24:37.0994 4888 Schedule - ok
    13:24:38.0025 4888 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
    13:24:38.0026 4888 SCPolicySvc - ok
    13:24:38.0052 4888 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
    13:24:38.0057 4888 SDRSVC - ok
    13:24:38.0110 4888 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
    13:24:38.0111 4888 secdrv - ok
    13:24:38.0141 4888 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
    13:24:38.0144 4888 seclogon - ok
    13:24:38.0174 4888 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
    13:24:38.0177 4888 SENS - ok
    13:24:38.0189 4888 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
    13:24:38.0192 4888 SensrSvc - ok
    13:24:38.0204 4888 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
    13:24:38.0205 4888 Serenum - ok
    13:24:38.0237 4888 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
    13:24:38.0240 4888 Serial - ok
    13:24:38.0283 4888 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
    13:24:38.0285 4888 sermouse - ok
    13:24:38.0325 4888 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
    13:24:38.0329 4888 SessionEnv - ok
    13:24:38.0367 4888 sfdrv01 (a48b9f81d3c2ba989ae2d566747b4623) C:\Windows\system32\drivers\sfdrv01.sys
    13:24:38.0369 4888 sfdrv01 - ok
    13:24:38.0394 4888 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
    13:24:38.0396 4888 sffdisk - ok
    13:24:38.0411 4888 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
    13:24:38.0412 4888 sffp_mmc - ok
    13:24:38.0429 4888 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
    13:24:38.0430 4888 sffp_sd - ok
    13:24:38.0445 4888 sfhlp02 (9e0ecda6c72c5d0d8cf3f0fba076422b) C:\Windows\system32\drivers\sfhlp02.sys
    13:24:38.0447 4888 sfhlp02 - ok
    13:24:38.0470 4888 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
    13:24:38.0471 4888 sfloppy - ok
    13:24:38.0560 4888 Sftfs (c6cc9297bd53e5229653303e556aa539) C:\Windows\system32\DRIVERS\Sftfslh.sys
    13:24:38.0572 4888 Sftfs - ok
    13:24:38.0678 4888 sftlist (13693b6354dd6e72dc5131da7d764b90) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
    13:24:38.0686 4888 sftlist - ok
    13:24:38.0714 4888 Sftplay (390aa7bc52cee43f6790cdea1e776703) C:\Windows\system32\DRIVERS\Sftplaylh.sys
    13:24:38.0719 4888 Sftplay - ok
    13:24:38.0729 4888 Sftredir (617e29a0b0a2807466560d4c4e338d3e) C:\Windows\system32\DRIVERS\Sftredirlh.sys
    13:24:38.0731 4888 Sftredir - ok
    13:24:38.0736 4888 Sftvol (8f571f016fa1976f445147e9e6c8ae9b) C:\Windows\system32\DRIVERS\Sftvollh.sys
    13:24:38.0737 4888 Sftvol - ok
    13:24:38.0758 4888 sftvsa (c3cddd18f43d44ab713cf8c4916f7696) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
    13:24:38.0761 4888 sftvsa - ok
    13:24:38.0801 4888 sfvfs02 (f65d13175ebf3fa49b1f7f948926a16e) C:\Windows\system32\drivers\sfvfs02.sys
    13:24:38.0802 4888 sfvfs02 - ok
    13:24:38.0851 4888 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
    13:24:38.0856 4888 SharedAccess - ok
    13:24:38.0904 4888 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
    13:24:38.0912 4888 ShellHWDetection - ok
    13:24:38.0948 4888 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
    13:24:38.0950 4888 SiSRaid2 - ok
    13:24:38.0961 4888 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
    13:24:38.0962 4888 SiSRaid4 - ok
    13:24:38.0987 4888 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
    13:24:38.0989 4888 Smb - ok
    13:24:39.0024 4888 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
    13:24:39.0027 4888 SNMPTRAP - ok
    13:24:39.0038 4888 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
    13:24:39.0039 4888 spldr - ok
    13:24:39.0105 4888 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
    13:24:39.0116 4888 Spooler - ok
    13:24:39.0361 4888 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
    13:24:39.0400 4888 sppsvc - ok
    13:24:39.0496 4888 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
    13:24:39.0500 4888 sppuinotify - ok
    13:24:39.0564 4888 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
    13:24:39.0573 4888 srv - ok
    13:24:39.0630 4888 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
    13:24:39.0637 4888 srv2 - ok
    13:24:39.0660 4888 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
    13:24:39.0664 4888 srvnet - ok
    13:24:39.0696 4888 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
    13:24:39.0701 4888 SSDPSRV - ok
    13:24:39.0714 4888 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
    13:24:39.0718 4888 SstpSvc - ok
    13:24:39.0775 4888 Steam Client Service - ok
    13:24:39.0801 4888 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
    13:24:39.0803 4888 stexstor - ok
    13:24:39.0875 4888 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
    13:24:39.0884 4888 stisvc - ok
    13:24:39.0915 4888 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
    13:24:39.0916 4888 swenum - ok
    13:24:39.0968 4888 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
    13:24:39.0975 4888 swprv - ok
    13:24:40.0116 4888 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
    13:24:40.0142 4888 SysMain - ok
