Ordi qui rame au bout de quelques minutes

bonjour, si tu as des rapport postes les ici pour le zhpdiag il faudra passer par un hébergeur !!

Pour me le transmettre clique sur ce lien :

https://www.cjoint.com/

Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\bureau\.ZHPDiag.txt

ou directement en choisissant bureau et ZHPDiag.txt clique dessus

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://cjoint.com/data/0KAoeRbq7Szgg.htm

est ajouté dans la page.

Copie ce lien dans ta réponse.

et si problème passe par celui ci : http://pjjoint.malekal.com/

Lien vers ZHP: https://www.cjoint.com/?0CjxQ3jpTDx

Pour les autres:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:42:08, on 06/03/2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\System32\hphmon05.exe
C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe
C:\Program Files\Hewlett-Packard\HP Software Update\hpwuschd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\Microsoft Money\System\REMINDER.EXE
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Users\Pierrette\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: La Barre de Shopping Mon Achat Malin MAE - {1EBBC21D-4919-4153-BB17-C0F325956360} - C:\Program Files\MAE Barre\MAETB.dll
O2 - BHO: continuetosave - {5671E04C-4B56-8244-F648-7203B1AD5B19} - C:\ProgramData\continuetosave\50f7f3c639c53.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: La Barre de Shopping Mon Achat Malin MAE - {1EBBC21D-4919-4153-BB17-C0F325956360} - C:\Program Files\MAE Barre\MAETB.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\Windows\System32\hphmon05.exe
O4 - HKLM\..\Run: [MobileConnect] %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Reminder] C:\Program Files\Microsoft Money\System\reminder.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Dropbox.lnk = C:\Users\Pierrette\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: c:\progra~1\contin~1\sprote~1.dll c:\progra~1\softqu~1\sprote~1.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: lxcz_device - - C:\Windows\system32\lxczcoms.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: O2FLASH (o2flash) - O2Micro International - C:\Windows\system32\DRIVERS\o2flash.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: BitDefender Update Server v2 (Update Server) - BitDefender - C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe
O23 - Service: BitDefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Mon fournisseur internet: orange

J'ai pu désactiver Nokia, mais pas HP sur Ccleaner. Je n'ai pas trouvé où c'était.

Quels programmes conseilles-tu de désactiver?

rapport ZHPfix

Rapport de ZHPFix 1.4.01 par Nicolas Coolman, Update du 02/03/2013
Fichier d'export Registre :
Run by Pierrette at 10/03/2013 12:49:55
High Elevated Privileges : OK
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)

Corbeille vidée

========== Logiciel(s) ==========
ABSENT Software Key: O42 - Logiciel: ContinueToSave 1,66 - (Pas-de-owner.). [HKLM] - SP_09b71135
ABSENT Software Key: O42 - Logiciel: continuetosave - [HKLM] - {C1C6816E-CBB3-A748-85F9-A8B47B68985B} (continuer à épargner.).

========== Processus mémoire ==========
SUPPRIME Memory Process: C:\windows\installer\{4bd271ab-66e2-4d58-af88-80fe3b0770c4}\arpproducticon.exe

========== Clé(s) du Registre ==========
SUPPRIME Key: CLSID BHO: {5671E04C-4B56-8244-F648-7203B1AD5B19}
SUPPRIME Key: CLSID: [HKLM\SOFTWARE\Classes\CLSID\{5671E04C-4B56-8244-F648-7203B1AD5B19}]
SUPPRIME Key: SearchScopes :{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
SUPPRIME Key: SearchScopes :{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
SUPPRIME Key: HKLM\Software\Classes\Installer\Products\BA172DB42E6685D4FA8808EFB370074C
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BA172DB42E6685D4FA8808EFB370074C
SUPPRIME Key: HKLM\Software\SP Global
SUPPRIME Key: HKCU\Software\AppDataLow\SProtector
SUPPRIME Key: HKLM\Software\SProtector
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{16726771-C380-4280-BAF9-1223B3838786}
ABSENT Key: \Software\Classes\Installer\Products\\BA172DB42E6685D4FA8808EFB370074C
SUPPRIME Key: \Software\Classes\Installer\Features\BA172DB42E6685D4FA8808EFB370074C

========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :
SUPPRIME FirewallRaz (None) : {C11F064B-4404-42DB-95E9-2C3AE47A9F5A}
SUPPRIME FirewallRaz (None) : {32368464-3566-4491-8696-A4D4F8D8F84A}

========== Préférences navigateur ==========
ABSENT Mozilla Pref: user_pref ("extensions.50853d2da2c07.scode", "(function () {try {if ('aol.com, mail.google.com, premiumreports.info, rechercher . babylon.com, se [...]
ABSENT Mozilla Pref: user_pref ("extensions.BabylonToolbar.prtkDS", 0);
ABSENT Mozilla Pref: user_pref ("extensions.BabylonToolbar.prtkHmpg", 0);
ABSENT Mozilla Pref: user_pref ("sweetim.toolbar.previous.browser.search.defaultenginename", "");
ABSENT Mozilla Pref: user_pref ("sweetim.toolbar.previous.browser.search.selectedEngine", "");
ABSENT Mozilla Pref: user_pref ("sweetim.toolbar.previous.browser.startup.homepage", "");
ABSENT Mozilla Pref: user_pref ("sweetim.toolbar.previous.keyword.URL", "");
ABSENT Mozilla Pref: user_pref ("sweetim.toolbar.scripts.1.domain-blacklist", "");
ABSENT Mozilla Pref: user_pref ("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
ABSENT Mozilla Pref: user_pref ("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
ABSENT Mozilla Pref: user_pref ("sweetim.toolbar.searchguard.enable", "");

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\Pierrette\AppData\Local\{03F7E8FD-CC68-4017-97C8-23A433FE5323}
SUPPRIME Folder: C:\Users\Pierrette\AppData\Local\{0C30403F-61DD-4BF7-97A4-CB49878581A0}
SUPPRIME Folder: C:\Users\Pierrette\AppData\Local\{1CAF22FF-C9A9-4AA2-BC92-88F5A1CA9B07}
SUPPRIME Folder: C:\Users\Pierrette\AppData\Local\{1E6F47C9-3C72-4813-89EB-F42566560434}
SUPPRIME Folder: C:\Users\Pierrette\AppData\Local\{8E1B53BE-4A46-473E-94A5-4798011E49D1}
SUPPRIME Folder: C:\Users\Pierrette\AppData\Local\{A56FDF5F-446F-4C7B-948C-BFF47452EC90}
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Fichier(s) ==========
SUPPRIME File: c:\windows\installer\{4bd271ab-66e2-4d58-af88-80fe3b0770c4}\arpproducticon.exe
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Restauration Système ==========
Point de restauration du système créé avec succès

========== Autre ==========
NON TRAITE [HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ App Management \ arpcache \ {4BD271AB-66E2-4D58-AF88-80FE3B0770C4}]
NON TRAITE [HKLM \ Software \ Classes \ AppID \ {AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}]
NON TRAITE [HKLM \ Software \ Classes \ BrowserConnection.Loader]
NON TRAITE [HKLM \ Software \ Classes \ BrowserConnection.Loader.1]

========== Récapitulatif ==========
1 : Processus mémoire
13 : Clé(s) du Registre
4 : Valeur(s) du Registre
8 : Dossier(s)
3 : Fichier(s)
2 : Logiciel(s)
11 : Préférences navigateur
1 : Restauration Système
4 : Autre

End of clean in 00mn 29s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 10/03/2013 12:49:55 [4711]

ADW:

# AdwCleaner v2.114 - Rapport créé le 10/03/2013 à 13:17:13
# Mis à jour le 05/03/2013 par Xplode
# Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Nom d'utilisateur : Pierrette - PC-DE-PIERRETTE
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Pierrette\Downloads\adwcleaner(1).exe
# Option [Suppression]

***** [Services] *****

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\ProgramData\InstallMate
Dossier Supprimé : C:\Windows\Installer\{4BD271AB-66E2-4D58-AF88-80FE3B0770C4}
Fichier Supprimé : C:\Users\Pierrette\AppData\Roaming\Mozilla\Firefox\Profiles\f2sedb9c.default\searchplugins\WebSearch.xml
Fichier Supprimé : C:\Windows\system32\bandoolmx.dll

***** [Registre] *****

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{4BD271AB-66E2-4D58-AF88-80FE3B0770C4}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Clé Supprimée : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Clé Supprimée : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
Clé Supprimée : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1
Clé Supprimée : HKLM\SOFTWARE\Classes\DnsBHO.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\DnsBHO.BHO.1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Donnée Supprimée : HKLM\..\Windows [AppInit_DLLs] = c:\progra~1\contin~1\sprote~1.dll
Donnée Supprimée : HKLM\..\Windows [AppInit_DLLs] = c:\progra~1\softqu~1\sprote~1.dll
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16464

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v19.0.2 (fr)

Fichier : C:\Users\Pierrette\AppData\Roaming\Mozilla\Firefox\Profiles\f2sedb9c.default\prefs.js

