Pubs intempestives

Résolu
Bonjour,

je prête régulièrement mon ordinateur à des collègues de boulot et ceux ci se sont amusé a allé sur des sites interdit aux moins de 18 ans (vive les jeunes hommes !!!)
depuis j'ai des publicités qui s'ouvrent régulièrement quand je suis sur internet
quelqu'un pourrait il m'aider a m'en débarrasser svp ??

merci d'avance pour votre aide

Lyly

25 réponses

Résumé de la discussion

Le message initial décrit des publicités persistantes après avoir laissé un ordinateur accessible, suspectant une infection et demandant comment s'en débarrasser, avec des détails sur Windows Vista et Firefox 15.0. D'autres contributions évoquent des outils et des rapports de détection, notamment RogueKiller et TDSS rootkit removing tool, qui montrent des éléments malveillants dans le système et des entrées de registre suspects. Une réponse résumée présente un rapport de scan et des indications sur des services et fichiers potentiellement infectés, tandis qu'une autre compile les résultats détaillés et les horodatages du diagnostic. D'autres indications portent sur des noms de pilotes et services courants et sur la présence de fichiers masqués, ce qui suggère une compromission système nécessitant une désinfection prudente.

Bobot (l’IA à votre service)
  1. Bonjour

    Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
    Lance le, clique sur [Suppression] puis patiente le temps du scan.
    Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=

    @+

    1. merci pour ta réponse.

      voilà le rapport :

      # AdwCleaner v2.000 - Rapport créé le 10/09/2012 à 12:47:43
      # Mis à jour le 30/08/2012 par Xplode
      # Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
      # Nom d'utilisateur : Didouille - PC-DE-DIDOUILLE
      # Mode de démarrage : Normal
      # Exécuté depuis : C:\Users\Didouille\Desktop\adwcleaner.exe
      # Option [Suppression]

      ***** [Services] *****

      ***** [Fichiers / Dossiers] *****

      Dossier Supprimé : C:\Program Files\OfferBox
      Dossier Supprimé : C:\Program Files\PriceGong
      Dossier Supprimé : C:\ProgramData\boost_interprocess
      Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
      Dossier Supprimé : C:\Users\Didouille\AppData\Local\Ilivid Player
      Dossier Supprimé : C:\Users\Didouille\AppData\Local\Linkury
      Dossier Supprimé : C:\Users\Didouille\AppData\LocalLow\BabylonToolbar
      Dossier Supprimé : C:\Users\Didouille\AppData\LocalLow\bbrs_002.tb
      Dossier Supprimé : C:\Users\Didouille\AppData\LocalLow\PriceGong
      Dossier Supprimé : C:\Users\Didouille\AppData\LocalLow\SweetIM
      Dossier Supprimé : C:\Users\Didouille\AppData\LocalLow\Vuze_Remote
      Dossier Supprimé : C:\Users\Didouille\AppData\Roaming\Mozilla\Firefox\Profiles\7mcpihb4.default\ConduitCommon
      Dossier Supprimé : C:\Users\Didouille\AppData\Roaming\Mozilla\Firefox\Profiles\7mcpihb4.default\extensions\bbrs_002@blabbers.com
      Dossier Supprimé : C:\Users\Didouille\AppData\Roaming\Mozilla\Firefox\Profiles\7mcpihb4.default\SweetIMToolbarData
      Dossier Supprimé : C:\Users\Didouille\AppData\Roaming\OfferBox
      Dossier Supprimé : C:\Users\Didouille\Documents\widestream
      Dossier Supprimé : C:\Windows\Installer\{5B58EF61-85F2-4977-97A5-84C19F926579}
      Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
      Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
      Fichier Supprimé : C:\user.js
      Supprimé au redémarrage : C:\Program Files\BrowserCompanion

      ***** [Registre] *****

      Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
      Clé Supprimée : HKCU\Software\BrowserCompanion
      Clé Supprimée : HKCU\Software\IGearSettings
      Clé Supprimée : HKCU\Software\ilivid
      Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Rechercher sur le Web
      Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
      Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
      Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5B58EF61-85F2-4977-97A5-84C19F926579}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserCompanion
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Moovida
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Offerbox
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PriceGong
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchTheWebARP
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2BEFBCCE-46A6-4950-BCB5-7062EAC6C9C9}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EC8FCB46-9F27-476E-B26A-93989316D2FB}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2BEFBCCE-46A6-4950-BCB5-7062EAC6C9C9}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EC8FCB46-9F27-476E-B26A-93989316D2FB}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35D-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0626A63-410B-45E2-99A1-3F2475B2D695}
      Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
      Clé Supprimée : HKCU\Software\Offerbox
      Clé Supprimée : HKLM\Software\BrowserCompanion
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\contenthandler.dll
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\PriceGongIE.DLL
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
      Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
      Clé Supprimée : HKLM\SOFTWARE\Classes\bho_project.bho_object
      Clé Supprimée : HKLM\SOFTWARE\Classes\bho_project.bho_object.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71}
      Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
      Clé Supprimée : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
      Clé Supprimée : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{45D59156-647B-4B06-B20E-0E297A1077BD}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BE990A32-C2EC-4654-8FD0-26FECEA81998}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Classes\playerplus
      Clé Supprimée : HKLM\SOFTWARE\Classes\PriceFactorIE.PriceGongBHO
      Clé Supprimée : HKLM\SOFTWARE\Classes\PriceFactorIE.PriceGongBHO.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\PriceGongIE.PriceGongCtrl
      Clé Supprimée : HKLM\SOFTWARE\Classes\PriceGongIE.PriceGongCtrl.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64
      Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome
      Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox
      Clé Supprimée : HKLM\SOFTWARE\Classes\tdataprotocol.CTData
      Clé Supprimée : HKLM\SOFTWARE\Classes\tdataprotocol.CTData.1
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8B3372D0-09F0-41A5-8D9B-134E148672FB}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}
      Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
      Clé Supprimée : HKLM\SOFTWARE\Classes\updatebho.TimerBHO
      Clé Supprimée : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1
      Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
      Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\kincjchfokkeneeofpeefomkikfkiedl
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5B58EF61-85F2-4977-97A5-84C19F926579}
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion
      Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PriceGong
      Clé Supprimée : HKLM\Software\Offerbox
      Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
      Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Browser companion helper]

      ***** [Navigateurs] *****

      -\\ Internet Explorer v8.0.6001.18943

      Restauré : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
      Restauré : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
      Restauré : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
      Restauré : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
      Restauré : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
      Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com/?crg=3.1010000.10015 --> hxxp://www.google.com
      Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com/?crg=3.1010000.10015 --> hxxp://www.google.com
      Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/home?af=18173&babsrc=nt_def --> hxxp://www.google.com

      -\\ Mozilla Firefox v15.0 (fr)

      Nom du profil : default
      Fichier : C:\Users\Didouille\AppData\Roaming\Mozilla\Firefox\Profiles\7mcpihb4.default\prefs.js

      C:\Users\Didouille\AppData\Roaming\Mozilla\Firefox\Profiles\7mcpihb4.default\user.js ... Supprimé !

