Analyse rapport hijack

Résolu
papayedu02 Messages postés 33 Statut Membre -  
Smart91 Messages postés 30146 Statut Contributeur sécurité -
bonjour voilà apres une analyse anti virus ( 13 virus detecté) apres une analyse ad aware et spybot et apres un nettoyage avec c cleaner j'ai decidé d'effecuer une analyse hijack et apres une analyse de mon rapport plusieurs crois rouges je n'arrive pas a fixer les données quelqu'un pourrai me dire comment faire ???

par avance MERCI.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:29:35, on 25/06/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
CHROME: 28.0.1500.52
FIREFOX: 21.0 (fr)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\D-Link\DWA-131 revA\wirelesscm.exe
C:\Program Files (x86)\eMachines\Hotkey Utility\HotkeyUtility.exe
C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
C:\PROGRA~2\AD-AWA~1\AdAware.exe
C:\Users\roudoudou\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.jerecherche.org/keyword/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.jerecherche.org
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.jerecherche.org/keyword/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.jerecherche.org
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.jerecherche.org
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: TBSB02609 - {C0924543-15FD-4F3D-889C-0B4562A9CB45} - C:\Program Files (x86)\searchweb\tbunsi2816.tmp\tbcore3.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O3 - Toolbar: searchweb - {CDB982ED-F9D6-4E3B-B94B-96F705D35AD1} - C:\Program Files (x86)\searchweb\tbunsi2816.tmp\tbcore3.dll
O4 - HKLM\..\Run: [Hotkey Utility] C:\Program Files (x86)\eMachines\Hotkey Utility\HotkeyUtility.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe"
O4 - HKLM\..\Run: [Ad-Aware Antivirus] "C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareLauncher" --windows-run
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
O4 - Global Startup: Wireless Connection Manager.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\roudoudou\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:\Program Files (x86)\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: Rechercher sur le Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: searchweb - {CDB982ED-F9D6-4E3B-B94B-96F705D35AD1} - C:\Program Files (x86)\searchweb\tbunsi2816.tmp\tbcore3.dll
O9 - Extra 'Tools' menuitem: searchweb - {CDB982ED-F9D6-4E3B-B94B-96F705D35AD1} - C:\Program Files (x86)\searchweb\tbunsi2816.tmp\tbcore3.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O9 - Extra button: PMU Poker - {06568ceb-5721-47d4-9d93-7e604fcbaeab} - C:\Users\roudoudou\Desktop\PMU Poker.lnk (HKCU)
O9 - Extra 'Tools' menuitem: PMU Poker - {06568ceb-5721-47d4-9d93-7e604fcbaeab} - C:\Users\roudoudou\Desktop\PMU Poker.lnk (HKCU)
O9 - Extra button: @C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\IE\IEPluginDownloader.dll,-4 - {FC0EA236-1C31-418e-BFCE-A76DDB7F1362} - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\IE\IEPluginDownloader.dll (HKCU)
O9 - Extra 'Tools' menuitem: Freemake Video Downloader - {FC0EA236-1C31-418e-BFCE-A76DDB7F1362} - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\IE\IEPluginDownloader.dll (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll
O23 - Service: Ad-Aware Service - Lavasoft Limited - C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: FreemakeVideoCapture - Freemake - C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: HP Network Devices Support (HPSLPSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Ma-Config Service (maconfservice) - Unknown owner - C:\Program Files\ma-config.com\x64\maconfservice.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%windir%\WindowsMobile\rapimgr.dll,-104 (RapiMgr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Realtek11nSU - Realtek - C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Ad-Aware (SBAMSvc) - GFI Software - C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: Updater Service - Acer Group - C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\uxtuneup.dll,-4096 (UxTuneUp) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%windir%\WindowsMobile\wcescomm.dll,-40079 (WcesComm) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: WlanWpsSvc - Unknown owner - C:\Program Files (x86)\D-Link\DWA-131 revA\WlanWpsSvc.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

--
End of file - 26015 bytes
Bonjour,

29 réponses

  • 1
  • 2
Résumé de la discussion

Un utilisateur cherche comment interpréter et corriger un rapport HijackThis après plusieurs détections antivirus et nettoyages, sur un PC Windows 7, et demande des conseils. Le rapport répertorie de nombreuses modifications sensibles, comme des redirections IE vers jerecherche.org et des modules BHO, ainsi que des entrées Run, indiquant des éléments potentiellement indésirables. Parmi les points à examiner, on trouve des réglages IE modifiés, des services et modules suspects, des entrées O23 et O10, ainsi que des composants provenant de logiciels tiers comme Ad-Aware. En cas de doute, certains recommandent d'utiliser des outils plus récents et de sauvegarder le système avant toute suppression, HijackThis seul pouvant générer des faux positifs.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    bonjour,

    Désinstalle Spybot et- Ad-Aware, ils ne servent à rien et ne font que ralentir ton PC.

    On va faire un diagnostic plus poussé de ton PC:

    Télécharge ZHPDiag (de Nicolas Coolman) sur ton bureau
    https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    Une fois le téléchargement achevé, double clique sur ZHPDiag.exe et suis les instructions.

    /!\Utilisateurs de Vista, Windows 7 et Windows 8 : Clique droit sur le logo de ZHPDiag.exe, « exécuter en tant qu'Administrateur »

    N'oublie pas de cocher la case qui permet de mettre un raccourci sur le Bureau.
    - Double clique sur le raccourci ZHPDiag sur ton Bureau pour le lancer.
    - Si tu possèdes Avast comme antivirus, à l'alerte choisis "lancer normalement"
    - Si tu obtiens le message "Voulez-vous autoriser le programme suivant..." tu réponds Oui
    (/!\L'outil a créé 2 icônes ZHPDiag et ZHPFix)
    - Clique sur le bouton tournevis en haut à droite et coche toutes les options
    - Clique sur la loupe en haut à droite sans signe pour lancer l'analyse.
    - Laisse l'outil travailler, il peut être assez long.
    - Ferme ZHPDiag en fin d'analyse.
    - Pour transmettre le rapport clique sur ce lien: http://pjjoint.malekal.com/
    - Clique sur Parcourir et cherche le répertoire C:\ZHP
    - Sélectionne le fichier ZHPDiag.txt. puis clique sur "Ouvrir"
    - Ensuite Clique sur "Envoyer le fichier".
    - Copie le lien obtenu dans ta réponse.

    Smart
    0
  2. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Ton ordinateur est infecté par plusieurs logiciels publicitaires... Pour éviter ce genre de problème :
    - Ne télécharge aucun programme proposé dans des publicités ou sur des sites suspects. A noter que certains sites connus comme O1net, Softronic, Tuto4PC, etc modifient parfois les programmes proposés au téléchargement pour y ajouter des logiciels publicitaires ==> Préfère toujours le téléchargement directement sur le site de l'éditeur.
    - Au cours de l'installation d'un programme gratuit, lis bien attentivement et décoche tous les programmes additionnels qui sont proposés, en particulier les barres d'outils.
    Pour ton information lis ces dossier sur les Programmes Potentiellement Indésirables et Les Barres d'Outils ce n'est pas obligatoires

    - Télécharge sur ton bureau AdwCleaner de Xplode
    - Lance AdwCleaner
    - Clique sur[Suppression]. Sauvegarde tout travail en cours puis accepte la fermeture des programmes en cours d'exécution.
    - Patiente le temps du nettoyage.
    - Une fois le scan fini, il te sera proposé de redémarrer.
    - Au redémarrage du PC, un rapport s'ouvrira. Poste le contenu dans ta prochaine réponse.
    - Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    Smart
    0
    1. papayedu02 Messages postés 33 Statut Membre
       
      je suis obliger d'etre sur un autre ordi car sur le mien je n'arrete pas d'etre deconnecter du site apres analyse effectivement j'ai recuperer un peu plus de vitesse mais la je sais pas comment je vais faire pour te filer le rapport
      0
  3. papayedu02 Messages postés 33 Statut Membre
     
    # AdwCleaner v2.303 - Rapport créé le 25/06/2013 à 17:19:50
    # Mis à jour le 08/06/2013 par Xplode
    # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Nom d'utilisateur : roudoudou - ROUDOUDOU-PC
    # Mode de démarrage : Normal
    # Exécuté depuis : C:\Users\roudoudou\Desktop\telechargements\programmes\AdwCleaner.exe
    # Option [Suppression]

    ***** [Services] *****

    ***** [Fichiers / Dossiers] *****

    Dossier Supprimé : C:\Program Files (x86)\adawaretb
    Dossier Supprimé : C:\Program Files (x86)\Object
    Dossier Supprimé : C:\ProgramData\blekko toolbars
    Dossier Supprimé : C:\ProgramData\BrowserDefender
    Dossier Supprimé : C:\ProgramData\IBUpdaterService
    Dossier Supprimé : C:\ProgramData\InstallMate
    Dossier Supprimé : C:\ProgramData\safE syavve
    Dossier Supprimé : C:\ProgramData\SearchNewTab
    Dossier Supprimé : C:\ProgramData\Tarma Installer
    Dossier Supprimé : C:\ProgramData\Trymedia
    Dossier Supprimé : C:\ProgramData\WEEeekiappy
    Dossier Supprimé : C:\Users\roudoudou\AppData\Local\TempDir
    Dossier Supprimé : C:\Users\roudoudou\AppData\LocalLow\adawaretb
    Dossier Supprimé : C:\Users\roudoudou\AppData\LocalLow\AskToolbar
    Dossier Supprimé : C:\Users\roudoudou\AppData\LocalLow\BabylonToolbar
    Dossier Supprimé : C:\Users\roudoudou\AppData\LocalLow\Conduit
    Dossier Supprimé : C:\Users\roudoudou\AppData\LocalLow\PriceGong
    Dossier Supprimé : C:\Users\roudoudou\AppData\LocalLow\SweetIM
    Dossier Supprimé : C:\Users\roudoudou\AppData\LocalLow\Toolbar4
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\dvdvideosoftiehelpers
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs

    \BrowserDefender
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\Mozilla\Firefox\Profiles\uktvhad6.default

    \adawaretb
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\Mozilla\Firefox\Profiles\uktvhad6.default

    \jetpack
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\Mozilla\Firefox\Profiles\uktvhad6.default

    \Smartbar
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\Mozilla\Firefox\Profiles\uktvhad6.default

    \SweetIMToolbarData
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\Nosibay
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\OfferBox
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\OpenCandy
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\PerformerSoft
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\PriceGong
    Dossier Supprimé : C:\Users\roudoudou\AppData\Roaming\yourfiledownloader
    Fichier Supprimé : C:\END
    Fichier Supprimé : C:\user.js
    Fichier Supprimé : C:\Users\roudoudou\AppData\Local\Google\Chrome\User Data\Default\Local Storage

    \hxxp_apps.conduit.com_0.localstorage-journal
    Fichier Supprimé : C:\Users\roudoudou\AppData\Roaming\Mozilla\Firefox\Profiles\uktvhad6.default

    \bProtector_extensions.rdf
    Fichier Supprimé : C:\Users\roudoudou\AppData\Roaming\Mozilla\Firefox\Profiles\uktvhad6.default

    \bprotector_extensions.sqlite
    Fichier Supprimé : C:\Users\roudoudou\AppData\Roaming\Mozilla\Firefox\Profiles\uktvhad6.default

    \bprotector_prefs.js
    Fichier Supprimé : C:\Users\roudoudou\AppData\Roaming\Mozilla\Firefox\Profiles\uktvhad6.default

    \searchplugins\Web Search.xml
    Fichier Supprimé : C:\Users\roudoudou\appinfo.exe
    Fichier Supprimé : C:\Users\roudoudou\errorlog.tmp

    ***** [Registre] *****

    Clé Supprimée : HKCU\Software\1ClickDownload
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
    Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
    Clé Supprimée : HKCU\Software\AppDataLow\SProtector
    Clé Supprimée : HKCU\Software\BabSolution
    Clé Supprimée : HKCU\Software\DataMngr
    Clé Supprimée : HKCU\Software\delta LTD
    Clé Supprimée : HKCU\Software\IM
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Rechercher sur le Web
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

    \{DE4E75D3-60AA-4F02-A0E4-C8A40576574C}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-

    BD92-1F8EE10042A0}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-

    B069-D9439253D926}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-

    B4B6-146BF802613B}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{74F475FA-6C75-43BD-

    AAB9-ECDA6184F600}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-

    99D7-DC866BE87DBC}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C0924543-15FD-4F3D-

    889C-0B4562A9CB45}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CDB982ED-F9D6-4E3B-

    B94B-96F705D35AD1}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DE4E75D3-60AA-4F02-

    A0E4-C8A40576574C}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-

    A3DA-CE0849258DE6}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-

    9C72-001320C79847}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-

    9C72-001320C79847}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92

    -1F8EE10042A0}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069

    -D9439253D926}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6

    -146BF802613B}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{74F475FA-6C75-43BD-AAB9

    -ECDA6184F600}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7

    -DC866BE87DBC}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A69A551A-1AAE-4B67-

    8C2E-52F8B8A19504}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C0924543-15FD-4F3D-

    889C-0B4562A9CB45}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CDB982ED-F9D6-4E3B-

    B94B-96F705D35AD1}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DE4E75D3-60AA-4F02-A0E4

    -C8A40576574C}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-

    A3DA-CE0849258DE6}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72

    -001320C79847}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72

    -001320C79847}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-

    A58A-0BAB4151CAD8}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains

    \grusskartencenter.com
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

    \EscDomains\grusskartencenter.com
    Clé Supprimée : HKCU\Software\Nosibay
    Clé Supprimée : HKCU\Software\Offerbox
    Clé Supprimée : HKCU\Software\PriceGong
    Clé Supprimée : HKCU\Software\SmartBar
    Clé Supprimée : HKCU\Software\Softonic
    Clé Supprimée : HKCU\Software\YahooPartnerToolbar
    Clé Supprimée : HKCU\Software\96d9dde23dbf49
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-

    CCE0C0A66CC9}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-

    AFF96BA00F7E}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-

    73315F71CFFE}
    Clé Supprimée : HKCU\Software\TBSB02609
    Clé Supprimée : HKLM\Software\adawaretb
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
    Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
    Clé Supprimée : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
    Clé Supprimée : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
    Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.BHO
    Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
    Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
    Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
    Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
    Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
    Clé Supprimée : HKLM\Software\Classes\Installer\Features\F479A18A22A86E3429341589FF57D81A
    Clé Supprimée : HKLM\Software\Classes\Installer\Products\F479A18A22A86E3429341589FF57D81A
    Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbTask
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
    Clé Supprimée : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02609.IEToolbar
    Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02609.IEToolbar.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02609.TBSB02609
    Clé Supprimée : HKLM\SOFTWARE\Classes\TBSB02609.TBSB02609.3
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2851639
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3227982
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02609
    Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02609.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
    Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
    Clé Supprimée : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
    Clé Supprimée : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
    Clé Supprimée : HKLM\Software\DataMngr
    Clé Supprimée : HKLM\Software\Iminent
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{CDB982ED-F9D6-4E3B-B94B-