    13:24:40.0252 4888 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
    13:24:40.0256 4888 TabletInputService - ok
    13:24:40.0289 4888 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
    13:24:40.0296 4888 TapiSrv - ok
    13:24:40.0322 4888 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
    13:24:40.0325 4888 TBS - ok
    13:24:40.0485 4888 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys
    13:24:40.0512 4888 Tcpip - ok
    13:24:40.0703 4888 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys
    13:24:40.0720 4888 TCPIP6 - ok
    13:24:40.0794 4888 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
    13:24:40.0795 4888 tcpipreg - ok
    13:24:40.0819 4888 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
    13:24:40.0821 4888 TDPIPE - ok
    13:24:40.0847 4888 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
    13:24:40.0849 4888 TDTCP - ok
    13:24:40.0881 4888 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
    13:24:40.0883 4888 tdx - ok
    13:24:40.0921 4888 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
    13:24:40.0923 4888 TermDD - ok
    13:24:40.0985 4888 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
    13:24:40.0996 4888 TermService - ok
    13:24:41.0022 4888 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
    13:24:41.0025 4888 Themes - ok
    13:24:41.0051 4888 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
    13:24:41.0053 4888 THREADORDER - ok
    13:24:41.0076 4888 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
    13:24:41.0080 4888 TrkWks - ok
    13:24:41.0139 4888 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
    13:24:41.0142 4888 TrustedInstaller - ok
    13:24:41.0174 4888 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
    13:24:41.0176 4888 tssecsrv - ok
    13:24:41.0225 4888 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
    13:24:41.0227 4888 TsUsbFlt - ok
    13:24:41.0280 4888 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
    13:24:41.0282 4888 tunnel - ok
    13:24:41.0305 4888 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
    13:24:41.0308 4888 uagp35 - ok
    13:24:41.0344 4888 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
    13:24:41.0349 4888 udfs - ok
    13:24:41.0373 4888 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
    13:24:41.0377 4888 UI0Detect - ok
    13:24:41.0419 4888 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
    13:24:41.0421 4888 uliagpkx - ok
    13:24:41.0456 4888 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
    13:24:41.0458 4888 umbus - ok
    13:24:41.0472 4888 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
    13:24:41.0473 4888 UmPass - ok
    13:24:41.0539 4888 Updater Service (f9ec9acd504d823d9b9ca98a4f8d3ca2) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
    13:24:41.0542 4888 Updater Service - ok
    13:24:41.0580 4888 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
    13:24:41.0587 4888 upnphost - ok
    13:24:41.0646 4888 usbaudio (82e8f44688e6fac57b5b7c6fc7adbc2a) C:\Windows\system32\drivers\usbaudio.sys
    13:24:41.0648 4888 usbaudio - ok
    13:24:41.0673 4888 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
    13:24:41.0675 4888 usbccgp - ok
    13:24:41.0698 4888 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
    13:24:41.0700 4888 usbcir - ok
    13:24:41.0735 4888 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
    13:24:41.0736 4888 usbehci - ok
    13:24:41.0767 4888 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
    13:24:41.0772 4888 usbhub - ok
    13:24:41.0803 4888 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
    13:24:41.0804 4888 usbohci - ok
    13:24:41.0827 4888 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
    13:24:41.0828 4888 usbprint - ok
    13:24:41.0885 4888 USBS3S4Detection (b5e6c4f280ebf0b16f74a5b415f2e0df) C:\OEM\USBDECTION\USBS3S4Detection.exe
    13:24:41.0887 4888 USBS3S4Detection - ok
    13:24:41.0914 4888 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
    13:24:41.0915 4888 usbscan - ok
    13:24:41.0936 4888 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    13:24:41.0938 4888 USBSTOR - ok
    13:24:41.0953 4888 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
    13:24:41.0954 4888 usbuhci - ok
    13:24:41.0980 4888 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
    13:24:41.0983 4888 UxSms - ok
    13:24:42.0011 4888 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
    13:24:42.0012 4888 VaultSvc - ok
    13:24:42.0051 4888 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
    13:24:42.0053 4888 vdrvroot - ok
    13:24:42.0111 4888 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
    13:24:42.0121 4888 vds - ok
    13:24:42.0143 4888 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
    13:24:42.0144 4888 vga - ok
    13:24:42.0157 4888 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
    13:24:42.0158 4888 VgaSave - ok
    13:24:42.0200 4888 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
    13:24:42.0204 4888 vhdmp - ok
    13:24:42.0230 4888 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
    13:24:42.0231 4888 viaide - ok