      Supprimée : user_pref("CT2438727..clientLogIsEnabled", true);
      Supprimée : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
      Supprimée : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
      Supprimée : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
      Supprimée : user_pref("CT2438727.CTID", "CT2438727");
      Supprimée : user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
      Supprimée : user_pref("CT2438727.CurrentServerDate", "15-8-2011");
      Supprimée : user_pref("CT2438727.DialogsAlignMode", "LTR");
      Supprimée : user_pref("CT2438727.DialogsGetterLastCheckTime", "Mon Aug 15 2011 16:34:24 GMT+0200");
      Supprimée : user_pref("CT2438727.DownloadReferralCookieData", "");
      Supprimée : user_pref("CT2438727.FirstServerDate", "5-5-2010");
      Supprimée : user_pref("CT2438727.FirstTime", true);
      Supprimée : user_pref("CT2438727.FirstTimeFF3", true);
      Supprimée : user_pref("CT2438727.FirstTimeSettingsDone", true);
      Supprimée : user_pref("CT2438727.GroupingInvalidateCache", false);
      Supprimée : user_pref("CT2438727.GroupingLastCheckTime", "0");
      Supprimée : user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
      Supprimée : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
      Supprimée : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
      Supprimée : user_pref("CT2438727.HasUserGlobalKeys", true);
      Supprimée : user_pref("CT2438727.Initialize", true);
      Supprimée : user_pref("CT2438727.InitializeCommonPrefs", true);
      Supprimée : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
      Supprimée : user_pref("CT2438727.InstalledDate", "Wed May 05 2010 21:41:07 GMT+0200");
      Supprimée : user_pref("CT2438727.InvalidateCache", false);
      Supprimée : user_pref("CT2438727.IsAlertDBUpdated", true);
      Supprimée : user_pref("CT2438727.IsGrouping", false);
      Supprimée : user_pref("CT2438727.IsMulticommunity", false);
      Supprimée : user_pref("CT2438727.IsOpenThankYouPage", true);
      Supprimée : user_pref("CT2438727.IsOpenUninstallPage", true);
      Supprimée : user_pref("CT2438727.LanguagePackLastCheckTime", "Mon Aug 15 2011 16:34:24 GMT+0200");
      Supprimée : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
      Supprimée : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
      Supprimée : user_pref("CT2438727.LastLogin_2.5.8.6", "Tue Jul 20 2010 00:37:38 GMT+0200");
      Supprimée : user_pref("CT2438727.LastLogin_2.7.1.3", "Thu Sep 09 2010 17:39:37 GMT+0200");
      Supprimée : user_pref("CT2438727.LastLogin_3.5.0.12", "Mon Aug 15 2011 16:34:24 GMT+0200");
      Supprimée : user_pref("CT2438727.LatestVersion", "3.6.0.10");
      Supprimée : user_pref("CT2438727.Locale", "en");
      Supprimée : user_pref("CT2438727.LoginCache", 4);
      Supprimée : user_pref("CT2438727.MCDetectTooltipHeight", "83");
      Supprimée : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
      Supprimée : user_pref("CT2438727.MCDetectTooltipWidth", "295");
      Supprimée : user_pref("CT2438727.MyStuffEnabledAtInstallation", false);
      Supprimée : user_pref("CT2438727.RadioLastCheckTime", "0");
      Supprimée : user_pref("CT2438727.RadioLastUpdateIPServer", "0");
      Supprimée : user_pref("CT2438727.RadioLastUpdateServer", "0");
      Supprimée : user_pref("CT2438727.SHRINK_TOOLBAR", 1);
      Supprimée : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
      Supprimée : user_pref("CT2438727.SearchInNewTabEnabled", true);
      Supprimée : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
      Supprimée : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Mon Aug 15 2011 16:34:24 GMT+0200");
      Supprimée : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
      Supprimée : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
      Supprimée : user_pref("CT2438727.SearchProtectorToolbarDisabled", true);
      Supprimée : user_pref("CT2438727.ServiceMapLastCheckTime", "Mon Aug 15 2011 16:34:22 GMT+0200");
      Supprimée : user_pref("CT2438727.SettingsCheckIntervalMin", 120);
      Supprimée : user_pref("CT2438727.SettingsLastCheckTime", "Mon Aug 15 2011 16:34:23 GMT+0200");
      Supprimée : user_pref("CT2438727.SettingsLastUpdate", "1312887586");
      Supprimée : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
      Supprimée : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Mon Aug 15 2011 16:34:22 GMT+0200");
      Supprimée : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1278548974");
      Supprimée : user_pref("CT2438727.ToolbarDisabled", true);
      Supprimée : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
      Supprimée : user_pref("CT2438727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
      Supprimée : user_pref("CT2438727.UserID", "UN16979041532077588");
      Supprimée : user_pref("CT2438727.ValidationData_Search", 2);
      Supprimée : user_pref("CT2438727.ValidationData_Toolbar", 2);
      Supprimée : user_pref("CT2438727.alertChannelId", "832836");
      Supprimée : user_pref("CT2438727.clientLogIsEnabled", false);
      Supprimée : user_pref("CT2438727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
      Supprimée : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
      Supprimée : user_pref("CT2438727.globalFirstTimeInfoLastCheckTime", "Mon Aug 15 2011 16:34:24 GMT+0200");
      Supprimée : user_pref("CT2438727.homepageProtectorEnableByLogin", true);
      Supprimée : user_pref("CT2438727.initDone", true);
      Supprimée : user_pref("CT2438727.isAppTrackingManagerOn", true);
      Supprimée : user_pref("CT2438727.myStuffEnabled", true);
      Supprimée : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
      Supprimée : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
      Supprimée : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
      Supprimée : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
      Supprimée : user_pref("CT2438727.oldAppsList", "129017707048431316,129017707048587567,111,129509324767711885,129[...]
      Supprimée : user_pref("CT2438727.searchProtectorDialogDelayInSec", 10);
      Supprimée : user_pref("CT2438727.searchProtectorEnableByLogin", true);
      Supprimée : user_pref("CT2438727.testingCtid", "");
      Supprimée : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Mon Aug 15 2011 16:34:23 GMT+0200");
      Supprimée : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Mon Aug 15 2011 16:34:23 GMT+0200");
      Supprimée : user_pref("CT2438727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
      Supprimée : user_pref("CT2438727.usagesFlag", 2);
      Supprimée : user_pref("CT2504091..clientLogIsEnabled", true);
      Supprimée : user_pref("CT2504091..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
      Supprimée : user_pref("CT2504091..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
      Supprimée : user_pref("CT2504091.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
      Supprimée : user_pref("CT2504091.CTID", "CT2504091");
      Supprimée : user_pref("CT2504091.CurrentServerDate", "20-12-2010");
      Supprimée : user_pref("CT2504091.DialogsAlignMode", "LTR");
      Supprimée : user_pref("CT2504091.DownloadReferralCookieData", "");
      Supprimée : user_pref("CT2504091.EMailNotifierPollDate", "Mon Dec 20 2010 10:25:05 GMT+0100");
      Supprimée : user_pref("CT2504091.FeedLastCount129079840422964131", 10);
      Supprimée : user_pref("CT2504091.FeedPollDate128891351169457140", "Mon Dec 20 2010 10:19:56 GMT+0100");
      Supprimée : user_pref("CT2504091.FeedPollDate129079840422964131", "Mon Dec 20 2010 10:19:56 GMT+0100");
      Supprimée : user_pref("CT2504091.FeedTTL128891351169457140", 40);
      Supprimée : user_pref("CT2504091.FirstServerDate", "20-12-2010");
      Supprimée : user_pref("CT2504091.FirstTime", true);
      Supprimée : user_pref("CT2504091.FirstTimeFF3", true);
      Supprimée : user_pref("CT2504091.FixPageNotFoundErrors", true);
      Supprimée : user_pref("CT2504091.GroupingServerCheckInterval", 1440);
      Supprimée : user_pref("CT2504091.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
      Supprimée : user_pref("CT2504091.Initialize", true);
      Supprimée : user_pref("CT2504091.InitializeCommonPrefs", true);
      Supprimée : user_pref("CT2504091.InstallationAndCookieDataSentCount", 2);
      Supprimée : user_pref("CT2504091.InstallationType", "UnknownIntegration");
      Supprimée : user_pref("CT2504091.InstalledDate", "Mon Dec 20 2010 10:19:55 GMT+0100");
      Supprimée : user_pref("CT2504091.IsGrouping", false);
      Supprimée : user_pref("CT2504091.IsMulticommunity", false);
      Supprimée : user_pref("CT2504091.IsOpenThankYouPage", false);
      Supprimée : user_pref("CT2504091.IsOpenUninstallPage", false);
      Supprimée : user_pref("CT2504091.LanguagePackLastCheckTime", "Mon Dec 20 2010 10:19:56 GMT+0100");
      Supprimée : user_pref("CT2504091.LanguagePackReloadIntervalMM", 1440);
      Supprimée : user_pref("CT2504091.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
      Supprimée : user_pref("CT2504091.LastLogin_3.2.5.2", "Mon Dec 20 2010 10:19:57 GMT+0100");
      Supprimée : user_pref("CT2504091.LatestVersion", "2.6.0.14");
      Supprimée : user_pref("CT2504091.Locale", "en-us");
      Supprimée : user_pref("CT2504091.MCDetectTooltipHeight", "83");
      Supprimée : user_pref("CT2504091.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
      Supprimée : user_pref("CT2504091.MCDetectTooltipWidth", "295");
      Supprimée : user_pref("CT2504091.SearchFromAddressBarIsInit", true);
      Supprimée : user_pref("CT2504091.SearchInNewTabEnabled", true);
      Supprimée : user_pref("CT2504091.SearchInNewTabIntervalMM", 1440);
      Supprimée : user_pref("CT2504091.SearchInNewTabLastCheckTime", "Mon Dec 20 2010 10:19:56 GMT+0100");
      Supprimée : user_pref("CT2504091.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
      Supprimée : user_pref("CT2504091.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
      Supprimée : user_pref("CT2504091.ServiceMapLastCheckTime", "Mon Dec 20 2010 10:19:52 GMT+0100");
      Supprimée : user_pref("CT2504091.SettingsLastCheckTime", "Mon Dec 20 2010 10:19:52 GMT+0100");
      Supprimée : user_pref("CT2504091.SettingsLastUpdate", "1292441626");
      Supprimée : user_pref("CT2504091.ThirdPartyComponentsInterval", 504);
      Supprimée : user_pref("CT2504091.ThirdPartyComponentsLastCheck", "Mon Dec 20 2010 10:19:52 GMT+0100");
      Supprimée : user_pref("CT2504091.ThirdPartyComponentsLastUpdate", "1246790578");
      Supprimée : user_pref("CT2504091.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]
      Supprimée : user_pref("CT2504091.UserID", "UN15820215542021976");
      Supprimée : user_pref("CT2504091.alertChannelId", "897164");
      Supprimée : user_pref("CT2504091.myStuffEnabled", true);
      Supprimée : user_pref("CT2504091.myStuffPublihserMinWidth", 400);
      Supprimée : user_pref("CT2504091.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
      Supprimée : user_pref("CT2504091.myStuffServiceIntervalMM", 1440);
      Supprimée : user_pref("CT2504091.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
      Supprimée : user_pref("CT2504091.toolbarAppMetaDataLastCheckTime", "Mon Dec 20 2010 10:19:54 GMT+0100");
      Supprimée : user_pref("CT2504091.toolbarContextMenuLastCheckTime", "Mon Dec 20 2010 10:19:56 GMT+0100");
      Supprimée : user_pref("CT2644243..clientLogIsEnabled", false);
      Supprimée : user_pref("CT2644243..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
      Supprimée : user_pref("CT2644243..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
      Supprimée : user_pref("CT2644243.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
      Supprimée : user_pref("CT2644243.CTID", "CT2644243");
      Supprimée : user_pref("CT2644243.CurrentServerDate", "15-8-2011");
      Supprimée : user_pref("CT2644243.DialogsAlignMode", "LTR");
      Supprimée : user_pref("CT2644243.DialogsGetterLastCheckTime", "Mon Aug 15 2011 16:35:03 GMT+0200");
      Supprimée : user_pref("CT2644243.DownloadReferralCookieData", "");
      Supprimée : user_pref("CT2644243.EMailNotifierPollDate", "Mon Aug 15 2011 16:34:58 GMT+0200");
      Supprimée : user_pref("CT2644243.ExternalComponentPollDate129194282674469409", "Mon Aug 15 2011 16:34:58 GMT+020[...]
      Supprimée : user_pref("CT2644243.ExternalComponentPollDate129194282677438199", "Mon Aug 15 2011 16:34:58 GMT+020[...]
      Supprimée : user_pref("CT2644243.FirstServerDate", "8-11-2010");
      Supprimée : user_pref("CT2644243.FirstTime", true);
      Supprimée : user_pref("CT2644243.FirstTimeFF3", true);
      Supprimée : user_pref("CT2644243.FixPageNotFoundErrors", true);
      Supprimée : user_pref("CT2644243.GroupingServerCheckInterval", 1440);
      Supprimée : user_pref("CT2644243.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
      Supprimée : user_pref("CT2644243.HasUserGlobalKeys", true);
      Supprimée : user_pref("CT2644243.HomePageProtectorEnabled", false);
      Supprimée : user_pref("CT2644243.Initialize", true);
      Supprimée : user_pref("CT2644243.InitializeCommonPrefs", true);
      Supprimée : user_pref("CT2644243.InstallationAndCookieDataSentCount", 3);
      Supprimée : user_pref("CT2644243.InstalledDate", "Mon Nov 08 2010 12:41:16 GMT+0100");
      Supprimée : user_pref("CT2644243.InvalidateCache", false);
      Supprimée : user_pref("CT2644243.IsAlertDBUpdated", true);
      Supprimée : user_pref("CT2644243.IsGrouping", false);
      Supprimée : user_pref("CT2644243.IsMulticommunity", false);
      Supprimée : user_pref("CT2644243.IsOpenThankYouPage", true);
      Supprimée : user_pref("CT2644243.IsOpenUninstallPage", true);
      Supprimée : user_pref("CT2644243.LanguagePackLastCheckTime", "Mon Aug 15 2011 16:35:00 GMT+0200");
      Supprimée : user_pref("CT2644243.LanguagePackReloadIntervalMM", 1440);
      Supprimée : user_pref("CT2644243.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
      Supprimée : user_pref("CT2644243.LastLogin_3.2.3.3", "Mon Nov 08 2010 12:41:13 GMT+0100");
      Supprimée : user_pref("CT2644243.LastLogin_3.5.0.12", "Mon Aug 15 2011 16:35:00 GMT+0200");
      Supprimée : user_pref("CT2644243.LatestVersion", "3.6.0.10");
      Supprimée : user_pref("CT2644243.Locale", "en-us");
      Supprimée : user_pref("CT2644243.MCDetectTooltipHeight", "83");
      Supprimée : user_pref("CT2644243.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
      Supprimée : user_pref("CT2644243.MCDetectTooltipWidth", "295");
      Supprimée : user_pref("CT2644243.MyStuffEnabledAtInstallation", true);
      Supprimée : user_pref("CT2644243.RadioIsPodcast", false);
      Supprimée : user_pref("CT2644243.RadioLastCheckTime", "Mon Aug 15 2011 16:34:59 GMT+0200");
      Supprimée : user_pref("CT2644243.RadioLastUpdateIPServer", "3");
      Supprimée : user_pref("CT2644243.RadioLastUpdateServer", "3");
      Supprimée : user_pref("CT2644243.RadioMediaID", "9962");
      Supprimée : user_pref("CT2644243.RadioMediaType", "Media Player");
      Supprimée : user_pref("CT2644243.RadioMenuSelectedID", "EBRadioMenu_CT26442439962");
      Supprimée : user_pref("CT2644243.RadioShrinkedFromSetup", false);
      Supprimée : user_pref("CT2644243.RadioStationName", "California%20Rock");
      Supprimée : user_pref("CT2644243.RadioStationURL", "hxxp://feedlive.net/california.asx");
      Supprimée : user_pref("CT2644243.SavedHomepage", "hxxp://www.google.fr/ig?hl=fr");
      Supprimée : user_pref("CT2644243.SearchEngineBeforeUnload", "Google");
      Supprimée : user_pref("CT2644243.SearchFromAddressBarIsInit", true);
      Supprimée : user_pref("CT2644243.SearchInNewTabEnabled", true);
      Supprimée : user_pref("CT2644243.SearchInNewTabIntervalMM", 1440);
      Supprimée : user_pref("CT2644243.SearchInNewTabLastCheckTime", "Mon Aug 15 2011 16:35:00 GMT+0200");
      Supprimée : user_pref("CT2644243.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
      Supprimée : user_pref("CT2644243.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
      Supprimée : user_pref("CT2644243.SearchProtectorEnabled", false);
      Supprimée : user_pref("CT2644243.SearchProtectorToolbarDisabled", true);
      Supprimée : user_pref("CT2644243.ServiceMapLastCheckTime", "Mon Aug 15 2011 16:34:59 GMT+0200");
      Supprimée : user_pref("CT2644243.SettingsLastCheckTime", "Mon Aug 15 2011 16:34:58 GMT+0200");
      Supprimée : user_pref("CT2644243.SettingsLastUpdate", "1312887586");
      Supprimée : user_pref("CT2644243.ThirdPartyComponentsInterval", 504);
      Supprimée : user_pref("CT2644243.ThirdPartyComponentsLastCheck", "Mon Aug 15 2011 16:34:58 GMT+0200");
      Supprimée : user_pref("CT2644243.ThirdPartyComponentsLastUpdate", "1246790578");
      Supprimée : user_pref("CT2644243.ToolbarDisabled", true);
      Supprimée : user_pref("CT2644243.ToolbarShrinkedFromSetup", false);
      Supprimée : user_pref("CT2644243.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2644243");
      Supprimée : user_pref("CT2644243.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
      Supprimée : user_pref("CT2644243.UserID", "UN65872595540801248");
      Supprimée : user_pref("CT2644243.WeatherNetwork", "");
      Supprimée : user_pref("CT2644243.WeatherPollDate", "Mon Aug 15 2011 16:35:00 GMT+0200");
      Supprimée : user_pref("CT2644243.WeatherUnit", "C");
      Supprimée : user_pref("CT2644243.alertChannelId", "1036928");
      Supprimée : user_pref("CT2644243.components.1000034", true);
      Supprimée : user_pref("CT2644243.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
      Supprimée : user_pref("CT2644243.globalFirstTimeInfoLastCheckTime", "Mon Aug 15 2011 16:35:01 GMT+0200");
      Supprimée : user_pref("CT2644243.homepageProtectorEnableByLogin", true);
      Supprimée : user_pref("CT2644243.initDone", true);
      Supprimée : user_pref("CT2644243.isAppTrackingManagerOn", true);
      Supprimée : user_pref("CT2644243.isFirstRadioInstallation", false);
      Supprimée : user_pref("CT2644243.myStuffEnabled", true);
      Supprimée : user_pref("CT2644243.myStuffPublihserMinWidth", 400);
      Supprimée : user_pref("CT2644243.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
      Supprimée : user_pref("CT2644243.myStuffServiceIntervalMM", 1440);
      Supprimée : user_pref("CT2644243.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
      Supprimée : user_pref("CT2644243.oldAppsList", "129194282673219393,129194282674469408,111,129194282677906952,129[...]
      Supprimée : user_pref("CT2644243.searchProtectorDialogDelayInSec", 10);
      Supprimée : user_pref("CT2644243.searchProtectorEnableByLogin", true);
      Supprimée : user_pref("CT2644243.testingCtid", "");
      Supprimée : user_pref("CT2644243.toolbarAppMetaDataLastCheckTime", "Mon Aug 15 2011 16:35:00 GMT+0200");
      Supprimée : user_pref("CT2644243.toolbarContextMenuLastCheckTime", "Mon Aug 15 2011 16:35:01 GMT+0200");
      Supprimée : user_pref("CT2719315.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
      Supprimée : user_pref("CT2719315.CTID", "CT2719315");
      Supprimée : user_pref("CT2719315.CurrentServerDate", "6-8-2010");
      Supprimée : user_pref("CT2719315.DialogsAlignMode", "LTR");
      Supprimée : user_pref("CT2719315.DownloadReferralCookieData", "");
      Supprimée : user_pref("CT2719315.EMailNotifierPollDate", "Fri Aug 06 2010 00:31:37 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedLastCount7879374716708981574", 322);
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884536", "Fri Aug 06 2010 00:31:37 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884542", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884548", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884554", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884560", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884566", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884572", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884578", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884584", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884590", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884596", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884602", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884608", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884614", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884620", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884626", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884632", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884638", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884644", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884650", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedPollDate129255209982884656", "Fri Aug 06 2010 00:31:40 GMT+0200");
      Supprimée : user_pref("CT2719315.FeedTTL129255209982884536", 30);
      Supprimée : user_pref("CT2719315.FeedTTL129255209982884542", 2);
      Supprimée : user_pref("CT2719315.FeedTTL129255209982884548", 2);
      Supprimée : user_pref("CT2719315.FeedTTL129255209982884560", 2);
      Supprimée : user_pref("CT2719315.FeedTTL129255209982884566", 30);
      Supprimée : user_pref("CT2719315.FeedTTL129255209982884584", 5);
      Supprimée : user_pref("CT2719315.FeedTTL129255209982884590", 5);
      Supprimée : user_pref("CT2719315.FeedTTL129255209982884596", 5);
      Supprimée : user_pref("CT2719315.FeedTTL129255209982884614", 5);
      Supprimée : user_pref("CT2719315.FirstServerDate", "6-8-2010");
      Supprimée : user_pref("CT2719315.FirstTime", true);
      Supprimée : user_pref("CT2719315.FirstTimeFF3", true);
      Supprimée : user_pref("CT2719315.FirstTimeSettingsDone", true);
      Supprimée : user_pref("CT2719315.FixPageNotFoundErrors", true);
      Supprimée : user_pref("CT2719315.GroupingServerCheckInterval", 1440);
      Supprimée : user_pref("CT2719315.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
      Supprimée : user_pref("CT2719315.Initialize", true);
      Supprimée : user_pref("CT2719315.InitializeCommonPrefs", true);
      Supprimée : user_pref("CT2719315.InstallationAndCookieDataSentCount", 1);
      Supprimée : user_pref("CT2719315.InstallationType", "UnknownIntegration");
      Supprimée : user_pref("CT2719315.InstalledDate", "Fri Aug 06 2010 00:31:37 GMT+0200");
      Supprimée : user_pref("CT2719315.InvalidateCache", false);
      Supprimée : user_pref("CT2719315.IsGrouping", false);
      Supprimée : user_pref("CT2719315.IsMulticommunity", false);
      Supprimée : user_pref("CT2719315.IsOpenThankYouPage", false);
      Supprimée : user_pref("CT2719315.IsOpenUninstallPage", true);
      Supprimée : user_pref("CT2719315.LanguagePackLastCheckTime", "Fri Aug 06 2010 00:31:40 GMT+0200");
      Supprimée : user_pref("CT2719315.LanguagePackReloadIntervalMM", 1440);
      Supprimée : user_pref("CT2719315.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
      Supprimée : user_pref("CT2719315.LastLogin_2.7.1.3", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.LatestVersion", "2.1.0.18");
      Supprimée : user_pref("CT2719315.Locale", "fr-fr");
      Supprimée : user_pref("CT2719315.LoginCache", 4);
      Supprimée : user_pref("CT2719315.MCDetectTooltipHeight", "83");
      Supprimée : user_pref("CT2719315.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
      Supprimée : user_pref("CT2719315.MCDetectTooltipWidth", "295");
      Supprimée : user_pref("CT2719315.RadioIsPodcast", false);
      Supprimée : user_pref("CT2719315.RadioLastCheckTime", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.RadioLastUpdateIPServer", "3");
      Supprimée : user_pref("CT2719315.RadioLastUpdateServer", "129246190754030000");
      Supprimée : user_pref("CT2719315.RadioMediaID", "21057007");
      Supprimée : user_pref("CT2719315.RadioMediaType", "Media Player");
      Supprimée : user_pref("CT2719315.RadioMenuSelectedID", "EBRadioMenu_CT271931521057007");
      Supprimée : user_pref("CT2719315.RadioStationName", "france%2024");
      Supprimée : user_pref("CT2719315.RadioStationURL", "hxxp://stream1.france24.yacast.net/f24_livefrda");
      Supprimée : user_pref("CT2719315.SearchFromAddressBarIsInit", true);
      Supprimée : user_pref("CT2719315.SearchInNewTabEnabled", true);
      Supprimée : user_pref("CT2719315.SearchInNewTabIntervalMM", 1440);
      Supprimée : user_pref("CT2719315.SearchInNewTabLastCheckTime", "Fri Aug 06 2010 00:31:39 GMT+0200");
      Supprimée : user_pref("CT2719315.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
      Supprimée : user_pref("CT2719315.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
      Supprimée : user_pref("CT2719315.SearchProtectorToolbarDisabled", true);
      Supprimée : user_pref("CT2719315.SettingsCheckIntervalMin", 120);
      Supprimée : user_pref("CT2719315.SettingsLastCheckTime", "Fri Aug 06 2010 00:31:35 GMT+0200");
      Supprimée : user_pref("CT2719315.SettingsLastUpdate", "1281047383");
      Supprimée : user_pref("CT2719315.ThirdPartyComponentsInterval", 504);
      Supprimée : user_pref("CT2719315.ThirdPartyComponentsLastCheck", "Fri Aug 06 2010 00:31:35 GMT+0200");
      Supprimée : user_pref("CT2719315.ThirdPartyComponentsLastUpdate", "1255348267");
      Supprimée : user_pref("CT2719315.ToolbarDisabled", true);
      Supprimée : user_pref("CT2719315.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]
      Supprimée : user_pref("CT2719315.UserID", "UN00239940526868798");
      Supprimée : user_pref("CT2719315.WeatherNetwork", "");
      Supprimée : user_pref("CT2719315.WeatherPollDate", "Fri Aug 06 2010 00:31:38 GMT+0200");
      Supprimée : user_pref("CT2719315.WeatherUnit", "C");
      Supprimée : user_pref("CT2719315.alertChannelId", "1111600");
      Supprimée : user_pref("CT2719315.backendstorage.hxxp://cmg1_conduit-widgets_com/miniquarium.miniquarium_closed",[...]
      Supprimée : user_pref("CT2719315.clientLogIsEnabled", true);
      Supprimée : user_pref("CT2719315.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
      Supprimée : user_pref("CT2719315.myStuffEnabled", true);
      Supprimée : user_pref("CT2719315.myStuffPublihserMinWidth", 400);
      Supprimée : user_pref("CT2719315.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
      Supprimée : user_pref("CT2719315.myStuffServiceIntervalMM", 1440);
      Supprimée : user_pref("CT2719315.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
      Supprimée : user_pref("CT2719315.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1036928/1032639/FR", "\"0\"[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", [...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2644243", [...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727",[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2644243",[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438727&octid=[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2644243&octid=[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/6340477175123412[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/6340477178459350[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/Blank.png", "\"2[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/equalize[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/minimize[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/play.gif[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/stop.gif[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/vol.gif"[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/images/skins/zynga/seperator.gif", "\"46[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]
      Supprimée : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"[...]
      Supprimée : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Didouille\\AppData\\Roaming\\Mozill[...]
      Supprimée : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.5.0.12");
      Supprimée : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Mon Aug 15 2011 16:35:01 GMT+0200");
      Supprimée : user_pref("CommunityToolbar.globalUserId", "5a5cb1a2-2fa2-4d48-bc25-3cab0ccf2dd3");
      Supprimée : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
      Supprimée : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
      Supprimée : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Mon Aug 15 2011 16:34:2[...]
      Supprimée : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
      Supprimée : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Mon Aug 15 2011 16:35:00 GMT+020[...]
      Supprimée : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
      Supprimée : user_pref("CommunityToolbar.notifications.locale", "en");
      Supprimée : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
      Supprimée : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Mon Aug 15 2011 16:34:23 GMT+0200");
      Supprimée : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1305622559");
      Supprimée : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
      Supprimée : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
      Supprimée : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
      Supprimée : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
      Supprimée : user_pref("CommunityToolbar.notifications.userId", "edc64aa6-bd36-432e-b8aa-957bd76563ca");
      Supprimée : user_pref("browser.babylon.HPOnNewTab,s", "search.babylon.com");
      Supprimée : user_pref("browser.search.defaultengine", "Ask.com");
      Supprimée : user_pref("browser.search.defaultenginename", "AVG Secure Search");
      Supprimée : user_pref("browser.search.defaultenginename,S", "Search the web (Babylon)");
      Supprimée : user_pref("browser.search.defaultthis.engineName", "Oryte Games 1.15 Customized Web Search");
      Supprimée : user_pref("browser.search.order.1", "Ask.com");
      Supprimée : user_pref("browser.search.order.1,S", "Search the web (Babylon)");
      Supprimée : user_pref("browser.search.selectedEngine,S", "Search the web (Babylon)");
      Supprimée : user_pref("browser.startup.homepage,h", "h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h,h[...]
      Supprimée : user_pref("extensions.BabylonToolbar.admin", false);
      Supprimée : user_pref("extensions.BabylonToolbar.aflt", "babclient");
      Supprimée : user_pref("extensions.BabylonToolbar.babExt", "");
      Supprimée : user_pref("extensions.BabylonToolbar.babTrack", "affID=18173");
      Supprimée : user_pref("extensions.BabylonToolbar.bbDpng", 26);
      Supprimée : user_pref("extensions.BabylonToolbar.cntry", "FR");
      Supprimée : user_pref("extensions.BabylonToolbar.dfltSrch", false);
      Supprimée : user_pref("extensions.BabylonToolbar.firstRun", false);
      Supprimée : user_pref("extensions.BabylonToolbar.hdrMd5", "233A470037A9A5DCB4F5B89E1A567ADD");
      Supprimée : user_pref("extensions.BabylonToolbar.hmpg", false);
      Supprimée : user_pref("extensions.BabylonToolbar.id", "de29e48000000000000000215d78f69e");
      Supprimée : user_pref("extensions.BabylonToolbar.instlDay", "15362");
      Supprimée : user_pref("extensions.BabylonToolbar.instlRef", "std");
      Supprimée : user_pref("extensions.BabylonToolbar.lastActv", "21");
      Supprimée : user_pref("extensions.BabylonToolbar.lastDP", 26);
      Supprimée : user_pref("extensions.BabylonToolbar.lastVrsn", "1.1.5");
      Supprimée : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1723:38:35");
      Supprimée : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "9.0");
      Supprimée : user_pref("extensions.BabylonToolbar.newTab", true);
      Supprimée : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_FFUP");
      Supprimée : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
      Supprimée : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
      Supprimée : user_pref("extensions.BabylonToolbar.propectorlck", 66092422);
      Supprimée : user_pref("extensions.BabylonToolbar.prtkDS", 0);
      Supprimée : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
      Supprimée : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
      Supprimée : user_pref("extensions.BabylonToolbar.ptch_0717", true);
      Supprimée : user_pref("extensions.BabylonToolbar.smplGrp", "none");
      Supprimée : user_pref("extensions.BabylonToolbar.srcExt", "def");
      Supprimée : user_pref("extensions.BabylonToolbar.tlbrId", "base");
      Supprimée : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
      Supprimée : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1723:38:35");
      Supprimée : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
      Supprimée : user_pref("extensions.BabylonToolbar_i.aflt", "babclient");
      Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");
      Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=18173");
      Supprimée : user_pref("extensions.BabylonToolbar_i.hardId", "de29e48000000000000000215d78f69e");
      Supprimée : user_pref("extensions.BabylonToolbar_i.id", "de29e48000000000000000215d78f69e");
      Supprimée : user_pref("extensions.BabylonToolbar_i.instlDay", "15362");
      Supprimée : user_pref("extensions.BabylonToolbar_i.instlRef", "std");
      Supprimée : user_pref("extensions.BabylonToolbar_i.newTab,t", "t,t,t,t,t,true");
      Supprimée : user_pref("extensions.BabylonToolbar_i.newTabUrl,h", "hxxp://search.babylon.com/?AF=18173&babsrc=NT_[...]
      Supprimée : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
      Supprimée : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
      Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
      Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "def");
      Supprimée : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
      Supprimée : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
      Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1723:38:35");
      Supprimée : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
      Supprimée : user_pref("extensions.foxlingo.addit.defaultAddons", "{ \"software\": {\"20\": {\"id\": \"20\",\"tit[...]
      Supprimée : user_pref("keyword.URL", "hxxp://isearch.avg.com/search?cid=%7Bd1948235-2560-4573-b48b-e05a1ba78aed%[...]
      Supprimée : user_pref("keyword.URL,h", "hxxp://search.babylon.com/?babsrc=KW_def&AF=18173&q=");
      Supprimée : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
      Supprimée : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
      Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
      Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
      Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
      Supprimée : user_pref("sweetim.toolbar.mode.debug", "false");
      Supprimée : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
      Supprimée : user_pref("sweetim.toolbar.search.history.capacity", "10");
      Supprimée : user_pref("sweetim.toolbar.simapp_id", "{46CD3D06-77C2-4CA6-8E8D-11DE9ADCB0F6}");
      Supprimée : user_pref("sweetim.toolbar.version", "1.0.0.10");

      -\\ Opera v [Impossible d'obtenir la version]

      Fichier : C:\Users\Didouille\AppData\Roaming\Opera\Opera\operaprefs.ini

      [OK] Le fichier ne contient aucune entrée illégitime.