    96F705D35AD1}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-

    CE0849258DE6}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\offerbox_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\offerbox_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
    Clé Supprimée : HKLM\Software\Offerbox
    Clé Supprimée : HKLM\Software\SProtector
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\96d9dde23dbf49
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C0924543-15FD-4F3D-889C-0B4562A9CB45}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions

    \fdloijijlkoblmigdofommgnheckmaki
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions

    \jplinpmadfkdgipabgcdchbdikologlh
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy

    \{628F3201-34D0-49C0-BB9A-82A26AEFB291}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy

    \{A078F691-9C07-4AF2-BF43-35E79EECF8B7}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy

    \{EEE6C367-6118-11DC-9C72-001320C79847}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-

    BC4C-4172-9AC4-73315F71CFFE}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper

    Objects\{C0924543-15FD-4F3D-889C-0B4562A9CB45}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper

    Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-

    8A22-43E6-9243-5198FF758DA1}
    Clé Supprimée : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{64B00DAC-870D-4E6A-8D34-3A6E3E427A30}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

    \{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

    \{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
    Clé Supprimée : HKLM\SOFTWARE\Tarma Installer
    Clé Supprimée : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-

    4D79-A620-CCE0C0A66CC9}
    Donnée Supprimée : HKLM\..\Windows [AppInit_DLLs] = c:

    \progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow [*.chat-land.org]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CDB982ED-F9D6-

    4E3B-B94B-96F705D35AD1}]
    Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{6C97A91E-4524-4019-

    86AF-2AA2D567BF5C}]
    Valeur Supprimée : HKCU\Software\Mozilla\Firefox\Extensions [{EB132DB0-A4CA-11DF-9732-

    0E29E0D72085}]
    Valeur Supprimée : HKCU\Software\Mozilla\Firefox\Extensions [specialsavings@superfish.com]
    Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{acaa314b-eeba-48e4-ad47-

    84e31c44796c}]
    Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{CDB982ED-F9D6-

    4E3B-B94B-96F705D35AD1}]
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-

    0333EA26E113}]

    ***** [Navigateurs] *****

    -\\ Internet Explorer v8.0.7601.17514

    Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Page_URL] =

    hxxp://www.jerecherche.org --> hxxp://www.google.com
    Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] =

    hxxp://www.jerecherche.org --> hxxp://www.google.com
    Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] =

    hxxp://www.jerecherche.org --> hxxp://www.google.com
    Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Secondary_Page_URL] =

    hxxp://www.jerecherche.org --> hxxp://www.google.com
    Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] =

    hxxp://www.jerecherche.org/keyword/ --> hxxp://www.google.com
    Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - SearchMigratedDefaultName] =

    www.jerecherche.org --> hxxp://www.google.com
    Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - SearchMigratedDefaultURL] =

    hxxp://www.jerecherche.org --> hxxp://www.google.com
    Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - bProtectTabs] =

    hxxp://www.holasearch.com/?affID=121962&tt=gc_&babsrc=NT_ss&mntrId=B0741078D27C5873 -->

    hxxp://www.google.com
    Remplacé : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - SearchAssistant] =

    hxxp://www.jerecherche.org --> hxxp://www.google.com

    -\\ Mozilla Firefox v21.0 (fr)

    Fichier : C:\Users\roudoudou\AppData\Roaming\Mozilla\Firefox\Profiles\uktvhad6.default\prefs.js

    C:\Users\roudoudou\AppData\Roaming\Mozilla\Firefox\Profiles\uktvhad6.default\user.js ... Supprimé

    !

    Supprimée : user_pref("aol_toolbar.default.homepage.check", false);
    Supprimée : user_pref("aol_toolbar.default.search.check", false);
    Supprimée : user_pref("browser.search.defaultthis.engineName", "uTorrentBar_FR Customized Web

    Search");
    Supprimée : user_pref("browser.search.defaulturl", "hxxp://websearch.searchdwebs.info/?

    pid=821&r=2013/06/23&hid=[...]
    Supprimée : user_pref("extensions.51c6f795bc00f.scode", "(function(){try{if

    ('aol.com,mail.google.com,premiumrepo[...]
    Supprimée : user_pref("extensions.51c70328b989f.scode", "(function(){try{if

    ('aol.com,mail.google.com,premiumrepo[...]
    Supprimée : user_pref("extensions.BabylonToolbar.admin", false);
    Supprimée : user_pref("extensions.BabylonToolbar.aflt", "babsst");
    Supprimée : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-

    F8DE92DD98DB}");
    Supprimée : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
    Supprimée : user_pref("extensions.BabylonToolbar.dfltLng", "en");
    Supprimée : user_pref("extensions.BabylonToolbar.excTlbr", false);
    Supprimée : user_pref("extensions.BabylonToolbar.id", "b074f1c8000000000000b8a386806ac7");
    Supprimée : user_pref("extensions.BabylonToolbar.instlDay", "15587");
    Supprimée : user_pref("extensions.BabylonToolbar.instlRef", "sst");
    Supprimée : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
    Supprimée : user_pref("extensions.BabylonToolbar.prtkDS", 0);
    Supprimée : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
    Supprimée : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
    Supprimée : user_pref("extensions.BabylonToolbar.tlbrId", "base");
    Supprimée : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?

    babsrc=TB_def&mntrId=[...]
    Supprimée : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
    Supprimée : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
    Supprimée : user_pref("extensions.BabylonToolbar_i.aflt", "babclient");
    Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");
    Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112555&tt=3612_3");
    Supprimée : user_pref("extensions.BabylonToolbar_i.hardId", "b074f1c80000000000001078d27c5873");
    Supprimée : user_pref("extensions.BabylonToolbar_i.id", "b074f1c80000000000001078d27c5873");
    Supprimée : user_pref("extensions.BabylonToolbar_i.instlDay", "15371");
    Supprimée : user_pref("extensions.BabylonToolbar_i.instlRef", "std");
    Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", false);
    Supprimée : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
    Supprimée : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
    Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
    Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
    Supprimée : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
    Supprimée : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
    Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.127:33:12");
    Supprimée : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
    Supprimée : user_pref("extensions.delta.admin", false);
    Supprimée : user_pref("extensions.delta.aflt", "babsst");
    Supprimée : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
    Supprimée : user_pref("extensions.delta.autoRvrt", "false");
    Supprimée : user_pref("extensions.delta.bbDpng", "21");
    Supprimée : user_pref("extensions.delta.cntry", "FR");
    Supprimée : user_pref("extensions.delta.dfltLng", "fr");
    Supprimée : user_pref("extensions.delta.excTlbr", false);
    Supprimée : user_pref("extensions.delta.ffxUnstlRst", true);
    Supprimée : user_pref("extensions.delta.hdrMd5", "E9D9752A73F1B0541450559F6BACCF3E");
    Supprimée : user_pref("extensions.delta.id", "b074f1c80000000000001078d27c5873");
    Supprimée : user_pref("extensions.delta.instlDay", "15879");
    Supprimée : user_pref("extensions.delta.instlRef", "sst");
    Supprimée : user_pref("extensions.delta.lastVrsnTs", "1.8.10.013:15:18");
    Supprimée : user_pref("extensions.delta.newTab", false);
    Supprimée : user_pref("extensions.delta.prdct", "delta");
    Supprimée : user_pref("extensions.delta.prtnrId", "delta");
    Supprimée : user_pref("extensions.delta.rvrt", "false");
    Supprimée : user_pref("extensions.delta.sg", "azb");
    Supprimée : user_pref("extensions.delta.smplGrp", "none");
    Supprimée : user_pref("extensions.delta.tlbrId", "base");
    Supprimée : user_pref("extensions.delta.tlbrSrchUrl", "");
    Supprimée : user_pref("extensions.delta.vrsn", "1.8.21.5");
    Supprimée : user_pref("extensions.delta.vrsnTs", "1.8.21.516:26:31");
    Supprimée : user_pref("extensions.delta.vrsni", "1.8.21.5");
    Supprimée : user_pref("extensions.delta_i.babExt", "");
    Supprimée : user_pref("extensions.delta_i.babTrack", "affID=120007&tsp=4922");
    Supprimée : user_pref("extensions.delta_i.srcExt", "ss");
    Supprimée : user_pref("extensions.funmoods_i.aflt", "nv1");
    Supprimée : user_pref("extensions.funmoods_i.dfltLng", "");
    Supprimée : user_pref("extensions.funmoods_i.dfltSrch", true);
    Supprimée : user_pref("extensions.funmoods_i.dnsErr", true);
    Supprimée : user_pref("extensions.funmoods_i.excTlbr", false);
    Supprimée : user_pref("extensions.funmoods_i.hmpg", true);
    Supprimée : user_pref("extensions.funmoods_i.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=nv1");
    Supprimée : user_pref("extensions.funmoods_i.id", "b074f1c80000000000001078d27c5873");
    Supprimée : user_pref("extensions.funmoods_i.instlDay", "15480");
    Supprimée : user_pref("extensions.funmoods_i.instlRef", "");
    Supprimée : user_pref("extensions.funmoods_i.newTab", true);
    Supprimée : user_pref("extensions.funmoods_i.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=nv1");
    Supprimée : user_pref("extensions.funmoods_i.prdct", "funmoods");
    Supprimée : user_pref("extensions.funmoods_i.prtnrId", "funmoods");
    Supprimée : user_pref("extensions.funmoods_i.smplGrp", "none");
    Supprimée : user_pref("extensions.funmoods_i.srchPrvdr", "Search");
    Supprimée : user_pref("extensions.funmoods_i.tlbrId", "base");
    Supprimée : user_pref("extensions.funmoods_i.tlbrSrchUrl",

    "hxxp://start.funmoods.com/results.php?f=3&a=nv1&q=")[...]
    Supprimée : user_pref("extensions.funmoods_i.vrsn", "1.5.11.16");
    Supprimée : user_pref("extensions.funmoods_i.vrsnTs", "1.5.11.160:12:20");
    Supprimée : user_pref("extensions.funmoods_i.vrsni", "1.5.11.16");
    Supprimée : user_pref("extensions.helperbar.SmartbarDisabled", false);
    Supprimée : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
    Supprimée : user_pref("extensions.holasearch.admin", false);
    Supprimée : user_pref("extensions.holasearch.aflt", "babsst");
    Supprimée : user_pref("extensions.holasearch.appId", "{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}");
    Supprimée : user_pref("extensions.holasearch.autoRvrt", "false");
    Supprimée : user_pref("extensions.holasearch.dfltLng", "en");
    Supprimée : user_pref("extensions.holasearch.excTlbr", false);
    Supprimée : user_pref("extensions.holasearch.ffxUnstlRst", false);
    Supprimée : user_pref("extensions.holasearch.id", "b074f1c80000000000001078d27c5873");
    Supprimée : user_pref("extensions.holasearch.instlDay", "15853");
    Supprimée : user_pref("extensions.holasearch.instlRef", "sst");
    Supprimée : user_pref("extensions.holasearch.newTab", false);
    Supprimée : user_pref("extensions.holasearch.prdct", "holasearch");
    Supprimée : user_pref("extensions.holasearch.prtnrId", "holasearch");
    Supprimée : user_pref("extensions.holasearch.rvrt", "false");
    Supprimée : user_pref("extensions.holasearch.smplGrp", "none");
    Supprimée : user_pref("extensions.holasearch.tlbrId", "base");
    Supprimée : user_pref("extensions.holasearch.tlbrSrchUrl", "");
    Supprimée : user_pref("extensions.holasearch.vrsn", "1.8.16.16");
    Supprimée : user_pref("extensions.holasearch.vrsnTs", "1.8.16.1618:29:03");
    Supprimée : user_pref("extensions.holasearch.vrsni", "1.8.16.16");
    Supprimée : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "WebSearch");
    Supprimée : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "WebSearch");
    Supprimée : user_pref("sweetim.toolbar.previous.browser.startup.homepage",

    "hxxp://websearch.searchdwebs.info/?p[...]
    Supprimée : user_pref("sweetim.toolbar.previous.keyword.URL",

    "hxxp://websearch.searchdwebs.info/?pid=821&r=2013[...]
    Supprimée : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
    Supprimée : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
    Supprimée : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
    Supprimée : user_pref("sweetim.toolbar.searchguard.enable", "");

    -\\ Google Chrome v28.0.1500.52

    Fichier : C:\Users\roudoudou\AppData\Local\Google\Chrome\User Data\Default\Preferences

    Supprimée [l.23] : keyword = "search.snap.do",

    *************************

    AdwCleaner[S1].txt - [32419 octets] - [25/06/2013 17:19:50]

    ########## EOF - C:\AdwCleaner[S1].txt - [32480 octets] ##########
    0
  4. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  5. papayedu02 Messages postés 33 Statut Membre
     
    smart91 je n'arrive pas a publier mon rapport au secours !!!!!!!!!
    0
    1. papayedu02 Messages postés 33 Statut Membre
       
      euh pffff ca c'est debloqué alors qu'en pense tu ?
      0
  6. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    C'est bon AdwCleaner a fait du ménage. Mais ce n'est pas terminé

    Maintenant je voudrais que tu fasses ceci:

    * Télécharge et installe Malwarebytes
    * A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
    * Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme). C'est très important
    * Puis va dans l'onglet "Recherche", coche "Exécuter un examen complet puis "Rechercher"
    * Ne t'inquiète pas, l'analyse peut durer plusieurs heures en fonction du nombre de fichiers et infections à analyser
    * A la fin de l'analyse, clique sur "Afficher les résultats"
    * Coche tous les éléments détectés puis clique sur "Supprimer la sélection"
    * Enregistre le rapport
    * S'il t'est demandé de redémarrer l'ordinateur, clique sur Yes
    * Un rapport apparait après la suppression : poste le dans ta prochaine réponse.

    Smart
    0
  7. papayedu02 Messages postés 33 Statut Membre
     
    Malwarebytes Anti-Malware 1.75.0.1300
    www.malwarebytes.org

    Version de la base de données: v2013.06.25.08

    Windows 7 Service Pack 1 x64 NTFS
    Internet Explorer 8.0.7601.17514
    roudoudou :: ROUDOUDOU-PC [administrateur]

    25/06/2013 19:52:09
    mbam-log-2013-06-25 (19-52-09).txt

    Type d'examen: Examen complet (C:\|)
    Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers |

    Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
    Options d'examen désactivées: P2P
    Elément(s) analysé(s): 455037
    Temps écoulé: 55 minute(s), 2 seconde(s)

    Processus mémoire détecté(s): 0
    (Aucun élément nuisible détecté)

    Module(s) mémoire détecté(s): 0
    (Aucun élément nuisible détecté)

    Clé(s) du Registre détectée(s): 0
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre détectée(s): 0
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre détecté(s): 0
    (Aucun élément nuisible détecté)

    Dossier(s) détecté(s): 0
    (Aucun élément nuisible détecté)

    Fichier(s) détecté(s): 1
    C:\Windows\Installer\{572bbd63-04b2-9d7c-f11d-20c7dfcb0a80}\U\000000cb.@ (Rootkit.0Access) -> Mis

    en quarantaine et supprimé avec succès.