Supprimée : user_pref("aol_toolbar.default.homepage.check", false);
Supprimée : user_pref("aol_toolbar.default.search.check", false);
Supprimée : user_pref("browser.search.defaultenginename", "WebSearch");
Supprimée : user_pref("browser.search.defaultenginename,S", "WebSearch");
Supprimée : user_pref("browser.search.defaulturl", "hxxp://websearch.soft-quick.info/?l=1&q=");
Supprimée : user_pref("browser.search.order.1", "WebSearch");
Supprimée : user_pref("browser.search.order.1,S", "WebSearch");
Supprimée : user_pref("browser.search.selectedEngine,S", "WebSearch");
Supprimée : user_pref("extensions.50853d2da2c07.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
Supprimée : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Supprimée : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Supprimée : user_pref("keyword.URL", "hxxp://websearch.soft-quick.info/?l=1&q=");
Supprimée : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Supprimée : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Supprimée : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Supprimée : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Supprimée : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Supprimée : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Supprimée : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Supprimée : user_pref("sweetim.toolbar.searchguard.enable", "");

-\\ Google Chrome v [Impossible d'obtenir la version]

Fichier : C:\Users\Pierrette\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [7426 octets] - [06/12/2012 10:17:53]
AdwCleaner[S1].txt - [7522 octets] - [06/12/2012 10:18:30]
AdwCleaner[S2].txt - [4405 octets] - [10/03/2013 13:17:13]

########## EOF - C:\AdwCleaner[S2].txt - [4465 octets] ##########

https://www.cjoint.com/?0CkomL6txx0

Je suis chez Orange à la maison, mais chez SFR pendant les vacances? Et je me connecte un peu partout quand je me déplace.
C'est peut-être ces lignes O17?
J'attends ta réponse avant de faire le ZHPfix

Rapport de ZHPFix 1.4.01 par Nicolas Coolman, Update du 02/03/2013
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-10-03-2013-17-48-23.txt
Run by Pierrette at 10/03/2013 17:48:23
High Elevated Privileges : OK
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)

Corbeille vidée

========== Logiciel(s) ==========
ABSENT Software Key: O42 - Logiciel: ContinueToSave 1,66 - (Pas-de-owner.). [HKLM] - SP_09b71135
ABSENT Software Key: O42 - Logiciel: continuetosave - [HKLM] - {C1C6816E-CBB3-A748-85F9-A8B47B68985B} (continuer à épargner.).

========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Fichier(s) ==========
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Restauration Système ==========
Point de restauration du système créé avec succès

========== Autre ==========
NON TRAITE O4 - HKLM \ .. \ Run: [HP Software Update]. (Hewlett-Packard - Demande hpwuSchd..) - C: \ Program Files \ Hewlett-Packard \ HP Software Update \ HPWuSchd2.exe
NON TRAITE O4 - HKLM \ .. \ Run: [HPHUPD05]. (Hewlett-Packard - HPHupd05..) - C: \ Program Files \ Hewlett-Packard \ {45B6180B-DCAB-4093-8EE8-6164457517F0} \ hphupd05.exe
NON TRAITE O4 - HKLM \ .. \ Run: [HPHmon05]. (Hewlett-Packard - HPHmon05..) - C: \ Windows \ System32 \ hphmon05.exe
NON TRAITE O4 - HKLM \ .. \ Run: [SmpcSys]. (Packard Bell BV - SmpSys.exe..) - C: \ Program Files \ Packard Bell \ SetUpMyPC \ SmpSys.exe
NON TRAITE O4 - HKUS \ S-1-5-21-1373885897-1544458309-4143340730-1000 \ .. \ Run: [SmpcSys]. (Packard Bell BV - SmpSys.exe..) - C: \ Program Files \ Packard Bell \ SetUpMyPC \ SmpSys.exe
NON TRAITE O17 - HKLM \ System \ CCS \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}: DhcpNameServer
NON TRAITE O17 - HKLM \ System \ CCS \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}:
NON TRAITE O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}: DhcpNameServer
NON TRAITE O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}:
NON TRAITE O17 - HKLM \ System \ CS2 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}: DhcpNameServer
NON TRAITE O17 - HKLM \ System \ CS2 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}:
NON TRAITE O17 - HKLM \ System \ CS3 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}: DhcpNameServer
NON TRAITE O17 - HKLM \ System \ CS3 \ Services \ Tcpip \ .. \ {394D5774-C9F6-434E-B65A-53384F6EBFBD}:
NON TRAITE O17 - HKLM \ System \ CS3 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}:

========== Récapitulatif ==========
2 : Valeur(s) du Registre
3 : Dossier(s)
2 : Fichier(s)
2 : Logiciel(s)
1 : Restauration Système
14 : Autre

End of clean in 00mn 18s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 10/03/2013 12:49:55 [4763]
C:\ZHP\ZHPFix[R2].txt - 10/03/2013 17:48:23 [3090]

Oui, j'avais bien désactivé Bitdefender et le pare-feu de Windows.
Pour être sûre, j'ai recommencé et le résultat est le même:

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Fichier(s) ==========
SUPPRIME Temporaires Windows
SUPPRIME Flash Cookies

========== Restauration Système ==========
Point de restauration du système créé avec succès

========== Autre ==========
NON TRAITE O4 - HKLM \ .. \ Run: [HP Software Update]. (Hewlett-Packard - Demande hpwuSchd..) - C: \ Program Files \ Hewlett-Packard \ HP Software Update \ HPWuSchd2.exe
NON TRAITE O4 - HKLM \ .. \ Run: [HPHUPD05]. (Hewlett-Packard - HPHupd05..) - C: \ Program Files \ Hewlett-Packard \ {45B6180B-DCAB-4093-8EE8-6164457517F0} \ hphupd05.exe
NON TRAITE O4 - HKLM \ .. \ Run: [HPHmon05]. (Hewlett-Packard - HPHmon05..) - C: \ Windows \ System32 \ hphmon05.exe
NON TRAITE O4 - HKLM \ .. \ Run: [SmpcSys]. (Packard Bell BV - SmpSys.exe..) - C: \ Program Files \ Packard Bell \ SetUpMyPC \ SmpSys.exe
NON TRAITE O4 - HKUS \ S-1-5-21-1373885897-1544458309-4143340730-1000 \ .. \ Run: [SmpcSys]. (Packard Bell BV - SmpSys.exe..) - C: \ Program Files \ Packard Bell \ SetUpMyPC \ SmpSys.exe
NON TRAITE O17 - HKLM \ System \ CCS \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}: DhcpNameServer
NON TRAITE O17 - HKLM \ System \ CCS \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}:
NON TRAITE O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}: DhcpNameServer
NON TRAITE O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}:
NON TRAITE O17 - HKLM \ System \ CS2 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}: DhcpNameServer
NON TRAITE O17 - HKLM \ System \ CS2 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}:
NON TRAITE O17 - HKLM \ System \ CS3 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}: DhcpNameServer
NON TRAITE O17 - HKLM \ System \ CS3 \ Services \ Tcpip \ .. \ {394D5774-C9F6-434E-B65A-53384F6EBFBD}:
NON TRAITE O17 - HKLM \ System \ CS3 \ Services \ Tcpip \ .. \ {59140FED-17EB-4268-8DD6-F1C2F75A1B29}:

========== Récapitulatif ==========
2 : Valeur(s) du Registre
3 : Dossier(s)
2 : Fichier(s)
2 : Logiciel(s)
1 : Restauration Système
14 : Autre

End of clean in 01mn 50s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 10/03/2013 12:49:55 [4763]
C:\ZHP\ZHPFix[R2].txt - 10/03/2013 17:48:23 [3142]
C:\ZHP\ZHPFix[R3].txt - 10/03/2013 19:35:42 [3142]

Et voici le résultat de TDSSkiller: il n'a rien décelé je crois

19:23:08.0743 2348 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
19:23:13.0891 2348 Perform update action was selected
19:23:13.0907 4132 Deinitialize success

Suite plus tard, on a un gros orage, je vais couper ma box

Depuis la dernière fois, mon ordi remarche mieux; il faut dire que j'ai passé très peu de temps dessus et il n'a peut-être pas eu le loisir de se mettre à ramer.
Dois-je clore le sujet, quitte à refaire les manips conseillées en cas de récidive, ou me conseilles-tu de tester autre chose pour savoir ce qu'il en est exactement?

Merci encore

Oui, je t'avais envoyé le rapport plus haut.
Tu parles de mode sans échec; quelle analyse faire et comment?