      *************************

      AdwCleaner[S1].txt - [50925 octets] - [10/09/2012 12:47:43]

      ########## EOF - C:\AdwCleaner[S1].txt - [50986 octets] ##########
      1. Re

        Télécharge Malwaresbytes anti malware ici
        http://www.malwarebytes.org/mbam.php

        Bouton »Download free version »

        * Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

        * Potasse le tuto pour te familiariser avec le prg :

        https://forum.pcastuces.com/sujet.asp?f=31&s=3

        (cela dis, il est très simple d'utilisation).

        relance Malwaresbytes en suivant scrupuleusement ces consignes :

        ! Déconnecte toi et ferme toutes applications en cours !

        * Lance Malwarebyte's. Sous Vista et Seven (clic droit de la souris « exécuter en tant que administrateur »)

        *Procèdes à une mise à jour

        *Fais un examen dit "Complet"

        --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
        --> à la fin tu cliques sur "Afficher les résultats" " .
        --> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .

        Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

        Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

        @+

        1. Malwarebytes Anti-Malware (Essai) 1.62.0.1300
          www.malwarebytes.org

          Version de la base de données: v2012.09.10.03

          Windows Vista Service Pack 2 x86 NTFS
          Internet Explorer 8.0.6001.18943
          Didouille :: PC-DE-DIDOUILLE [administrateur]

          Protection: Activé

          10/09/2012 13:06:19
          mbam-log-2012-09-10 (13-06-19).txt

          Type d'examen: Examen complet (C:\|D:\|E:\|)
          Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
          Options d'examen désactivées: P2P
          Elément(s) analysé(s): 423998
          Temps écoulé: 2 heure(s), 42 minute(s), 7 seconde(s)

          Processus mémoire détecté(s): 0
          (Aucun élément nuisible détecté)

          Module(s) mémoire détecté(s): 0
          (Aucun élément nuisible détecté)

          Clé(s) du Registre détectée(s): 2
          HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Mis en quarantaine et supprimé avec succès.
          HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\vfd-apl (Rootkit.Agent) -> Mis en quarantaine et supprimé avec succès.

          Valeur(s) du Registre détectée(s): 0
          (Aucun élément nuisible détecté)

          Elément(s) de données du Registre détecté(s): 0
          (Aucun élément nuisible détecté)

          Dossier(s) détecté(s): 0
          (Aucun élément nuisible détecté)

          Fichier(s) détecté(s): 2
          C:\Program Files\OApps\vfd-apl_uninstall.exe (Rootkit.Agent) -> Mis en quarantaine et supprimé avec succès.
          C:\Users\Didouille\Downloads\Tunebite.exe (PUP.AdBundler) -> Mis en quarantaine et supprimé avec succès.

          (fin)
          1. Re

            Télécharge TDSSKiller

            *Créez un nouveau dossier sur votre bureau puis décompressez l'archive dedans
            * Lancez le programme en cliquant sur TDSSKiller.exe, l'analyse se fait automatiquement, si l'infection est détectée, des éléments cachés (= hidden) seront alors affichés.

            Si TDSS.tdl2 est détecté: l'option delete sera cochée par défaut.
            Si TDSS.tdl3 est détecté: assure toi que Cure est bien cochée.
            Si TDSS.tdl4(\HardDisk0\MBR) est détecté: assure toi que Cure est bien cochée.
            Si Rootkit.Win32.ZAccess.* est détecté : règle sur "cure" en haut , et "delete" en bas
            Si Suspicious file est indiqué, laisse l''option cochée sur Skip
            une fois qu'il a terminé , redémarre s'il te le demande pour finir de nettoyer