    (fin)
    0
    1. papayedu02 Messages postés 33 Statut Membre
       
      qu'en pense tu smart ????
      0
  8. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Relance MBAM (MalwareBytes) et vide la quarantaine

    Ensuite je voudrais que tu fasses ceci, je soupçonne un rootkit:

    * Télécharge TDSSKiller (de Kaspersky Labs) sur ton Bureau.
    * Lance le (si tu utilises Windows Vista ou 7 : fais un clic-droit dessus et choisis "Exécuter en tant qu'administrateur")
    * Clique sur Start Scan pour démarrer l'analyse.
    * Si Rootkit.Boot.Wistler.a: assure toi que Cure soit bien cochée
    * Si TDSS.tdl2 : l'option Delete sera cochée.
    * Si TDSS.tdl3 ou TDSS.tdl4 : assure toi que Cure soit bien cochée.
    * Si "Suspicious object" laisse l'option cochée sur Skip
    * Si Rootkit.Win32.ZAccess.* est détecté règle sur cure en haut , et delete en bas
    * Ensuite, clique sur Continue puis sur Reboot Now si nécessaire.
    * Un rapport s'ouvrira au redémarrage de l'ordinateur.
    * Copie/colle son contenu dans ta prochaine réponse.
    Note : Le rapport se trouve également sous C:\TDSSKiller.N°deversion_Date_Heure_log.txt