De fait, il y a un second rapport sur mon bureau, bien plus long

19:25:46.0594 4560 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
19:25:48.0715 4560 ============================================================
19:25:48.0715 4560 Current date / time: 2013/03/10 19:25:48.0715
19:25:48.0715 4560 SystemInfo:
19:25:48.0715 4560
19:25:48.0715 4560 OS Version: 6.0.6002 ServicePack: 2.0
19:25:48.0715 4560 Product type: Workstation
19:25:48.0715 4560 ComputerName: PC-DE-PIERRETTE
19:25:49.0355 4560 UserName: Pierrette
19:25:49.0355 4560 Windows directory: C:\Windows
19:25:49.0355 4560 System windows directory: C:\Windows
19:25:49.0651 4560 Processor architecture: Intel x86
19:25:49.0651 4560 Number of processors: 2
19:25:49.0651 4560 Page size: 0x1000
19:25:49.0651 4560 Boot type: Normal boot
19:25:49.0651 4560 ============================================================
19:26:01.0336 4560 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
19:26:01.0445 4560 ============================================================
19:26:01.0445 4560 \Device\Harddisk0\DR0:
19:26:01.0507 4560 MBR partitions:
19:26:01.0507 4560 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1801F5F, BlocksNum 0x1B9C3211
19:26:01.0507 4560 ============================================================
19:26:01.0835 4560 C: <-> \Device\Harddisk0\DR0\Partition1
19:26:01.0851 4560 ============================================================
19:26:01.0851 4560 Initialize success
19:26:01.0851 4560 ============================================================
19:26:16.0078 6080 ============================================================
19:26:16.0078 6080 Scan started
19:26:16.0078 6080 Mode: Manual;
19:26:16.0078 6080 ============================================================
19:26:20.0851 6080 ================ Scan system memory ========================
19:26:20.0851 6080 System memory - ok
19:26:20.0867 6080 ================ Scan services =============================
19:26:22.0240 6080 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
19:26:22.0318 6080 ACPI - ok
19:26:22.0879 6080 [ E8FE4FCE23D2809BD88BCC1D0F8408CE ] AdobeActiveFileMonitor6.0 C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
19:26:22.0926 6080 AdobeActiveFileMonitor6.0 - ok
19:26:23.0815 6080 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
19:26:23.0847 6080 AdobeARMservice - ok
19:26:24.0190 6080 [ 04F0FCAC69C7C71A3AC4EB97FAFC8303 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
19:26:24.0268 6080 adp94xx - ok
19:26:25.0048 6080 [ 60505E0041F7751BDBB80F88BF45C2CE ] adpahci C:\Windows\system32\drivers\adpahci.sys
19:26:25.0110 6080 adpahci - ok
19:26:25.0485 6080 [ 8A42779B02AEC986EAB64ECFC98F8BD7 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
19:26:25.0531 6080 adpu160m - ok
19:26:25.0672 6080 [ 241C9E37F8CE45EF51C3DE27515CA4E5 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
19:26:25.0703 6080 adpu320 - ok
19:26:25.0999 6080 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
19:26:26.0031 6080 AeLookupSvc - ok
19:26:26.0265 6080 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
19:26:26.0296 6080 AFD - ok
19:26:26.0514 6080 [ BE913403ED7219894B30E362FD8D4313 ] AFS C:\Windows\system32\drivers\AFS.sys
19:26:26.0514 6080 AFS - ok
19:26:26.0639 6080 [ 13F9E33747E6B41A3FF305C37DB0D360 ] agp440 C:\Windows\system32\drivers\agp440.sys
19:26:26.0655 6080 agp440 - ok
19:26:26.0733 6080 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
19:26:26.0748 6080 aic78xx - ok
19:26:26.0795 6080 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
19:26:26.0795 6080 ALG - ok
19:26:26.0873 6080 [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91 ] aliide C:\Windows\system32\drivers\aliide.sys
19:26:26.0873 6080 aliide - ok
19:26:26.0982 6080 [ C47344BC706E5F0B9DCE369516661578 ] amdagp C:\Windows\system32\drivers\amdagp.sys
19:26:27.0013 6080 amdagp - ok
19:26:27.0076 6080 [ 9B78A39A4C173FDBC1321E0DD659B34C ] amdide C:\Windows\system32\drivers\amdide.sys
19:26:27.0107 6080 amdide - ok
19:26:27.0185 6080 [ 18F29B49AD23ECEE3D2A826C725C8D48 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
19:26:27.0247 6080 AmdK7 - ok
19:26:27.0310 6080 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
19:26:27.0325 6080 AmdK8 - ok
19:26:27.0435 6080 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
19:26:27.0450 6080 Appinfo - ok
19:26:27.0528 6080 [ 5D2888182FB46632511ACEE92FDAD522 ] arc C:\Windows\system32\drivers\arc.sys
19:26:27.0544 6080 arc - ok
19:26:27.0653 6080 [ 5E2A321BD7C8B3624E41FDEC3E244945 ] arcsas C:\Windows\system32\drivers\arcsas.sys
19:26:27.0669 6080 arcsas - ok
19:26:27.0778 6080 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
19:26:27.0793 6080 AsyncMac - ok
19:26:27.0887 6080 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
19:26:27.0887 6080 atapi - ok
19:26:28.0074 6080 [ FCDDAEC04EEFB2D07265E8B16D43CC73 ] athrusb6 C:\Windows\system32\DRIVERS\athru6.sys
19:26:28.0168 6080 athrusb6 - ok
19:26:28.0527 6080 [ 4604DB6D5ECA6362873CC3A76D2204BA ] Ati External Event Utility C:\Windows\system32\Ati2evxx.exe
19:26:28.0605 6080 Ati External Event Utility - ok
19:26:29.0260 6080 [ 47DCF5D78C395159D72C65C25129FC44 ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys
19:26:29.0759 6080 atikmdag - ok
19:26:29.0993 6080 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
19:26:30.0055 6080 AudioEndpointBuilder - ok
19:26:30.0149 6080 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
19:26:30.0165 6080 Audiosrv - ok
19:26:30.0430 6080 [ 9AD5AA947569DB289CE81B1B1D47BA00 ] avc3 C:\Windows\system32\DRIVERS\avc3.sys
19:26:30.0477 6080 avc3 - ok
19:26:30.0757 6080 [ 7F9B99B564E7C9FBB6729ED95B5BBB24 ] avchv C:\Windows\system32\DRIVERS\avchv.sys
19:26:30.0851 6080 avchv - ok
19:26:31.0038 6080 [ 44A93102C687D6A491902F52B60CD4D2 ] avckf C:\Windows\system32\DRIVERS\avckf.sys
19:26:31.0054 6080 avckf - ok
19:26:31.0444 6080 [ 5EF7AC38B4A7DC80860D7FFAFAC78C36 ] bdfsfltr C:\Windows\system32\DRIVERS\bdfsfltr.sys
19:26:31.0506 6080 bdfsfltr - ok
19:26:31.0865 6080 [ F7D825F7E47D8A7865F5D2156B1B7A24 ] bdftdif C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdftdif.sys
19:26:31.0896 6080 bdftdif - ok
19:26:32.0068 6080 [ E260C0079B5C1107B87E98F356292004 ] bdsandbox C:\Windows\system32\drivers\bdsandbox.sys
19:26:32.0068 6080 bdsandbox - ok
19:26:32.0364 6080 [ A9A33963C8358979827D1A75B20C0423 ] bdselfpr C:\Program Files\Bitdefender\Bitdefender 2012\bdselfpr.sys
19:26:32.0427 6080 bdselfpr - ok
19:26:32.0567 6080 [ 375CD0B9F433465EC6F50D4DF44E9448 ] BDVEDISK C:\Windows\system32\DRIVERS\bdvedisk.sys
19:26:32.0583 6080 BDVEDISK - ok
19:26:32.0801 6080 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
19:26:32.0817 6080 Beep - ok
19:26:33.0097 6080 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
19:26:33.0129 6080 BFE - ok
19:26:33.0628 6080 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
19:26:33.0721 6080 BITS - ok
19:26:33.0846 6080 [ D4DF28447741FD3D953526E33A617397 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
19:26:33.0862 6080 blbdrive - ok
19:26:33.0987 6080 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
19:26:34.0049 6080 bowser - ok
19:26:34.0111 6080 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
19:26:34.0143 6080 BrFiltLo - ok
19:26:34.0189 6080 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
19:26:34.0205 6080 BrFiltUp - ok
19:26:34.0283 6080 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
19:26:34.0314 6080 Browser - ok
19:26:34.0392 6080 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
19:26:34.0423 6080 Brserid - ok
19:26:34.0486 6080 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
19:26:34.0517 6080 BrSerWdm - ok
19:26:34.0579 6080 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
19:26:34.0626 6080 BrUsbMdm - ok
19:26:34.0673 6080 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
19:26:34.0704 6080 BrUsbSer - ok
19:26:34.0767 6080 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
19:26:34.0782 6080 BTHMODEM - ok
19:26:34.0876 6080 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
19:26:34.0923 6080 cdfs - ok
19:26:35.0079 6080 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
19:26:35.0079 6080 cdrom - ok
19:26:35.0266 6080 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
19:26:35.0281 6080 CertPropSvc - ok
19:26:35.0359 6080 [ E5D4133F37219DBCFE102BC61072589D ] circlass C:\Windows\system32\drivers\circlass.sys
19:26:35.0406 6080 circlass - ok
19:26:35.0515 6080 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
19:26:35.0547 6080 CLFS - ok
19:26:35.0749 6080 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:26:35.0765 6080 clr_optimization_v2.0.50727_32 - ok
19:26:35.0999 6080 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:26:36.0030 6080 clr_optimization_v4.0.30319_32 - ok
19:26:36.0171 6080 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
19:26:36.0202 6080 CmBatt - ok
19:26:36.0373 6080 [ 0CA25E686A4928484E9FDABD168AB629 ] cmdide C:\Windows\system32\drivers\cmdide.sys
19:26:36.0420 6080 cmdide - ok
19:26:36.0717 6080 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
19:26:36.0732 6080 Compbatt - ok
19:26:36.0888 6080 COMSysApp - ok
19:26:37.0200 6080 [ 741E9DFF4F42D2D8477D0FC1DC0DF871 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
19:26:37.0231 6080 crcdisk - ok
19:26:37.0372 6080 [ 1F07BECDCA750766A96CDA811BA86410 ] Crusoe C:\Windows\system32\drivers\crusoe.sys
19:26:37.0403 6080 Crusoe - ok
19:26:37.0653 6080 [ F1E8C34892336D33EDDCDFE44E474F64 ] CryptSvc C:\Windows\system32\cryptsvc.dll
19:26:37.0684 6080 CryptSvc - ok