            sinon , ferme TDSSKiller et le rapport s'affichera sur le bureau

            Sinon il est enregistré ici : C:\TDSSKiller_N°Version_Date_Heure.txt

            Poste moi son rapport à l'issue; merci

            @+
            1. voila le rapport

              16:16:04.0564 1232 TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
              16:16:04.0776 1232 ============================================================
              16:16:04.0776 1232 Current date / time: 2012/09/10 16:16:04.0776
              16:16:04.0776 1232 SystemInfo:
              16:16:04.0776 1232
              16:16:04.0776 1232 OS Version: 6.0.6002 ServicePack: 2.0
              16:16:04.0776 1232 Product type: Workstation
              16:16:04.0776 1232 ComputerName: PC-DE-DIDOUILLE
              16:16:04.0777 1232 UserName: Didouille
              16:16:04.0777 1232 Windows directory: C:\Windows
              16:16:04.0777 1232 System windows directory: C:\Windows
              16:16:04.0777 1232 Processor architecture: Intel x86
              16:16:04.0777 1232 Number of processors: 2
              16:16:04.0777 1232 Page size: 0x1000
              16:16:04.0777 1232 Boot type: Normal boot
              16:16:04.0777 1232 ============================================================
              16:16:05.0459 1232 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
              16:16:05.0462 1232 ============================================================
              16:16:05.0462 1232 \Device\Harddisk0\DR0:
              16:16:05.0462 1232 MBR partitions:
              16:16:05.0462 1232 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1400800, BlocksNum 0x12016800
              16:16:05.0462 1232 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x13417000, BlocksNum 0x11900000
              16:16:05.0462 1232 ============================================================
              16:16:05.0494 1232 C: <-> \Device\Harddisk0\DR0\Partition1
              16:16:05.0553 1232 D: <-> \Device\Harddisk0\DR0\Partition2
              16:16:05.0553 1232 ============================================================
              16:16:05.0553 1232 Initialize success
              16:16:05.0553 1232 ============================================================
              16:16:08.0247 8028 ============================================================
              16:16:08.0247 8028 Scan started
              16:16:08.0247 8028 Mode: Manual;
              16:16:08.0247 8028 ============================================================
              16:16:08.0668 8028 ================ Scan system memory ========================
              16:16:08.0668 8028 System memory - ok
              16:16:08.0676 8028 ================ Scan services =============================
              16:16:08.0907 8028 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
              16:16:08.0910 8028 ACPI - ok
              16:16:09.0105 8028 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
              16:16:09.0106 8028 AdobeARMservice - ok
              16:16:09.0209 8028 [ B2B64AF436FACCFA854DD397027C5360 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
              16:16:09.0212 8028 AdobeFlashPlayerUpdateSvc - ok
              16:16:09.0288 8028 [ 04F0FCAC69C7C71A3AC4EB97FAFC8303 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
              16:16:09.0296 8028 adp94xx - ok
              16:16:09.0336 8028 [ 60505E0041F7751BDBB80F88BF45C2CE ] adpahci C:\Windows\system32\drivers\adpahci.sys
              16:16:09.0340 8028 adpahci - ok
              16:16:09.0362 8028 [ 8A42779B02AEC986EAB64ECFC98F8BD7 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
              16:16:09.0364 8028 adpu160m - ok
              16:16:09.0389 8028 [ 241C9E37F8CE45EF51C3DE27515CA4E5 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
              16:16:09.0394 8028 adpu320 - ok
              16:16:09.0455 8028 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
              16:16:09.0456 8028 AeLookupSvc - ok
              16:16:09.0526 8028 [ A201207363AA900ABF1A388468688570 ] AFD C:\Windows\system32\drivers\afd.sys
              16:16:09.0534 8028 AFD - ok
              16:16:09.0572 8028 [ 13F9E33747E6B41A3FF305C37DB0D360 ] agp440 C:\Windows\system32\drivers\agp440.sys
              16:16:09.0574 8028 agp440 - ok
              16:16:09.0674 8028 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
              16:16:09.0675 8028 aic78xx - ok
              16:16:09.0896 8028 [ 29584F02A43E427C4227E3B1D9FF1B22 ] Akamai c:\program files\common files\akamai/netsession_win_4f7fccd.dll
              16:16:09.0897 8028 Suspicious file (Hidden): c:\program files\common files\akamai/netsession_win_4f7fccd.dll. md5: 29584F02A43E427C4227E3B1D9FF1B22
              16:16:09.0919 8028 Akamai ( HiddenFile.Multi.Generic ) - warning
              16:16:09.0919 8028 Akamai - detected HiddenFile.Multi.Generic (1)
              16:16:09.0996 8028 [ 4490B8BDF38750458EB9B24835FDA8FE ] AlfaFF C:\Windows\system32\Drivers\AlfaFF.sys
              16:16:09.0998 8028 AlfaFF - ok
              16:16:10.0051 8028 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
              16:16:10.0053 8028 ALG - ok
              16:16:10.0098 8028 [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91 ] aliide C:\Windows\system32\drivers\aliide.sys
              16:16:10.0099 8028 aliide - ok
              16:16:10.0141 8028 [ C47344BC706E5F0B9DCE369516661578 ] amdagp C:\Windows\system32\drivers\amdagp.sys
              16:16:10.0145 8028 amdagp - ok
              16:16:10.0164 8028 [ 9B78A39A4C173FDBC1321E0DD659B34C ] amdide C:\Windows\system32\drivers\amdide.sys
              16:16:10.0165 8028 amdide - ok
              16:16:10.0194 8028 [ 18F29B49AD23ECEE3D2A826C725C8D48 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
              16:16:10.0195 8028 AmdK7 - ok
              16:16:10.0247 8028 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
              16:16:10.0248 8028 AmdK8 - ok
              16:16:10.0317 8028 [ DD8D9C597AF7CD2F6B70A3D6A4A1ACEA ] androidusb C:\Windows\system32\Drivers\ssadadb.sys
              16:16:10.0319 8028 androidusb - ok
              16:16:10.0436 8028 [ B458A95F12D36F55F98A42FD66BAEBFA ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
              16:16:10.0442 8028 AntiVirSchedulerService - ok
              16:16:10.0507 8028 [ CC3110EEF77AA0810CAA03741168BA8F ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
              16:16:10.0508 8028 AntiVirService - ok
              16:16:10.0580 8028 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
              16:16:10.0581 8028 Appinfo - ok
              16:16:10.0682 8028 [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
              16:16:10.0683 8028 Apple Mobile Device - ok
              16:16:10.0698 8028 [ 5D2888182FB46632511ACEE92FDAD522 ] arc C:\Windows\system32\drivers\arc.sys
              16:16:10.0699 8028 arc - ok
              16:16:10.0732 8028 [ 5E2A321BD7C8B3624E41FDEC3E244945 ] arcsas C:\Windows\system32\drivers\arcsas.sys
              16:16:10.0733 8028 arcsas - ok
              16:16:10.0805 8028 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
              16:16:10.0805 8028 AsyncMac - ok
              16:16:10.0830 8028 [ 2D9C903DC76A66813D350A562DE40ED9 ] atapi C:\Windows\system32\drivers\atapi.sys
              16:16:10.0831 8028 atapi - ok
              16:16:10.0925 8028 [ 997E25F5B7D53C94C0AD2DC080F6868E ] athr C:\Windows\system32\DRIVERS\athr.sys
              16:16:10.0931 8028 athr - ok
              16:16:11.0063 8028 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
              16:16:11.0066 8028 AudioEndpointBuilder - ok
              16:16:11.0086 8028 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
              16:16:11.0088 8028 Audiosrv - ok
              16:16:11.0173 8028 [ D5541F0AFB767E85FC412FC609D96A74 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
              16:16:11.0174 8028 avgntflt - ok
              16:16:11.0209 8028 [ 7D967A682D4694DF7FA57D63A2DB01FE ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
              16:16:11.0210 8028 avipbb - ok
              16:16:11.0221 8028 [ 271CFD1A989209B1964E24D969552BF7 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
              16:16:11.0222 8028 avkmgr - ok
              16:16:11.0297 8028 [ 01A24B415926BB5F772DBE12459D97DE ] BBSvc C:\Program Files\Microsoft\BingBar\BBSvc.EXE
              16:16:11.0299 8028 BBSvc - ok
              16:16:11.0328 8028 [ 785DE7ABDA13309D6065305542829E76 ] BBUpdate C:\Program Files\Microsoft\BingBar\SeaPort.EXE
              16:16:11.0330 8028 BBUpdate - ok
              16:16:11.0398 8028 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
              16:16:11.0399 8028 Beep - ok
              16:16:11.0488 8028 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
              16:16:11.0491 8028 BFE - ok
              16:16:11.0563 8028 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
              16:16:11.0573 8028 BITS - ok
              16:16:11.0598 8028 [ D4DF28447741FD3D953526E33A617397 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
              16:16:11.0599 8028 blbdrive - ok
              16:16:11.0681 8028 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
              16:16:11.0684 8028 Bonjour Service - ok
              16:16:11.0701 8028 [ 74B442B2BE1260B7588C136177CEAC66 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
              16:16:11.0702 8028 bowser - ok
              16:16:11.0745 8028 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
              16:16:11.0746 8028 BrFiltLo - ok
              16:16:11.0757 8028 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
              16:16:11.0758 8028 BrFiltUp - ok
              16:16:11.0796 8028 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
              16:16:11.0798 8028 Browser - ok
              16:16:11.0845 8028 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
              16:16:11.0846 8028 Brserid - ok
              16:16:11.0864 8028 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
              16:16:11.0865 8028 BrSerWdm - ok
              16:16:11.0882 8028 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
              16:16:11.0884 8028 BrUsbMdm - ok
              16:16:11.0905 8028 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
              16:16:11.0906 8028 BrUsbSer - ok
              16:16:11.0937 8028 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
              16:16:11.0937 8028 BTHMODEM - ok
              16:16:11.0987 8028 [ 09E6AFFAE6C0E9158BF05C7D08D0107A ] BUNAgentSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
              16:16:11.0988 8028 BUNAgentSvc - ok
              16:16:12.0214 8028 catchme - ok
              16:16:12.0282 8028 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
              16:16:12.0283 8028 cdfs - ok
              16:16:12.0331 8028 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
              16:16:12.0332 8028 cdrom - ok
              16:16:12.0385 8028 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
              16:16:12.0387 8028 CertPropSvc - ok
              16:16:12.0403 8028 [ E5D4133F37219DBCFE102BC61072589D ] circlass C:\Windows\system32\DRIVERS\circlass.sys
              16:16:12.0403 8028 circlass - ok
              16:16:12.0434 8028 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
              16:16:12.0436 8028 CLFS - ok
              16:16:12.0533 8028 [ 5CA9B1062C0C3E3AE19C23AD9D8A5048 ] CLHNService C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
              16:16:12.0534 8028 CLHNService - ok
              16:16:12.0582 8028 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
              16:16:12.0583 8028 clr_optimization_v2.0.50727_32 - ok
              16:16:12.0652 8028 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
              16:16:12.0653 8028 clr_optimization_v4.0.30319_32 - ok
              16:16:12.0706 8028 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
              16:16:12.0707 8028 CmBatt - ok
              16:16:12.0722 8028 [ 0CA25E686A4928484E9FDABD168AB629 ] cmdide C:\Windows\system32\drivers\cmdide.sys
              16:16:12.0723 8028 cmdide - ok
              16:16:12.0744 8028 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
              16:16:12.0745 8028 Compbatt - ok
              16:16:12.0751 8028 COMSysApp - ok
              16:16:12.0764 8028 [ 741E9DFF4F42D2D8477D0FC1DC0DF871 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
              16:16:12.0765 8028 crcdisk - ok
              16:16:12.0820 8028 [ 1F07BECDCA750766A96CDA811BA86410 ] Crusoe C:\Windows\system32\drivers\crusoe.sys
              16:16:12.0821 8028 Crusoe - ok
              16:16:12.0873 8028 [ FB27772BEAF8E1D28CCD825C09DA939B ] CryptSvc C:\Windows\system32\cryptsvc.dll
              16:16:12.0876 8028 CryptSvc - ok
              16:16:12.0943 8028 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
              16:16:12.0965 8028 DcomLaunch - ok
              16:16:13.0002 8028 [ 218D8AE46C88E82014F5D73D0236D9B2 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
              16:16:13.0003 8028 DfsC - ok
              16:16:13.0112 8028 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
              16:16:13.0129 8028 DFSR - ok
              16:16:13.0191 8028 [ 73FC5BC52572084EC1241514CF6230A0 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
              16:16:13.0193 8028 dg_ssudbus - ok
              16:16:13.0240 8028 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
              16:16:13.0244 8028 Dhcp - ok
              16:16:13.0298 8028 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
              16:16:13.0299 8028 disk - ok
              16:16:13.0359 8028 [ 73BAF270D24FE726B9CD7F80BB17A23D ] DKbFltr C:\Windows\system32\DRIVERS\DKbFltr.sys
              16:16:13.0360 8028 DKbFltr - ok
              16:16:13.0393 8028 [ 30A08728740E71947AE1E073B5CE69B4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
              16:16:13.0396 8028 Dnscache - ok
              16:16:13.0431 8028 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
              16:16:13.0433 8028 dot3svc - ok
              16:16:13.0495 8028 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
              16:16:13.0497 8028 DPS - ok
              16:16:13.0536 8028 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
              16:16:13.0537 8028 drmkaud - ok
              16:16:13.0587 8028 [ 5C7E2097B91D689DED7A6FF90F0F3A25 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
              16:16:13.0593 8028 DXGKrnl - ok
              16:16:13.0623 8028 [ 5425F74AC0C1DBD96A1E04F17D63F94C ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
              16:16:13.0624 8028 E1G60 - ok
              16:16:13.0660 8028 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
              16:16:13.0662 8028 EapHost - ok
              16:16:14.0159 8028 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
              16:16:14.0160 8028 Ecache - ok
              16:16:14.0329 8028 [ 2CE2DDCB1A41ED4488A2A8B98D286B3D ] eDataSecurity Service C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
              16:16:14.0333 8028 eDataSecurity Service - ok
              16:16:14.0426 8028 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
              16:16:14.0428 8028 ehRecvr - ok
              16:16:14.0442 8028 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
              16:16:14.0443 8028 ehSched - ok
              16:16:14.0456 8028 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
              16:16:14.0457 8028 ehstart - ok
              16:16:14.0499 8028 [ 23B62471681A124889978F6295B3F4C6 ] elxstor C:\Windows\system32\drivers\elxstor.sys
              16:16:14.0502 8028 elxstor - ok
              16:16:14.0555 8028 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
              16:16:14.0561 8028 EMDMgmt - ok
              16:16:14.0594 8028 [ 3DB974F3935483555D7148663F726C61 ] ErrDev C:\Windows\system32\drivers\errdev.sys
              16:16:14.0595 8028 ErrDev - ok
              16:16:14.0651 8028 [ 27D2754314D12EB27D81D462FD0D86C0 ] ETService C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
              16:16:14.0652 8028 ETService - ok
              16:16:14.0713 8028 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
              16:16:14.0716 8028 EventSystem - ok
              16:16:14.0831 8028 [ 54B6E150BFF4A47EB0D204119D262E46 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
              16:16:14.0838 8028 EvtEng - ok
              16:16:14.0904 8028 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
              16:16:14.0905 8028 exfat - ok
              16:16:14.0943 8028 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
              16:16:14.0945 8028 fastfat - ok
              16:16:14.0992 8028 [ AFE1E8B9782A0DD7FB46BBD88E43F89A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
              16:16:14.0993 8028 fdc - ok
              16:16:15.0028 8028 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
              16:16:15.0030 8028 fdPHost - ok
              16:16:15.0044 8028 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
              16:16:15.0047 8028 FDResPub - ok
              16:16:15.0082 8028 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
              16:16:15.0083 8028 FileInfo - ok
              16:16:15.0101 8028 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
              16:16:15.0102 8028 Filetrace - ok
              16:16:15.0118 8028 [ 85B7CF99D532820495D68D747FDA9EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
              16:16:15.0119 8028 flpydisk - ok
              16:16:15.0149 8028 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
              16:16:15.0150 8028 FltMgr - ok
              16:16:15.0244 8028 [ D49705F25390265CAD9B620F55EA968C ] FontCache C:\Windows\system32\FntCache.dll
              16:16:15.0253 8028 FontCache - ok
              16:16:15.0323 8028 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
              16:16:15.0324 8028 FontCache3.0.0.0 - ok
              16:16:15.0362 8028 [ B0082808A6856A252F7CDD939892CE50 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
              16:16:15.0363 8028 fssfltr - ok
              16:16:15.0514 8028 [ 28DDEEEC44E988657B732CF404D504CB ] fsssvc C:\Program Files\Windows Live\Family Safety\fsssvc.exe
              16:16:15.0525 8028 fsssvc - ok
              16:16:15.0567 8028 [ 65EA8B77B5851854F0C55C43FA51A198 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
              16:16:15.0568 8028 Fs_Rec - ok
              16:16:15.0592 8028 [ 34582A6E6573D54A07ECE5FE24A126B5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
              16:16:15.0593 8028 gagp30kx - ok
              16:16:15.0630 8028 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
              16:16:15.0631 8028 GEARAspiWDM - ok
              16:16:15.0753 8028 [ 0879DC7444A201DF84E69C5DD5083D61 ] getPlusHelper C:\Program Files\NOS\bin\getPlus_Helper.dll
              16:16:15.0754 8028 getPlusHelper - ok
              16:16:15.0805 8028 [ 007AEA2E06E7CEF7372E40C277163959 ] ggflt C:\Windows\system32\DRIVERS\ggflt.sys
              16:16:15.0807 8028 ggflt - ok
              16:16:15.0862 8028 [ C73DE35960CA75C5AB4AE636B127C64E ] ggsemc C:\Windows\system32\DRIVERS\ggsemc.sys
              16:16:15.0862 8028 ggsemc - ok
              16:16:15.0952 8028 [ 9F5F2F0FB0A7F5AA9F16B9A7B6DAD89F ] GoogleDesktopManager-051210-111108 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
              16:16:15.0954 8028 GoogleDesktopManager-051210-111108 - ok
              16:16:16.0011 8028 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
              16:16:16.0033 8028 gpsvc - ok
              16:16:16.0111 8028 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
              16:16:16.0113 8028 HdAudAddService - ok
              16:16:16.0153 8028 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
              16:16:16.0175 8028 HDAudBus - ok
              16:16:16.0202 8028 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
              16:16:16.0204 8028 HidBth - ok
              16:16:16.0225 8028 [ D8DF3722D5E961BAA1292AA2F12827E2 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
              16:16:16.0225 8028 HidIr - ok
              16:16:16.0239 8028 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
              16:16:16.0242 8028 hidserv - ok
              16:16:16.0270 8028 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
              16:16:16.0272 8028 HidUsb - ok
              16:16:16.0296 8028 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
              16:16:16.0303 8028 hkmsvc - ok
              16:16:16.0338 8028 [ 16EE7B23A009E00D835CDB79574A91A6 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
              16:16:16.0338 8028 HpCISSs - ok
              16:16:16.0405 8028 [ 46D67209550973257601A533E2AC5785 ] HSFHWAZL C:\Windows\system32\DRIVERS\VSTAZL3.SYS
              16:16:16.0407 8028 HSFHWAZL - ok
              16:16:16.0450 8028 [ FADD7095163CB3CB4073793EBB50FE75 ] HSF_DPV C:\Windows\system32\DRIVERS\HSX_DPV.sys
              16:16:16.0460 8028 HSF_DPV - ok
              16:16:16.0525 8028 [ 058783BEDD17615D1FECE09F77960436 ] HSXHWAZL C:\Windows\system32\DRIVERS\HSXHWAZL.sys
              16:16:16.0527 8028 HSXHWAZL - ok
              16:16:16.0582 8028 [ F870AA3E254628EBEAFE754108D664DE ] HTTP C:\Windows\system32\drivers\HTTP.sys
              16:16:16.0586 8028 HTTP - ok
              16:16:16.0612 8028 [ C6B032D69650985468160FC9937CF5B4 ] i2omp C:\Windows\system32\drivers\i2omp.sys
              16:16:16.0613 8028 i2omp - ok
              16:16:16.0687 8028 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
              16:16:16.0688 8028 i8042prt - ok
              16:16:16.0772 8028 [ 3E42C4691AAD4B1E8D0466F9CBF05CBE ] IAANTMON C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
              16:16:16.0778 8028 IAANTMON - ok
              16:16:16.0812 8028 [ 707C1692214B1C290271067197F075F6 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
              16:16:16.0814 8028 iaStor - ok
              16:16:16.0845 8028 [ 54155EA1B0DF185878E0FC9EC3AC3A14 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
              16:16:16.0847 8028 iaStorV - ok
              16:16:16.0936 8028 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
              16:16:16.0937 8028 IDriverT - ok
              16:16:16.0997 8028 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
              16:16:17.0003 8028 idsvc - ok
              16:16:17.0125 8028 [ 33FFC1E1117C4BE00A07AEDD72AE68B1 ] IGBASVC C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
              16:16:17.0227 8028 IGBASVC - ok
              16:16:17.0259 8028 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
              16:16:17.0260 8028 iirsp - ok
              16:16:17.0310 8028 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
              16:16:17.0320 8028 IKEEXT - ok
              16:16:17.0385 8028 [ C6E5276C00EBDEB096BB5EF4B797D1B6 ] int15 C:\Windows\system32\drivers\int15.sys
              16:16:17.0387 8028 int15 - ok
              16:16:17.0487 8028 [ 219CA9A36D6DE2EC04F958C907673436 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
              16:16:17.0505 8028 IntcAzAudAddService - ok
              16:16:17.0561 8028 [ 83AA759F3189E6370C30DE5DC5590718 ] intelide C:\Windows\system32\drivers\intelide.sys
              16:16:17.0563 8028 intelide - ok
              16:16:17.0600 8028 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
              16:16:17.0602 8028 intelppm - ok
              16:16:17.0629 8028 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
              16:16:17.0632 8028 IPBusEnum - ok
              16:16:17.0711 8028 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
              16:16:17.0712 8028 IpFilterDriver - ok
              16:16:17.0753 8028 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
              16:16:17.0756 8028 iphlpsvc - ok
              16:16:17.0765 8028 IpInIp - ok
              16:16:17.0811 8028 [ B25AAF203552B7B3491139D582B39AD1 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
              16:16:17.0812 8028 IPMIDRV - ok
              16:16:17.0834 8028 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
              16:16:17.0835 8028 IPNAT - ok
              16:16:17.0897 8028 [ E6BE7A41A28D8F2DB174957454D32448 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
              16:16:17.0917 8028 iPod Service - ok
              16:16:17.0956 8028 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
              16:16:17.0958 8028 IRENUM - ok
              16:16:17.0982 8028 [ 6C70698A3E5C4376C6AB5C7C17FB0614 ] isapnp C:\Windows\system32\drivers\isapnp.sys
              16:16:17.0983 8028 isapnp - ok
              16:16:18.0039 8028 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
              16:16:18.0043 8028 iScsiPrt - ok
              16:16:18.0060 8028 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
              16:16:18.0061 8028 iteatapi - ok
              16:16:18.0099 8028 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
              16:16:18.0102 8028 iteraid - ok
              16:16:18.0116 8028 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
              16:16:18.0119 8028 kbdclass - ok
              16:16:18.0148 8028 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
              16:16:18.0149 8028 kbdhid - ok
              16:16:18.0183 8028 [ 3978F3540329E16C0AC3BCF677E5669F ] KeyIso C:\Windows\system32\lsass.exe
              16:16:18.0187 8028 KeyIso - ok
              16:16:18.0252 8028 [ 566C5FD480FDBCE3BA5CF9FBCFFAEA9A ] KMWDFILTER C:\Windows\system32\DRIVERS\KMWDFILTER.sys
              16:16:18.0254 8028 KMWDFILTER - ok
              16:16:18.0280 8028 [ 86165728AF9BF72D6442A894FDFB4F8B ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
              16:16:18.0285 8028 KSecDD - ok
              16:16:18.0338 8028 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
              16:16:18.0347 8028 KtmRm - ok
              16:16:18.0423 8028 [ 24ABDDEB766C8459F9D562EB083B6CB8 ] L1E C:\Windows\system32\DRIVERS\L1E60x86.sys
              16:16:18.0424 8028 L1E - ok
              16:16:18.0485 8028 [ 43446F197C74EF2030F84B3A4F39D570 ] LanmanServer C:\Windows\system32\srvsvc.dll
              16:16:18.0492 8028 LanmanServer - ok
              16:16:18.0558 8028 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
              16:16:18.0566 8028 LanmanWorkstation - ok
              16:16:18.0628 8028 [ 793FF718477345CD5D232C50BED1E452 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
              16:16:18.0629 8028 LightScribeService - ok
              16:16:18.0659 8028 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
              16:16:18.0660 8028 lltdio - ok
              16:16:18.0693 8028 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
              16:16:18.0697 8028 lltdsvc - ok
              16:16:18.0720 8028 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
              16:16:18.0724 8028 lmhosts - ok
              16:16:18.0750 8028 [ C7E15E82879BF3235B559563D4185365 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
              16:16:18.0751 8028 LSI_FC - ok
              16:16:18.0764 8028 [ EE01EBAE8C9BF0FA072E0FF68718920A ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
              16:16:18.0766 8028 LSI_SAS - ok
              16:16:18.0788 8028 [ 912A04696E9CA30146A62AFA1463DD5C ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
              16:16:18.0789 8028 LSI_SCSI - ok
              16:16:18.0816 8028 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
              16:16:18.0818 8028 luafv - ok
              16:16:18.0839 8028 lxdu_device - ok
              16:16:18.0888 8028 [ 6DFE7F2E8E8A337263AA5C92A215F161 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
              16:16:18.0889 8028 MBAMProtector - ok
              16:16:18.0939 8028 [ 43683E970F008C93C9429EF428147A54 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
              16:16:18.0958 8028 MBAMService - ok
              16:16:19.0022 8028 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
              16:16:19.0025 8028 Mcx2Svc - ok
              16:16:19.0042 8028 [ 0CEA2D0D3FA284B85ED5B68365114F76 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys
              16:16:19.0044 8028 mdmxsdk - ok
              16:16:19.0097 8028 [ 0001CE609D66632FA17B84705F658879 ] megasas C:\Windows\system32\drivers\megasas.sys
              16:16:19.0098 8028 megasas - ok
              16:16:19.0137 8028 [ C252F32CD9A49DBFC25ECF26EBD51A99 ] MegaSR C:\Windows\system32\drivers\megasr.sys
              16:16:19.0140 8028 MegaSR - ok
              16:16:19.0168 8028 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
              16:16:19.0172 8028 MMCSS - ok
              16:16:19.0217 8028 MobilityService - ok
              16:16:19.0234 8028 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
              16:16:19.0235 8028 Modem - ok
              16:16:19.0253 8028 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
              16:16:19.0255 8028 monitor - ok
              16:16:19.0272 8028 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
              16:16:19.0273 8028 mouclass - ok
              16:16:19.0291 8028 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
              16:16:19.0293 8028 mouhid - ok
              16:16:19.0313 8028 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
              16:16:19.0315 8028 MountMgr - ok
              16:16:19.0364 8028 [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
              16:16:19.0365 8028 MozillaMaintenance - ok
              16:16:19.0402 8028 [ 511D011289755DD9F9A7579FB0B064E6 ] mpio C:\Windows\system32\drivers\mpio.sys
              16:16:19.0404 8028 mpio - ok
              16:16:19.0421 8028 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
              16:16:19.0422 8028 mpsdrv - ok