    Smart
    0
  9. papayedu02 Messages postés 33 Statut Membre
     
    23:11:09.0405 2368 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
    23:11:11.0409 2368 ============================================================
    23:11:11.0409 2368 Current date / time: 2013/06/25 23:11:11.0409
    23:11:11.0409 2368 SystemInfo:
    23:11:11.0409 2368
    23:11:11.0409 2368 OS Version: 6.1.7601 ServicePack: 1.0
    23:11:11.0409 2368 Product type: Workstation
    23:11:11.0409 2368 ComputerName: ROUDOUDOU-PC
    23:11:11.0409 2368 UserName: roudoudou
    23:11:11.0409 2368 Windows directory: C:\Windows
    23:11:11.0409 2368 System windows directory: C:\Windows
    23:11:11.0409 2368 Running under WOW64
    23:11:11.0409 2368 Processor architecture: Intel x64
    23:11:11.0409 2368 Number of processors: 2
    23:11:11.0409 2368 Page size: 0x1000
    23:11:11.0409 2368 Boot type: Normal boot
    23:11:11.0409 2368 ============================================================
    23:11:12.0205 2368 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    23:11:12.0221 2368 ============================================================
    23:11:12.0221 2368 \Device\Harddisk0\DR0:
    23:11:12.0221 2368 MBR partitions:
    23:11:12.0221 2368 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1C00800, BlocksNum 0x32000
    23:11:12.0221 2368 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1C32800, BlocksNum 0x38753030
    23:11:12.0221 2368 ============================================================
    23:11:12.0252 2368 C: <-> \Device\Harddisk0\DR0\Partition2
    23:11:12.0252 2368 ============================================================
    23:11:12.0252 2368 Initialize success
    23:11:12.0252 2368 ============================================================
    23:11:20.0364 4012 ============================================================
    23:11:20.0364 4012 Scan started
    23:11:20.0364 4012 Mode: Manual;
    23:11:20.0364 4012 ============================================================
    23:11:20.0723 4012 ================ Scan system memory ========================
    23:11:20.0723 4012 System memory - ok
    23:11:20.0723 4012 ================ Scan services =============================
    23:11:20.0816 4012 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
    23:11:20.0816 4012 1394ohci - ok
    23:11:20.0847 4012 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
    23:11:20.0863 4012 ACPI - ok
    23:11:20.0879 4012 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
    23:11:20.0879 4012 AcpiPmi - ok
    23:11:20.0957 4012 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    23:11:20.0957 4012 AdobeARMservice - ok
    23:11:21.0081 4012 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    23:11:21.0081 4012 AdobeFlashPlayerUpdateSvc - ok
    23:11:21.0113 4012 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
    23:11:21.0113 4012 adp94xx - ok
    23:11:21.0128 4012 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
    23:11:21.0128 4012 adpahci - ok
    23:11:21.0144 4012 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
    23:11:21.0144 4012 adpu320 - ok
    23:11:21.0175 4012 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
    23:11:21.0175 4012 AeLookupSvc - ok
    23:11:21.0206 4012 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
    23:11:21.0206 4012 AFD - ok
    23:11:21.0237 4012 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
    23:11:21.0237 4012 agp440 - ok
    23:11:21.0253 4012 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
    23:11:21.0253 4012 ALG - ok
    23:11:21.0269 4012 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
    23:11:21.0269 4012 aliide - ok
    23:11:21.0284 4012 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
    23:11:21.0284 4012 amdide - ok
    23:11:21.0300 4012 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
    23:11:21.0300 4012 AmdK8 - ok
    23:11:21.0315 4012 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
    23:11:21.0331 4012 AmdPPM - ok
    23:11:21.0362 4012 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
    23:11:21.0362 4012 amdsata - ok
    23:11:21.0393 4012 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
    23:11:21.0393 4012 amdsbs - ok
    23:11:21.0409 4012 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
    23:11:21.0409 4012 amdxata - ok
    23:11:21.0440 4012 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
    23:11:21.0440 4012 AppID - ok
    23:11:21.0456 4012 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
    23:11:21.0456 4012 AppIDSvc - ok
    23:11:21.0487 4012 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
    23:11:21.0487 4012 Appinfo - ok
    23:11:21.0503 4012 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
    23:11:21.0503 4012 arc - ok
    23:11:21.0518 4012 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
    23:11:21.0518 4012 arcsas - ok
    23:11:21.0549 4012 [ 0BAEFD3F648C6E7AB52990DD9565E4E2 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
    23:11:21.0549 4012 aswFsBlk - ok
    23:11:21.0581 4012 [ FA562F34ED6633C66170B09182B4C049 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
    23:11:21.0581 4012 aswMonFlt - ok
    23:11:21.0581 4012 [ 64E2BAB4096C13D2342BC4661C967E07 ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
    23:11:21.0581 4012 aswRdr - ok
    23:11:21.0612 4012 [ 5573AA70993A2BB81525B1C704B88763 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
    23:11:21.0612 4012 aswRvrt - ok
    23:11:21.0643 4012 [ 10ED1CAB84AA65983C41A11F60294C9B ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
    23:11:21.0659 4012 aswSnx - ok
    23:11:21.0674 4012 [ 00E5253353717D3CA12A0F5A6F9991EC ] aswSP C:\Windows\system32\drivers\aswSP.sys
    23:11:21.0674 4012 aswSP - ok
    23:11:21.0690 4012 [ 29DD8E458A84171202AA4979364C30C0 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
    23:11:21.0690 4012 aswTdi - ok
    23:11:21.0705 4012 [ 6359B99C955DB9F40B653159A0EED261 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
    23:11:21.0721 4012 aswVmm - ok
    23:11:21.0737 4012 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
    23:11:21.0752 4012 AsyncMac - ok
    23:11:21.0768 4012 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
    23:11:21.0768 4012 atapi - ok
    23:11:21.0783 4012 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
    23:11:21.0799 4012 AudioEndpointBuilder - ok
    23:11:21.0799 4012 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
    23:11:21.0815 4012 AudioSrv - ok
    23:11:21.0908 4012 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    23:11:21.0908 4012 avast! Antivirus - ok
    23:11:21.0939 4012 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
    23:11:21.0939 4012 AxInstSV - ok
    23:11:21.0955 4012 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
    23:11:21.0971 4012 b06bdrv - ok
    23:11:21.0986 4012 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
    23:11:21.0986 4012 b57nd60a - ok
    23:11:22.0017 4012 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
    23:11:22.0017 4012 BDESVC - ok
    23:11:22.0049 4012 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
    23:11:22.0049 4012 Beep - ok
    23:11:22.0080 4012 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
    23:11:22.0080 4012 BFE - ok
    23:11:22.0095 4012 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
    23:11:22.0095 4012 blbdrive - ok
    23:11:22.0111 4012 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
    23:11:22.0111 4012 bowser - ok
    23:11:22.0127 4012 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
    23:11:22.0127 4012 BrFiltLo - ok
    23:11:22.0158 4012 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
    23:11:22.0158 4012 BrFiltUp - ok
    23:11:22.0189 4012 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
    23:11:22.0189 4012 Browser - ok
    23:11:22.0205 4012 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
    23:11:22.0205 4012 Brserid - ok
    23:11:22.0220 4012 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
    23:11:22.0220 4012 BrSerWdm - ok
    23:11:22.0220 4012 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
    23:11:22.0220 4012 BrUsbMdm - ok
    23:11:22.0236 4012 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
    23:11:22.0236 4012 BrUsbSer - ok
    23:11:22.0251 4012 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
    23:11:22.0251 4012 BTHMODEM - ok
    23:11:22.0283 4012 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
    23:11:22.0283 4012 bthserv - ok
    23:11:22.0314 4012 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
    23:11:22.0314 4012 cdfs - ok
    23:11:22.0329 4012 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
    23:11:22.0329 4012 cdrom - ok
    23:11:22.0345 4012 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
    23:11:22.0361 4012 CertPropSvc - ok
    23:11:22.0361 4012 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
    23:11:22.0361 4012 circlass - ok
    23:11:22.0407 4012 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
    23:11:22.0407 4012 CLFS - ok
    23:11:22.0454 4012 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    23:11:22.0470 4012 clr_optimization_v2.0.50727_32 - ok
    23:11:22.0501 4012 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
    23:11:22.0501 4012 clr_optimization_v2.0.50727_64 - ok
    23:11:22.0548 4012 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    23:11:22.0563 4012 clr_optimization_v4.0.30319_32 - ok
    23:11:22.0579 4012 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    23:11:22.0595 4012 clr_optimization_v4.0.30319_64 - ok
    23:11:22.0626 4012 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
    23:11:22.0626 4012 CmBatt - ok
    23:11:22.0626 4012 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
    23:11:22.0626 4012 cmdide - ok
    23:11:22.0657 4012 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
    23:11:22.0657 4012 CNG - ok
    23:11:22.0673 4012 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
    23:11:22.0673 4012 Compbatt - ok
    23:11:22.0704 4012 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
    23:11:22.0704 4012 CompositeBus - ok
    23:11:22.0704 4012 COMSysApp - ok
    23:11:22.0719 4012 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
    23:11:22.0735 4012 crcdisk - ok
    23:11:22.0751 4012 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc C:\Windows\system32\cryptsvc.dll
    23:11:22.0751 4012 CryptSvc - ok
    23:11:22.0782 4012 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
    23:11:22.0797 4012 DcomLaunch - ok
    23:11:22.0813 4012 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
    23:11:22.0829 4012 defragsvc - ok
    23:11:22.0844 4012 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
    23:11:22.0844 4012 DfsC - ok
    23:11:22.0875 4012 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
    23:11:22.0875 4012 Dhcp - ok
    23:11:22.0891 4012 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
    23:11:22.0891 4012 discache - ok
    23:11:22.0907 4012 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
    23:11:22.0907 4012 Disk - ok
    23:11:22.0938 4012 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
    23:11:22.0938 4012 Dnscache - ok
    23:11:22.0953 4012 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
    23:11:22.0969 4012 dot3svc - ok
    23:11:23.0000 4012 [ B42ED0320C6E41102FDE0005154849BB ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
    23:11:23.0000 4012 Dot4 - ok
    23:11:23.0031 4012 [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print C:\Windows\system32\drivers\Dot4Prt.sys
    23:11:23.0031 4012 Dot4Print - ok
    23:11:23.0047 4012 [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
    23:11:23.0047 4012 dot4usb - ok
    23:11:23.0078 4012 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
    23:11:23.0078 4012 DPS - ok
    23:11:23.0125 4012 [ B28C853770C995552B9F5760D8245F44 ] driverhardwarev2x64 C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys
    23:11:23.0125 4012 driverhardwarev2x64 - ok
    23:11:23.0156 4012 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
    23:11:23.0156 4012 drmkaud - ok
    23:11:23.0187 4012 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
    23:11:23.0187 4012 DXGKrnl - ok
    23:11:23.0219 4012 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
    23:11:23.0219 4012 EapHost - ok
    23:11:23.0281 4012 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
    23:11:23.0297 4012 ebdrv - ok
    23:11:23.0328 4012 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
    23:11:23.0328 4012 EFS - ok
    23:11:23.0390 4012 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
    23:11:23.0390 4012 ehRecvr - ok
    23:11:23.0421 4012 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
    23:11:23.0421 4012 ehSched - ok
    23:11:23.0453 4012 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
    23:11:23.0468 4012 elxstor - ok
    23:11:23.0484 4012 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
    23:11:23.0484 4012 ErrDev - ok
    23:11:23.0515 4012 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
    23:11:23.0515 4012 EventSystem - ok
    23:11:23.0531 4012 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
    23:11:23.0546 4012 exfat - ok
    23:11:23.0562 4012 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
    23:11:23.0577 4012 fastfat - ok
    23:11:23.0609 4012 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
    23:11:23.0624 4012 Fax - ok
    23:11:23.0640 4012 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
    23:11:23.0640 4012 fdc - ok
    23:11:23.0671 4012 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
    23:11:23.0671 4012 fdPHost - ok
    23:11:23.0687 4012 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
    23:11:23.0687 4012 FDResPub - ok
    23:11:23.0718 4012 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
    23:11:23.0718 4012 FileInfo - ok
    23:11:23.0733 4012 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
    23:11:23.0733 4012 Filetrace - ok
    23:11:23.0733 4012 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
    23:11:23.0733 4012 flpydisk - ok
    23:11:23.0765 4012 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
    23:11:23.0765 4012 FltMgr - ok
    23:11:23.0811 4012 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
    23:11:23.0827 4012 FontCache - ok
    23:11:23.0889 4012 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    23:11:23.0921 4012 FontCache3.0.0.0 - ok
    23:11:24.0045 4012 [ 44E56BCE70583FEDB09F915A69D6A6F9 ] FreemakeVideoCapture C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
    23:11:24.0045 4012 FreemakeVideoCapture - ok
    23:11:24.0061 4012 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
    23:11:24.0061 4012 FsDepends - ok
    23:11:24.0077 4012 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
    23:11:24.0077 4012 Fs_Rec - ok
    23:11:24.0108 4012 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
    23:11:24.0123 4012 fvevol - ok
    23:11:24.0123 4012 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
    23:11:24.0123 4012 gagp30kx - ok
    23:11:24.0170 4012 [ 9F5E8645FECD68C0ECC374F5A4AE068A ] gfiark C:\Windows\system32\drivers\gfiark.sys
    23:11:24.0170 4012 gfiark - ok
    23:11:24.0201 4012 [ 14908F4F9005C29DE8F5587E271390EE ] gfibto C:\Windows\system32\drivers\gfibto.sys
    23:11:24.0201 4012 gfibto - ok
    23:11:24.0233 4012 GMSIPCI - ok
    23:11:24.0264 4012 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
    23:11:24.0279 4012 gpsvc - ok
    23:11:24.0311 4012 [ 0191DEE9B9EB7902AF2CF4F67301095D ] GREGService C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
    23:11:24.0311 4012 GREGService - ok
    23:11:24.0404 4012 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    23:11:24.0404 4012 gupdate - ok
    23:11:24.0420 4012 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    23:11:24.0435 4012 gupdatem - ok
    23:11:24.0451 4012 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
    23:11:24.0451 4012 hcw85cir - ok
    23:11:24.0482 4012 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
    23:11:24.0482 4012 HdAudAddService - ok
    23:11:24.0498 4012 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
    23:11:24.0498 4012 HDAudBus - ok
    23:11:24.0513 4012 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
    23:11:24.0513 4012 HidBatt - ok
    23:11:24.0529 4012 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
    23:11:24.0529 4012 HidBth - ok
    23:11:24.0545 4012 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
    23:11:24.0545 4012 HidIr - ok
    23:11:24.0560 4012 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
    23:11:24.0560 4012 hidserv - ok
    23:11:24.0576 4012 [ B3BF6B5B50006DEF50B66306D99FCF6F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
    23:11:24.0576 4012 HidUsb - ok
    23:11:24.0607 4012 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
    23:11:24.0607 4012 hkmsvc - ok
    23:11:24.0623 4012 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
    23:11:24.0638 4012 HomeGroupListener - ok
    23:11:24.0654 4012 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
    23:11:24.0669 4012 HomeGroupProvider - ok
    23:11:24.0685 4012 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
    23:11:24.0685 4012 HpSAMD - ok
    23:11:24.0825 4012 HPSLPSVC - ok
    23:11:24.0857 4012 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
    23:11:24.0857 4012 HTTP - ok
    23:11:24.0888 4012 [ F57E489800543B69FE196F51CA9C85B5 ] hwdatacard C:\Windows\system32\DRIVERS\ewusbmdm.sys
    23:11:24.0888 4012 hwdatacard - ok
    23:11:24.0919 4012 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
    23:11:24.0919 4012 hwpolicy - ok
    23:11:24.0950 4012 [ 4A158424FE9E32365D67989304733241 ] hwusbfake C:\Windows\system32\DRIVERS\ewusbfake.sys
    23:11:24.0966 4012 hwusbfake - ok
    23:11:24.0981 4012 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
    23:11:24.0981 4012 i8042prt - ok
    23:11:25.0013 4012 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
    23:11:25.0013 4012 iaStorV - ok
    23:11:25.0106 4012 [ 829EA5ECCAA623279D94EAEE3B5AD140 ] IconMan_R C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
    23:11:25.0122 4012 IconMan_R - ok
    23:11:25.0169 4012 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
    23:11:25.0184 4012 idsvc - ok
    23:11:25.0293 4012 [ 24CC43ECDEEFD4C19FBBEE4951B647F1 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
    23:11:25.0356 4012 igfx - ok
    23:11:25.0387 4012 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
    23:11:25.0387 4012 iirsp - ok
    23:11:25.0418 4012 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
    23:11:25.0418 4012 IKEEXT - ok
    23:11:25.0481 4012 [ 96B0A408842B0E214EDCB41E89438999 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
    23:11:25.0496 4012 IntcAzAudAddService - ok
    23:11:25.0512 4012 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
    23:11:25.0512 4012 intelide - ok
    23:11:25.0527 4012 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
    23:11:25.0527 4012 intelppm - ok
    23:11:25.0559 4012 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
    23:11:25.0559 4012 IPBusEnum - ok
    23:11:25.0590 4012 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
    23:11:25.0590 4012 IpFilterDriver - ok
    23:11:25.0605 4012 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
    23:11:25.0605 4012 IPMIDRV - ok
    23:11:25.0621 4012 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
    23:11:25.0621 4012 IPNAT - ok
    23:11:25.0637 4012 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
    23:11:25.0637 4012 IRENUM - ok
    23:11:25.0668 4012 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
    23:11:25.0668 4012 isapnp - ok
    23:11:25.0683 4012 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
    23:11:25.0683 4012 iScsiPrt - ok
    23:11:25.0699 4012 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
    23:11:25.0699 4012 kbdclass - ok
    23:11:25.0715 4012 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
    23:11:25.0715 4012 kbdhid - ok
    23:11:25.0730 4012 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
    23:11:25.0730 4012 KeyIso - ok
    23:11:25.0761 4012 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
    23:11:25.0761 4012 KSecDD - ok
    23:11:25.0777 4012 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
    23:11:25.0777 4012 KSecPkg - ok
    23:11:25.0808 4012 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
    23:11:25.0808 4012 ksthunk - ok
    23:11:25.0839 4012 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
    23:11:25.0839 4012 KtmRm - ok
    23:11:25.0871 4012 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
    23:11:25.0871 4012 LanmanServer - ok
    23:11:25.0902 4012 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
    23:11:25.0902 4012 LanmanWorkstation - ok
    23:11:25.0917 4012 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
    23:11:25.0917 4012 lltdio - ok
    23:11:25.0933 4012 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
    23:11:25.0949 4012 lltdsvc - ok
    23:11:25.0964 4012 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
    23:11:25.0964 4012 lmhosts - ok
    23:11:25.0995 4012 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
    23:11:25.0995 4012 LSI_FC - ok
    23:11:26.0011 4012 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
    23:11:26.0011 4012 LSI_SAS - ok
    23:11:26.0011 4012 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
    23:11:26.0011 4012 LSI_SAS2 - ok
    23:11:26.0027 4012 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
    23:11:26.0027 4012 LSI_SCSI - ok
    23:11:26.0042 4012 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
    23:11:26.0042 4012 luafv - ok
    23:11:26.0073 4012 [ B3944D06EB4B64D57BD7E5FE89415F58 ] LVPr2M64 C:\Windows\system32\DRIVERS\LVPr2M64.sys
    23:11:26.0073 4012 LVPr2M64 - ok
    23:11:26.0089 4012 [ B3944D06EB4B64D57BD7E5FE89415F58 ] LVPr2Mon C:\Windows\system32\DRIVERS\LVPr2M64.sys
    23:11:26.0089 4012 LVPr2Mon - ok
    23:11:26.0136 4012 [ 0C85B2B6FB74B36A251792D45E0EF860 ] LVRS64 C:\Windows\system32\DRIVERS\lvrs64.sys
    23:11:26.0136 4012 LVRS64 - ok
    23:11:26.0229 4012 [ FF3A488924B0032B1A9CA6948C1FA9E8 ] LVUVC64 C:\Windows\system32\DRIVERS\lvuvc64.sys
    23:11:26.0276 4012 LVUVC64 - ok
    23:11:26.0323 4012 [ 792F9E30DCC228FE77F53104A14FE7E6 ] maconfservice C:\Program Files\ma-config.com\x64\maconfservice.exe
    23:11:26.0323 4012 maconfservice - ok
    23:11:26.0354 4012 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
    23:11:26.0354 4012 Mcx2Svc - ok
    23:11:26.0370 4012 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
    23:11:26.0370 4012 megasas - ok
    23:11:26.0401 4012 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
    23:11:26.0401 4012 MegaSR - ok
    23:11:26.0417 4012 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
    23:11:26.0432 4012 MMCSS - ok
    23:11:26.0463 4012 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
    23:11:26.0463 4012 Modem - ok
    23:11:26.0479 4012 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
    23:11:26.0479 4012 monitor - ok
    23:11:26.0495 4012 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
    23:11:26.0495 4012 mouclass - ok
    23:11:26.0510 4012 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
    23:11:26.0510 4012 mouhid - ok
    23:11:26.0541 4012 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
    23:11:26.0541 4012 mountmgr - ok
    23:11:26.0604 4012 [ 528A5C2570F468155A1B3CF0A2FF5EBD ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    23:11:26.0604 4012 MozillaMaintenance - ok
    23:11:26.0619 4012 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
    23:11:26.0619 4012 mpio - ok
    23:11:26.0651 4012 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
    23:11:26.0651 4012 mpsdrv - ok
    23:11:26.0697 4012 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
    23:11:26.0697 4012 MpsSvc - ok
    23:11:26.0729 4012 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
    23:11:26.0729 4012 MRxDAV - ok