19:26:38.0043 6080 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
19:26:38.0199 6080 DcomLaunch - ok
19:26:38.0526 6080 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
19:26:38.0635 6080 DfsC - ok
19:26:39.0322 6080 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
19:26:39.0883 6080 DFSR - ok
19:26:40.0195 6080 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
19:26:40.0242 6080 Dhcp - ok
19:26:40.0476 6080 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
19:26:40.0492 6080 disk - ok
19:26:40.0710 6080 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
19:26:40.0741 6080 Dnscache - ok
19:26:41.0163 6080 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
19:26:41.0272 6080 dot3svc - ok
19:26:41.0755 6080 [ 4F59C172C094E1A1D46463A8DC061CBD ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
19:26:41.0818 6080 Dot4 - ok
19:26:42.0379 6080 [ 80BF3BA09F6F2523C8F6B7CC6DBF7BD5 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
19:26:42.0395 6080 Dot4Print - ok
19:26:43.0081 6080 [ C55004CA6B419B6695970DFE849B122F ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
19:26:43.0097 6080 dot4usb - ok
19:26:43.0315 6080 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
19:26:43.0409 6080 DPS - ok
19:26:43.0674 6080 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
19:26:43.0690 6080 drmkaud - ok
19:26:43.0877 6080 [ F775CE0CFCDA4446A96FCE6C2D507FBB ] dvdfab C:\Windows\system32\drivers\dvdfab.sys
19:26:43.0908 6080 dvdfab - ok
19:26:44.0314 6080 [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
19:26:44.0485 6080 DXGKrnl - ok
19:26:45.0406 6080 [ 5425F74AC0C1DBD96A1E04F17D63F94C ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
19:26:45.0437 6080 E1G60 - ok
19:26:45.0874 6080 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
19:26:45.0921 6080 EapHost - ok
19:26:46.0201 6080 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
19:26:46.0248 6080 Ecache - ok
19:26:46.0560 6080 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
19:26:46.0638 6080 ehRecvr - ok
19:26:46.0872 6080 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
19:26:46.0919 6080 ehSched - ok
19:26:47.0091 6080 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
19:26:47.0231 6080 ehstart - ok
19:26:47.0465 6080 [ 23B62471681A124889978F6295B3F4C6 ] elxstor C:\Windows\system32\drivers\elxstor.sys
19:26:47.0574 6080 elxstor - ok
19:26:48.0120 6080 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
19:26:48.0261 6080 EMDMgmt - ok
19:26:48.0853 6080 [ 3DB974F3935483555D7148663F726C61 ] ErrDev C:\Windows\system32\drivers\errdev.sys
19:26:48.0900 6080 ErrDev - ok
19:26:49.0618 6080 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
19:26:49.0727 6080 EventSystem - ok
19:26:50.0382 6080 [ 82E7EB9F12321052CD9A904B13724EE2 ] ewusbnet C:\Windows\system32\DRIVERS\ewusbnet.sys
19:26:50.0429 6080 ewusbnet - ok
19:26:50.0819 6080 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
19:26:50.0881 6080 exfat - ok
19:26:51.0303 6080 [ 42F721C52EEF2D6DF9372A53813A83EF ] ezSharedSvc C:\Windows\System32\ezsvc7.dll
19:26:51.0334 6080 ezSharedSvc - ok
19:26:51.0490 6080 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
19:26:51.0864 6080 fastfat - ok
19:26:52.0301 6080 [ AFE1E8B9782A0DD7FB46BBD88E43F89A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
19:26:52.0317 6080 fdc - ok
19:26:52.0738 6080 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
19:26:52.0863 6080 fdPHost - ok
19:26:53.0253 6080 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
19:26:53.0268 6080 FDResPub - ok
19:26:53.0767 6080 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
19:26:53.0783 6080 FileInfo - ok
19:26:53.0908 6080 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
19:26:53.0955 6080 Filetrace - ok
19:26:54.0438 6080 [ 3D9B36631032FDE0FFEA0DC0260E4E35 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
19:26:54.0657 6080 FLEXnet Licensing Service - ok
19:26:54.0969 6080 [ 85B7CF99D532820495D68D747FDA9EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
19:26:55.0000 6080 flpydisk - ok
19:26:55.0374 6080 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
19:26:55.0468 6080 FltMgr - ok
19:26:56.0107 6080 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
19:26:56.0310 6080 FontCache - ok
19:26:56.0513 6080 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
19:26:56.0529 6080 FontCache3.0.0.0 - ok
19:26:56.0669 6080 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
19:26:56.0685 6080 Fs_Rec - ok
19:26:56.0809 6080 [ 34582A6E6573D54A07ECE5FE24A126B5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
19:26:56.0825 6080 gagp30kx - ok
19:26:57.0012 6080 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
19:26:57.0075 6080 gpsvc - ok
19:26:57.0340 6080 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
19:26:57.0355 6080 gupdate - ok
19:26:57.0558 6080 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
19:26:57.0558 6080 gupdatem - ok
19:26:57.0730 6080 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
19:26:57.0761 6080 HdAudAddService - ok
19:26:57.0995 6080 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
19:26:58.0057 6080 HDAudBus - ok
19:26:58.0167 6080 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
19:26:58.0167 6080 HidBth - ok
19:26:58.0323 6080 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
19:26:58.0354 6080 HidIr - ok
19:26:58.0479 6080 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\system32\hidserv.dll
19:26:58.0541 6080 hidserv - ok
19:26:58.0713 6080 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
19:26:58.0728 6080 HidUsb - ok
19:26:58.0962 6080 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
19:26:58.0993 6080 hkmsvc - ok
19:26:59.0149 6080 [ 16EE7B23A009E00D835CDB79574A91A6 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
19:26:59.0165 6080 HpCISSs - ok
19:26:59.0446 6080 [ 5DA42D24712E00728CEA2342A65009B2 ] hpqcxs08 C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqcxs08.dll
19:26:59.0461 6080 hpqcxs08 - ok
19:26:59.0571 6080 [ D86A39BF100069444D026D22D9A6E555 ] hpqddsvc C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqddsvc.dll
19:26:59.0617 6080 hpqddsvc - ok
19:26:59.0805 6080 [ A04F4AC48895774A2CF9D1C9EAAACEF0 ] HPSLPSVC C:\Program Files\Hewlett-Packard\Digital Imaging\bin\HPSLPSVC32.DLL
19:26:59.0883 6080 HPSLPSVC - ok
19:27:00.0054 6080 [ 287A63BD8509BD78E7978823B38AFA81 ] HPZid412 C:\Windows\system32\DRIVERS\HPZid412.sys
19:27:00.0054 6080 HPZid412 - ok
19:27:00.0210 6080 [ 0B4FDA2657C3E0315EAA57F9C6D4FD1F ] HPZipr12 C:\Windows\system32\DRIVERS\HPZipr12.sys
19:27:00.0257 6080 HPZipr12 - ok
19:27:00.0444 6080 [ 29559DB25258B60510A60C4E470FCE32 ] HPZius12 C:\Windows\system32\DRIVERS\HPZius12.sys
19:27:00.0460 6080 HPZius12 - ok
19:27:00.0616 6080 [ F870AA3E254628EBEAFE754108D664DE ] HTTP C:\Windows\system32\drivers\HTTP.sys
19:27:00.0694 6080 HTTP - ok
19:27:00.0912 6080 [ 348C3A9D01E68A0222A246346924AA55 ] hwdatacard C:\Windows\system32\DRIVERS\ewusbmdm.sys
19:27:00.0959 6080 hwdatacard - ok
19:27:01.0224 6080 [ 460B1945C3E6B0419A76E1B507B90B71 ] hwusbfake C:\Windows\system32\DRIVERS\ewusbfake.sys
19:27:01.0240 6080 hwusbfake - ok
19:27:01.0365 6080 [ C6B032D69650985468160FC9937CF5B4 ] i2omp C:\Windows\system32\drivers\i2omp.sys
19:27:01.0443 6080 i2omp - ok
19:27:01.0630 6080 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
19:27:01.0661 6080 i8042prt - ok
19:27:01.0801 6080 [ 54155EA1B0DF185878E0FC9EC3AC3A14 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
19:27:01.0848 6080 iaStorV - ok
19:27:02.0098 6080 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:27:02.0207 6080 idsvc - ok
19:27:02.0441 6080 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
19:27:02.0457 6080 iirsp - ok
19:27:02.0909 6080 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
19:27:02.0971 6080 IKEEXT - ok
19:27:03.0580 6080 [ B8716D9677B04B82FA405C8C54954728 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
19:27:03.0814 6080 IntcAzAudAddService - ok
19:27:03.0939 6080 [ 83AA759F3189E6370C30DE5DC5590718 ] intelide C:\Windows\system32\drivers\intelide.sys
19:27:03.0954 6080 intelide - ok
19:27:04.0032 6080 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
19:27:04.0048 6080 intelppm - ok
19:27:04.0110 6080 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
19:27:04.0126 6080 IPBusEnum - ok
19:27:04.0219 6080 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:27:04.0235 6080 IpFilterDriver - ok
19:27:04.0375 6080 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
19:27:04.0438 6080 iphlpsvc - ok
19:27:04.0516 6080 IpInIp - ok
19:27:04.0594 6080 [ B25AAF203552B7B3491139D582B39AD1 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
19:27:04.0594 6080 IPMIDRV - ok
19:27:04.0672 6080 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
19:27:04.0703 6080 IPNAT - ok
19:27:04.0797 6080 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
19:27:04.0797 6080 IRENUM - ok
19:27:05.0062 6080 [ 6C70698A3E5C4376C6AB5C7C17FB0614 ] isapnp C:\Windows\system32\drivers\isapnp.sys
19:27:05.0077 6080 isapnp - ok
19:27:05.0374 6080 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
19:27:05.0405 6080 iScsiPrt - ok
19:27:05.0670 6080 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
19:27:05.0670 6080 iteatapi - ok
19:27:05.0795 6080 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
19:27:05.0811 6080 iteraid - ok
19:27:06.0154 6080 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
19:27:06.0169 6080 kbdclass - ok
19:27:06.0637 6080 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
19:27:06.0669 6080 kbdhid - ok