              16:16:19.0474 8028 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
              16:16:19.0485 8028 MpsSvc - ok
              16:16:19.0530 8028 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
              16:16:19.0531 8028 Mraid35x - ok
              16:16:19.0563 8028 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
              16:16:19.0564 8028 MRxDAV - ok
              16:16:19.0587 8028 [ 454341E652BDF5E01B0F2140232B073E ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
              16:16:19.0589 8028 mrxsmb - ok
              16:16:19.0649 8028 [ 2A4901AFF069944FA945ED5BBF4DCDE3 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
              16:16:19.0652 8028 mrxsmb10 - ok
              16:16:19.0679 8028 [ 28B3F1AB44BDD4432C041581412F17D9 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
              16:16:19.0680 8028 mrxsmb20 - ok
              16:16:19.0727 8028 [ 28023E86F17001F7CD9B15A5BC9AE07D ] msahci C:\Windows\system32\drivers\msahci.sys
              16:16:19.0727 8028 msahci - ok
              16:16:19.0751 8028 [ 4468B0F385A86ECDDAF8D3CA662EC0E7 ] msdsm C:\Windows\system32\drivers\msdsm.sys
              16:16:19.0753 8028 msdsm - ok
              16:16:19.0779 8028 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
              16:16:19.0783 8028 MSDTC - ok
              16:16:19.0841 8028 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
              16:16:19.0842 8028 Msfs - ok
              16:16:19.0902 8028 [ 3C1440DD26E8E2BF9B69A65402611C8C ] MsgPlusDriver C:\Windows\system32\DRIVERS\MsgPlusDriver.sys
              16:16:19.0903 8028 MsgPlusDriver - ok
              16:16:19.0992 8028 [ 3F3D6E8BD31B3C017D0AB24CD5EC0D05 ] MsgPlusService C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
              16:16:19.0995 8028 MsgPlusService - ok
              16:16:20.0035 8028 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
              16:16:20.0036 8028 msisadrv - ok
              16:16:20.0064 8028 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
              16:16:20.0068 8028 MSiSCSI - ok
              16:16:20.0074 8028 msiserver - ok
              16:16:20.0123 8028 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
              16:16:20.0124 8028 MSKSSRV - ok
              16:16:20.0160 8028 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
              16:16:20.0161 8028 MSPCLOCK - ok
              16:16:20.0198 8028 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
              16:16:20.0200 8028 MSPQM - ok
              16:16:20.0243 8028 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
              16:16:20.0245 8028 MsRPC - ok
              16:16:20.0262 8028 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
              16:16:20.0264 8028 mssmbios - ok
              16:16:20.0291 8028 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
              16:16:20.0292 8028 MSTEE - ok
              16:16:20.0312 8028 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
              16:16:20.0314 8028 Mup - ok
              16:16:20.0357 8028 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
              16:16:20.0367 8028 napagent - ok
              16:16:20.0420 8028 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
              16:16:20.0422 8028 NativeWifiP - ok
              16:16:20.0452 8028 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
              16:16:20.0464 8028 NDIS - ok
              16:16:20.0495 8028 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
              16:16:20.0497 8028 NdisTapi - ok
              16:16:20.0504 8028 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
              16:16:20.0507 8028 Ndisuio - ok
              16:16:20.0559 8028 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
              16:16:20.0561 8028 NdisWan - ok
              16:16:20.0571 8028 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
              16:16:20.0573 8028 NDProxy - ok
              16:16:20.0612 8028 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
              16:16:20.0613 8028 NetBIOS - ok
              16:16:20.0635 8028 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
              16:16:20.0638 8028 netbt - ok
              16:16:20.0647 8028 [ 3978F3540329E16C0AC3BCF677E5669F ] Netlogon C:\Windows\system32\lsass.exe
              16:16:20.0652 8028 Netlogon - ok
              16:16:20.0708 8028 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
              16:16:20.0719 8028 Netman - ok
              16:16:20.0760 8028 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
              16:16:20.0768 8028 netprofm - ok
              16:16:20.0801 8028 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
              16:16:20.0802 8028 NetTcpPortSharing - ok
              16:16:20.0923 8028 [ 8DE67BD902095A13329FD82C85A1FA09 ] NETw5v32 C:\Windows\system32\DRIVERS\NETw5v32.sys
              16:16:20.0967 8028 NETw5v32 - ok
              16:16:21.0039 8028 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
              16:16:21.0040 8028 nfrd960 - ok
              16:16:21.0059 8028 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
              16:16:21.0067 8028 NlaSvc - ok
              16:16:21.0158 8028 [ FD306FBCCE7ADB1077B709742E7148E9 ] NMSAccessU C:\Program Files\CDBurnerXP\NMSAccessU.exe
              16:16:21.0160 8028 NMSAccessU - ok
              16:16:21.0183 8028 [ F44ADDBF29905CB19F52FC9FE6A0EFA1 ] nosGetPlusHelper C:\Program Files\NOS\bin\getPlus_Helper_3004.dll
              16:16:21.0184 8028 nosGetPlusHelper - ok
              16:16:21.0216 8028 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
              16:16:21.0217 8028 Npfs - ok
              16:16:21.0226 8028 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
              16:16:21.0233 8028 nsi - ok
              16:16:21.0251 8028 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
              16:16:21.0252 8028 nsiproxy - ok
              16:16:21.0314 8028 [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
              16:16:21.0326 8028 Ntfs - ok
              16:16:21.0358 8028 [ A2B6583A5652A385DFF5E4F49AD48761 ] NTIBackupSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
              16:16:21.0360 8028 NTIBackupSvc - ok
              16:16:21.0378 8028 [ 2757D2BA59AEE155209E24942AB127C9 ] NTIDrvr C:\Windows\system32\DRIVERS\NTIDrvr.sys
              16:16:21.0379 8028 NTIDrvr - ok
              16:16:21.0479 8028 [ 547BFA3591C70674B0BFC99354AB78B3 ] NTIPPKernel C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys
              16:16:21.0480 8028 NTIPPKernel - ok
              16:16:21.0500 8028 [ 40B87FE8A1A9A5AC9E5A91D96F212BCD ] NTISchedulerSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
              16:16:21.0503 8028 NTISchedulerSvc - ok
              16:16:21.0520 8028 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
              16:16:21.0522 8028 ntrigdigi - ok
              16:16:21.0548 8028 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
              16:16:21.0549 8028 Null - ok
              16:16:21.0583 8028 [ 2C7AC27710E8D41C1EB7D1599187D237 ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
              16:16:21.0584 8028 NVHDA - ok
              16:16:21.0805 8028 [ CB0D6F8F65B8766FF2AAAA78881FD9F8 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
              16:16:21.0883 8028 nvlddmkm - ok
              16:16:21.0909 8028 [ 2EDF9E7751554B42CBB60116DE727101 ] nvraid C:\Windows\system32\drivers\nvraid.sys
              16:16:21.0912 8028 nvraid - ok
              16:16:21.0941 8028 [ ABED0C09758D1D97DB0042DBB2688177 ] nvstor C:\Windows\system32\drivers\nvstor.sys
              16:16:21.0942 8028 nvstor - ok
              16:16:21.0961 8028 [ 15315BB51E9025FE41B482681C6E7BA2 ] nvsvc C:\Windows\system32\nvvsvc.exe
              16:16:21.0968 8028 nvsvc - ok
              16:16:21.0991 8028 [ 18BBDF913916B71BD54575BDB6EEAC0B ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
              16:16:21.0992 8028 nv_agp - ok
              16:16:21.0999 8028 NwlnkFlt - ok
              16:16:22.0010 8028 NwlnkFwd - ok
              16:16:22.0096 8028 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
              16:16:22.0099 8028 odserv - ok
              16:16:22.0132 8028 [ BE32DA025A0BE1878F0EE8D6D9386CD5 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
              16:16:22.0133 8028 ohci1394 - ok
              16:16:22.0165 8028 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
              16:16:22.0167 8028 ose - ok
              16:16:22.0231 8028 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
              16:16:22.0244 8028 p2pimsvc - ok
              16:16:22.0287 8028 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
              16:16:22.0300 8028 p2psvc - ok
              16:16:22.0379 8028 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
              16:16:22.0380 8028 Parport - ok
              16:16:22.0421 8028 [ 57389FA59A36D96B3EB09D0CB91E9CDC ] partmgr C:\Windows\system32\drivers\partmgr.sys
              16:16:22.0422 8028 partmgr - ok
              16:16:22.0444 8028 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
              16:16:22.0446 8028 Parvdm - ok
              16:16:22.0477 8028 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
              16:16:22.0482 8028 PcaSvc - ok
              16:16:22.0510 8028 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
              16:16:22.0512 8028 pci - ok
              16:16:22.0534 8028 [ FC175F5DDAB666D7F4D17449A547626F ] pciide C:\Windows\system32\drivers\pciide.sys
              16:16:22.0536 8028 pciide - ok
              16:16:22.0555 8028 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
              16:16:22.0557 8028 pcmcia - ok
              16:16:22.0620 8028 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
              16:16:22.0629 8028 PEAUTH - ok
              16:16:22.0715 8028 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
              16:16:22.0733 8028 pla - ok
              16:16:22.0754 8028 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
              16:16:22.0776 8028 PlugPlay - ok
              16:16:22.0810 8028 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
              16:16:22.0821 8028 PNRPAutoReg - ok
              16:16:22.0858 8028 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
              16:16:22.0875 8028 PNRPsvc - ok
              16:16:22.0901 8028 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
              16:16:22.0911 8028 PolicyAgent - ok
              16:16:22.0929 8028 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
              16:16:22.0931 8028 PptpMiniport - ok
              16:16:22.0958 8028 [ 2027293619DD0F047C584CF2E7DF4FFD ] Processor C:\Windows\system32\drivers\processr.sys
              16:16:22.0960 8028 Processor - ok
              16:16:22.0981 8028 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
              16:16:22.0990 8028 ProfSvc - ok
              16:16:23.0008 8028 [ 3978F3540329E16C0AC3BCF677E5669F ] ProtectedStorage C:\Windows\system32\lsass.exe
              16:16:23.0013 8028 ProtectedStorage - ok
              16:16:23.0056 8028 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
              16:16:23.0058 8028 PSched - ok
              16:16:23.0098 8028 [ 1DCBB35090CC4B2BD3D661E6089523C6 ] PSDFilter C:\Windows\system32\DRIVERS\psdfilter.sys
              16:16:23.0100 8028 PSDFilter - ok
              16:16:23.0125 8028 [ E26E46D619469964AC3609620F443867 ] PSDNServ C:\Windows\system32\drivers\PSDNServ.sys
              16:16:23.0127 8028 PSDNServ - ok
              16:16:23.0159 8028 [ 3E1D134AF2806867D06047C4CC33CC65 ] psdvdisk C:\Windows\system32\drivers\psdvdisk.sys
              16:16:23.0160 8028 psdvdisk - ok
              16:16:23.0246 8028 [ 0A6DB55AFB7820C99AA1F3A1D270F4F6 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
              16:16:23.0258 8028 ql2300 - ok
              16:16:23.0290 8028 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
              16:16:23.0292 8028 ql40xx - ok
              16:16:23.0331 8028 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
              16:16:23.0337 8028 QWAVE - ok
              16:16:23.0383 8028 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
              16:16:23.0384 8028 QWAVEdrv - ok
              16:16:23.0409 8028 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
              16:16:23.0411 8028 RasAcd - ok
              16:16:23.0466 8028 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
              16:16:23.0473 8028 RasAuto - ok
              16:16:23.0501 8028 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
              16:16:23.0502 8028 Rasl2tp - ok
              16:16:23.0543 8028 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
              16:16:23.0552 8028 RasMan - ok
              16:16:23.0578 8028 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
              16:16:23.0579 8028 RasPppoe - ok
              16:16:23.0610 8028 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
              16:16:23.0611 8028 RasSstp - ok
              16:16:23.0631 8028 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
              16:16:23.0634 8028 rdbss - ok
              16:16:23.0650 8028 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
              16:16:23.0652 8028 RDPCDD - ok
              16:16:23.0698 8028 [ FBC0BACD9C3D7F6956853F64A66E252D ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
              16:16:23.0700 8028 rdpdr - ok
              16:16:23.0707 8028 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
              16:16:23.0711 8028 RDPENCDD - ok
              16:16:23.0803 8028 [ 30BFBDFB7F95559EDE971F9DDB9A00BA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
              16:16:23.0805 8028 RDPWD - ok
              16:16:23.0918 8028 [ 3FF45B7F17D5837216ABAE652CC61540 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
              16:16:23.0927 8028 RegSrvc - ok
              16:16:23.0985 8028 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
              16:16:23.0988 8028 RemoteAccess - ok
              16:16:24.0018 8028 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
              16:16:24.0024 8028 RemoteRegistry - ok
              16:16:24.0089 8028 [ 17E0BEF5CA5C9CE52CC8082AC6EBC449 ] RichVideo C:\Program Files\Cyberlink\Shared files\RichVideo.exe
              16:16:24.0094 8028 RichVideo - ok
              16:16:24.0120 8028 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
              16:16:24.0124 8028 RpcLocator - ok
              16:16:24.0172 8028 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
              16:16:24.0194 8028 RpcSs - ok
              16:16:24.0237 8028 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
              16:16:24.0239 8028 rspndr - ok
              16:16:24.0297 8028 [ 73835C4F79ADC404EF39C8A9E2D4183B ] RS_Service C:\Program Files\Acer\Acer VCM\RS_Service.exe
              16:16:24.0302 8028 RS_Service - ok
              16:16:24.0345 8028 [ 7A4F79DF3793160B280CDE152B61FE33 ] RTSTOR C:\Windows\system32\drivers\RTSTOR.SYS
              16:16:24.0346 8028 RTSTOR - ok
              16:16:24.0365 8028 [ 3978F3540329E16C0AC3BCF677E5669F ] SamSs C:\Windows\system32\lsass.exe
              16:16:24.0369 8028 SamSs - ok
              16:16:24.0411 8028 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
              16:16:24.0412 8028 sbp2port - ok
              16:16:24.0490 8028 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
              16:16:24.0525 8028 SBSDWSCService - ok
              16:16:24.0572 8028 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
              16:16:24.0577 8028 SCardSvr - ok
              16:16:24.0618 8028 [ 323AE0BDFD2EB15B668DDA50CC597329 ] Schedule C:\Windows\system32\schedsvc.dll
              16:16:24.0663 8028 Schedule - ok
              16:16:24.0704 8028 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
              16:16:24.0705 8028 SCPolicySvc - ok
              16:16:24.0733 8028 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
              16:16:24.0739 8028 SDRSVC - ok
              16:16:24.0778 8028 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
              16:16:24.0779 8028 secdrv - ok
              16:16:24.0795 8028 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
              16:16:24.0801 8028 seclogon - ok
              16:16:24.0836 8028 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
              16:16:24.0841 8028 SENS - ok
              16:16:24.0864 8028 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
              16:16:24.0867 8028 Serenum - ok
              16:16:24.0931 8028 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
              16:16:24.0933 8028 Serial - ok
              16:16:24.0952 8028 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
              16:16:24.0954 8028 sermouse - ok
              16:16:25.0012 8028 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
              16:16:25.0020 8028 SessionEnv - ok
              16:16:25.0034 8028 [ 3EFA810BDCA87F6ECC24F9832243FE86 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
              16:16:25.0036 8028 sffdisk - ok
              16:16:25.0053 8028 [ E95D451F7EA3E583AEC75F3B3EE42DC5 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
              16:16:25.0054 8028 sffp_mmc - ok
              16:16:25.0072 8028 [ 3D0EA348784B7AC9EA9BD9F317980979 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
              16:16:25.0074 8028 sffp_sd - ok
              16:16:25.0105 8028 [ C33BFBD6E9E41FCD9FFEF9729E9FAED6 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
              16:16:25.0107 8028 sfloppy - ok
              16:16:25.0148 8028 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
              16:16:25.0154 8028 SharedAccess - ok
              16:16:25.0178 8028 [ C818C44C201898399BF999BB6B35D4E3 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
              16:16:25.0189 8028 ShellHWDetection - ok
              16:16:25.0209 8028 [ 1D76624A09A054F682D746B924E2DBC3 ] sisagp C:\Windows\system32\drivers\sisagp.sys
              16:16:25.0210 8028 sisagp - ok
              16:16:25.0229 8028 [ 43CB7AA756C7DB280D01DA9B676CFDE2 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
              16:16:25.0230 8028 SiSRaid2 - ok
              16:16:25.0256 8028 [ A99C6C8B0BAA970D8AA59DDC50B57F94 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
              16:16:25.0257 8028 SiSRaid4 - ok
              16:16:25.0306 8028 [ 6128E98EAAED364ED1A32708D2FD22CB ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
              16:16:25.0308 8028 SkypeUpdate - ok
              16:16:25.0422 8028 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
              16:16:25.0553 8028 slsvc - ok
              16:16:25.0599 8028 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
              16:16:25.0605 8028 SLUINotify - ok
              16:16:25.0659 8028 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
              16:16:25.0661 8028 Smb - ok
              16:16:25.0748 8028 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
              16:16:25.0753 8028 SNMPTRAP - ok
              16:16:25.0768 8028 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
              16:16:25.0769 8028 spldr - ok
              16:16:25.0811 8028 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
              16:16:25.0818 8028 Spooler - ok
              16:16:25.0872 8028 [ 96A5E2C642AF8F591A7366429809506B ] srv C:\Windows\system32\DRIVERS\srv.sys
              16:16:25.0880 8028 srv - ok
              16:16:25.0904 8028 [ 71DA2D64880C97E5FFC3C81761632751 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
              16:16:25.0906 8028 srv2 - ok
              16:16:25.0925 8028 [ 0C5AB1892AE0FA504218DB094BF6D041 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
              16:16:25.0927 8028 srvnet - ok
              16:16:25.0982 8028 [ 64E44ACD8C238FCBBB78F0BA4BDC4B05 ] ssadbus C:\Windows\system32\DRIVERS\ssadbus.sys
              16:16:25.0983 8028 ssadbus - ok
              16:16:26.0014 8028 [ BB2C84A15C765DA89FD832B0E73F26CE ] ssadmdfl C:\Windows\system32\DRIVERS\ssadmdfl.sys
              16:16:26.0015 8028 ssadmdfl - ok
              16:16:26.0047 8028 [ 6D0D132DDC6F43EDA00DCED6D8B1CA31 ] ssadmdm C:\Windows\system32\DRIVERS\ssadmdm.sys
              16:16:26.0048 8028 ssadmdm - ok
              16:16:26.0074 8028 [ 1A5A397BC459F346AB56492B61EF79F6 ] ssadserd C:\Windows\system32\DRIVERS\ssadserd.sys
              16:16:26.0076 8028 ssadserd - ok
              16:16:26.0107 8028 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
              16:16:26.0116 8028 SSDPSRV - ok
              16:16:26.0150 8028 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys
              16:16:26.0151 8028 ssmdrv - ok
              16:16:26.0186 8028 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
              16:16:26.0194 8028 SstpSvc - ok
              16:16:26.0235 8028 [ E3D493BFB7CD108EC50B2F560C96367C ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
              16:16:26.0238 8028 ssudmdm - ok
              16:16:26.0261 8028 [ F1567D6CA46E2233AE626FB4FAABACEF ] ssudserd C:\Windows\system32\DRIVERS\ssudserd.sys
              16:16:26.0264 8028 ssudserd - ok
              16:16:26.0336 8028 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
              16:16:26.0360 8028 stisvc - ok
              16:16:26.0404 8028 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
              16:16:26.0406 8028 swenum - ok
              16:16:26.0446 8028 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
              16:16:26.0454 8028 swprv - ok
              16:16:26.0477 8028 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
              16:16:26.0478 8028 Symc8xx - ok
              16:16:26.0494 8028 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
              16:16:26.0496 8028 Sym_hi - ok
              16:16:26.0507 8028 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
              16:16:26.0509 8028 Sym_u3 - ok
              16:16:26.0537 8028 [ 4C9BB4B3B9EAC26211484C30B914C6DC ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
              16:16:26.0540 8028 SynTP - ok
              16:16:26.0586 8028 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
              16:16:26.0659 8028 SysMain - ok
              16:16:26.0713 8028 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
              16:16:26.0720 8028 TabletInputService - ok
              16:16:26.0775 8028 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
              16:16:26.0785 8028 TapiSrv - ok
              16:16:26.0808 8028 [ EA02D11234C29E3AF778081498072131 ] tbhsd C:\Windows\system32\drivers\tbhsd.sys
              16:16:26.0809 8028 tbhsd - ok
              16:16:26.0841 8028 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
              16:16:26.0848 8028 TBS - ok
              16:16:26.0904 8028 [ A474879AFA4A596B3A531F3E69730DBF ] Tcpip C:\Windows\system32\drivers\tcpip.sys
              16:16:26.0914 8028 Tcpip - ok
              16:16:26.0949 8028 [ A474879AFA4A596B3A531F3E69730DBF ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
              16:16:26.0957 8028 Tcpip6 - ok
              16:16:26.0995 8028 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
              16:16:26.0996 8028 tcpipreg - ok
              16:16:27.0027 8028 [ 72B9E77565DA5FA564581976E000D29B ] TcUsb C:\Windows\system32\Drivers\tcusb.sys
              16:16:27.0028 8028 TcUsb - ok
              16:16:27.0043 8028 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
              16:16:27.0045 8028 TDPIPE - ok
              16:16:27.0066 8028 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
              16:16:27.0068 8028 TDTCP - ok
              16:16:27.0102 8028 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
              16:16:27.0103 8028 tdx - ok
              16:16:27.0131 8028 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
              16:16:27.0133 8028 TermDD - ok
              16:16:27.0172 8028 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
              16:16:27.0194 8028 TermService - ok
              16:16:27.0212 8028 [ C818C44C201898399BF999BB6B35D4E3 ] Themes C:\Windows\system32\shsvcs.dll
              16:16:27.0220 8028 Themes - ok
              16:16:27.0230 8028 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
              16:16:27.0235 8028 THREADORDER - ok
              16:16:27.0272 8028 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
              16:16:27.0281 8028 TrkWks - ok
              16:16:27.0367 8028 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
              16:16:27.0368 8028 TrustedInstaller - ok
              16:16:27.0397 8028 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
              16:16:27.0398 8028 tssecsrv - ok
              16:16:27.0446 8028 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
              16:16:27.0447 8028 tunmp - ok
              16:16:27.0469 8028 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
              16:16:27.0470 8028 tunnel - ok
              16:16:27.0494 8028 [ 7D33C4DB2CE363C8518D2DFCF533941F ] uagp35 C:\Windows\system32\drivers\uagp35.sys
              16:16:27.0496 8028 uagp35 - ok
              16:16:27.0513 8028 [ F763E070843EE2803DE1395002B42938 ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
              16:16:27.0516 8028 UBHelper - ok
              16:16:27.0541 8028 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
              16:16:27.0543 8028 udfs - ok
              16:16:27.0589 8028 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
              16:16:27.0597 8028 UI0Detect - ok
              16:16:27.0614 8028 [ B0ACFDC9E4AF279E9116C03E014B2B27 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
              16:16:27.0615 8028 uliagpkx - ok
              16:16:27.0642 8028 [ 9224BB254F591DE4CA8D572A5F0D635C ] uliahci C:\Windows\system32\drivers\uliahci.sys
              16:16:27.0645 8028 uliahci - ok
              16:16:27.0671 8028 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
              16:16:27.0673 8028 UlSata - ok
              16:16:27.0699 8028 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
              16:16:27.0703 8028 ulsata2 - ok
              16:16:27.0739 8028 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
              16:16:27.0740 8028 umbus - ok
              16:16:27.0758 8028 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
              16:16:27.0779 8028 upnphost - ok
              16:16:27.0836 8028 [ 83CAFCB53201BBAC04D822F32438E244 ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys
              16:16:27.0837 8028 USBAAPL - ok
              16:16:27.0895 8028 [ 32DB9517628FF0D070682AAB61E688F0 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
              16:16:27.0896 8028 usbaudio - ok
              16:16:27.0940 8028 [ 5353218B3265E3B8190335059F697A11 ] usbbus C:\Windows\system32\DRIVERS\lgusbbus.sys
              16:16:27.0941 8028 usbbus - ok
              16:16:28.0003 8028 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
              16:16:28.0004 8028 usbccgp - ok
              16:16:28.0018 8028 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
              16:16:28.0020 8028 usbcir - ok
              16:16:28.0051 8028 [ 7DD3EEFC62A1EF44E5F940FA651ED9ED ] UsbDiag C:\Windows\system32\DRIVERS\lgusbdiag.sys
              16:16:28.0052 8028 UsbDiag - ok
              16:16:28.0084 8028 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
              16:16:28.0085 8028 usbehci - ok
              16:16:28.0116 8028 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
              16:16:28.0118 8028 usbhub - ok
              16:16:28.0144 8028 [ 083031A78822ECCBD7510BCCD3E20D4C ] USBModem C:\Windows\system32\DRIVERS\lgusbmodem.sys
              16:16:28.0145 8028 USBModem - ok
              16:16:28.0166 8028 [ 38DBC7DD6CC5A72011F187425384388B ] usbohci C:\Windows\system32\drivers\usbohci.sys
              16:16:28.0168 8028 usbohci - ok
              16:16:28.0192 8028 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
              16:16:28.0194 8028 usbprint - ok
              16:16:28.0222 8028 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
              16:16:28.0223 8028 usbscan - ok
              16:16:28.0248 8028 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
              16:16:28.0250 8028 USBSTOR - ok
              16:16:28.0288 8028 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
              16:16:28.0289 8028 usbuhci - ok
              16:16:28.0341 8028 [ E67998E8F14CB0627A769F6530BCB352 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
              16:16:28.0343 8028 usbvideo - ok
              16:16:28.0368 8028 [ 35C9095FA7076466AFBFC5B9EC4B779E ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys
              16:16:28.0369 8028 usb_rndisx - ok
              16:16:28.0446 8028 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
              16:16:28.0453 8028 UxSms - ok
              16:16:28.0501 8028 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
              16:16:28.0510 8028 vds - ok
              16:16:28.0540 8028 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
              16:16:28.0541 8028 vga - ok
              16:16:28.0559 8028 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
              16:16:28.0561 8028 VgaSave - ok
              16:16:28.0600 8028 [ 5D7159DEF58A800D5781BA3A879627BC ] viaagp C:\Windows\system32\drivers\viaagp.sys
              16:16:28.0602 8028 viaagp - ok
              16:16:28.0634 8028 [ C4F3A691B5BAD343E6249BD8C2D45DEE ] ViaC7 C:\Windows\system32\drivers\viac7.sys
              16:16:28.0636 8028 ViaC7 - ok
              16:16:28.0662 8028 [ AADF5587A4063F52C2C3FED7887426FC ] viaide C:\Windows\system32\drivers\viaide.sys
              16:16:28.0665 8028 viaide - ok
              16:16:28.0687 8028 [ 69503668AC66C77C6C
              1. voila le rapport :