    13:24:42.0245 4888 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
    13:24:42.0247 4888 volmgr - ok
    13:24:42.0301 4888 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
    13:24:42.0307 4888 volmgrx - ok
    13:24:42.0360 4888 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
    13:24:42.0365 4888 volsnap - ok
    13:24:42.0403 4888 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
    13:24:42.0406 4888 vsmraid - ok
    13:24:42.0525 4888 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
    13:24:42.0549 4888 VSS - ok
    13:24:42.0639 4888 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
    13:24:42.0641 4888 vwifibus - ok
    13:24:42.0700 4888 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
    13:24:42.0707 4888 W32Time - ok
    13:24:42.0732 4888 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
    13:24:42.0734 4888 WacomPen - ok
    13:24:42.0783 4888 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
    13:24:42.0785 4888 WANARP - ok
    13:24:42.0789 4888 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
    13:24:42.0790 4888 Wanarpv6 - ok
    13:24:42.0916 4888 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
    13:24:42.0933 4888 WatAdminSvc - ok
    13:24:43.0053 4888 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
    13:24:43.0077 4888 wbengine - ok
    13:24:43.0191 4888 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
    13:24:43.0197 4888 WbioSrvc - ok
    13:24:43.0254 4888 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
    13:24:43.0262 4888 wcncsvc - ok
    13:24:43.0277 4888 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
    13:24:43.0281 4888 WcsPlugInService - ok
    13:24:43.0313 4888 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
    13:24:43.0314 4888 Wd - ok
    13:24:43.0373 4888 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
    13:24:43.0383 4888 Wdf01000 - ok
    13:24:43.0400 4888 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
    13:24:43.0404 4888 WdiServiceHost - ok
    13:24:43.0408 4888 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
    13:24:43.0411 4888 WdiSystemHost - ok
    13:24:43.0459 4888 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
    13:24:43.0466 4888 WebClient - ok
    13:24:43.0503 4888 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
    13:24:43.0509 4888 Wecsvc - ok
    13:24:43.0531 4888 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
    13:24:43.0535 4888 wercplsupport - ok
    13:24:43.0560 4888 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
    13:24:43.0564 4888 WerSvc - ok
    13:24:43.0636 4888 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
    13:24:43.0637 4888 WfpLwf - ok
    13:24:43.0648 4888 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
    13:24:43.0649 4888 WIMMount - ok
    13:24:43.0685 4888 WinDefend - ok
    13:24:43.0694 4888 WinHttpAutoProxySvc - ok
    13:24:43.0758 4888 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
    13:24:43.0762 4888 Winmgmt - ok
    13:24:43.0910 4888 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
    13:24:43.0939 4888 WinRM - ok
    13:24:44.0070 4888 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
    13:24:44.0072 4888 WinUsb - ok
    13:24:44.0150 4888 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
    13:24:44.0165 4888 Wlansvc - ok
    13:24:44.0373 4888 wlidsvc (98f138897ef4246381d197cb81846d62) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    13:24:44.0399 4888 wlidsvc - ok
    13:24:44.0519 4888 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
    13:24:44.0520 4888 WmiAcpi - ok
    13:24:44.0583 4888 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
    13:24:44.0586 4888 wmiApSrv - ok
    13:24:44.0626 4888 WMPNetworkSvc - ok
    13:24:44.0648 4888 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
    13:24:44.0651 4888 WPCSvc - ok
    13:24:44.0686 4888 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
    13:24:44.0690 4888 WPDBusEnum - ok
    13:24:44.0709 4888 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
    13:24:44.0710 4888 ws2ifsl - ok
    13:24:44.0733 4888 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
    13:24:44.0737 4888 wscsvc - ok
    13:24:44.0740 4888 WSearch - ok
    13:24:44.0909 4888 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll
    13:24:44.0946 4888 wuauserv - ok
    13:24:45.0057 4888 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
    13:24:45.0059 4888 WudfPf - ok
    13:24:45.0095 4888 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
    13:24:45.0099 4888 WUDFRd - ok
    13:24:45.0130 4888 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
    13:24:45.0133 4888 wudfsvc - ok
    13:24:45.0166 4888 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
    13:24:45.0178 4888 WwanSvc - ok
    13:24:45.0215 4888 MBR (0
    0
  9. Furiss Messages postés 5 Statut Membre
     
    ah bin je l'ai télécharger aujourdhui TDSS alors je comprends pas ^^ oki je vais suivre ton indication je poste ca en rentrant cette aprem merci en tout cas.
    0
  10. Utilisateur anonyme
     
    le rapport est trop long, il ne passera pas sur le forum,

    on verra la suite quand tu peux, @ ++

    0