19:27:07.0261 6080 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
19:27:07.0371 6080 KeyIso - ok
19:27:08.0057 6080 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
19:27:08.0244 6080 KSecDD - ok
19:27:08.0743 6080 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
19:27:08.0993 6080 KtmRm - ok
19:27:09.0305 6080 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\system32\srvsvc.dll
19:27:09.0430 6080 LanmanServer - ok
19:27:09.0882 6080 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
19:27:09.0991 6080 LanmanWorkstation - ok
19:27:10.0335 6080 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
19:27:10.0366 6080 lltdio - ok
19:27:10.0678 6080 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
19:27:10.0771 6080 lltdsvc - ok
19:27:10.0990 6080 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
19:27:11.0037 6080 lmhosts - ok
19:27:11.0411 6080 [ C7E15E82879BF3235B559563D4185365 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
19:27:11.0458 6080 LSI_FC - ok
19:27:11.0739 6080 [ EE01EBAE8C9BF0FA072E0FF68718920A ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
19:27:11.0770 6080 LSI_SAS - ok
19:27:12.0082 6080 [ 912A04696E9CA30146A62AFA1463DD5C ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
19:27:12.0113 6080 LSI_SCSI - ok
19:27:12.0378 6080 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
19:27:12.0409 6080 luafv - ok
19:27:12.0565 6080 lxcz_device - ok
19:27:13.0018 6080 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
19:27:13.0033 6080 MBAMProtector - ok
19:27:13.0408 6080 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
19:27:13.0517 6080 MBAMScheduler - ok
19:27:13.0720 6080 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
19:27:13.0845 6080 MBAMService - ok
19:27:14.0219 6080 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
19:27:14.0313 6080 Mcx2Svc - ok
19:27:14.0703 6080 [ 0001CE609D66632FA17B84705F658879 ] megasas C:\Windows\system32\drivers\megasas.sys
19:27:14.0749 6080 megasas - ok
19:27:14.0921 6080 [ C252F32CD9A49DBFC25ECF26EBD51A99 ] MegaSR C:\Windows\system32\drivers\megasr.sys
19:27:15.0186 6080 MegaSR - ok
19:27:15.0561 6080 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
19:27:15.0670 6080 MMCSS - ok
19:27:16.0122 6080 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
19:27:16.0138 6080 Modem - ok
19:27:16.0481 6080 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
19:27:16.0637 6080 monitor - ok
19:27:17.0011 6080 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
19:27:17.0027 6080 mouclass - ok
19:27:17.0401 6080 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
19:27:17.0417 6080 mouhid - ok
19:27:17.0776 6080 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
19:27:17.0838 6080 MountMgr - ok
19:27:18.0228 6080 [ 8A7C8F4C713E70D73946833D76B77035 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
19:27:18.0244 6080 MozillaMaintenance - ok
19:27:18.0696 6080 [ 511D011289755DD9F9A7579FB0B064E6 ] mpio C:\Windows\system32\drivers\mpio.sys
19:27:18.0759 6080 mpio - ok
19:27:18.0993 6080 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
19:27:19.0227 6080 mpsdrv - ok
19:27:19.0585 6080 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
19:27:19.0819 6080 MpsSvc - ok
19:27:20.0116 6080 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
19:27:20.0194 6080 Mraid35x - ok
19:27:20.0709 6080 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
19:27:20.0740 6080 MRxDAV - ok
19:27:21.0270 6080 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
19:27:21.0301 6080 mrxsmb - ok
19:27:21.0676 6080 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
19:27:21.0769 6080 mrxsmb10 - ok
19:27:22.0144 6080 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
19:27:22.0222 6080 mrxsmb20 - ok
19:27:22.0627 6080 [ 5457DCFA7C0DA43522F4D9D4049C1472 ] msahci C:\Windows\system32\drivers\msahci.sys
19:27:22.0643 6080 msahci - ok
19:27:22.0939 6080 [ 4468B0F385A86ECDDAF8D3CA662EC0E7 ] msdsm C:\Windows\system32\drivers\msdsm.sys
19:27:22.0971 6080 msdsm - ok
19:27:23.0142 6080 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
19:27:23.0205 6080 MSDTC - ok
19:27:23.0719 6080 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
19:27:23.0875 6080 Msfs - ok
19:27:24.0156 6080 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
19:27:24.0172 6080 msisadrv - ok
19:27:24.0484 6080 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
19:27:24.0546 6080 MSiSCSI - ok
19:27:24.0889 6080 msiserver - ok
19:27:25.0170 6080 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
19:27:25.0248 6080 MSKSSRV - ok
19:27:25.0701 6080 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
19:27:25.0716 6080 MSPCLOCK - ok
19:27:26.0231 6080 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
19:27:26.0309 6080 MSPQM - ok
19:27:26.0527 6080 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
19:27:26.0543 6080 MsRPC - ok
19:27:26.0824 6080 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
19:27:26.0855 6080 mssmbios - ok
19:27:27.0011 6080 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
19:27:27.0027 6080 MSTEE - ok
19:27:27.0136 6080 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
19:27:27.0151 6080 Mup - ok
19:27:27.0261 6080 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
19:27:27.0292 6080 napagent - ok
19:27:27.0417 6080 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
19:27:27.0448 6080 NativeWifiP - ok
19:27:27.0744 6080 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
19:27:27.0807 6080 NDIS - ok
19:27:27.0978 6080 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
19:27:27.0994 6080 NdisTapi - ok
19:27:28.0228 6080 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
19:27:28.0243 6080 Ndisuio - ok
19:27:28.0477 6080 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
19:27:28.0493 6080 NdisWan - ok
19:27:28.0571 6080 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
19:27:28.0633 6080 NDProxy - ok
19:27:28.0899 6080 [ C5052FB77AA42ED440F9F6B4E37145A9 ] Nero BackItUp Scheduler 3 C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
19:27:29.0008 6080 Nero BackItUp Scheduler 3 - ok
19:27:29.0133 6080 [ 80B7A96F908DA13617E7E6832C5C6A64 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
19:27:29.0148 6080 Net Driver HPZ12 - ok
19:27:29.0289 6080 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
19:27:29.0304 6080 NetBIOS - ok
19:27:29.0429 6080 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
19:27:29.0445 6080 netbt - ok
19:27:29.0554 6080 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
19:27:29.0569 6080 Netlogon - ok
19:27:29.0710 6080 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
19:27:29.0819 6080 Netman - ok
19:27:29.0975 6080 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
19:27:30.0006 6080 netprofm - ok
19:27:30.0162 6080 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:27:30.0193 6080 NetTcpPortSharing - ok
19:27:30.0427 6080 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
19:27:30.0443 6080 nfrd960 - ok
19:27:30.0568 6080 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
19:27:30.0630 6080 NlaSvc - ok
19:27:30.0849 6080 [ 4999D340B0D6B3E47666CF5E25C9C8F3 ] NMIndexingService C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
19:27:30.0927 6080 NMIndexingService - ok
19:27:31.0223 6080 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
19:27:31.0254 6080 Npfs - ok
19:27:31.0395 6080 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
19:27:31.0441 6080 nsi - ok
19:27:31.0566 6080 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
19:27:31.0582 6080 nsiproxy - ok
19:27:31.0878 6080 [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
19:27:32.0050 6080 Ntfs - ok
19:27:32.0175 6080 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
19:27:32.0175 6080 ntrigdigi - ok
19:27:32.0237 6080 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
19:27:32.0284 6080 Null - ok
19:27:32.0377 6080 [ 2EDF9E7751554B42CBB60116DE727101 ] nvraid C:\Windows\system32\drivers\nvraid.sys
19:27:32.0409 6080 nvraid - ok
19:27:32.0471 6080 [ ABED0C09758D1D97DB0042DBB2688177 ] nvstor C:\Windows\system32\drivers\nvstor.sys
19:27:32.0533 6080 nvstor - ok
19:27:32.0627 6080 [ 18BBDF913916B71BD54575BDB6EEAC0B ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
19:27:32.0658 6080 nv_agp - ok
19:27:32.0783 6080 NwlnkFlt - ok
19:27:32.0861 6080 NwlnkFwd - ok
19:27:33.0001 6080 [ 17EAF38406316785FBC0215BF959C01A ] o2flash C:\Windows\system32\DRIVERS\o2flash.exe
19:27:33.0017 6080 o2flash - ok
19:27:33.0173 6080 [ 8C5E9B66512541BE8E7FC97F0CD0F722 ] O2MDRDR C:\Windows\system32\DRIVERS\o2media.sys
19:27:33.0189 6080 O2MDRDR - ok
19:27:33.0360 6080 [ 6E590C91F97AE5E3408453C8AE9A3000 ] O2SDRDR C:\Windows\system32\DRIVERS\o2sd.sys
19:27:33.0360 6080 O2SDRDR - ok
19:27:33.0501 6080 [ 6F310E890D46E246E0E261A63D9B36B4 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
19:27:33.0563 6080 ohci1394 - ok
19:27:33.0719 6080 [ C18A238392F493BC5F4D01F837416C5F ] optousb C:\Windows\system32\DRIVERS\optousb.sys
19:27:33.0719 6080 optousb - ok
19:27:33.0906 6080 [ D99D4F1765CA2BF3D904E0A74F01963D ] optovcm C:\Windows\system32\DRIVERS\optovcm.sys
19:27:33.0906 6080 optovcm - ok
19:27:34.0093 6080 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
19:27:34.0234 6080 p2pimsvc - ok
19:27:34.0452 6080 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
19:27:34.0499 6080 p2psvc - ok
19:27:34.0593 6080 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
19:27:34.0655 6080 Parport - ok
19:27:34.0733 6080 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
19:27:34.0749 6080 partmgr - ok