                16:16:04.0564 1232 TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
                16:16:04.0776 1232 ============================================================
                16:16:04.0776 1232 Current date / time: 2012/09/10 16:16:04.0776
                16:16:04.0776 1232 SystemInfo:
                16:16:04.0776 1232
                16:16:04.0776 1232 OS Version: 6.0.6002 ServicePack: 2.0
                16:16:04.0776 1232 Product type: Workstation
                16:16:04.0776 1232 ComputerName: PC-DE-DIDOUILLE
                16:16:04.0777 1232 UserName: Didouille
                16:16:04.0777 1232 Windows directory: C:\Windows
                16:16:04.0777 1232 System windows directory: C:\Windows
                16:16:04.0777 1232 Processor architecture: Intel x86
                16:16:04.0777 1232 Number of processors: 2
                16:16:04.0777 1232 Page size: 0x1000
                16:16:04.0777 1232 Boot type: Normal boot
                16:16:04.0777 1232 ============================================================
                16:16:05.0459 1232 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
                16:16:05.0462 1232 ============================================================
                16:16:05.0462 1232 \Device\Harddisk0\DR0:
                16:16:05.0462 1232 MBR partitions:
                16:16:05.0462 1232 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1400800, BlocksNum 0x12016800
                16:16:05.0462 1232 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x13417000, BlocksNum 0x11900000
                16:16:05.0462 1232 ============================================================
                16:16:05.0494 1232 C: <-> \Device\Harddisk0\DR0\Partition1
                16:16:05.0553 1232 D: <-> \Device\Harddisk0\DR0\Partition2
                16:16:05.0553 1232 ============================================================
                16:16:05.0553 1232 Initialize success
                16:16:05.0553 1232 ============================================================
                16:16:08.0247 8028 ============================================================
                16:16:08.0247 8028 Scan started
                16:16:08.0247 8028 Mode: Manual;
                16:16:08.0247 8028 ============================================================
                16:16:08.0668 8028 ================ Scan system memory ========================
                16:16:08.0668 8028 System memory - ok
                16:16:08.0676 8028 ================ Scan services =============================
                16:16:08.0907 8028 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
                16:16:08.0910 8028 ACPI - ok
                16:16:09.0105 8028 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
                16:16:09.0106 8028 AdobeARMservice - ok
                16:16:09.0209 8028 [ B2B64AF436FACCFA854DD397027C5360 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
                16:16:09.0212 8028 AdobeFlashPlayerUpdateSvc - ok
                16:16:09.0288 8028 [ 04F0FCAC69C7C71A3AC4EB97FAFC8303 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
                16:16:09.0296 8028 adp94xx - ok
                16:16:09.0336 8028 [ 60505E0041F7751BDBB80F88BF45C2CE ] adpahci C:\Windows\system32\drivers\adpahci.sys
                16:16:09.0340 8028 adpahci - ok
                16:16:09.0362 8028 [ 8A42779B02AEC986EAB64ECFC98F8BD7 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
                16:16:09.0364 8028 adpu160m - ok
                16:16:09.0389 8028 [ 241C9E37F8CE45EF51C3DE27515CA4E5 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
                16:16:09.0394 8028 adpu320 - ok
                16:16:09.0455 8028 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
                16:16:09.0456 8028 AeLookupSvc - ok
                16:16:09.0526 8028 [ A201207363AA900ABF1A388468688570 ] AFD C:\Windows\system32\drivers\afd.sys
                16:16:09.0534 8028 AFD - ok
                16:16:09.0572 8028 [ 13F9E33747E6B41A3FF305C37DB0D360 ] agp440 C:\Windows\system32\drivers\agp440.sys
                16:16:09.0574 8028 agp440 - ok
                16:16:09.0674 8028 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
                16:16:09.0675 8028 aic78xx - ok
                16:16:09.0896 8028 [ 29584F02A43E427C4227E3B1D9FF1B22 ] Akamai c:\program files\common files\akamai/netsession_win_4f7fccd.dll
                16:16:09.0897 8028 Suspicious file (Hidden): c:\program files\common files\akamai/netsession_win_4f7fccd.dll. md5: 29584F02A43E427C4227E3B1D9FF1B22
                16:16:09.0919 8028 Akamai ( HiddenFile.Multi.Generic ) - warning
                16:16:09.0919 8028 Akamai - detected HiddenFile.Multi.Generic (1)
                16:16:09.0996 8028 [ 4490B8BDF38750458EB9B24835FDA8FE ] AlfaFF C:\Windows\system32\Drivers\AlfaFF.sys
                16:16:09.0998 8028 AlfaFF - ok
                16:16:10.0051 8028 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
                16:16:10.0053 8028 ALG - ok
                16:16:10.0098 8028 [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91 ] aliide C:\Windows\system32\drivers\aliide.sys
                16:16:10.0099 8028 aliide - ok
                16:16:10.0141 8028 [ C47344BC706E5F0B9DCE369516661578 ] amdagp C:\Windows\system32\drivers\amdagp.sys
                16:16:10.0145 8028 amdagp - ok
                16:16:10.0164 8028 [ 9B78A39A4C173FDBC1321E0DD659B34C ] amdide C:\Windows\system32\drivers\amdide.sys
                16:16:10.0165 8028 amdide - ok
                16:16:10.0194 8028 [ 18F29B49AD23ECEE3D2A826C725C8D48 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
                16:16:10.0195 8028 AmdK7 - ok
                16:16:10.0247 8028 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
                16:16:10.0248 8028 AmdK8 - ok
                16:16:10.0317 8028 [ DD8D9C597AF7CD2F6B70A3D6A4A1ACEA ] androidusb C:\Windows\system32\Drivers\ssadadb.sys
                16:16:10.0319 8028 androidusb - ok
                16:16:10.0436 8028 [ B458A95F12D36F55F98A42FD66BAEBFA ] AntiVirSchedulerService C:\Program Files\Avira\AntiVir Desktop\sched.exe
                16:16:10.0442 8028 AntiVirSchedulerService - ok
                16:16:10.0507 8028 [ CC3110EEF77AA0810CAA03741168BA8F ] AntiVirService C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                16:16:10.0508 8028 AntiVirService - ok
                16:16:10.0580 8028 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
                16:16:10.0581 8028 Appinfo - ok
                16:16:10.0682 8028 [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
                16:16:10.0683 8028 Apple Mobile Device - ok
                16:16:10.0698 8028 [ 5D2888182FB46632511ACEE92FDAD522 ] arc C:\Windows\system32\drivers\arc.sys
                16:16:10.0699 8028 arc - ok
                16:16:10.0732 8028 [ 5E2A321BD7C8B3624E41FDEC3E244945 ] arcsas C:\Windows\system32\drivers\arcsas.sys
                16:16:10.0733 8028 arcsas - ok
                16:16:10.0805 8028 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
                16:16:10.0805 8028 AsyncMac - ok
                16:16:10.0830 8028 [ 2D9C903DC76A66813D350A562DE40ED9 ] atapi C:\Windows\system32\drivers\atapi.sys
                16:16:10.0831 8028 atapi - ok
                16:16:10.0925 8028 [ 997E25F5B7D53C94C0AD2DC080F6868E ] athr C:\Windows\system32\DRIVERS\athr.sys
                16:16:10.0931 8028 athr - ok
                16:16:11.0063 8028 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
                16:16:11.0066 8028 AudioEndpointBuilder - ok
                16:16:11.0086 8028 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
                16:16:11.0088 8028 Audiosrv - ok
                16:16:11.0173 8028 [ D5541F0AFB767E85FC412FC609D96A74 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
                16:16:11.0174 8028 avgntflt - ok
                16:16:11.0209 8028 [ 7D967A682D4694DF7FA57D63A2DB01FE ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
                16:16:11.0210 8028 avipbb - ok
                16:16:11.0221 8028 [ 271CFD1A989209B1964E24D969552BF7 ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
                16:16:11.0222 8028 avkmgr - ok
                16:16:11.0297 8028 [ 01A24B415926BB5F772DBE12459D97DE ] BBSvc C:\Program Files\Microsoft\BingBar\BBSvc.EXE
                16:16:11.0299 8028 BBSvc - ok
                16:16:11.0328 8028 [ 785DE7ABDA13309D6065305542829E76 ] BBUpdate C:\Program Files\Microsoft\BingBar\SeaPort.EXE
                16:16:11.0330 8028 BBUpdate - ok
                16:16:11.0398 8028 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
                16:16:11.0399 8028 Beep - ok
                16:16:11.0488 8028 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
                16:16:11.0491 8028 BFE - ok
                16:16:11.0563 8028 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
                16:16:11.0573 8028 BITS - ok
                16:16:11.0598 8028 [ D4DF28447741FD3D953526E33A617397 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
                16:16:11.0599 8028 blbdrive - ok
                16:16:11.0681 8028 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
                16:16:11.0684 8028 Bonjour Service - ok
                16:16:11.0701 8028 [ 74B442B2BE1260B7588C136177CEAC66 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
                16:16:11.0702 8028 bowser - ok
                16:16:11.0745 8028 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
                16:16:11.0746 8028 BrFiltLo - ok
                16:16:11.0757 8028 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
                16:16:11.0758 8028 BrFiltUp - ok
                16:16:11.0796 8028 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
                16:16:11.0798 8028 Browser - ok
                16:16:11.0845 8028 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
                16:16:11.0846 8028 Brserid - ok
                16:16:11.0864 8028 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
                16:16:11.0865 8028 BrSerWdm - ok
                16:16:11.0882 8028 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
                16:16:11.0884 8028 BrUsbMdm - ok
                16:16:11.0905 8028 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
                16:16:11.0906 8028 BrUsbSer - ok
                16:16:11.0937 8028 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
                16:16:11.0937 8028 BTHMODEM - ok
                16:16:11.0987 8028 [ 09E6AFFAE6C0E9158BF05C7D08D0107A ] BUNAgentSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
                16:16:11.0988 8028 BUNAgentSvc - ok
                16:16:12.0214 8028 catchme - ok
                16:16:12.0282 8028 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
                16:16:12.0283 8028 cdfs - ok
                16:16:12.0331 8028 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
                16:16:12.0332 8028 cdrom - ok
                16:16:12.0385 8028 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
                16:16:12.0387 8028 CertPropSvc - ok
                16:16:12.0403 8028 [ E5D4133F37219DBCFE102BC61072589D ] circlass C:\Windows\system32\DRIVERS\circlass.sys
                16:16:12.0403 8028 circlass - ok
                16:16:12.0434 8028 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
                16:16:12.0436 8028 CLFS - ok
                16:16:12.0533 8028 [ 5CA9B1062C0C3E3AE19C23AD9D8A5048 ] CLHNService C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
                16:16:12.0534 8028 CLHNService - ok
                16:16:12.0582 8028 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
                16:16:12.0583 8028 clr_optimization_v2.0.50727_32 - ok
                16:16:12.0652 8028 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
                16:16:12.0653 8028 clr_optimization_v4.0.30319_32 - ok
                16:16:12.0706 8028 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
                16:16:12.0707 8028 CmBatt - ok
                16:16:12.0722 8028 [ 0CA25E686A4928484E9FDABD168AB629 ] cmdide C:\Windows\system32\drivers\cmdide.sys
                16:16:12.0723 8028 cmdide - ok
                16:16:12.0744 8028 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
                16:16:12.0745 8028 Compbatt - ok
                16:16:12.0751 8028 COMSysApp - ok
                16:16:12.0764 8028 [ 741E9DFF4F42D2D8477D0FC1DC0DF871 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
                16:16:12.0765 8028 crcdisk - ok
                16:16:12.0820 8028 [ 1F07BECDCA750766A96CDA811BA86410 ] Crusoe C:\Windows\system32\drivers\crusoe.sys
                16:16:12.0821 8028 Crusoe - ok
                16:16:12.0873 8028 [ FB27772BEAF8E1D28CCD825C09DA939B ] CryptSvc C:\Windows\system32\cryptsvc.dll
                16:16:12.0876 8028 CryptSvc - ok
                16:16:12.0943 8028 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
                16:16:12.0965 8028 DcomLaunch - ok
                16:16:13.0002 8028 [ 218D8AE46C88E82014F5D73D0236D9B2 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
                16:16:13.0003 8028 DfsC - ok
                16:16:13.0112 8028 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
                16:16:13.0129 8028 DFSR - ok
                16:16:13.0191 8028 [ 73FC5BC52572084EC1241514CF6230A0 ] dg_ssudbus C:\Windows\system32\DRIVERS\ssudbus.sys
                16:16:13.0193 8028 dg_ssudbus - ok
                16:16:13.0240 8028 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
                16:16:13.0244 8028 Dhcp - ok
                16:16:13.0298 8028 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
                16:16:13.0299 8028 disk - ok
                16:16:13.0359 8028 [ 73BAF270D24FE726B9CD7F80BB17A23D ] DKbFltr C:\Windows\system32\DRIVERS\DKbFltr.sys
                16:16:13.0360 8028 DKbFltr - ok
                16:16:13.0393 8028 [ 30A08728740E71947AE1E073B5CE69B4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
                16:16:13.0396 8028 Dnscache - ok
                16:16:13.0431 8028 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
                16:16:13.0433 8028 dot3svc - ok
                16:16:13.0495 8028 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
                16:16:13.0497 8028 DPS - ok
                16:16:13.0536 8028 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
                16:16:13.0537 8028 drmkaud - ok
                16:16:13.0587 8028 [ 5C7E2097B91D689DED7A6FF90F0F3A25 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
                16:16:13.0593 8028 DXGKrnl - ok
                16:16:13.0623 8028 [ 5425F74AC0C1DBD96A1E04F17D63F94C ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
                16:16:13.0624 8028 E1G60 - ok
                16:16:13.0660 8028 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
                16:16:13.0662 8028 EapHost - ok
                16:16:14.0159 8028 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
                16:16:14.0160 8028 Ecache - ok
                16:16:14.0329 8028 [ 2CE2DDCB1A41ED4488A2A8B98D286B3D ] eDataSecurity Service C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
                16:16:14.0333 8028 eDataSecurity Service - ok
                16:16:14.0426 8028 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
                16:16:14.0428 8028 ehRecvr - ok
                16:16:14.0442 8028 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
                16:16:14.0443 8028 ehSched - ok
                16:16:14.0456 8028 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
                16:16:14.0457 8028 ehstart - ok
                16:16:14.0499 8028 [ 23B62471681A124889978F6295B3F4C6 ] elxstor C:\Windows\system32\drivers\elxstor.sys
                16:16:14.0502 8028 elxstor - ok
                16:16:14.0555 8028 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
                16:16:14.0561 8028 EMDMgmt - ok
                16:16:14.0594 8028 [ 3DB974F3935483555D7148663F726C61 ] ErrDev C:\Windows\system32\drivers\errdev.sys
                16:16:14.0595 8028 ErrDev - ok
                16:16:14.0651 8028 [ 27D2754314D12EB27D81D462FD0D86C0 ] ETService C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
                16:16:14.0652 8028 ETService - ok
                16:16:14.0713 8028 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
                16:16:14.0716 8028 EventSystem - ok
                16:16:14.0831 8028 [ 54B6E150BFF4A47EB0D204119D262E46 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
                16:16:14.0838 8028 EvtEng - ok
                16:16:14.0904 8028 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
                16:16:14.0905 8028 exfat - ok
                16:16:14.0943 8028 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
                16:16:14.0945 8028 fastfat - ok
                16:16:14.0992 8028 [ AFE1E8B9782A0DD7FB46BBD88E43F89A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
                16:16:14.0993 8028 fdc - ok
                16:16:15.0028 8028 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
                16:16:15.0030 8028 fdPHost - ok
                16:16:15.0044 8028 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
                16:16:15.0047 8028 FDResPub - ok
                16:16:15.0082 8028 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
                16:16:15.0083 8028 FileInfo - ok
                16:16:15.0101 8028 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
                16:16:15.0102 8028 Filetrace - ok
                16:16:15.0118 8028 [ 85B7CF99D532820495D68D747FDA9EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
                16:16:15.0119 8028 flpydisk - ok
                16:16:15.0149 8028 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
                16:16:15.0150 8028 FltMgr - ok
                16:16:15.0244 8028 [ D49705F25390265CAD9B620F55EA968C ] FontCache C:\Windows\system32\FntCache.dll
                16:16:15.0253 8028 FontCache - ok
                16:16:15.0323 8028 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
                16:16:15.0324 8028 FontCache3.0.0.0 - ok
                16:16:15.0362 8028 [ B0082808A6856A252F7CDD939892CE50 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
                16:16:15.0363 8028 fssfltr - ok
                16:16:15.0514 8028 [ 28DDEEEC44E988657B732CF404D504CB ] fsssvc C:\Program Files\Windows Live\Family Safety\fsssvc.exe
                16:16:15.0525 8028 fsssvc - ok
                16:16:15.0567 8028 [ 65EA8B77B5851854F0C55C43FA51A198 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
                16:16:15.0568 8028 Fs_Rec - ok
                16:16:15.0592 8028 [ 34582A6E6573D54A07ECE5FE24A126B5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
                16:16:15.0593 8028 gagp30kx - ok
                16:16:15.0630 8028 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
                16:16:15.0631 8028 GEARAspiWDM - ok
                16:16:15.0753 8028 [ 0879DC7444A201DF84E69C5DD5083D61 ] getPlusHelper C:\Program Files\NOS\bin\getPlus_Helper.dll
                16:16:15.0754 8028 getPlusHelper - ok
                16:16:15.0805 8028 [ 007AEA2E06E7CEF7372E40C277163959 ] ggflt C:\Windows\system32\DRIVERS\ggflt.sys
                16:16:15.0807 8028 ggflt - ok
                16:16:15.0862 8028 [ C73DE35960CA75C5AB4AE636B127C64E ] ggsemc C:\Windows\system32\DRIVERS\ggsemc.sys
                16:16:15.0862 8028 ggsemc - ok
                16:16:15.0952 8028 [ 9F5F2F0FB0A7F5AA9F16B9A7B6DAD89F ] GoogleDesktopManager-051210-111108 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                16:16:15.0954 8028 GoogleDesktopManager-051210-111108 - ok
                16:16:16.0011 8028 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
                16:16:16.0033 8028 gpsvc - ok
                16:16:16.0111 8028 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
                16:16:16.0113 8028 HdAudAddService - ok
                16:16:16.0153 8028 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
                16:16:16.0175 8028 HDAudBus - ok
                16:16:16.0202 8028 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
                16:16:16.0204 8028 HidBth - ok
                16:16:16.0225 8028 [ D8DF3722D5E961BAA1292AA2F12827E2 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
                16:16:16.0225 8028 HidIr - ok
                16:16:16.0239 8028 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
                16:16:16.0242 8028 hidserv - ok
                16:16:16.0270 8028 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
                16:16:16.0272 8028 HidUsb - ok
                16:16:16.0296 8028 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
                16:16:16.0303 8028 hkmsvc - ok
                16:16:16.0338 8028 [ 16EE7B23A009E00D835CDB79574A91A6 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
                16:16:16.0338 8028 HpCISSs - ok
                16:16:16.0405 8028 [ 46D67209550973257601A533E2AC5785 ] HSFHWAZL C:\Windows\system32\DRIVERS\VSTAZL3.SYS
                16:16:16.0407 8028 HSFHWAZL - ok
                16:16:16.0450 8028 [ FADD7095163CB3CB4073793EBB50FE75 ] HSF_DPV C:\Windows\system32\DRIVERS\HSX_DPV.sys
                16:16:16.0460 8028 HSF_DPV - ok
                16:16:16.0525 8028 [ 058783BEDD17615D1FECE09F77960436 ] HSXHWAZL C:\Windows\system32\DRIVERS\HSXHWAZL.sys
                16:16:16.0527 8028 HSXHWAZL - ok
                16:16:16.0582 8028 [ F870AA3E254628EBEAFE754108D664DE ] HTTP C:\Windows\system32\drivers\HTTP.sys
                16:16:16.0586 8028 HTTP - ok
                16:16:16.0612 8028 [ C6B032D69650985468160FC9937CF5B4 ] i2omp C:\Windows\system32\drivers\i2omp.sys
                16:16:16.0613 8028 i2omp - ok
                16:16:16.0687 8028 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
                16:16:16.0688 8028 i8042prt - ok
                16:16:16.0772 8028 [ 3E42C4691AAD4B1E8D0466F9CBF05CBE ] IAANTMON C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
                16:16:16.0778 8028 IAANTMON - ok
                16:16:16.0812 8028 [ 707C1692214B1C290271067197F075F6 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
                16:16:16.0814 8028 iaStor - ok
                16:16:16.0845 8028 [ 54155EA1B0DF185878E0FC9EC3AC3A14 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
                16:16:16.0847 8028 iaStorV - ok
                16:16:16.0936 8028 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                16:16:16.0937 8028 IDriverT - ok
                16:16:16.0997 8028 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
                16:16:17.0003 8028 idsvc - ok
                16:16:17.0125 8028 [ 33FFC1E1117C4BE00A07AEDD72AE68B1 ] IGBASVC C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
                16:16:17.0227 8028 IGBASVC - ok
                16:16:17.0259 8028 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
                16:16:17.0260 8028 iirsp - ok
                16:16:17.0310 8028 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
                16:16:17.0320 8028 IKEEXT - ok
                16:16:17.0385 8028 [ C6E5276C00EBDEB096BB5EF4B797D1B6 ] int15 C:\Windows\system32\drivers\int15.sys
                16:16:17.0387 8028 int15 - ok
                16:16:17.0487 8028 [ 219CA9A36D6DE2EC04F958C907673436 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
                16:16:17.0505 8028 IntcAzAudAddService - ok
                16:16:17.0561 8028 [ 83AA759F3189E6370C30DE5DC5590718 ] intelide C:\Windows\system32\drivers\intelide.sys
                16:16:17.0563 8028 intelide - ok
                16:16:17.0600 8028 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
                16:16:17.0602 8028 intelppm - ok
                16:16:17.0629 8028 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
                16:16:17.0632 8028 IPBusEnum - ok
                16:16:17.0711 8028 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
                16:16:17.0712 8028 IpFilterDriver - ok
                16:16:17.0753 8028 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
                16:16:17.0756 8028 iphlpsvc - ok
                16:16:17.0765 8028 IpInIp - ok
                16:16:17.0811 8028 [ B25AAF203552B7B3491139D582B39AD1 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
                16:16:17.0812 8028 IPMIDRV - ok
                16:16:17.0834 8028 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
                16:16:17.0835 8028 IPNAT - ok
                16:16:17.0897 8028 [ E6BE7A41A28D8F2DB174957454D32448 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
                16:16:17.0917 8028 iPod Service - ok
                16:16:17.0956 8028 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
                16:16:17.0958 8028 IRENUM - ok
                16:16:17.0982 8028 [ 6C70698A3E5C4376C6AB5C7C17FB0614 ] isapnp C:\Windows\system32\drivers\isapnp.sys
                16:16:17.0983 8028 isapnp - ok
                16:16:18.0039 8028 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
                16:16:18.0043 8028 iScsiPrt - ok
                16:16:18.0060 8028 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
                16:16:18.0061 8028 iteatapi - ok
                16:16:18.0099 8028 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
                16:16:18.0102 8028 iteraid - ok
                16:16:18.0116 8028 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
                16:16:18.0119 8028 kbdclass - ok
                16:16:18.0148 8028 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
                16:16:18.0149 8028 kbdhid - ok
                16:16:18.0183 8028 [ 3978F3540329E16C0AC3BCF677E5669F ] KeyIso C:\Windows\system32\lsass.exe
                16:16:18.0187 8028 KeyIso - ok
                16:16:18.0252 8028 [ 566C5FD480FDBCE3BA5CF9FBCFFAEA9A ] KMWDFILTER C:\Windows\system32\DRIVERS\KMWDFILTER.sys
                16:16:18.0254 8028 KMWDFILTER - ok
                16:16:18.0280 8028 [ 86165728AF9BF72D6442A894FDFB4F8B ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
                16:16:18.0285 8028 KSecDD - ok
                16:16:18.0338 8028 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
                16:16:18.0347 8028 KtmRm - ok
                16:16:18.0423 8028 [ 24ABDDEB766C8459F9D562EB083B6CB8 ] L1E C:\Windows\system32\DRIVERS\L1E60x86.sys
                16:16:18.0424 8028 L1E - ok
                16:16:18.0485 8028 [ 43446F197C74EF2030F84B3A4F39D570 ] LanmanServer C:\Windows\system32\srvsvc.dll
                16:16:18.0492 8028 LanmanServer - ok
                16:16:18.0558 8028 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
                16:16:18.0566 8028 LanmanWorkstation - ok
                16:16:18.0628 8028 [ 793FF718477345CD5D232C50BED1E452 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                16:16:18.0629 8028 LightScribeService - ok
                16:16:18.0659 8028 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
                16:16:18.0660 8028 lltdio - ok
                16:16:18.0693 8028 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
                16:16:18.0697 8028 lltdsvc - ok
                16:16:18.0720 8028 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
                16:16:18.0724 8028 lmhosts - ok
                16:16:18.0750 8028 [ C7E15E82879BF3235B559563D4185365 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
                16:16:18.0751 8028 LSI_FC - ok
                16:16:18.0764 8028 [ EE01EBAE8C9BF0FA072E0FF68718920A ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
                16:16:18.0766 8028 LSI_SAS - ok
                16:16:18.0788 8028 [ 912A04696E9CA30146A62AFA1463DD5C ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
                16:16:18.0789 8028 LSI_SCSI - ok
                16:16:18.0816 8028 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
                16:16:18.0818 8028 luafv - ok
                16:16:18.0839 8028 lxdu_device - ok
                16:16:18.0888 8028 [ 6DFE7F2E8E8A337263AA5C92A215F161 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
                16:16:18.0889 8028 MBAMProtector - ok
                16:16:18.0939 8028 [ 43683E970F008C93C9429EF428147A54 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
                16:16:18.0958 8028 MBAMService - ok
                16:16:19.0022 8028 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
                16:16:19.0025 8028 Mcx2Svc - ok
                16:16:19.0042 8028 [ 0CEA2D0D3FA284B85ED5B68365114F76 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys
                16:16:19.0044 8028 mdmxsdk - ok
                16:16:19.0097 8028 [ 0001CE609D66632FA17B84705F658879 ] megasas C:\Windows\system32\drivers\megasas.sys
                16:16:19.0098 8028 megasas - ok
                16:16:19.0137 8028 [ C252F32CD9A49DBFC25ECF26EBD51A99 ] MegaSR C:\Windows\system32\drivers\megasr.sys
                16:16:19.0140 8028 MegaSR - ok
                16:16:19.0168 8028 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
                16:16:19.0172 8028 MMCSS - ok
                16:16:19.0217 8028 MobilityService - ok
                16:16:19.0234 8028 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
                16:16:19.0235 8028 Modem - ok
                16:16:19.0253 8028 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
                16:16:19.0255 8028 monitor - ok
                16:16:19.0272 8028 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
                16:16:19.0273 8028 mouclass - ok
                16:16:19.0291 8028 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
                16:16:19.0293 8028 mouhid - ok
                16:16:19.0313 8028 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
                16:16:19.0315 8028 MountMgr - ok
                16:16:19.0364 8028 [ CB8AF049AC9BE419A77ADAE288673359 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
                16:16:19.0365 8028 MozillaMaintenance - ok
                16:16:19.0402 8028 [ 511D011289755DD9F9A7579FB0B064E6 ] mpio C:\Windows\system32\drivers\mpio.sys
                16:16:19.0404 8028 mpio - ok
                16:16:19.0421 8028 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
                16:16:19.0422 8028 mpsdrv - ok
                16:16:19.0474 8028 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
                16:16:19.0485 8028 MpsSvc - ok
                16:16:19.0530 8028 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
                16:16:19.0531 8028 Mraid35x - ok
                16:16:19.0563 8028 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