    23:11:26.0760 4012 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
    23:11:26.0760 4012 mrxsmb - ok
    23:11:26.0775 4012 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
    23:11:26.0775 4012 mrxsmb10 - ok
    23:11:26.0807 4012 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
    23:11:26.0807 4012 mrxsmb20 - ok
    23:11:26.0822 4012 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
    23:11:26.0822 4012 msahci - ok
    23:11:26.0838 4012 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
    23:11:26.0853 4012 msdsm - ok
    23:11:26.0885 4012 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
    23:11:26.0885 4012 MSDTC - ok
    23:11:26.0916 4012 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
    23:11:26.0916 4012 Msfs - ok
    23:11:26.0931 4012 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
    23:11:26.0931 4012 mshidkmdf - ok
    23:11:26.0947 4012 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
    23:11:26.0947 4012 msisadrv - ok
    23:11:26.0978 4012 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
    23:11:26.0978 4012 MSiSCSI - ok
    23:11:26.0978 4012 msiserver - ok
    23:11:26.0994 4012 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
    23:11:27.0009 4012 MSKSSRV - ok
    23:11:27.0041 4012 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
    23:11:27.0041 4012 MSPCLOCK - ok
    23:11:27.0056 4012 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
    23:11:27.0056 4012 MSPQM - ok
    23:11:27.0072 4012 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
    23:11:27.0087 4012 MsRPC - ok
    23:11:27.0103 4012 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
    23:11:27.0103 4012 mssmbios - ok
    23:11:27.0134 4012 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
    23:11:27.0134 4012 MSTEE - ok
    23:11:27.0150 4012 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
    23:11:27.0150 4012 MTConfig - ok
    23:11:27.0165 4012 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
    23:11:27.0165 4012 Mup - ok
    23:11:27.0197 4012 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
    23:11:27.0197 4012 napagent - ok
    23:11:27.0212 4012 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
    23:11:27.0212 4012 NativeWifiP - ok
    23:11:27.0290 4012 [ E0E4A1F81A7D69C595A8A9DDAD084C19 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe
    23:11:27.0290 4012 NAUpdate - ok
    23:11:27.0321 4012 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
    23:11:27.0337 4012 NDIS - ok
    23:11:27.0353 4012 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
    23:11:27.0353 4012 NdisCap - ok
    23:11:27.0368 4012 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
    23:11:27.0368 4012 NdisTapi - ok
    23:11:27.0399 4012 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
    23:11:27.0399 4012 Ndisuio - ok
    23:11:27.0415 4012 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
    23:11:27.0415 4012 NdisWan - ok
    23:11:27.0446 4012 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
    23:11:27.0446 4012 NDProxy - ok
    23:11:27.0462 4012 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
    23:11:27.0477 4012 NetBIOS - ok
    23:11:27.0493 4012 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
    23:11:27.0493 4012 NetBT - ok
    23:11:27.0509 4012 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
    23:11:27.0509 4012 Netlogon - ok
    23:11:27.0540 4012 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
    23:11:27.0540 4012 Netman - ok
    23:11:27.0555 4012 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
    23:11:27.0555 4012 netprofm - ok
    23:11:27.0587 4012 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
    23:11:27.0587 4012 NetTcpPortSharing - ok
    23:11:27.0602 4012 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
    23:11:27.0602 4012 nfrd960 - ok
    23:11:27.0634 4012 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
    23:11:27.0634 4012 NlaSvc - ok
    23:11:27.0680 4012 [ 351533ACC2A069B94E80BBFC177E8FDF ] npf C:\Windows\system32\drivers\npf.sys
    23:11:27.0680 4012 npf - ok
    23:11:27.0696 4012 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
    23:11:27.0696 4012 Npfs - ok
    23:11:27.0727 4012 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
    23:11:27.0727 4012 nsi - ok
    23:11:27.0727 4012 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
    23:11:27.0727 4012 nsiproxy - ok
    23:11:27.0774 4012 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
    23:11:27.0790 4012 Ntfs - ok
    23:11:27.0805 4012 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
    23:11:27.0805 4012 Null - ok
    23:11:27.0977 4012 [ 4EE399576F76D38C04745DB739BBC8C7 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
    23:11:28.0024 4012 nvlddmkm - ok
    23:11:28.0055 4012 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
    23:11:28.0055 4012 nvraid - ok
    23:11:28.0070 4012 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
    23:11:28.0070 4012 nvstor - ok
    23:11:28.0148 4012 [ 7335C3D78A7746D76D37F6722CC4A466 ] nvsvc C:\Windows\system32\nvvsvc.exe
    23:11:28.0148 4012 nvsvc - ok
    23:11:28.0211 4012 [ B7C53DA1C73FF39F4A6248643EFD979A ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    23:11:28.0211 4012 nvUpdatusService - ok
    23:11:28.0242 4012 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
    23:11:28.0242 4012 nv_agp - ok
    23:11:28.0273 4012 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
    23:11:28.0273 4012 ohci1394 - ok
    23:11:28.0304 4012 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
    23:11:28.0320 4012 p2pimsvc - ok
    23:11:28.0336 4012 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
    23:11:28.0351 4012 p2psvc - ok
    23:11:28.0367 4012 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
    23:11:28.0367 4012 Parport - ok
    23:11:28.0398 4012 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
    23:11:28.0398 4012 partmgr - ok
    23:11:28.0414 4012 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
    23:11:28.0429 4012 PcaSvc - ok
    23:11:28.0460 4012 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
    23:11:28.0460 4012 pci - ok
    23:11:28.0460 4012 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
    23:11:28.0460 4012 pciide - ok
    23:11:28.0492 4012 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
    23:11:28.0492 4012 pcmcia - ok
    23:11:28.0507 4012 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
    23:11:28.0507 4012 pcw - ok
    23:11:28.0538 4012 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
    23:11:28.0538 4012 PEAUTH - ok
    23:11:28.0616 4012 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
    23:11:28.0616 4012 PerfHost - ok
    23:11:28.0663 4012 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
    23:11:28.0663 4012 pla - ok
    23:11:28.0710 4012 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
    23:11:28.0710 4012 PlugPlay - ok
    23:11:28.0726 4012 PnkBstrA - ok
    23:11:28.0741 4012 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
    23:11:28.0741 4012 PNRPAutoReg - ok
    23:11:28.0757 4012 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
    23:11:28.0772 4012 PNRPsvc - ok
    23:11:28.0804 4012 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
    23:11:28.0804 4012 PolicyAgent - ok
    23:11:28.0819 4012 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
    23:11:28.0835 4012 Power - ok
    23:11:28.0850 4012 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
    23:11:28.0850 4012 PptpMiniport - ok
    23:11:28.0866 4012 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
    23:11:28.0882 4012 Processor - ok
    23:11:28.0897 4012 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
    23:11:28.0897 4012 ProfSvc - ok
    23:11:28.0913 4012 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
    23:11:28.0913 4012 ProtectedStorage - ok
    23:11:28.0944 4012 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
    23:11:28.0944 4012 Psched - ok
    23:11:28.0991 4012 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
    23:11:29.0022 4012 ql2300 - ok
    23:11:29.0053 4012 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
    23:11:29.0053 4012 ql40xx - ok
    23:11:29.0069 4012 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
    23:11:29.0084 4012 QWAVE - ok
    23:11:29.0084 4012 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
    23:11:29.0100 4012 QWAVEdrv - ok
    23:11:29.0178 4012 [ A55E7D0D873B2C97585B3B5926AC6ADE ] RapiMgr C:\Windows\WindowsMobile\rapimgr.dll
    23:11:29.0178 4012 RapiMgr - ok
    23:11:29.0194 4012 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
    23:11:29.0194 4012 RasAcd - ok
    23:11:29.0209 4012 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
    23:11:29.0225 4012 RasAgileVpn - ok
    23:11:29.0240 4012 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
    23:11:29.0240 4012 RasAuto - ok
    23:11:29.0256 4012 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
    23:11:29.0272 4012 Rasl2tp - ok
    23:11:29.0287 4012 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
    23:11:29.0287 4012 RasMan - ok
    23:11:29.0303 4012 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
    23:11:29.0318 4012 RasPppoe - ok
    23:11:29.0334 4012 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
    23:11:29.0350 4012 RasSstp - ok
    23:11:29.0365 4012 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
    23:11:29.0365 4012 rdbss - ok
    23:11:29.0381 4012 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
    23:11:29.0381 4012 rdpbus - ok
    23:11:29.0412 4012 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
    23:11:29.0412 4012 RDPCDD - ok
    23:11:29.0412 4012 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
    23:11:29.0412 4012 RDPENCDD - ok
    23:11:29.0428 4012 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
    23:11:29.0428 4012 RDPREFMP - ok
    23:11:29.0443 4012 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
    23:11:29.0443 4012 RDPWD - ok
    23:11:29.0459 4012 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
    23:11:29.0474 4012 rdyboost - ok
    23:11:29.0490 4012 [ EA569D48B2E755AF6D96F03F3335D98A ] Realtek11nSU C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
    23:11:29.0490 4012 Realtek11nSU - ok
    23:11:29.0521 4012 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
    23:11:29.0521 4012 RemoteAccess - ok
    23:11:29.0537 4012 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
    23:11:29.0552 4012 RemoteRegistry - ok
    23:11:29.0599 4012 [ 7B04C9843921AB1F695FB395422C5360 ] RimUsb C:\Windows\system32\Drivers\RimUsb_AMD64.sys
    23:11:29.0599 4012 RimUsb - ok
    23:11:29.0615 4012 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
    23:11:29.0630 4012 RpcEptMapper - ok
    23:11:29.0630 4012 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
    23:11:29.0646 4012 RpcLocator - ok
    23:11:29.0662 4012 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
    23:11:29.0662 4012 RpcSs - ok
    23:11:29.0677 4012 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
    23:11:29.0693 4012 rspndr - ok
    23:11:29.0708 4012 [ FC009873CBC12CC6D7045D803D8E8CD3 ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys
    23:11:29.0724 4012 RSUSBSTOR - ok
    23:11:29.0740 4012 [ B358C047E081AC70035017BD1D7ED818 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
    23:11:29.0740 4012 RTL8167 - ok
    23:11:29.0802 4012 [ 5EDFCEE5682237607082880338415AA6 ] RTL8192su C:\Windows\system32\DRIVERS\RTL8192su.sys
    23:11:29.0818 4012 RTL8192su - ok
    23:11:29.0833 4012 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
    23:11:29.0833 4012 SamSs - ok
    23:11:29.0849 4012 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
    23:11:29.0849 4012 sbp2port - ok
    23:11:29.0880 4012 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
    23:11:29.0880 4012 SCardSvr - ok
    23:11:29.0896 4012 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
    23:11:29.0896 4012 scfilter - ok
    23:11:29.0927 4012 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
    23:11:29.0942 4012 Schedule - ok
    23:11:29.0958 4012 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
    23:11:29.0958 4012 SCPolicySvc - ok
    23:11:30.0005 4012 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
    23:11:30.0005 4012 sdbus - ok
    23:11:30.0020 4012 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
    23:11:30.0020 4012 SDRSVC - ok
    23:11:30.0036 4012 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
    23:11:30.0036 4012 secdrv - ok
    23:11:30.0052 4012 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
    23:11:30.0052 4012 seclogon - ok
    23:11:30.0083 4012 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
    23:11:30.0083 4012 SENS - ok
    23:11:30.0098 4012 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
    23:11:30.0098 4012 SensrSvc - ok
    23:11:30.0114 4012 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
    23:11:30.0114 4012 Serenum - ok
    23:11:30.0145 4012 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
    23:11:30.0145 4012 Serial - ok
    23:11:30.0161 4012 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
    23:11:30.0161 4012 sermouse - ok
    23:11:30.0192 4012 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
    23:11:30.0192 4012 SessionEnv - ok
    23:11:30.0223 4012 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
    23:11:30.0223 4012 sffdisk - ok
    23:11:30.0223 4012 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
    23:11:30.0239 4012 sffp_mmc - ok
    23:11:30.0239 4012 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
    23:11:30.0239 4012 sffp_sd - ok
    23:11:30.0270 4012 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
    23:11:30.0270 4012 sfloppy - ok
    23:11:30.0317 4012 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
    23:11:30.0317 4012 ShellHWDetection - ok
    23:11:30.0348 4012 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
    23:11:30.0348 4012 SiSRaid2 - ok
    23:11:30.0364 4012 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
    23:11:30.0364 4012 SiSRaid4 - ok
    23:11:30.0379 4012 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
    23:11:30.0379 4012 Smb - ok
    23:11:30.0410 4012 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
    23:11:30.0410 4012 SNMPTRAP - ok
    23:11:30.0410 4012 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
    23:11:30.0410 4012 spldr - ok
    23:11:30.0442 4012 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
    23:11:30.0457 4012 Spooler - ok
    23:11:30.0520 4012 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
    23:11:30.0551 4012 sppsvc - ok
    23:11:30.0582 4012 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
    23:11:30.0582 4012 sppuinotify - ok
    23:11:30.0613 4012 [ 602884696850C86434530790B110E8EB ] sptd C:\Windows\system32\Drivers\sptd.sys
    23:11:30.0613 4012 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850C86434530790B110E8EB
    23:11:30.0629 4012 sptd ( LockedFile.Multi.Generic ) - warning
    23:11:30.0629 4012 sptd - detected LockedFile.Multi.Generic (1)
    23:11:30.0660 4012 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
    23:11:30.0660 4012 srv - ok
    23:11:30.0691 4012 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
    23:11:30.0691 4012 srv2 - ok
    23:11:30.0691 4012 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
    23:11:30.0707 4012 srvnet - ok
    23:11:30.0738 4012 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
    23:11:30.0738 4012 SSDPSRV - ok
    23:11:30.0754 4012 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
    23:11:30.0754 4012 SstpSvc - ok
    23:11:30.0816 4012 Steam Client Service - ok
    23:11:30.0863 4012 [ 81F177C1954453AF407604160BD149CB ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    23:11:30.0863 4012 Stereo Service - ok
    23:11:30.0878 4012 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
    23:11:30.0878 4012 stexstor - ok
    23:11:30.0910 4012 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
    23:11:30.0925 4012 stisvc - ok
    23:11:30.0941 4012 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
    23:11:30.0941 4012 swenum - ok
    23:11:30.0972 4012 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
    23:11:30.0972 4012 swprv - ok
    23:11:31.0003 4012 [ 512231BA47975F3F1A67B11F271BB49D ] SynasUSB C:\Windows\system32\drivers\SynUSB64.sys
    23:11:31.0003 4012 SynasUSB - ok
    23:11:31.0050 4012 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
    23:11:31.0066 4012 SysMain - ok
    23:11:31.0097 4012 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
    23:11:31.0097 4012 TabletInputService - ok
    23:11:31.0128 4012 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
    23:11:31.0128 4012 TapiSrv - ok
    23:11:31.0159 4012 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
    23:11:31.0159 4012 TBS - ok
    23:11:31.0206 4012 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip C:\Windows\system32\drivers\tcpip.sys
    23:11:31.0222 4012 Tcpip - ok
    23:11:31.0237 4012 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
    23:11:31.0253 4012 TCPIP6 - ok
    23:11:31.0268 4012 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
    23:11:31.0268 4012 tcpipreg - ok
    23:11:31.0300 4012 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
    23:11:31.0300 4012 TDPIPE - ok
    23:11:31.0315 4012 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
    23:11:31.0315 4012 TDTCP - ok
    23:11:31.0346 4012 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
    23:11:31.0346 4012 tdx - ok
    23:11:31.0440 4012 [ 4A84526076717F87F3E1AD24AB28FB5A ] TeamViewer7 C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
    23:11:31.0456 4012 TeamViewer7 - ok
    23:11:31.0471 4012 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
    23:11:31.0471 4012 TermDD - ok
    23:11:31.0502 4012 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
    23:11:31.0502 4012 TermService - ok
    23:11:31.0549 4012 [ 48D9D00C2E0E72C3D4F52772C80355F6 ] TFsExDisk C:\Windows\System32\Drivers\TFsExDisk.sys
    23:11:31.0549 4012 TFsExDisk - ok
    23:11:31.0565 4012 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
    23:11:31.0565 4012 Themes - ok
    23:11:31.0596 4012 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
    23:11:31.0596 4012 THREADORDER - ok
    23:11:31.0612 4012 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
    23:11:31.0612 4012 TrkWks - ok
    23:11:31.0643 4012 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
    23:11:31.0643 4012 TrustedInstaller - ok
    23:11:31.0674 4012 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
    23:11:31.0674 4012 tssecsrv - ok
    23:11:31.0705 4012 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
    23:11:31.0705 4012 TsUsbFlt - ok
    23:11:31.0783 4012 [ 05E0457E1DD5698D6A1235B43C87A2B0 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
    23:11:31.0799 4012 TuneUp.UtilitiesSvc - ok
    23:11:31.0830 4012 [ DCC94C51D27C7EC0DADECA8F64C94FCF ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys
    23:11:31.0830 4012 TuneUpUtilitiesDrv - ok
    23:11:31.0846 4012 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
    23:11:31.0846 4012 tunnel - ok
    23:11:31.0861 4012 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
    23:11:31.0861 4012 uagp35 - ok
    23:11:31.0892 4012 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
    23:11:31.0908 4012 udfs - ok
    23:11:31.0924 4012 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
    23:11:31.0924 4012 UI0Detect - ok
    23:11:31.0939 4012 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
    23:11:31.0939 4012 uliagpkx - ok
    23:11:31.0986 4012 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
    23:11:31.0986 4012 umbus - ok
    23:11:32.0002 4012 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
    23:11:32.0002 4012 UmPass - ok
    23:11:32.0064 4012 [ 67A95B9D129ED5399E7965CD09CF30E7 ] UMVPFSrv C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
    23:11:32.0080 4012 UMVPFSrv - ok
    23:11:32.0142 4012 [ F9EC9ACD504D823D9B9CA98A4F8D3CA2 ] Updater Service C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
    23:11:32.0142 4012 Updater Service - ok
    23:11:32.0173 4012 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
    23:11:32.0173 4012 upnphost - ok
    23:11:32.0220 4012 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
    23:11:32.0220 4012 usbaudio - ok
    23:11:32.0236 4012 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
    23:11:32.0236 4012 usbccgp - ok
    23:11:32.0267 4012 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
    23:11:32.0267 4012 usbcir - ok
    23:11:32.0282 4012 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
    23:11:32.0282 4012 usbehci - ok
    23:11:32.0298 4012 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
    23:11:32.0298 4012 usbhub - ok
    23:11:32.0314 4012 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
    23:11:32.0314 4012 usbohci - ok
    23:11:32.0345 4012 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
    23:11:32.0345 4012 usbprint - ok
    23:11:32.0376 4012 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
    23:11:32.0392 4012 USBSTOR - ok
    23:11:32.0407 4012 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
    23:11:32.0423 4012 usbuhci - ok
    23:11:32.0438 4012 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
    23:11:32.0454 4012 UxSms - ok
    23:11:32.0470 4012 [ 35FD8AAE93B9D8CA4B355166CF22CBBE ] UxTuneUp C:\Windows\System32\uxtuneup.dll
    23:11:32.0470 4012 UxTuneUp - ok
    23:11:32.0485 4012 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
    23:11:32.0485 4012 VaultSvc - ok
    23:11:32.0485 4012 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
    23:11:32.0485 4012 vdrvroot - ok
    23:11:32.0516 4012 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
    23:11:32.0532 4012 vds - ok
    23:11:32.0548 4012 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
    23:11:32.0548 4012 vga - ok
    23:11:32.0563 4012 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
    23:11:32.0563 4012 VgaSave - ok
    23:11:32.0579 4012 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
    23:11:32.0594 4012 vhdmp - ok
    23:11:32.0610 4012 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
    23:11:32.0610 4012 viaide - ok
    23:11:32.0626 4012 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
    23:11:32.0626 4012 volmgr - ok
    23:11:32.0657 4012 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
    23:11:32.0657 4012 volmgrx - ok
    23:11:32.0672 4012 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
    23:11:32.0672 4012 volsnap - ok
    23:11:32.0704 4012 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
    23:11:32.0704 4012 vsmraid - ok
    23:11:32.0750 4012 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
    23:11:32.0782 4012 VSS - ok
    23:11:32.0813 4012 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
    23:11:32.0813 4012 vwifibus - ok
    23:11:32.0828 4012 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
    23:11:32.0828 4012 vwififlt - ok
    23:11:32.0844 4012 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
    23:11:32.0844 4012 vwifimp - ok
    23:11:32.0875 4012 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
    23:11:32.0891 4012 W32Time - ok
    23:11:32.0906 4012 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
    23:11:32.0906 4012 WacomPen - ok
    23:11:32.0922 4012 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
    23:11:32.0938 4012 WANARP - ok
    23:11:32.0938 4012 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
    23:11:32.0938 4012 Wanarpv6 - ok
    23:11:32.0984 4012 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
    23:11:33.0000 4012 WatAdminSvc - ok
    23:11:33.0047 4012 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
    23:11:33.0062 4012 wbengine - ok
    23:11:33.0078 4012 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
    23:11:33.0078 4012 WbioSrvc - ok <
    0
  10. papayedu02 Messages postés 33 Statut Membre
     