19:27:34.0811 6080 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
19:27:34.0827 6080 Parvdm - ok
19:27:34.0905 6080 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
19:27:34.0967 6080 PcaSvc - ok
19:27:35.0107 6080 [ F451DCACBAA67F3307305EBD4A39EA07 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfd.sys
19:27:35.0107 6080 pccsmcfd - ok
19:27:35.0263 6080 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
19:27:35.0295 6080 pci - ok
19:27:35.0435 6080 [ FC175F5DDAB666D7F4D17449A547626F ] pciide C:\Windows\system32\drivers\pciide.sys
19:27:35.0466 6080 pciide - ok
19:27:35.0607 6080 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
19:27:35.0638 6080 pcmcia - ok
19:27:35.0856 6080 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
19:27:35.0950 6080 PEAUTH - ok
19:27:36.0683 6080 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
19:27:37.0260 6080 pla - ok
19:27:37.0572 6080 [ 875E4E0661F3A5994DF9E5E3A0A4F96B ] PLFlash DeviceIoControl Service C:\Windows\system32\IoctlSvc.exe
19:27:37.0697 6080 PLFlash DeviceIoControl Service - ok
19:27:38.0103 6080 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
19:27:38.0368 6080 PlugPlay - ok
19:27:38.0883 6080 [ 0C155C5D8942B3CBCF9506A9D376B9AD ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
19:27:38.0945 6080 Pml Driver HPZ12 - ok
19:27:39.0834 6080 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
19:27:40.0053 6080 PNRPAutoReg - ok
19:27:40.0583 6080 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
19:27:40.0692 6080 PNRPsvc - ok
19:27:41.0301 6080 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
19:27:41.0519 6080 PolicyAgent - ok
19:27:42.0003 6080 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
19:27:42.0034 6080 PptpMiniport - ok
19:27:42.0517 6080 [ 2027293619DD0F047C584CF2E7DF4FFD ] Processor C:\Windows\system32\drivers\processr.sys
19:27:42.0549 6080 Processor - ok
19:27:43.0095 6080 Profos - ok
19:27:43.0438 6080 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
19:27:43.0516 6080 ProfSvc - ok
19:27:43.0734 6080 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
19:27:43.0781 6080 ProtectedStorage - ok
19:27:44.0233 6080 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
19:27:44.0280 6080 PSched - ok
19:27:44.0748 6080 [ D86B4A68565E444D76457F14172C875A ] PxHelp20 C:\Windows\system32\Drivers\PxHelp20.sys
19:27:44.0779 6080 PxHelp20 - ok
19:27:45.0606 6080 [ 0A6DB55AFB7820C99AA1F3A1D270F4F6 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
19:27:45.0965 6080 ql2300 - ok
19:27:46.0137 6080 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
19:27:46.0261 6080 ql40xx - ok
19:27:46.0480 6080 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
19:27:46.0636 6080 QWAVE - ok
19:27:46.0885 6080 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
19:27:46.0979 6080 QWAVEdrv - ok
19:27:47.0197 6080 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
19:27:47.0213 6080 RasAcd - ok
19:27:47.0619 6080 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
19:27:47.0775 6080 RasAuto - ok
19:27:48.0087 6080 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
19:27:48.0180 6080 Rasl2tp - ok
19:27:48.0633 6080 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
19:27:49.0194 6080 RasMan - ok
19:27:49.0537 6080 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
19:27:49.0553 6080 RasPppoe - ok
19:27:49.0959 6080 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
19:27:49.0974 6080 RasSstp - ok
19:27:50.0349 6080 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
19:27:50.0411 6080 rdbss - ok
19:27:50.0676 6080 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
19:27:50.0707 6080 RDPCDD - ok
19:27:51.0051 6080 [ FBC0BACD9C3D7F6956853F64A66E252D ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
19:27:51.0113 6080 rdpdr - ok
19:27:51.0378 6080 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
19:27:51.0581 6080 RDPENCDD - ok
19:27:52.0252 6080 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
19:27:52.0377 6080 RDPWD - ok
19:27:53.0016 6080 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
19:27:53.0141 6080 RemoteAccess - ok
19:27:53.0391 6080 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
19:27:53.0515 6080 RemoteRegistry - ok
19:27:53.0983 6080 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
19:27:54.0061 6080 RpcLocator - ok
19:27:54.0576 6080 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
19:27:54.0717 6080 RpcSs - ok
19:27:55.0029 6080 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
19:27:55.0122 6080 rspndr - ok
19:27:55.0731 6080 [ 1AA29238D4B14F4A20B2C4AAEA6E0F6E ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIV.sys
19:27:55.0762 6080 RTHDMIAzAudService - ok
19:27:56.0167 6080 [ 2FC33077F85D7DC0D03678C06D43898C ] RTL8169 C:\Windows\system32\DRIVERS\Rtlh86.sys
19:27:56.0214 6080 RTL8169 - ok
19:27:56.0464 6080 [ E0EA9F5F94814F8A31F4B40175E1456E ] RTL8187B C:\Windows\system32\DRIVERS\RTL8187B.sys
19:27:56.0526 6080 RTL8187B - ok
19:27:56.0589 6080 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
19:27:56.0604 6080 SamSs - ok
19:27:56.0698 6080 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
19:27:56.0729 6080 sbp2port - ok
19:27:56.0854 6080 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
19:27:56.0932 6080 SCardSvr - ok
19:27:57.0072 6080 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
19:27:57.0150 6080 Schedule - ok
19:27:57.0213 6080 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
19:27:57.0213 6080 SCPolicySvc - ok
19:27:57.0306 6080 [ 126EA89BCC413EE45E3004FB0764888F ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
19:27:57.0322 6080 sdbus - ok
19:27:57.0384 6080 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
19:27:57.0852 6080 SDRSVC - ok
19:27:57.0977 6080 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\Windows\system32\drivers\SECDRV.SYS
19:27:58.0039 6080 Secdrv - ok
19:27:58.0117 6080 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
19:27:58.0180 6080 seclogon - ok
19:27:58.0273 6080 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\System32\sens.dll
19:27:58.0336 6080 SENS - ok
19:27:58.0507 6080 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
19:27:58.0554 6080 Serenum - ok
19:27:58.0726 6080 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
19:27:58.0757 6080 Serial - ok
19:27:58.0944 6080 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
19:27:58.0944 6080 sermouse - ok
19:27:59.0147 6080 [ E90CE237E99C5D26CB3872318A7799D0 ] ServiceLayer C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
19:27:59.0241 6080 ServiceLayer - ok
19:27:59.0506 6080 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
19:27:59.0537 6080 SessionEnv - ok
19:27:59.0584 6080 [ 3EFA810BDCA87F6ECC24F9832243FE86 ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
19:27:59.0615 6080 sffdisk - ok
19:27:59.0677 6080 [ E95D451F7EA3E583AEC75F3B3EE42DC5 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
19:27:59.0693 6080 sffp_mmc - ok
19:27:59.0740 6080 [ 3D0EA348784B7AC9EA9BD9F317980979 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
19:27:59.0755 6080 sffp_sd - ok
19:27:59.0833 6080 [ C33BFBD6E9E41FCD9FFEF9729E9FAED6 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
19:27:59.0833 6080 sfloppy - ok
19:27:59.0943 6080 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
19:27:59.0989 6080 SharedAccess - ok
19:28:00.0083 6080 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
19:28:00.0130 6080 ShellHWDetection - ok
19:28:00.0223 6080 [ 1D76624A09A054F682D746B924E2DBC3 ] sisagp C:\Windows\system32\drivers\sisagp.sys
19:28:00.0239 6080 sisagp - ok
19:28:00.0286 6080 [ 43CB7AA756C7DB280D01DA9B676CFDE2 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
19:28:00.0333 6080 SiSRaid2 - ok
19:28:00.0395 6080 [ A99C6C8B0BAA970D8AA59DDC50B57F94 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
19:28:00.0426 6080 SiSRaid4 - ok
19:28:00.0551 6080 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
19:28:00.0582 6080 SkypeUpdate - ok
19:28:00.0910 6080 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
19:28:01.0659 6080 slsvc - ok
19:28:01.0737 6080 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
19:28:01.0815 6080 SLUINotify - ok
19:28:01.0893 6080 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
19:28:01.0908 6080 Smb - ok
19:28:02.0111 6080 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
19:28:02.0173 6080 SNMPTRAP - ok
19:28:02.0251 6080 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
19:28:02.0283 6080 spldr - ok
19:28:02.0376 6080 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
19:28:02.0454 6080 Spooler - ok
19:28:02.0532 6080 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
19:28:02.0595 6080 srv - ok
19:28:02.0688 6080 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
19:28:02.0735 6080 srv2 - ok
19:28:02.0813 6080 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
19:28:02.0829 6080 srvnet - ok
19:28:02.0907 6080 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
19:28:02.0969 6080 SSDPSRV - ok
19:28:03.0172 6080 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
19:28:03.0265 6080 SstpSvc - ok
19:28:03.0421 6080 [ EF70B3D22B4BFFDA6EA851ECB063EFAA ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
19:28:03.0437 6080 StillCam - ok
19:28:03.0640 6080 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
19:28:03.0749 6080 stisvc - ok
19:28:03.0858 6080 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
19:28:03.0874 6080 swenum - ok
19:28:04.0014 6080 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
19:28:04.0061 6080 swprv - ok