                16:16:19.0564 8028 MRxDAV - ok
                16:16:19.0587 8028 [ 454341E652BDF5E01B0F2140232B073E ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
                16:16:19.0589 8028 mrxsmb - ok
                16:16:19.0649 8028 [ 2A4901AFF069944FA945ED5BBF4DCDE3 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
                16:16:19.0652 8028 mrxsmb10 - ok
                16:16:19.0679 8028 [ 28B3F1AB44BDD4432C041581412F17D9 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
                16:16:19.0680 8028 mrxsmb20 - ok
                16:16:19.0727 8028 [ 28023E86F17001F7CD9B15A5BC9AE07D ] msahci C:\Windows\system32\drivers\msahci.sys
                16:16:19.0727 8028 msahci - ok
                16:16:19.0751 8028 [ 4468B0F385A86ECDDAF8D3CA662EC0E7 ] msdsm C:\Windows\system32\drivers\msdsm.sys
                16:16:19.0753 8028 msdsm - ok
                16:16:19.0779 8028 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
                16:16:19.0783 8028 MSDTC - ok
                16:16:19.0841 8028 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
                16:16:19.0842 8028 Msfs - ok
                16:16:19.0902 8028 [ 3C1440DD26E8E2BF9B69A65402611C8C ] MsgPlusDriver C:\Windows\system32\DRIVERS\MsgPlusDriver.sys
                16:16:19.0903 8028 MsgPlusDriver - ok
                16:16:19.0992 8028 [ 3F3D6E8BD31B3C017D0AB24CD5EC0D05 ] MsgPlusService C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
                16:16:19.0995 8028 MsgPlusService - ok
                16:16:20.0035 8028 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
                16:16:20.0036 8028 msisadrv - ok
                16:16:20.0064 8028 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
                16:16:20.0068 8028 MSiSCSI - ok
                16:16:20.0074 8028 msiserver - ok
                16:16:20.0123 8028 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
                16:16:20.0124 8028 MSKSSRV - ok
                16:16:20.0160 8028 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
                16:16:20.0161 8028 MSPCLOCK - ok
                16:16:20.0198 8028 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
                16:16:20.0200 8028 MSPQM - ok
                16:16:20.0243 8028 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
                16:16:20.0245 8028 MsRPC - ok
                16:16:20.0262 8028 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
                16:16:20.0264 8028 mssmbios - ok
                16:16:20.0291 8028 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
                16:16:20.0292 8028 MSTEE - ok
                16:16:20.0312 8028 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
                16:16:20.0314 8028 Mup - ok
                16:16:20.0357 8028 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
                16:16:20.0367 8028 napagent - ok
                16:16:20.0420 8028 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
                16:16:20.0422 8028 NativeWifiP - ok
                16:16:20.0452 8028 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
                16:16:20.0464 8028 NDIS - ok
                16:16:20.0495 8028 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
                16:16:20.0497 8028 NdisTapi - ok
                16:16:20.0504 8028 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
                16:16:20.0507 8028 Ndisuio - ok
                16:16:20.0559 8028 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
                16:16:20.0561 8028 NdisWan - ok
                16:16:20.0571 8028 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
                16:16:20.0573 8028 NDProxy - ok
                16:16:20.0612 8028 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
                16:16:20.0613 8028 NetBIOS - ok
                16:16:20.0635 8028 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
                16:16:20.0638 8028 netbt - ok
                16:16:20.0647 8028 [ 3978F3540329E16C0AC3BCF677E5669F ] Netlogon C:\Windows\system32\lsass.exe
                16:16:20.0652 8028 Netlogon - ok
                16:16:20.0708 8028 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
                16:16:20.0719 8028 Netman - ok
                16:16:20.0760 8028 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
                16:16:20.0768 8028 netprofm - ok
                16:16:20.0801 8028 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
                16:16:20.0802 8028 NetTcpPortSharing - ok
                16:16:20.0923 8028 [ 8DE67BD902095A13329FD82C85A1FA09 ] NETw5v32 C:\Windows\system32\DRIVERS\NETw5v32.sys
                16:16:20.0967 8028 NETw5v32 - ok
                16:16:21.0039 8028 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
                16:16:21.0040 8028 nfrd960 - ok
                16:16:21.0059 8028 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
                16:16:21.0067 8028 NlaSvc - ok
                16:16:21.0158 8028 [ FD306FBCCE7ADB1077B709742E7148E9 ] NMSAccessU C:\Program Files\CDBurnerXP\NMSAccessU.exe
                16:16:21.0160 8028 NMSAccessU - ok
                16:16:21.0183 8028 [ F44ADDBF29905CB19F52FC9FE6A0EFA1 ] nosGetPlusHelper C:\Program Files\NOS\bin\getPlus_Helper_3004.dll
                16:16:21.0184 8028 nosGetPlusHelper - ok
                16:16:21.0216 8028 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
                16:16:21.0217 8028 Npfs - ok
                16:16:21.0226 8028 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
                16:16:21.0233 8028 nsi - ok
                16:16:21.0251 8028 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
                16:16:21.0252 8028 nsiproxy - ok
                16:16:21.0314 8028 [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
                16:16:21.0326 8028 Ntfs - ok
                16:16:21.0358 8028 [ A2B6583A5652A385DFF5E4F49AD48761 ] NTIBackupSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
                16:16:21.0360 8028 NTIBackupSvc - ok
                16:16:21.0378 8028 [ 2757D2BA59AEE155209E24942AB127C9 ] NTIDrvr C:\Windows\system32\DRIVERS\NTIDrvr.sys
                16:16:21.0379 8028 NTIDrvr - ok
                16:16:21.0479 8028 [ 547BFA3591C70674B0BFC99354AB78B3 ] NTIPPKernel C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys
                16:16:21.0480 8028 NTIPPKernel - ok
                16:16:21.0500 8028 [ 40B87FE8A1A9A5AC9E5A91D96F212BCD ] NTISchedulerSvc C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
                16:16:21.0503 8028 NTISchedulerSvc - ok
                16:16:21.0520 8028 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
                16:16:21.0522 8028 ntrigdigi - ok
                16:16:21.0548 8028 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
                16:16:21.0549 8028 Null - ok
                16:16:21.0583 8028 [ 2C7AC27710E8D41C1EB7D1599187D237 ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
                16:16:21.0584 8028 NVHDA - ok
                16:16:21.0805 8028 [ CB0D6F8F65B8766FF2AAAA78881FD9F8 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
                16:16:21.0883 8028 nvlddmkm - ok
                16:16:21.0909 8028 [ 2EDF9E7751554B42CBB60116DE727101 ] nvraid C:\Windows\system32\drivers\nvraid.sys
                16:16:21.0912 8028 nvraid - ok
                16:16:21.0941 8028 [ ABED0C09758D1D97DB0042DBB2688177 ] nvstor C:\Windows\system32\drivers\nvstor.sys
                16:16:21.0942 8028 nvstor - ok
                16:16:21.0961 8028 [ 15315BB51E9025FE41B482681C6E7BA2 ] nvsvc C:\Windows\system32\nvvsvc.exe
                16:16:21.0968 8028 nvsvc - ok
                16:16:21.0991 8028 [ 18BBDF913916B71BD54575BDB6EEAC0B ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
                16:16:21.0992 8028 nv_agp - ok
                16:16:21.0999 8028 NwlnkFlt - ok
                16:16:22.0010 8028 NwlnkFwd - ok
                16:16:22.0096 8028 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
                16:16:22.0099 8028 odserv - ok
                16:16:22.0132 8028 [ BE32DA025A0BE1878F0EE8D6D9386CD5 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
                16:16:22.0133 8028 ohci1394 - ok
                16:16:22.0165 8028 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
                16:16:22.0167 8028 ose - ok
                16:16:22.0231 8028 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
                16:16:22.0244 8028 p2pimsvc - ok
                16:16:22.0287 8028 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
                16:16:22.0300 8028 p2psvc - ok
                16:16:22.0379 8028 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
                16:16:22.0380 8028 Parport - ok
                16:16:22.0421 8028 [ 57389FA59A36D96B3EB09D0CB91E9CDC ] partmgr C:\Windows\system32\drivers\partmgr.sys
                16:16:22.0422 8028 partmgr - ok
                16:16:22.0444 8028 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
                16:16:22.0446 8028 Parvdm - ok
                16:16:22.0477 8028 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
                16:16:22.0482 8028 PcaSvc - ok
                16:16:22.0510 8028 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
                16:16:22.0512 8028 pci - ok
                16:16:22.0534 8028 [ FC175F5DDAB666D7F4D17449A547626F ] pciide C:\Windows\system32\drivers\pciide.sys
                16:16:22.0536 8028 pciide - ok
                16:16:22.0555 8028 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
                16:16:22.0557 8028 pcmcia - ok
                16:16:22.0620 8028 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
                16:16:22.0629 8028 PEAUTH - ok
                16:16:22.0715 8028 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
                16:16:22.0733 8028 pla - ok
                16:16:22.0754 8028 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
                16:16:22.0776 8028 PlugPlay - ok
                16:16:22.0810 8028 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
                16:16:22.0821 8028 PNRPAutoReg - ok
                16:16:22.0858 8028 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
                16:16:22.0875 8028 PNRPsvc - ok
                16:16:22.0901 8028 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
                16:16:22.0911 8028 PolicyAgent - ok
                16:16:22.0929 8028 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
                16:16:22.0931 8028 PptpMiniport - ok
                16:16:22.0958 8028 [ 2027293619DD0F047C584CF2E7DF4FFD ] Processor C:\Windows\system32\drivers\processr.sys
                16:16:22.0960 8028 Processor - ok
                16:16:22.0981 8028 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
                16:16:22.0990 8028 ProfSvc - ok
                16:16:23.0008 8028 [ 3978F3540329E16C0AC3BCF677E5669F ] ProtectedStorage C:\Windows\system32\lsass.exe
                16:16:23.0013 8028 ProtectedStorage - ok
                16:16:23.0056 8028 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
                16:16:23.0058 8028 PSched - ok
                16:16:23.0098 8028 [ 1DCBB35090CC4B2BD3D661E6089523C6 ] PSDFilter C:\Windows\system32\DRIVERS\psdfilter.sys
                16:16:23.0100 8028 PSDFilter - ok
                16:16:23.0125 8028 [ E26E46D619469964AC3609620F443867 ] PSDNServ C:\Windows\system32\drivers\PSDNServ.sys
                16:16:23.0127 8028 PSDNServ - ok
                16:16:23.0159 8028 [ 3E1D134AF2806867D06047C4CC33CC65 ] psdvdisk C:\Windows\system32\drivers\psdvdisk.sys
                16:16:23.0160 8028 psdvdisk - ok
                16:16:23.0246 8028 [ 0A6DB55AFB7820C99AA1F3A1D270F4F6 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
                16:16:23.0258 8028 ql2300 - ok
                16:16:23.0290 8028 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
                16:16:23.0292 8028 ql40xx - ok
                16:16:23.0331 8028 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
                16:16:23.0337 8028 QWAVE - ok
                16:16:23.0383 8028 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
                16:16:23.0384 8028 QWAVEdrv - ok
                16:16:23.0409 8028 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
                16:16:23.0411 8028 RasAcd - ok
                16:16:23.0466 8028 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
                16:16:23.0473 8028 RasAuto - ok
                16:16:23.0501 8028 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
                16:16:23.0502 8028 Rasl2tp - ok
                16:16:23.0543 8028 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
                16:16:23.0552 8028 RasMan - ok
                16:16:23.0578 8028 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
                16:16:23.0579 8028 RasPppoe - ok
                16:16:23.0610 8028 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
                16:16:23.0611 8028 RasSstp - ok
                16:16:23.0631 8028 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
                16:16:23.0634 8028 rdbss - ok
                16:16:23.0650 8028 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
                16:16:23.0652 8028 RDPCDD - ok
                16:16:23.0698 8028 [ FBC0BACD9C3D7F6956853F64A66E252D ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
                16:16:23.0700 8028 rdpdr - ok
                16:16:23.0707 8028 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
                16:16:23.0711 8028 RDPENCDD - ok
                16:16:23.0803 8028 [ 30BFBDFB7F95559EDE971F9DDB9A00BA ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
                16:16:23.0805 8028 RDPWD - ok
                16:16:23.0918 8028 [ 3FF45B7F17D5837216ABAE652CC61540 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
                16:16:23.0927 8028 RegSrvc - ok
                16:16:23.0985 8028 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
                16:16:23.0988 8028 RemoteAccess - ok
                16:16:24.0018 8028 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
                16:16:24.0024 8028 RemoteRegistry - ok
                16:16:24.0089 8028 [ 17E0BEF5CA5C9CE52CC8082AC6EBC449 ] RichVideo C:\Program Files\Cyberlink\Shared files\RichVideo.exe
                16:16:24.0094 8028 RichVideo - ok
                16:16:24.0120 8028 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
                16:16:24.0124 8028 RpcLocator - ok
                16:16:24.0172 8028 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
                16:16:24.0194 8028 RpcSs - ok
                16:16:24.0237 8028 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
                16:16:24.0239 8028 rspndr - ok
                16:16:24.0297 8028 [ 73835C4F79ADC404EF39C8A9E2D4183B ] RS_Service C:\Program Files\Acer\Acer VCM\RS_Service.exe
                16:16:24.0302 8028 RS_Service - ok
                16:16:24.0345 8028 [ 7A4F79DF3793160B280CDE152B61FE33 ] RTSTOR C:\Windows\system32\drivers\RTSTOR.SYS
                16:16:24.0346 8028 RTSTOR - ok
                16:16:24.0365 8028 [ 3978F3540329E16C0AC3BCF677E5669F ] SamSs C:\Windows\system32\lsass.exe
                16:16:24.0369 8028 SamSs - ok
                16:16:24.0411 8028 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
                16:16:24.0412 8028 sbp2port - ok
                16:16:24.0490 8028 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
                16:16:24.0525 8028 SBSDWSCService - ok
                16:16:24.0572 8028 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
                16:16:24.0577 8028 SCardSvr - ok
                16:16:24.0618 8028 [ 323AE0BDFD2EB15B668DDA50CC597329 ] Schedule C:\Windows\system32\schedsvc.dll
                16:16:24.0663 8028 Schedule - ok
                16:16:24.0704 8028 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
                16:16:24.0705 8028 SCPolicySvc - ok
                16:16:24.0733 8028 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
                16:16:24.0739 8028 SDRSVC - ok
                16:16:24.0778 8028 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
                16:16:24.0779 8028 secdrv - ok
                16:16:24.0795 8028 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
                16:16:24.0801 8028 seclogon - ok
                16:16:24.0836 8028 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
                16:16:24.0841 8028 SENS - ok
                16:16:24.0864 8028 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
                16:16:24.0867 8028 Serenum - ok
                16:16:24.0931 8028 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
                16:16:24.0933 8028 Serial - ok
                16:16:24.0952 8028 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
                16:16:24.0954 8028 sermouse - ok
                16:16:25.0012 8028 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
                16:16:25.0020 8028 SessionEnv - ok
                16:16:25.0034 8028 [ 3EFA810BDCA87F6ECC24F9832243FE86 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
                16:16:25.0036 8028 sffdisk - ok
                16:16:25.0053 8028 [ E95D451F7EA3E583AEC75F3B3EE42DC5 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
                16:16:25.0054 8028 sffp_mmc - ok
                16:16:25.0072 8028 [ 3D0EA348784B7AC9EA9BD9F317980979 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
                16:16:25.0074 8028 sffp_sd - ok
                16:16:25.0105 8028 [ C33BFBD6E9E41FCD9FFEF9729E9FAED6 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
                16:16:25.0107 8028 sfloppy - ok
                16:16:25.0148 8028 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
                16:16:25.0154 8028 SharedAccess - ok
                16:16:25.0178 8028 [ C818C44C201898399BF999BB6B35D4E3 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
                16:16:25.0189 8028 ShellHWDetection - ok
                16:16:25.0209 8028 [ 1D76624A09A054F682D746B924E2DBC3 ] sisagp C:\Windows\system32\drivers\sisagp.sys
                16:16:25.0210 8028 sisagp - ok
                16:16:25.0229 8028 [ 43CB7AA756C7DB280D01DA9B676CFDE2 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
                16:16:25.0230 8028 SiSRaid2 - ok
                16:16:25.0256 8028 [ A99C6C8B0BAA970D8AA59DDC50B57F94 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
                16:16:25.0257 8028 SiSRaid4 - ok
                16:16:25.0306 8028 [ 6128E98EAAED364ED1A32708D2FD22CB ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
                16:16:25.0308 8028 SkypeUpdate - ok
                16:16:25.0422 8028 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
                16:16:25.0553 8028 slsvc - ok
                16:16:25.0599 8028 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
                16:16:25.0605 8028 SLUINotify - ok
                16:16:25.0659 8028 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
                16:16:25.0661 8028 Smb - ok
                16:16:25.0748 8028 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
                16:16:25.0753 8028 SNMPTRAP - ok
                16:16:25.0768 8028 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
                16:16:25.0769 8028 spldr - ok
                16:16:25.0811 8028 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
                16:16:25.0818 8028 Spooler - ok
                16:16:25.0872 8028 [ 96A5E2C642AF8F591A7366429809506B ] srv C:\Windows\system32\DRIVERS\srv.sys
                16:16:25.0880 8028 srv - ok
                16:16:25.0904 8028 [ 71DA2D64880C97E5FFC3C81761632751 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
                16:16:25.0906 8028 srv2 - ok
                16:16:25.0925 8028 [ 0C5AB1892AE0FA504218DB094BF6D041 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
                16:16:25.0927 8028 srvnet - ok
                16:16:25.0982 8028 [ 64E44ACD8C238FCBBB78F0BA4BDC4B05 ] ssadbus C:\Windows\system32\DRIVERS\ssadbus.sys
                16:16:25.0983 8028 ssadbus - ok
                16:16:26.0014 8028 [ BB2C84A15C765DA89FD832B0E73F26CE ] ssadmdfl C:\Windows\system32\DRIVERS\ssadmdfl.sys
                16:16:26.0015 8028 ssadmdfl - ok
                16:16:26.0047 8028 [ 6D0D132DDC6F43EDA00DCED6D8B1CA31 ] ssadmdm C:\Windows\system32\DRIVERS\ssadmdm.sys
                16:16:26.0048 8028 ssadmdm - ok
                16:16:26.0074 8028 [ 1A5A397BC459F346AB56492B61EF79F6 ] ssadserd C:\Windows\system32\DRIVERS\ssadserd.sys
                16:16:26.0076 8028 ssadserd - ok
                16:16:26.0107 8028 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
                16:16:26.0116 8028 SSDPSRV - ok
                16:16:26.0150 8028 [ A36EE93698802CD899F98BFD553D8185 ] ssmdrv C:\Windows\system32\DRIVERS\ssmdrv.sys
                16:16:26.0151 8028 ssmdrv - ok
                16:16:26.0186 8028 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
                16:16:26.0194 8028 SstpSvc - ok
                16:16:26.0235 8028 [ E3D493BFB7CD108EC50B2F560C96367C ] ssudmdm C:\Windows\system32\DRIVERS\ssudmdm.sys
                16:16:26.0238 8028 ssudmdm - ok
                16:16:26.0261 8028 [ F1567D6CA46E2233AE626FB4FAABACEF ] ssudserd C:\Windows\system32\DRIVERS\ssudserd.sys
                16:16:26.0264 8028 ssudserd - ok
                16:16:26.0336 8028 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
                16:16:26.0360 8028 stisvc - ok
                16:16:26.0404 8028 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
                16:16:26.0406 8028 swenum - ok
                16:16:26.0446 8028 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
                16:16:26.0454 8028 swprv - ok
                16:16:26.0477 8028 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
                16:16:26.0478 8028 Symc8xx - ok
                16:16:26.0494 8028 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
                16:16:26.0496 8028 Sym_hi - ok
                16:16:26.0507 8028 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
                16:16:26.0509 8028 Sym_u3 - ok
                16:16:26.0537 8028 [ 4C9BB4B3B9EAC26211484C30B914C6DC ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
                16:16:26.0540 8028 SynTP - ok
                16:16:26.0586 8028 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
                16:16:26.0659 8028 SysMain - ok
                16:16:26.0713 8028 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
                16:16:26.0720 8028 TabletInputService - ok
                16:16:26.0775 8028 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
                16:16:26.0785 8028 TapiSrv - ok
                16:16:26.0808 8028 [ EA02D11234C29E3AF778081498072131 ] tbhsd C:\Windows\system32\drivers\tbhsd.sys
                16:16:26.0809 8028 tbhsd - ok
                16:16:26.0841 8028 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
                16:16:26.0848 8028 TBS - ok
                16:16:26.0904 8028 [ A474879AFA4A596B3A531F3E69730DBF ] Tcpip C:\Windows\system32\drivers\tcpip.sys
                16:16:26.0914 8028 Tcpip - ok
                16:16:26.0949 8028 [ A474879AFA4A596B3A531F3E69730DBF ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
                16:16:26.0957 8028 Tcpip6 - ok
                16:16:26.0995 8028 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
                16:16:26.0996 8028 tcpipreg - ok
                16:16:27.0027 8028 [ 72B9E77565DA5FA564581976E000D29B ] TcUsb C:\Windows\system32\Drivers\tcusb.sys
                16:16:27.0028 8028 TcUsb - ok
                16:16:27.0043 8028 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
                16:16:27.0045 8028 TDPIPE - ok
                16:16:27.0066 8028 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
                16:16:27.0068 8028 TDTCP - ok
                16:16:27.0102 8028 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
                16:16:27.0103 8028 tdx - ok
                16:16:27.0131 8028 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
                16:16:27.0133 8028 TermDD - ok
                16:16:27.0172 8028 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
                16:16:27.0194 8028 TermService - ok
                16:16:27.0212 8028 [ C818C44C201898399BF999BB6B35D4E3 ] Themes C:\Windows\system32\shsvcs.dll
                16:16:27.0220 8028 Themes - ok
                16:16:27.0230 8028 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
                16:16:27.0235 8028 THREADORDER - ok
                16:16:27.0272 8028 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
                16:16:27.0281 8028 TrkWks - ok
                16:16:27.0367 8028 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
                16:16:27.0368 8028 TrustedInstaller - ok
                16:16:27.0397 8028 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
                16:16:27.0398 8028 tssecsrv - ok
                16:16:27.0446 8028 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
                16:16:27.0447 8028 tunmp - ok
                16:16:27.0469 8028 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
                16:16:27.0470 8028 tunnel - ok
                16:16:27.0494 8028 [ 7D33C4DB2CE363C8518D2DFCF533941F ] uagp35 C:\Windows\system32\drivers\uagp35.sys
                16:16:27.0496 8028 uagp35 - ok
                16:16:27.0513 8028 [ F763E070843EE2803DE1395002B42938 ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
                16:16:27.0516 8028 UBHelper - ok
                16:16:27.0541 8028 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
                16:16:27.0543 8028 udfs - ok
                16:16:27.0589 8028 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
                16:16:27.0597 8028 UI0Detect - ok
                16:16:27.0614 8028 [ B0ACFDC9E4AF279E9116C03E014B2B27 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
                16:16:27.0615 8028 uliagpkx - ok
                16:16:27.0642 8028 [ 9224BB254F591DE4CA8D572A5F0D635C ] uliahci C:\Windows\system32\drivers\uliahci.sys
                16:16:27.0645 8028 uliahci - ok
                16:16:27.0671 8028 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
                16:16:27.0673 8028 UlSata - ok
                16:16:27.0699 8028 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
                16:16:27.0703 8028 ulsata2 - ok
                16:16:27.0739 8028 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
                16:16:27.0740 8028 umbus - ok
                16:16:27.0758 8028 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
                16:16:27.0779 8028 upnphost - ok
                16:16:27.0836 8028 [ 83CAFCB53201BBAC04D822F32438E244 ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys
                16:16:27.0837 8028 USBAAPL - ok
                16:16:27.0895 8028 [ 32DB9517628FF0D070682AAB61E688F0 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
                16:16:27.0896 8028 usbaudio - ok
                16:16:27.0940 8028 [ 5353218B3265E3B8190335059F697A11 ] usbbus C:\Windows\system32\DRIVERS\lgusbbus.sys
                16:16:27.0941 8028 usbbus - ok
                16:16:28.0003 8028 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
                16:16:28.0004 8028 usbccgp - ok
                16:16:28.0018 8028 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
                16:16:28.0020 8028 usbcir - ok
                16:16:28.0051 8028 [ 7DD3EEFC62A1EF44E5F940FA651ED9ED ] UsbDiag C:\Windows\system32\DRIVERS\lgusbdiag.sys
                16:16:28.0052 8028 UsbDiag - ok
                16:16:28.0084 8028 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
                16:16:28.0085 8028 usbehci - ok
                16:16:28.0116 8028 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
                16:16:28.0118 8028 usbhub - ok
                16:16:28.0144 8028 [ 083031A78822ECCBD7510BCCD3E20D4C ] USBModem C:\Windows\system32\DRIVERS\lgusbmodem.sys
                16:16:28.0145 8028 USBModem - ok
                16:16:28.0166 8028 [ 38DBC7DD6CC5A72011F187425384388B ] usbohci C:\Windows\system32\drivers\usbohci.sys
                16:16:28.0168 8028 usbohci - ok
                16:16:28.0192 8028 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
                16:16:28.0194 8028 usbprint - ok
                16:16:28.0222 8028 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
                16:16:28.0223 8028 usbscan - ok
                16:16:28.0248 8028 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
                16:16:28.0250 8028 USBSTOR - ok
                16:16:28.0288 8028 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
                16:16:28.0289 8028 usbuhci - ok
                16:16:28.0341 8028 [ E67998E8F14CB0627A769F6530BCB352 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
                16:16:28.0343 8028 usbvideo - ok
                16:16:28.0368 8028 [ 35C9095FA7076466AFBFC5B9EC4B779E ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys
                16:16:28.0369 8028 usb_rndisx - ok
                16:16:28.0446 8028 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
                16:16:28.0453 8028 UxSms - ok
                16:16:28.0501 8028 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
                16:16:28.0510 8028 vds - ok
                16:16:28.0540 8028 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
                16:16:28.0541 8028 vga - ok
                16:16:28.0559 8028 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
                16:16:28.0561 8028 VgaSave - ok
                16:16:28.0600 8028 [ 5D7159DEF58A800D5781BA3A879627BC ] viaagp C:\Windows\system32\drivers\viaagp.sys
                16:16:28.0602 8028 viaagp - ok
                16:16:28.0634 8028 [ C4F3A691B5BAD343E6249BD8C2D45DEE ] ViaC7 C:\Windows\system32\drivers\viac7.sys
                16:16:28.0636 8028 ViaC7 - ok
                16:16:28.0662 8028 [ AADF5587A4063F52C2C3FED7887426FC ] viaide C:\Windows\system32\drivers\viaide.sys
                16:16:28.0665 8028 viaide - ok
                16:16:28.0687 8028 [ 69503668AC66C77C
                1. je poste le rapport mais rien ne s'affiche
                  1. Je viens d'avertir la modération
                  2. ok merci tu me dis dès que je peux réessayer
                  3. Modérateur
                    C'est fait ;-)
                  4. merci :)
                2. Re
                  Le rapport n'est pas complet
                  Pour transmettre le rapport clique sur ce lien :