    23:11:33.0140 4012 [ 8BDA6DB43AA54E8BB5E0794541DDC209 ] WcesComm C:\Windows\WindowsMobile\wcescomm.dll
    23:11:33.0156 4012 WcesComm - ok
    23:11:33.0172 4012 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
    23:11:33.0187 4012 wcncsvc - ok
    23:11:33.0203 4012 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
    23:11:33.0218 4012 WcsPlugInService - ok
    23:11:33.0234 4012 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
    23:11:33.0234 4012 Wd - ok
    23:11:33.0265 4012 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
    23:11:33.0281 4012 Wdf01000 - ok
    23:11:33.0281 4012 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
    23:11:33.0296 4012 WdiServiceHost - ok
    23:11:33.0296 4012 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
    23:11:33.0296 4012 WdiSystemHost - ok
    23:11:33.0312 4012 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
    23:11:33.0328 4012 WebClient - ok
    23:11:33.0359 4012 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
    23:11:33.0359 4012 Wecsvc - ok
    23:11:33.0374 4012 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
    23:11:33.0390 4012 wercplsupport - ok
    23:11:33.0390 4012 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
    23:11:33.0406 4012 WerSvc - ok
    23:11:33.0421 4012 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
    23:11:33.0421 4012 WfpLwf - ok
    23:11:33.0437 4012 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
    23:11:33.0437 4012 WIMMount - ok
    23:11:33.0437 4012 WinHttpAutoProxySvc - ok
    23:11:33.0499 4012 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
    23:11:33.0515 4012 Winmgmt - ok
    23:11:33.0546 4012 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
    23:11:33.0577 4012 WinRM - ok
    23:11:33.0624 4012 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
    23:11:33.0624 4012 WinUsb - ok
    23:11:33.0671 4012 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
    23:11:33.0686 4012 Wlansvc - ok
    23:11:33.0718 4012 [ C71EE856C4F5B52E2D094F494CEE4936 ] WlanWpsSvc C:\Program Files (x86)\D-Link\DWA-131 revA\WlanWpsSvc.exe
    23:11:33.0718 4012 WlanWpsSvc - ok
    23:11:33.0764 4012 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
    23:11:33.0764 4012 wlcrasvc - ok
    23:11:33.0842 4012 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    23:11:33.0858 4012 wlidsvc - ok
    23:11:33.0889 4012 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
    23:11:33.0889 4012 WmiAcpi - ok
    23:11:33.0905 4012 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
    23:11:33.0920 4012 wmiApSrv - ok
    23:11:33.0936 4012 WMPNetworkSvc - ok
    23:11:33.0952 4012 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
    23:11:33.0952 4012 WPCSvc - ok
    23:11:33.0967 4012 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
    23:11:33.0967 4012 WPDBusEnum - ok
    23:11:33.0998 4012 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
    23:11:33.0998 4012 ws2ifsl - ok
    23:11:34.0014 4012 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
    23:11:34.0014 4012 wscsvc - ok
    23:11:34.0030 4012 WSearch - ok
    23:11:34.0061 4012 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
    23:11:34.0061 4012 WudfPf - ok
    23:11:34.0108 4012 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
    23:11:34.0108 4012 WUDFRd - ok
    23:11:34.0139 4012 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
    23:11:34.0154 4012 wudfsvc - ok
    23:11:34.0170 4012 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
    23:11:34.0186 4012 WwanSvc - ok
    23:11:34.0217 4012 [ 2C6BC21B2D5B58D8B1D638C1704CB494 ] xusb21 C:\Windows\system32\DRIVERS\xusb21.sys
    23:11:34.0217 4012 xusb21 - ok
    23:11:34.0232 4012 ================ Scan global ===============================
    23:11:34.0264 4012 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
    23:11:34.0295 4012 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
    23:11:34.0295 4012 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
    23:11:34.0326 4012 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
    23:11:34.0357 4012 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
    23:11:34.0373 4012 [Global] - ok
    23:11:34.0373 4012 ================ Scan MBR ==================================
    23:11:34.0388 4012 [ 70E629B51C16B3C007730C6AE57144C9 ] \Device\Harddisk0\DR0
    23:11:36.0151 4012 \Device\Harddisk0\DR0 - ok
    23:11:36.0151 4012 ================ Scan VBR ==================================
    23:11:36.0151 4012 [ E9F401263F172D14FD207B40EAF7506E ] \Device\Harddisk0\DR0\Partition1
    23:11:36.0151 4012 \Device\Harddisk0\DR0\Partition1 - ok
    23:11:36.0167 4012 [ 460010EEC79078509656602426351B33 ] \Device\Harddisk0\DR0\Partition2
    23:11:36.0167 4012 \Device\Harddisk0\DR0\Partition2 - ok
    23:11:36.0167 4012 ============================================================
    23:11:36.0167 4012 Scan finished
    23:11:36.0167 4012 ============================================================
    23:11:36.0167 2308 Detected object count: 1
    23:11:36.0167 2308 Actual detected object count: 1
    23:13:52.0027 2308 sptd ( LockedFile.Multi.Generic ) - skipped by user
    23:13:52.0027 2308 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
    23:14:39.0951 3628 ============================================================
    23:14:39.0951 3628 Scan started
    23:14:39.0951 3628 Mode: Manual;
    23:14:39.0951 3628 ============================================================
    23:14:40.0107 3628 ================ Scan system memory ========================
    23:14:40.0107 3628 System memory - ok
    23:14:40.0107 3628 ================ Scan services =============================
    23:14:40.0200 3628 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
    23:14:40.0200 3628 1394ohci - ok
    23:14:40.0216 3628 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
    23:14:40.0231 3628 ACPI - ok
    23:14:40.0247 3628 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
    23:14:40.0247 3628 AcpiPmi - ok
    23:14:40.0294 3628 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    23:14:40.0294 3628 AdobeARMservice - ok
    23:14:40.0372 3628 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    23:14:40.0372 3628 AdobeFlashPlayerUpdateSvc - ok
    23:14:40.0387 3628 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
    23:14:40.0403 3628 adp94xx - ok
    23:14:40.0419 3628 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
    23:14:40.0419 3628 adpahci - ok
    23:14:40.0434 3628 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
    23:14:40.0434 3628 adpu320 - ok
    23:14:40.0465 3628 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
    23:14:40.0465 3628 AeLookupSvc - ok
    23:14:40.0481 3628 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
    23:14:40.0481 3628 AFD - ok
    23:14:40.0497 3628 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
    23:14:40.0512 3628 agp440 - ok
    23:14:40.0528 3628 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
    23:14:40.0528 3628 ALG - ok
    23:14:40.0528 3628 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
    23:14:40.0543 3628 aliide - ok
    23:14:40.0543 3628 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
    23:14:40.0543 3628 amdide - ok
    23:14:40.0575 3628 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
    23:14:40.0575 3628 AmdK8 - ok
    23:14:40.0575 3628 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
    23:14:40.0590 3628 AmdPPM - ok
    23:14:40.0606 3628 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
    23:14:40.0606 3628 amdsata - ok
    23:14:40.0606 3628 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
    23:14:40.0621 3628 amdsbs - ok
    23:14:40.0637 3628 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
    23:14:40.0637 3628 amdxata - ok
    23:14:40.0668 3628 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
    23:14:40.0668 3628 AppID - ok
    23:14:40.0684 3628 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
    23:14:40.0684 3628 AppIDSvc - ok
    23:14:40.0715 3628 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll
    23:14:40.0715 3628 Appinfo - ok
    23:14:40.0731 3628 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
    23:14:40.0731 3628 arc - ok
    23:14:40.0746 3628 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
    23:14:40.0746 3628 arcsas - ok
    23:14:40.0762 3628 [ 0BAEFD3F648C6E7AB52990DD9565E4E2 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
    23:14:40.0762 3628 aswFsBlk - ok
    23:14:40.0777 3628 [ FA562F34ED6633C66170B09182B4C049 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
    23:14:40.0793 3628 aswMonFlt - ok
    23:14:40.0793 3628 [ 64E2BAB4096C13D2342BC4661C967E07 ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
    23:14:40.0793 3628 aswRdr - ok
    23:14:40.0809 3628 [ 5573AA70993A2BB81525B1C704B88763 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
    23:14:40.0809 3628 aswRvrt - ok
    23:14:40.0840 3628 [ 10ED1CAB84AA65983C41A11F60294C9B ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
    23:14:40.0840 3628 aswSnx - ok
    23:14:40.0871 3628 [ 00E5253353717D3CA12A0F5A6F9991EC ] aswSP C:\Windows\system32\drivers\aswSP.sys
    23:14:40.0871 3628 aswSP - ok
    23:14:40.0887 3628 [ 29DD8E458A84171202AA4979364C30C0 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
    23:14:40.0887 3628 aswTdi - ok
    23:14:40.0902 3628 [ 6359B99C955DB9F40B653159A0EED261 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
    23:14:40.0902 3628 aswVmm - ok
    23:14:40.0918 3628 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
    23:14:40.0918 3628 AsyncMac - ok
    23:14:40.0933 3628 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
    23:14:40.0933 3628 atapi - ok
    23:14:40.0965 3628 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
    23:14:40.0965 3628 AudioEndpointBuilder - ok
    23:14:40.0965 3628 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
    23:14:40.0980 3628 AudioSrv - ok
    23:14:41.0074 3628 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    23:14:41.0074 3628 avast! Antivirus - ok
    23:14:41.0105 3628 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
    23:14:41.0105 3628 AxInstSV - ok
    23:14:41.0136 3628 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
    23:14:41.0136 3628 b06bdrv - ok
    23:14:41.0152 3628 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
    23:14:41.0152 3628 b57nd60a - ok
    23:14:41.0183 3628 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
    23:14:41.0183 3628 BDESVC - ok
    23:14:41.0199 3628 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
    23:14:41.0199 3628 Beep - ok
    23:14:41.0230 3628 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
    23:14:41.0245 3628 BFE - ok
    23:14:41.0261 3628 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
    23:14:41.0261 3628 blbdrive - ok
    23:14:41.0277 3628 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
    23:14:41.0277 3628 bowser - ok
    23:14:41.0277 3628 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
    23:14:41.0277 3628 BrFiltLo - ok
    23:14:41.0292 3628 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
    23:14:41.0292 3628 BrFiltUp - ok
    23:14:41.0323 3628 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
    23:14:41.0323 3628 Browser - ok
    23:14:41.0355 3628 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
    23:14:41.0355 3628 Brserid - ok
    23:14:41.0370 3628 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
    23:14:41.0370 3628 BrSerWdm - ok
    23:14:41.0370 3628 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
    23:14:41.0370 3628 BrUsbMdm - ok
    23:14:41.0386 3628 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
    23:14:41.0386 3628 BrUsbSer - ok
    23:14:41.0401 3628 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
    23:14:41.0401 3628 BTHMODEM - ok
    23:14:41.0433 3628 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
    23:14:41.0433 3628 bthserv - ok
    23:14:41.0464 3628 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
    23:14:41.0464 3628 cdfs - ok
    23:14:41.0479 3628 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
    23:14:41.0479 3628 cdrom - ok
    23:14:41.0511 3628 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
    23:14:41.0511 3628 CertPropSvc - ok
    23:14:41.0511 3628 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
    23:14:41.0511 3628 circlass - ok
    23:14:41.0526 3628 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
    23:14:41.0526 3628 CLFS - ok
    23:14:41.0589 3628 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    23:14:41.0589 3628 clr_optimization_v2.0.50727_32 - ok
    23:14:41.0620 3628 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
    23:14:41.0620 3628 clr_optimization_v2.0.50727_64 - ok
    23:14:41.0651 3628 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    23:14:41.0651 3628 clr_optimization_v4.0.30319_32 - ok
    23:14:41.0682 3628 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    23:14:41.0682 3628 clr_optimization_v4.0.30319_64 - ok
    23:14:41.0698 3628 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
    23:14:41.0698 3628 CmBatt - ok
    23:14:41.0713 3628 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
    23:14:41.0713 3628 cmdide - ok
    23:14:41.0745 3628 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
    23:14:41.0745 3628 CNG - ok
    23:14:41.0745 3628 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
    23:14:41.0745 3628 Compbatt - ok
    23:14:41.0760 3628 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
    23:14:41.0776 3628 CompositeBus - ok
    23:14:41.0776 3628 COMSysApp - ok
    23:14:41.0791 3628 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
    23:14:41.0791 3628 crcdisk - ok
    23:14:41.0807 3628 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc C:\Windows\system32\cryptsvc.dll
    23:14:41.0823 3628 CryptSvc - ok
    23:14:41.0838 3628 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
    23:14:41.0838 3628 DcomLaunch - ok
    23:14:41.0869 3628 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
    23:14:41.0869 3628 defragsvc - ok
    23:14:41.0885 3628 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
    23:14:41.0885 3628 DfsC - ok
    23:14:41.0916 3628 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
    23:14:41.0916 3628 Dhcp - ok
    23:14:41.0947 3628 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
    23:14:41.0947 3628 discache - ok
    23:14:41.0963 3628 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
    23:14:41.0963 3628 Disk - ok
    23:14:41.0979 3628 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
    23:14:41.0979 3628 Dnscache - ok
    23:14:41.0994 3628 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
    23:14:42.0010 3628 dot3svc - ok
    23:14:42.0025 3628 [ B42ED0320C6E41102FDE0005154849BB ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
    23:14:42.0025 3628 Dot4 - ok
    23:14:42.0057 3628 [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print C:\Windows\system32\drivers\Dot4Prt.sys
    23:14:42.0057 3628 Dot4Print - ok
    23:14:42.0072 3628 [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
    23:14:42.0072 3628 dot4usb - ok
    23:14:42.0088 3628 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
    23:14:42.0088 3628 DPS - ok
    23:14:42.0119 3628 [ B28C853770C995552B9F5760D8245F44 ] driverhardwarev2x64 C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys
    23:14:42.0119 3628 driverhardwarev2x64 - ok
    23:14:42.0135 3628 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
    23:14:42.0135 3628 drmkaud - ok
    23:14:42.0166 3628 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
    23:14:42.0181 3628 DXGKrnl - ok
    23:14:42.0197 3628 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
    23:14:42.0197 3628 EapHost - ok
    23:14:42.0259 3628 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
    23:14:42.0275 3628 ebdrv - ok
    23:14:42.0291 3628 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
    23:14:42.0291 3628 EFS - ok
    23:14:42.0353 3628 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
    23:14:42.0353 3628 ehRecvr - ok