19:28:04.0155 6080 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
19:28:04.0170 6080 Symc8xx - ok
19:28:04.0248 6080 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
19:28:04.0279 6080 Sym_hi - ok
19:28:04.0326 6080 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
19:28:04.0420 6080 Sym_u3 - ok
19:28:04.0482 6080 [ D2AA5D5FDB821EB5F9366C5E3BC2D9EA ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
19:28:04.0545 6080 SynTP - ok
19:28:04.0685 6080 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
19:28:04.0747 6080 SysMain - ok
19:28:04.0857 6080 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
19:28:04.0888 6080 TabletInputService - ok
19:28:05.0013 6080 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
19:28:05.0075 6080 TapiSrv - ok
19:28:05.0153 6080 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
19:28:05.0184 6080 TBS - ok
19:28:05.0325 6080 [ 74E2D020C47BB2B2FCCBA29A518A7EB4 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
19:28:05.0418 6080 Tcpip - ok
19:28:05.0559 6080 [ 74E2D020C47BB2B2FCCBA29A518A7EB4 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
19:28:05.0621 6080 Tcpip6 - ok
19:28:05.0730 6080 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
19:28:05.0730 6080 tcpipreg - ok
19:28:05.0808 6080 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
19:28:05.0871 6080 TDPIPE - ok
19:28:05.0933 6080 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
19:28:05.0980 6080 TDTCP - ok
19:28:06.0058 6080 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
19:28:06.0105 6080 tdx - ok
19:28:06.0183 6080 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
19:28:06.0245 6080 TermDD - ok
19:28:06.0339 6080 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
19:28:06.0526 6080 TermService - ok
19:28:06.0900 6080 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
19:28:07.0009 6080 Themes - ok
19:28:07.0181 6080 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
19:28:07.0259 6080 THREADORDER - ok
19:28:07.0446 6080 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
19:28:07.0540 6080 TrkWks - ok
19:28:07.0852 6080 [ 9016639C71328E4667D06119937AA20A ] trufos C:\Windows\system32\DRIVERS\trufos.sys
19:28:07.0914 6080 trufos - ok
19:28:08.0289 6080 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
19:28:08.0351 6080 TrustedInstaller - ok
19:28:08.0632 6080 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
19:28:08.0647 6080 tssecsrv - ok
19:28:08.0803 6080 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
19:28:08.0881 6080 tunmp - ok
19:28:09.0053 6080 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
19:28:09.0115 6080 tunnel - ok
19:28:09.0303 6080 [ 7D33C4DB2CE363C8518D2DFCF533941F ] uagp35 C:\Windows\system32\drivers\uagp35.sys
19:28:09.0349 6080 uagp35 - ok
19:28:09.0646 6080 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
19:28:09.0771 6080 udfs - ok
19:28:10.0254 6080 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
19:28:10.0348 6080 UI0Detect - ok
19:28:10.0597 6080 [ B0ACFDC9E4AF279E9116C03E014B2B27 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
19:28:10.0785 6080 uliagpkx - ok
19:28:11.0003 6080 [ 9224BB254F591DE4CA8D572A5F0D635C ] uliahci C:\Windows\system32\drivers\uliahci.sys
19:28:11.0128 6080 uliahci - ok
19:28:11.0518 6080 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
19:28:11.0611 6080 UlSata - ok
19:28:11.0814 6080 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
19:28:11.0861 6080 ulsata2 - ok
19:28:12.0157 6080 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
19:28:12.0173 6080 umbus - ok
19:28:12.0438 6080 [ 3CC00597A30B23757AA23CB677918BEF ] Update Server C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe
19:28:12.0501 6080 Update Server - ok
19:28:12.0969 6080 [ 03579BEC2E930B92EFD6D4E7F899CFF5 ] UPDATESRV C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
19:28:13.0015 6080 UPDATESRV - ok
19:28:13.0249 6080 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
19:28:13.0452 6080 upnphost - ok
19:28:13.0873 6080 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
19:28:13.0920 6080 usbccgp - ok
19:28:14.0107 6080 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
19:28:14.0185 6080 usbcir - ok
19:28:14.0388 6080 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
19:28:14.0404 6080 usbehci - ok
19:28:14.0653 6080 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
19:28:14.0731 6080 usbhub - ok
19:28:15.0075 6080 [ 0F8961A62E14643774ED9C8FC8BBDFB5 ] USBKey C:\Windows\system32\DRIVERS\usbkey.sys
19:28:15.0121 6080 USBKey - ok
19:28:15.0402 6080 [ 38DBC7DD6CC5A72011F187425384388B ] usbohci C:\Windows\system32\drivers\usbohci.sys
19:28:15.0449 6080 usbohci - ok
19:28:15.0714 6080 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
19:28:15.0792 6080 usbprint - ok
19:28:16.0026 6080 [ A508C9BD8724980512136B039BBA65E9 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
19:28:16.0042 6080 usbscan - ok
19:28:16.0213 6080 [ D575246188F63DE0ACCF6EAC5FB59E6A ] usbser C:\Windows\system32\drivers\usbser.sys
19:28:16.0260 6080 usbser - ok
19:28:16.0432 6080 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
19:28:16.0447 6080 USBSTOR - ok
19:28:16.0510 6080 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
19:28:16.0510 6080 usbuhci - ok
19:28:16.0635 6080 [ E67998E8F14CB0627A769F6530BCB352 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
19:28:16.0650 6080 usbvideo - ok
19:28:16.0775 6080 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
19:28:16.0806 6080 UxSms - ok
19:28:16.0915 6080 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
19:28:16.0993 6080 vds - ok
19:28:17.0071 6080 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
19:28:17.0149 6080 vga - ok
19:28:17.0212 6080 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
19:28:17.0243 6080 VgaSave - ok
19:28:17.0305 6080 [ 5D7159DEF58A800D5781BA3A879627BC ] viaagp C:\Windows\system32\drivers\viaagp.sys
19:28:17.0321 6080 viaagp - ok
19:28:17.0368 6080 [ C4F3A691B5BAD343E6249BD8C2D45DEE ] ViaC7 C:\Windows\system32\drivers\viac7.sys
19:28:17.0399 6080 ViaC7 - ok
19:28:17.0446 6080 [ AADF5587A4063F52C2C3FED7887426FC ] viaide C:\Windows\system32\drivers\viaide.sys
19:28:17.0508 6080 viaide - ok
19:28:17.0664 6080 [ 60C4B117ED03861379B2EE54EBFC8581 ] VMCService C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
19:28:17.0680 6080 VMCService - ok
19:28:17.0742 6080 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
19:28:17.0758 6080 volmgr - ok
19:28:17.0851 6080 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
19:28:17.0898 6080 volmgrx - ok
19:28:17.0992 6080 [ 786DB5771F05EF300390399F626BF30A ] volsnap C:\Windows\system32\drivers\volsnap.sys
19:28:18.0039 6080 volsnap - ok
19:28:18.0132 6080 [ 587253E09325E6BF226B299774B728A9 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
19:28:18.0163 6080 vsmraid - ok
19:28:18.0319 6080 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
19:28:18.0444 6080 VSS - ok
19:28:18.0491 6080 VSSERV - ok
19:28:18.0631 6080 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
19:28:18.0725 6080 W32Time - ok
19:28:18.0819 6080 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
19:28:18.0834 6080 WacomPen - ok
19:28:18.0897 6080 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
19:28:18.0928 6080 Wanarp - ok
19:28:18.0975 6080 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
19:28:18.0975 6080 Wanarpv6 - ok
19:28:19.0068 6080 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
19:28:19.0146 6080 wcncsvc - ok
19:28:19.0255 6080 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
19:28:19.0287 6080 WcsPlugInService - ok
19:28:19.0349 6080 [ 78FE9542363F297B18C027B2D7E7C07F ] Wd C:\Windows\system32\drivers\wd.sys
19:28:19.0365 6080 Wd - ok
19:28:19.0489 6080 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
19:28:19.0552 6080 Wdf01000 - ok
19:28:19.0614 6080 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
19:28:19.0661 6080 WdiServiceHost - ok
19:28:19.0708 6080 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
19:28:19.0723 6080 WdiSystemHost - ok
19:28:19.0801 6080 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
19:28:19.0848 6080 WebClient - ok
19:28:19.0989 6080 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
19:28:20.0035 6080 Wecsvc - ok
19:28:20.0113 6080 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
19:28:20.0145 6080 wercplsupport - ok
19:28:20.0254 6080 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
19:28:20.0301 6080 WerSvc - ok
19:28:20.0379 6080 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
19:28:20.0410 6080 WinDefend - ok
19:28:20.0472 6080 WinHttpAutoProxySvc - ok
19:28:20.0613 6080 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
19:28:20.0628 6080 Winmgmt - ok
19:28:20.0815 6080 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
19:28:20.0956 6080 WinRM - ok
19:28:21.0190 6080 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
19:28:21.0283 6080 Wlansvc - ok
19:28:21.0627 6080 [ 0A70F4022EC2E14C159EFC4F69AA2477 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:28:21.0720 6080 wlidsvc - ok
19:28:21.0829 6080 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
19:28:21.0845 6080 WmiAcpi - ok
19:28:21.0954 6080 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
19:28:21.0985 6080 wmiApSrv - ok
19:28:22.0126 6080 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
19:28:22.0219 6080 WMPNetworkSvc - ok
19:28:22.0297 6080 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
19:28:22.0344 6080 WPCSvc - ok
19:28:22.0438 6080 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
19:

voici le lien

https://www.cjoint.com/?3CpjYAj9wM9

Tant que j'ai un spécialiste sous la main, dois-je accepter le programma jucheck.exe de Oracle America, Inc.
Il semble que ce soit pour la mise à jour de Java, donc légitime, mais j'ai un doute.
Merci

J'ai du faire une bêtise; j'ai lancé Delfix, mais n'ai pas réussi à faire le clic droit sur le bureau et ai relancé Delfix; du coup, le rapport est très court...

# DelFix v10.1 - Rapport créé le 15/03/2013 à 18:23:34
# Mis à jour le 23/02/2013 par Xplode
# Nom d'utilisateur : Pierrette - PC-DE-PIERRETTE

~ Suppression des outils de désinfection ...

########## - EOF - ##########

Je passe maintenant à la suite

ComboFix 13-03-15.01 - Pierrette 15/03/2013 20:17:14.2.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3066.1922 [GMT 1:00]
Lancé depuis: c:\users\Pierrette\Downloads\ComboFix.exe
AV: Bitdefender Antivirus *Disabled/Updated* {98CD50CE-5097-4098-9669-6C401FB3969C}
FW: Bitdefender Pare-feu *Disabled* {A0F6D1EB-1AF8-41C0-BD36-C575E160D1E7}
SP: Bitdefender Antispyware *Disabled/Updated* {23ACB12A-76AD-4F16-ACD9-57326434DC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\etc\hosts.ics
.
---- Exécution préalable -------
.
C:\DSC00871.JPG
C:\DSC00905.JPG
C:\DSC00912.JPG
c:\program files\Internet Explorer\minftnet.exe
c:\program files\Internet Explorer\minftnet.ini
c:\programdata\1351330537.bdinstall.bin
c:\users\Pierrette\Documents\~WRL1649.tmp
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\system32\rnaph.dll
c:\windows\system32\SET2321.tmp
c:\windows\wininit.ini
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2013-02-15 au 2013-03-15 ))))))))))))))))))))))))))))))))))))
.
.
2013-03-15 20:25 . 2013-03-15 20:26 -------- d-----w- c:\users\Pierrette\AppData\Local\temp
2013-03-15 20:25 . 2013-03-15 20:25 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-15 08:55 . 2013-02-19 02:58 6954968 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{40EDB87D-0B55-4BB9-B85C-3421187B0D74}\mpengine.dll
2013-03-06 12:30 . 2013-03-15 17:20 -------- d-----w- c:\program files\Trend Micro
2013-03-02 13:05 . 2013-03-02 13:05 1409 ----a-w- c:\windows\QTFont.for
2013-02-23 18:07 . 2013-02-23 18:07 -------- d-----w- c:\users\Pierrette\AppData\Roaming\Visan
2013-02-23 18:05 . 2013-02-24 11:14 -------- d-----w- c:\programdata\HP Photo Creations
2013-02-23 18:05 . 2013-02-23 18:07 -------- d-----w- c:\programdata\Visan
2013-02-23 18:05 . 2013-02-23 18:06 -------- d-----w- c:\program files\HP Photo Creations
2013-02-15 22:31 . 2013-02-15 22:31 186432 ----a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll
2013-02-14 11:24 . 2013-01-08 22:01 768000 ----a-w- c:\program files\Common Files\Microsoft Shared\vgx\VGX.dll
2013-02-13 23:07 . 2013-01-04 01:38 2048512 ----a-w- c:\windows\system32\win32k.sys
2013-02-13 23:07 . 2012-11-08 03:48 1314816 ----a-w- c:\windows\system32\quartz.dll
2013-02-13 23:07 . 2013-01-04 11:28 905576 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-02-13 23:02 . 2013-01-05 05:26 3550072 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-02-13 23:02 . 2013-01-05 05:26 3602808 ----a-w- c:\windows\system32\ntkrnlpa.exe
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-06 14:09 . 2013-02-06 14:09 1409 ----a-w- c:\windows\system32\tmpBFD5B.FOT
2013-01-17 00:28 . 2011-08-30 16:28 232336 ------w- c:\windows\system32\MpSigStub.exe
2012-12-16 13:12 . 2012-12-23 11:35 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-16 10:50 . 2012-12-23 11:35 293376 ----a-w- c:\windows\system32\atmfd.dll
2013-03-08 17:34 . 2013-03-08 17:34 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}]
2009-10-15 08:53 165184 ----a-w- c:\program files\SFR\Kit\SFRNavErrorHelper.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{1EBBC21D-4919-4153-BB17-C0F325956360}]
2012-05-14 06:30 456192 ------w- c:\program files\MAE Barre\MAETB.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{1EBBC21D-4919-4153-BB17-C0F325956360}"= "c:\program files\MAE Barre\MAETB.dll" [2012-05-14 456192]
.
[HKEY_CLASSES_ROOT\clsid\{1ebbc21d-4919-4153-bb17-c0f325956360}]
[HKEY_CLASSES_ROOT\MAE.MAETB.1]
[HKEY_CLASSES_ROOT\TypeLib\{A30BFEF8-A32F-44c8-9BEC-099FEE50400F}]
[HKEY_CLASSES_ROOT\MAE.MAETB]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\users\Pierrette\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\users\Pierrette\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\users\Pierrette\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-11-13 23:32 129272 ----a-w- c:\users\Pierrette\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\program files\Packard Bell\SetUpMyPC\SmpSys.exe" [2008-02-04 1038136]
"Reminder"="c:\program files\Microsoft Money\System\reminder.exe" [1998-07-24 37376]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-09-18 6294048]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-06-08 894512]
"HPHUPD05"="c:\program files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe" [2003-08-21 49152]
"HPHmon05"="c:\windows\System32\hphmon05.exe" [2003-08-21 483328]
"MobileConnect"="c:\program files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe" [2009-09-18 2412032]
"HP Software Update"="c:\program files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2009-11-18 54576]
"Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-07-17 288080]
"BDAgent"="c:\program files\Bitdefender\Bitdefender 2012\bdagent.exe" [2012-12-13 1199344]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
.
c:\users\Pierrette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Pierrette\AppData\Roaming\Dropbox\bin\Dropbox.exe [2013-1-20 28539272]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys]
@="FSFilter System Recovery"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Users^Pierrette^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
path=c:\users\Pierrette\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
backup=c:\windows\pss\Dropbox.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDFab Passkey]
2010-03-20 16:03 1450008 ----a-w- c:\program files\DVDFab Passkey 7\DVDFabPasskey.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
2012-08-03 14:06 1086376 ----a-w- c:\program files\Nokia\Nokia Suite\NokiaSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\toolbar_eula_launcher]
2007-02-20 16:20 28672 ----a-w- c:\program files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}]
2011-04-14 16:58 114176 ----a-w- c:\windows\System32\advpack.dll
.
Contenu du dossier 'Tâches planifiées'
.
2013-03-15 c:\windows\Tasks\Extension de garantie-Pierrette.job
- c:\program files\Packard Bell\SetupmyPC\PBCarNot.exe [2008-05-22 10:13]
.
2013-03-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore1ce199a82cb86ab.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-03-05 12:02]
.
2013-03-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-03-05 12:02]
.
2013-03-15 c:\windows\Tasks\HP Photo Creations Communicator.job
- c:\programdata\HP Photo Creations\Communicator.exe [2013-02-23 18:07]
.
.
------- Examen supplémentaire -------
.
mStart Page = about:blank
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
FF - ProfilePath - c:\users\Pierrette\AppData\Roaming\Mozilla\Firefox\Profiles\f2sedb9c.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://google.fr
FF - ExtSQL: !HIDDEN! 2011-03-26 15:12; smartwebprinting@hp.com; c:\program files\Hewlett-Packard\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
- - - - ORPHELINS SUPPRIMES - - - -
.
ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-03-15 21:26
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2013-03-15 21:31:23
ComboFix-quarantined-files.txt 2013-03-15 20:31
.
Avant-CF: 61 515 337 728 octets libres
Après-CF: 61 485 608 960 octets libres
.
- - End Of File - - 231BC658D225E86B0E9BE224B5CB78B5

https://pjjoint.malekal.com/files.php?read=20130315_s6z10m5o6h9

https://www.cjoint.com/?3CpxXuE74ul