                  http://pjjoint.malekal.com/

                  https://www.cjoint.com/

                  Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier (Fichier demandé )
                  Clique sur Ouvrir.

                  Clique sur "Cliquez ici pour déposer le fichier".

                  Un lien de cette forme :

                  http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

                  est ajouté dans la page.

                  Copie ce lien dans ta réponse.

                  @+
                  1. Re

                    [*] Télécharger sur le bureau https://www.luanagames.com/index.fr.html (by tigzy)
                    [*] Quitter tous les programmes
                    [*] Lancer RogueKiller.exe.
                    [*] Attendre que le Prescan ait fini ...
                    [*] Cliquer sur Scan. Cliquer sur Rapport et copier coller le contenu du rapport

                    @+
                    1. RogueKiller V8.0.2 [31/08/2012] par Tigzy
                      mail: tigzyRK<at>gmail<dot>com
                      Remontees: https://www.luanagames.com/index.fr.html
                      Blog: http://tigzyrk.blogspot.com

                      Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version
                      Demarrage : Mode normal
                      Utilisateur : Didouille [Droits d'admin]
                      Mode : Recherche -- Date : 10/09/2012 16:45:40

                      ¤¤¤ Processus malicieux : 0 ¤¤¤

                      ¤¤¤ Entrees de registre : 4 ¤¤¤
                      [Services][ROGUE ST] HKLM\[...]\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796} (\??\C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl) -> TROUVÉ
                      [Services][ROGUE ST] HKLM\[...]\ControlSet002\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796} (\??\C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl) -> TROUVÉ
                      [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ
                      [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ

                      ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

                      ¤¤¤ Driver : [CHARGE] ¤¤¤
                      SSDT[75] : NtCreateSection @ 0x82E33905 -> HOOKED (Unknown @ 0x92166076)
                      SSDT[276] : NtRequestWaitReplyPort @ 0x82E45AB0 -> HOOKED (Unknown @ 0x92166080)
                      SSDT[289] : NtSetContextThread @ 0x82E943C7 -> HOOKED (Unknown @ 0x9216607B)
                      SSDT[314] : NtSetSecurityObject @ 0x82DC1FE4 -> HOOKED (Unknown @ 0x92166085)
                      SSDT[332] : NtSystemDebugControl @ 0x82DFAB21 -> HOOKED (Unknown @ 0x9216608A)
                      SSDT[334] : NtTerminateProcess @ 0x82DF2DA3 -> HOOKED (Unknown @ 0x92166017)
                      S_SSDT[573] : Unknown -> HOOKED (Unknown @ 0x9216609E)
                      S_SSDT[576] : Unknown -> HOOKED (Unknown @ 0x921660A3)

                      ¤¤¤ Infection : ¤¤¤

                      ¤¤¤ Fichier HOSTS: ¤¤¤
                      --> C:\Windows\system32\drivers\etc\hosts

                      127.0.0.1 localhost
                      ::1 localhost
                      127.0.0.1 www.007guard.com
                      127.0.0.1 007guard.com
                      127.0.0.1 008i.com
                      127.0.0.1 www.008k.com
                      127.0.0.1 008k.com
                      127.0.0.1 www.00hq.com
                      127.0.0.1 00hq.com
                      127.0.0.1 010402.com
                      127.0.0.1 www.032439.com
                      127.0.0.1 032439.com
                      127.0.0.1 www.0scan.com
                      127.0.0.1 0scan.com
                      127.0.0.1 www.1000gratisproben.com
                      127.0.0.1 1000gratisproben.com
                      127.0.0.1 www.1001namen.com
                      127.0.0.1 1001namen.com
                      127.0.0.1 100888290cs.com
                      127.0.0.1 www.100888290cs.com
                      [...]

                      ¤¤¤ MBR Verif: ¤¤¤

                      +++++ PhysicalDrive0: WDC WD3200BEVT-22ZCT0 +++++
                      --- User ---
                      [MBR] 439289cfafedcd96ba742aa5e7b75865
                      [BSP] 6f0bec9b5003d811d4259f96da49e1d1 : Acer tatooed MBR Code
                      Partition table:
                      0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 10240 Mo
                      1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 20973568 | Size: 147501 Mo
                      2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 323055616 | Size: 143872 Mo
                      3 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 617705472 | Size: 3630 Mo
                      User = LL1 ... OK!
                      User = LL2 ... OK!

                      Termine : << RKreport[1].txt >>
                      RKreport[1].txt
                      1. Re

                        Relance Roguekiller option suppression et poste moi son rapport

                        @+
                        1. le voilà :

                          RogueKiller V8.0.2 [31/08/2012] par Tigzy
                          mail: tigzyRK<at>gmail<dot>com
                          Remontees: https://www.luanagames.com/index.fr.html
                          Blog: http://tigzyrk.blogspot.com

                          Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version
                          Demarrage : Mode normal
                          Utilisateur : Didouille [Droits d'admin]
                          Mode : Suppression -- Date : 10/09/2012 16:49:45

                          ¤¤¤ Processus malicieux : 0 ¤¤¤

                          ¤¤¤ Entrees de registre : 4 ¤¤¤
                          [Services][ROGUE ST] HKLM\[...]\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796} (\??\C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl) -> SUPPRIMÉ
                          [Services][ROGUE ST] HKLM\[...]\ControlSet002\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796} (\??\C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl) -> SUPPRIMÉ
                          [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REMPLACÉ (0)
                          [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REMPLACÉ (0)

                          ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

                          ¤¤¤ Driver : [CHARGE] ¤¤¤
                          SSDT[75] : NtCreateSection @ 0x82E33905 -> HOOKED (Unknown @ 0x92166076)
                          SSDT[276] : NtRequestWaitReplyPort @ 0x82E45AB0 -> HOOKED (Unknown @ 0x92166080)
                          SSDT[289] : NtSetContextThread @ 0x82E943C7 -> HOOKED (Unknown @ 0x9216607B)
                          SSDT[314] : NtSetSecurityObject @ 0x82DC1FE4 -> HOOKED (Unknown @ 0x92166085)
                          SSDT[332] : NtSystemDebugControl @ 0x82DFAB21 -> HOOKED (Unknown @ 0x9216608A)
                          SSDT[334] : NtTerminateProcess @ 0x82DF2DA3 -> HOOKED (Unknown @ 0x92166017)
                          S_SSDT[573] : Unknown -> HOOKED (Unknown @ 0x9216609E)
                          S_SSDT[576] : Unknown -> HOOKED (Unknown @ 0x921660A3)

                          ¤¤¤ Infection : ¤¤¤

                          ¤¤¤ Fichier HOSTS: ¤¤¤
                          --> C:\Windows\system32\drivers\etc\hosts

                          127.0.0.1 localhost
                          ::1 localhost
                          127.0.0.1 www.007guard.com
                          127.0.0.1 007guard.com
                          127.0.0.1 008i.com
                          127.0.0.1 www.008k.com
                          127.0.0.1 008k.com
                          127.0.0.1 www.00hq.com
                          127.0.0.1 00hq.com
                          127.0.0.1 010402.com
                          127.0.0.1 www.032439.com
                          127.0.0.1 032439.com
                          127.0.0.1 www.0scan.com
                          127.0.0.1 0scan.com
                          127.0.0.1 www.1000gratisproben.com
                          127.0.0.1 1000gratisproben.com
                          127.0.0.1 www.1001namen.com
                          127.0.0.1 1001namen.com
                          127.0.0.1 100888290cs.com
                          127.0.0.1 www.100888290cs.com
                          [...]

                          ¤¤¤ MBR Verif: ¤¤¤

                          +++++ PhysicalDrive0: WDC WD3200BEVT-22ZCT0 +++++
                          --- User ---
                          [MBR] 439289cfafedcd96ba742aa5e7b75865
                          [BSP] 6f0bec9b5003d811d4259f96da49e1d1 : Acer tatooed MBR Code
                          Partition table:
                          0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 10240 Mo
                          1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 20973568 | Size: 147501 Mo
                          2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 323055616 | Size: 143872 Mo
                          3 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 617705472 | Size: 3630 Mo
                          User = LL1 ... OK!
                          User = LL2 ... OK!

                          Termine : << RKreport[2].txt >>
                          RKreport[1].txt ; RKreport[2].txt
                          1. j'ai firefox et la pub c'est une petite fenêtre ou on doit noter un numéro de portable pour trouver là où il se trouve
                            1. merci bien c'est installé j'espère que ça va tout me bloquer

                              encore merci pour ton aide
                              1. Vois tu cette fameuse fenêtre?
                              2. non c'est bon elle n'apparaît plus :)
                            • 1
                            • 2