    23:14:42.0369 3628 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
    23:14:42.0369 3628 ehSched - ok
    23:14:42.0400 3628 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
    23:14:42.0400 3628 elxstor - ok
    23:14:42.0415 3628 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
    23:14:42.0415 3628 ErrDev - ok
    23:14:42.0447 3628 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
    23:14:42.0447 3628 EventSystem - ok
    23:14:42.0462 3628 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
    23:14:42.0462 3628 exfat - ok
    23:14:42.0478 3628 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
    23:14:42.0493 3628 fastfat - ok
    23:14:42.0525 3628 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
    23:14:42.0525 3628 Fax - ok
    23:14:42.0540 3628 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
    23:14:42.0540 3628 fdc - ok
    23:14:42.0571 3628 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
    23:14:42.0571 3628 fdPHost - ok
    23:14:42.0571 3628 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
    23:14:42.0587 3628 FDResPub - ok
    23:14:42.0603 3628 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
    23:14:42.0603 3628 FileInfo - ok
    23:14:42.0618 3628 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
    23:14:42.0618 3628 Filetrace - ok
    23:14:42.0634 3628 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
    23:14:42.0634 3628 flpydisk - ok
    23:14:42.0649 3628 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
    23:14:42.0649 3628 FltMgr - ok
    23:14:42.0681 3628 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
    23:14:42.0696 3628 FontCache - ok
    23:14:42.0727 3628 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
    23:14:42.0727 3628 FontCache3.0.0.0 - ok
    23:14:42.0790 3628 [ 44E56BCE70583FEDB09F915A69D6A6F9 ] FreemakeVideoCapture C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
    23:14:42.0790 3628 FreemakeVideoCapture - ok
    23:14:42.0805 3628 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
    23:14:42.0805 3628 FsDepends - ok
    23:14:42.0821 3628 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
    23:14:42.0821 3628 Fs_Rec - ok
    23:14:42.0852 3628 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
    23:14:42.0852 3628 fvevol - ok
    23:14:42.0868 3628 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
    23:14:42.0868 3628 gagp30kx - ok
    23:14:42.0883 3628 [ 9F5E8645FECD68C0ECC374F5A4AE068A ] gfiark C:\Windows\system32\drivers\gfiark.sys
    23:14:42.0899 3628 gfiark - ok
    23:14:42.0915 3628 [ 14908F4F9005C29DE8F5587E271390EE ] gfibto C:\Windows\system32\drivers\gfibto.sys
    23:14:42.0915 3628 gfibto - ok
    23:14:42.0915 3628 GMSIPCI - ok
    23:14:42.0946 3628 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
    23:14:42.0961 3628 gpsvc - ok
    23:14:42.0993 3628 [ 0191DEE9B9EB7902AF2CF4F67301095D ] GREGService C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
    23:14:42.0993 3628 GREGService - ok
    23:14:43.0071 3628 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    23:14:43.0086 3628 gupdate - ok
    23:14:43.0086 3628 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    23:14:43.0086 3628 gupdatem - ok
    23:14:43.0102 3628 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
    23:14:43.0102 3628 hcw85cir - ok
    23:14:43.0133 3628 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
    23:14:43.0133 3628 HdAudAddService - ok
    23:14:43.0149 3628 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
    23:14:43.0149 3628 HDAudBus - ok
    23:14:43.0164 3628 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
    23:14:43.0164 3628 HidBatt - ok
    23:14:43.0180 3628 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
    23:14:43.0180 3628 HidBth - ok
    23:14:43.0195 3628 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
    23:14:43.0211 3628 HidIr - ok
    23:14:43.0227 3628 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
    23:14:43.0227 3628 hidserv - ok
    23:14:43.0242 3628 [ B3BF6B5B50006DEF50B66306D99FCF6F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
    23:14:43.0242 3628 HidUsb - ok
    23:14:43.0258 3628 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
    23:14:43.0258 3628 hkmsvc - ok
    23:14:43.0289 3628 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
    23:14:43.0289 3628 HomeGroupListener - ok
    23:14:43.0320 3628 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
    23:14:43.0320 3628 HomeGroupProvider - ok
    23:14:43.0351 3628 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
    23:14:43.0351 3628 HpSAMD - ok
    23:14:43.0445 3628 HPSLPSVC - ok
    23:14:43.0492 3628 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
    23:14:43.0492 3628 HTTP - ok
    23:14:43.0507 3628 [ F57E489800543B69FE196F51CA9C85B5 ] hwdatacard C:\Windows\system32\DRIVERS\ewusbmdm.sys
    23:14:43.0507 3628 hwdatacard - ok
    23:14:43.0539 3628 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
    23:14:43.0539 3628 hwpolicy - ok
    23:14:43.0554 3628 [ 4A158424FE9E32365D67989304733241 ] hwusbfake C:\Windows\system32\DRIVERS\ewusbfake.sys
    23:14:43.0554 3628 hwusbfake - ok
    23:14:43.0585 3628 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
    23:14:43.0585 3628 i8042prt - ok
    23:14:43.0601 3628 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
    23:14:43.0601 3628 iaStorV - ok
    23:14:43.0679 3628 [ 829EA5ECCAA623279D94EAEE3B5AD140 ] IconMan_R C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
    23:14:43.0695 3628 IconMan_R - ok
    23:14:43.0741 3628 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
    23:14:43.0741 3628 idsvc - ok
    23:14:43.0851 3628 [ 24CC43ECDEEFD4C19FBBEE4951B647F1 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
    23:14:43.0882 3628 igfx - ok
    23:14:43.0913 3628 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
    23:14:43.0913 3628 iirsp - ok
    23:14:43.0929 3628 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
    23:14:43.0944 3628 IKEEXT - ok
    23:14:43.0991 3628 [ 96B0A408842B0E214EDCB41E89438999 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
    23:14:44.0007 3628 IntcAzAudAddService - ok
    23:14:44.0022 3628 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
    23:14:44.0022 3628 intelide - ok
    23:14:44.0038 3628 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
    23:14:44.0038 3628 intelppm - ok
    23:14:44.0069 3628 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
    23:14:44.0069 3628 IPBusEnum - ok
    23:14:44.0085 3628 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
    23:14:44.0085 3628 IpFilterDriver - ok
    23:14:44.0100 3628 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
    23:14:44.0100 3628 IPMIDRV - ok
    23:14:44.0116 3628 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
    23:14:44.0116 3628 IPNAT - ok
    23:14:44.0131 3628 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
    23:14:44.0131 3628 IRENUM - ok
    23:14:44.0163 3628 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
    23:14:44.0163 3628 isapnp - ok
    23:14:44.0178 3628 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
    23:14:44.0178 3628 iScsiPrt - ok
    23:14:44.0194 3628 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
    23:14:44.0194 3628 kbdclass - ok
    23:14:44.0225 3628 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
    23:14:44.0225 3628 kbdhid - ok
    23:14:44.0225 3628 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
    23:14:44.0225 3628 KeyIso - ok
    23:14:44.0256 3628 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
    23:14:44.0256 3628 KSecDD - ok
    23:14:44.0287 3628 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
    23:14:44.0287 3628 KSecPkg - ok
    23:14:44.0303 3628 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
    23:14:44.0303 3628 ksthunk - ok
    23:14:44.0334 3628 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
    23:14:44.0334 3628 KtmRm - ok
    23:14:44.0365 3628 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
    23:14:44.0365 3628 LanmanServer - ok
    23:14:44.0397 3628 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
    23:14:44.0397 3628 LanmanWorkstation - ok
    23:14:44.0397 3628 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
    23:14:44.0412 3628 lltdio - ok
    23:14:44.0428 3628 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
    23:14:44.0428 3628 lltdsvc - ok
    23:14:44.0443 3628 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
    23:14:44.0443 3628 lmhosts - ok
    23:14:44.0459 3628 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
    23:14:44.0459 3628 LSI_FC - ok
    23:14:44.0475 3628 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
    23:14:44.0475 3628 LSI_SAS - ok
    23:14:44.0490 3628 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
    23:14:44.0490 3628 LSI_SAS2 - ok
    23:14:44.0506 3628 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
    23:14:44.0506 3628 LSI_SCSI - ok
    23:14:44.0521 3628 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
    23:14:44.0521 3628 luafv - ok
    23:14:44.0537 3628 [ B3944D06EB4B64D57BD7E5FE89415F58 ] LVPr2M64 C:\Windows\system32\DRIVERS\LVPr2M64.sys
    23:14:44.0537 3628 LVPr2M64 - ok
    23:14:44.0553 3628 [ B3944D06EB4B64D57BD7E5FE89415F58 ] LVPr2Mon C:\Windows\system32\DRIVERS\LVPr2M64.sys
    23:14:44.0553 3628 LVPr2Mon - ok
    23:14:44.0568 3628 [ 0C85B2B6FB74B36A251792D45E0EF860 ] LVRS64 C:\Windows\system32\DRIVERS\lvrs64.sys
    23:14:44.0568 3628 LVRS64 - ok
    23:14:44.0646 3628 [ FF3A488924B0032B1A9CA6948C1FA9E8 ] LVUVC64 C:\Windows\system32\DRIVERS\lvuvc64.sys
    23:14:44.0677 3628 LVUVC64 - ok
    23:14:44.0724 3628 [ 792F9E30DCC228FE77F53104A14FE7E6 ] maconfservice C:\Program Files\ma-config.com\x64\maconfservice.exe
    23:14:44.0724 3628 maconfservice - ok
    23:14:44.0755 3628 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
    23:14:44.0755 3628 Mcx2Svc - ok
    23:14:44.0771 3628 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
    23:14:44.0771 3628 megasas - ok
    23:14:44.0802 3628 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
    23:14:44.0802 3628 MegaSR - ok
    23:14:44.0818 3628 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
    23:14:44.0818 3628 MMCSS - ok
    23:14:44.0833 3628 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
    23:14:44.0833 3628 Modem - ok
    23:14:44.0849 3628 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
    23:14:44.0849 3628 monitor - ok
    23:14:44.0865 3628 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
    23:14:44.0865 3628 mouclass - ok
    23:14:44.0865 3628 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
    23:14:44.0865 3628 mouhid - ok
    23:14:44.0896 3628 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
    23:14:44.0896 3628 mountmgr - ok
    23:14:44.0911 3628 [ 528A5C2570F468155A1B3CF0A2FF5EBD ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    23:14:44.0911 3628 MozillaMaintenance - ok
    23:14:44.0927 3628 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
    23:14:44.0927 3628 mpio - ok
    23:14:44.0974 3628 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
    23:14:44.0974 3628 mpsdrv - ok
    23:14:45.0005 3628 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
    23:14:45.0005 3628 MpsSvc - ok
    23:14:45.0036 3628 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
    23:14:45.0036 3628 MRxDAV - ok
    23:14:45.0067 3628 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
    23:14:45.0067 3628 mrxsmb - ok
    23:14:45.0083 3628 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
    23:14:45.0099 3628 mrxsmb10 - ok
    23:14:45.0099 3628 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
    23:14:45.0099 3628 mrxsmb20 - ok
    23:14:45.0130 3628 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
    23:14:45.0130 3628 msahci - ok
    23:14:45.0145 3628 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
    23:14:45.0145 3628 msdsm - ok
    23:14:45.0161 3628 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
    23:14:45.0161 3628 MSDTC - ok
    23:14:45.0192 3628 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
    23:14:45.0192 3628 Msfs - ok
    23:14:45.0208 3628 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
    23:14:45.0208 3628 mshidkmdf - ok
    23:14:45.0223 3628 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
    23:14:45.0223 3628 msisadrv - ok
    23:14:45.0239 3628 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
    23:14:45.0239 3628 MSiSCSI - ok
    23:14:45.0239 3628 msiserver - ok
    23:14:45.0255 3628 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
    23:14:45.0255 3628 MSKSSRV - ok
    23:14:45.0270 3628 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
    23:14:45.0270 3628 MSPCLOCK - ok
    23:14:45.0286 3628 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
    23:14:45.0286 3628 MSPQM - ok
    23:14:45.0317 3628 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
    23:14:45.0317 3628 MsRPC - ok
    23:14:45.0348 3628 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
    23:14:45.0348 3628 mssmbios - ok
    23:14:45.0364 3628 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
    23:14:45.0364 3628 MSTEE - ok
    23:14:45.0364 3628 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
    23:14:45.0364 3628 MTConfig - ok
    23:14:45.0379 3628 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
    23:14:45.0379 3628 Mup - ok
    23:14:45.0395 3628 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
    23:14:45.0411 3628 napagent - ok
    23:14:45.0426 3628 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
    23:14:45.0426 3628 NativeWifiP - ok
    23:14:45.0473 3628 [ E0E4A1F81A7D69C595A8A9DDAD084C19 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe
    23:14:45.0473 3628 NAUpdate - ok
    23:14:45.0504 3628 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
    23:14:45.0520 3628 NDIS - ok
    23:14:45.0535 3628 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
    23:14:45.0535 3628 NdisCap - ok
    23:14:45.0551 3628 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
    23:14:45.0551 3628 NdisTapi - ok
    23:14:45.0567 3628 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
    23:14:45.0567 3628 Ndisuio - ok
    23:14:45.0598 3628 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
    23:14:45.0598 3628 NdisWan - ok
    23:14:45.0613 3628 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
    23:14:45.0613 3628 NDProxy - ok
    23:14:45.0629 3628 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
    23:14:45.0629 3628 NetBIOS - ok
    23:14:45.0660 3628 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
    23:14:45.0660 3628 NetBT - ok
    23:14:45.0660 3628 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
    23:14:45.0660 3628 Netlogon - ok
    23:14:45.0691 3628 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
    23:14:45.0691 3628 Netman - ok
    23:14:45.0707 3628 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
    23:14:45.0707 3628 netprofm - ok
    23:14:45.0738 3628 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
    23:14:45.0738 3628 NetTcpPortSharing - ok
    23:14:45.0754 3628 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
    23:14:45.0754 3628 nfrd960 - ok
    23:14:45.0785 3628 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
    23:14:45.0785 3628 NlaSvc - ok
    23:14:45.0801 3628 [ 351533ACC2A069B94E80BBFC177E8FDF ] npf C:\Windows\system32\drivers\npf.sys
    23:14:45.0816 3628 npf - ok
    23:14:45.0816 3628 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
    23:14:45.0816 3628 Npfs - ok
    23:14:45.0832 3628 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
    23:14:45.0832 3628 nsi - ok
    23:14:45.0847 3628 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
    23:14:45.0847 3628 nsiproxy - ok
    23:14:45.0879 3628 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
    23:14:45.0894 3628 Ntfs - ok
    23:14:45.0910 3628 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
    23:14:45.0910 3628 Null - ok
    23:14:46.0066 3628 [ 4EE399576F76D38C04745DB739BBC8C7 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
    23:14:46.0128 3628 nvlddmkm - ok
    23:14:46.0144 3628 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
    23:14:46.0144 3628 nvraid - ok
    23:14:46.0159 3628 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
    23:14:46.0159 3628 nvstor - ok
    23:14:46.0206 3628 [ 7335C3D78A7746D76D37F6722CC4A466 ] nvsvc C:\Windows\system32\nvvsvc.exe
    23:14:46.0206 3628 nvsvc - ok
    23:14:46.0269 3628 [ B7C53DA1C73FF39F4A6248643EFD979A ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
    23:14:46.0269 3628 nvUpdatusService - ok
    23:14:46.0300 3628 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
    23:14:46.0300 3628 nv_agp - ok
    23:14:46.0331 3628 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
    23:14:46.0331 3628 ohci1394 - ok
    23:14:46.0347 3628 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
    23:14:46.0347 3628 p2pimsvc - ok
    23:14:46.0362 3628 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
    23:14:46.0378 3628 p2psvc - ok
    23:14:46.0393 3628 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
    23:14:46.0393 3628 Parport - ok
    23:14:46.0425 3628 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
    23:14:46.0425 3628 partmgr - ok
    23:14:46.0440 3628 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
    23:14:46.0456 3628 PcaSvc - ok
    23:14:46.0471 3628 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
    23:14:46.0471 3628 pci - ok
    23:14:46.0487 3628 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
    23:14:46.0487 3628 pciide - ok
    23:14:46.0487 3628 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
    23:14:46.0503 3628 pcmcia - ok
    23:14:46.0518 3628 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
    23:14:46.0518 3628 pcw - ok
    23:14:46.0534 3628 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
    23:14:46.0534 3628 PEAUTH - ok
    23:14:46.0612 3628 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
    23:14:46.0612 3628 PerfHost - ok
    23:14:46.0659 3628 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
    23:14:46.0659 3628 pla - ok
    23:14:46.0690 3628 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
    23:14:46.0705 3628 PlugPlay - ok
    23:14:46.0705 3628 PnkBstrA - ok
    23:14:46.0721 3628 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
    23:14:46.0721 3628 PNRPAutoReg - ok
    23:14:46.0752 3628 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
    23:14:46.0752 3628 PNRPsvc - ok
    23:14:46.0768 3628 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
    23:14:46.0783 3628 PolicyAgent - ok
    23:14:46.0799 3628 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
    23:14:46.0799 3628 Power - ok
    23:14:46.0830 3628 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
    23:14:46.0830 3628 PptpMiniport - ok
    23:14:46.0846 3628 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
    23:14:46.0846 3628 Processor - ok
    23:14:46.0877 3628 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
    23:14:46.0877 3628 ProfSvc - ok
    23:14:46.0893 3628 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
    23:14:46.0893 3628 ProtectedStorage - ok
    23:14:46.0908 3628 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
    23:14:46.0908 3628 Psched - ok
    23:14:46.0955 3628 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
    23:14:46.0955 3628 ql2300 - ok
    23:14:46.0971 3628 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
    23:14:46.0971 3628 ql40xx - ok
    23:14:47.0002 3628 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
    23:14:47.0002 3628 QWAVE - ok
    23:14:47.0017 3628 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
    23:14:47.0017 3628 QWAVEdrv - ok
    23:14:47.0049 3628 [ A55E7D0D873B2C97585B3B5926AC6ADE ] RapiMgr C:\Windows\WindowsMobile\rapimgr.dll
    23:14:47.0049 3628 RapiMgr - ok
    23:14:47.0064 3628 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
    23:14:47.0064 3628 RasAcd - ok
    23:14:47.0080 3628 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
    23:14:47.0080 3628 RasAgileVpn - ok
    23:14:47.0111 3628 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
    23:14:47.0111 3628 RasAuto - ok
    23:14:47.0127 3628 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
    23:14:47.0127 3628 Rasl2tp - ok
    23:14:47.0158 3628 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
    23:14:47.0158 3628 RasMan - ok
    23:14:47.0173 3628 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
    23:14:47.0173 3628 RasPppoe - ok
    23:14:47.0205 3628 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
    23:14:47.0205 3628 RasSstp - ok
    23:14:47.0267 3628 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
    23:14:47.0267 3628 rdbss - ok
    23:14:47.0329 3628 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
    23:14:47.0329 3628 rdpbus - ok
    23:14:47.0407 3628 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
    23:14:47.0407 3628 RDPCDD - ok
    23:14:47.0470 3628 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
    23:14:47.0470 3628 RDPENCDD - ok
    23:14:47.0485 3628 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
    23:14:47.0485 3628 RDPREFMP - ok
    23:14:47.0501 3628 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
    23:14:47.0501 3628 RDPWD - ok
    23:14:47.0517 3628 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
    23:14:47.0517 3628 rdyboost - ok
    23:14:47.0548 3628 [ EA569D48B2E755AF6D96F03F3335D98A ] Realtek11nSU C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
    23:14:47.0548 3628 Realtek11nSU - ok
    23:14:47.0563 3628 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
    23:14:47.0563 3628 RemoteAccess - ok
    23:14:47.0595 3628 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
    23:14:47.0595 3628 RemoteRegistry - ok
    23:14:47.0626 3628 [ 7B04C9843921AB1F695FB395422C5360 ] RimUsb C:\Windows\system32\Drivers\RimUsb_AMD64.sys
    23:14:47.0626 3628 RimUsb - ok
    23:14:47.0641 3628 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
    23:14:47.0641 3628 RpcEptMapper - ok
    23:14:47.0657 3628 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
    23:14:47.0657 3628 RpcLocator - ok
    23:14:47.0673 3628 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
    23:14:47.0688 3628 RpcSs - ok
    23:14:47.0704 3628 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
    23:14:47.0704 3628 rspndr - ok
    23:14:47.0719 3628 [ FC009873CBC12CC6D7045D803D8E8CD3 ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys
    23:14:47.0735 3628 RSUSBSTOR - ok
    23:14:47.0751 3628 [ B358C047E081AC70035017BD1D7ED818 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
    23:14:47.0751 3628 RTL8167 - ok
    23:14:47.0782 3628 [ 5EDFCEE5682237607082880338415AA6 ] RTL8192su C:\Windows\system32\DRIVERS\RTL8192su.sys
    23:14:47.0797 3628 RTL8192su - ok
    23:14:47.0813 3628 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
    23:14:47.0813 3628 SamSs - ok
    23:14:47.0844 3628 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
    23:14:47.0844 3628 sbp2port - ok
    23:14:47.0860 3628 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
    23:14:47.0860 3628 SCardSvr - ok
    23:14:47.0875 3628 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
    23:14:47.0875 3628 scfilter - ok
    23:14:47.0907 3628 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
    23:14:47.0922 3628 Schedule - ok
    23:14:47.0938 3628 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
    23:14:47.0953 3628 SCPolicySvc - ok
    23:14:47.0969 3628 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
    23:14:47.0969 3628 sdbus - ok
    23:14:47.0985 3628 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
    23:14:47.0985 3628 SDRSVC - ok
    23:14:48.0000 3628 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
    23:14:48.0000 3628 secdrv - ok
    23:14:48.0016 3628 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
    23:14:48.0031 3628 seclogon - ok
    23:14:48.0047 3628 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
    23:14:48.0047 3628 SENS - ok
    23:14:48.0063 3628 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
    23:14:48.0063 3628 SensrSvc - ok
    23:14:48.0078 3628 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
    23:14:48.0078 3628 Serenum - ok
    23:14:48.0094 3628 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
    23:14:48.0094 3628 Serial - ok
    23:14:48.0125 3628 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
    23:14:48.0125 3628 sermouse - ok
    23:14:48.0156 3628 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
    23:14:48.0156 3628 SessionEnv - ok
    23:14:48.0172 3628 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
    23:14:48.0172 3628 sffdisk - ok
    23:14:48.0187 3628 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
    23:14:48.0187 3628 sffp_mmc - ok
    23:14:48.0203 3628 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
    23:14:48.0203 3628 sffp_sd - ok
    23:14:48.0219 3628 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
    23:14:48.0219 3628 sfloppy - ok
    23:14:48.0250 3628 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
    23:14:48.0250 3628 ShellHWDetection - ok
    23:14:48.0265 3628 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
    23:14:48.0265 3628 SiSRaid2 - ok
    23:14:48.0281 3628 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
    23:14:48.0281 3628 SiSRaid4 - ok
    23:14:48.0297 3628 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
    23:14:48.0297 3628 Smb - ok
    23:14:48.0328 3628 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
    23:14:48.0328 3628 SNMPTRAP - ok
    23:14:48.0328 3628 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
    23:14:48.0328 3628 spldr - ok
    23:14:48.0359 3628 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
    23:14:48.0375 3628 Spooler - ok
    23:14:48.0437 3628 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
    23:14:48.0453 3628 sppsvc - ok
    23:14:48.0468 3628 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
    23:14:48.0468 3628 sppuinotify - ok
    23:14:48.0499 3628 [ 602884696850C86434530790B110E8EB ] sptd C:\Windows\system32\Drivers\sptd.sys
    23:14:48.0499 3628 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: 602884696850C86434530790B110E8EB
    23:14:48.0515 3628 sptd ( LockedFile.Multi.Generic ) - warning
    23:14:48.0515 3628 sptd - detected LockedFile.Multi.Generic (1)
    23:14:48.0531 3628 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
    23:14:48.0531 3628 srv - ok
    23:14:48.0546 3628 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
    23:14:48.0562 3628 srv2 - ok
    23:14:48.0562 3628 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
    23:14:48.0562 3628 srvnet - ok
    23:14:48.0593 3628 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
    23:14:48.0593 3628 SSDPSRV - ok
    23:14:48.0609 3628 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
    23:14:48.0609 3628 SstpSvc - ok
    23:14:48.0640 3628 Steam Client Service - ok
    23:14:48.0671 3628 [ 81F177C1954453AF407604160BD149CB ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
    23:14:48.0671 3628 Stereo Service - ok
    23:14:48.0687 3628 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
    23:14:48.0687 3628 stexstor - ok
    23:14:48.0718 3628 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
    23:14:48.0733 3628 stisvc - ok
    23:14:48.0749 3628 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
    23:14:48.0749 3628 swenum - ok
    23:14:48.0765 3628 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
    23:14:48.0780 3628 swprv - ok
    23:14:48.0780 3628 [ 512231BA47975F3F1A67B11F271BB49D ] SynasUSB C:\Windows\system32\drivers\SynUSB64.sys
    23:14:48.0796 3628 SynasUSB - ok
    23:14:48.0827 3628 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
    23:14:48.0843 3628 SysMain - ok
    23:14:48.0858 3628 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
    23:14:48.0858 3628 TabletInputService - ok
    23:14:48.0889 3628 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
    23:14:48.0889 3628 TapiSrv - ok
    23:14:48.0921 3628 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
    23:14:48.0921 3628 TBS - ok
    23:14:48.0952 3628 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip C:\Windows\system32\drivers\tcpip.sys
    23:14:48.0967 3628 Tcpip - ok
    23:14:48.0999 3628 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
    23:14:48.0999 3628 TCPIP6 - ok
    23:14:49.0030 3628 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
    23:14:49.0030 3628 tcpipreg - ok
    23:14:49.0045 3628 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
    23:14:49.0045 3628 TDPIPE - ok
    23:14:49.0077 3628 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
    23:14:49.0077 3628 TDTCP - ok
    23:14:49.0092 3628 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
    23:14:49.0092 3628 tdx - ok
    23:14:49.0170 3628 [ 4A84526076717F87F3E1AD24AB28FB5A ] TeamViewer7 C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
    23:14:49.0170 3628 TeamViewer7 - ok
    23:14:49.0201 3628 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
    23:14:49.0201 3628 TermDD - ok
    23:14:49.0233 3628 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
    23:14:49.0233 3628 TermService - ok
    23:14:49.0248 3628 [ 48D9D00C2E0E72C3D4F52772C80355F6 ] TFsExDisk C:\Windows\System32\Drivers\TFsExDisk.sys
    23:14:49.0248 3628 TFsExDisk - ok
    23:14:49.0279 3628 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
    23:14:49.0279 3628 Themes - ok
    23:14:49.0295 3628 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
    23:14:49.0295 3628 THREADORDER - ok
    23:14:49.0311 3628 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
    23:14:49.0311 3628 TrkWks - ok
    23:14:49.0373 3628 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
    23:14:49.0373 3628 TrustedInstaller - ok
    23:14:49.0404 3628 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
    23:14:49.0404 3628 tssecsrv - ok
    23:14:49.0420 3628 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
    23:14:49.0435 3628 TsUsbFlt - ok
    23:14:49.0482 3628 [ 05E0457E1DD5698D6A1235B43C87A2B0 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
    23:14:49.0498 3628 TuneUp.UtilitiesSvc - ok
    23:14:49.0513 3628 [ DCC94C51D27C7EC0DADECA8F64C94FCF ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys
    23:14:49.0513 3628 TuneUpUtilitiesDrv - ok
    23:14:49.0545 3628 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
    23:14:49.0545 3628 tunnel - ok
    23:14:49.0560 3628 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
    23:14:49.0560 3628 uagp35 - ok
    23:14:49.0591 3628 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
    23:14:49.0591 3628 udfs - ok
    23:14:49.0623 3628 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
    23:14:49.0623 3628 UI0Detect - ok
    23:14:49.0638 3628 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
    23:14:49.0638 3628 uliagpkx - ok
    23:14:49.0654 3628 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
    23:14:49.0654 3628 umbus - ok
    23:14:49.0685 3628 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
    23:14:49.0685 3628 UmPass - ok
    23:14:49.0716 3628 [ 67A95B9D129ED5399E7965CD09CF30E7 ] UMVPFSrv C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
    23:14:49.0716 3628 UMVPFSrv - ok
    23:14:49.0779 3628 [ F9EC9ACD504D823D9B9CA98A4F8D3CA2 ] Updater Service C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
    23:14:49.0779 3628 Updater Service - ok
    23:14:49.0810 3628 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
    23:14:49.0810 3628 upnphost - ok
    23:14:49.0841 3628 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
    23:14:49.0841 3628 usbaudio - ok
    23:14:49.0857 3628 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
    23:14:49.0857 3628 usbccgp - ok
    23:14:49.0872 3628 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir
    0
  11. papayedu02 Messages postés 33 Statut Membre
     
    \system32\drivers\usbcir.sys
    23:14:49.0872 3628 usbcir - ok
    23:14:49.0888 3628 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
    23:14:49.0888 3628 usbehci - ok
    23:14:49.0903 3628 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
    23:14:49.0919 3628 usbhub - ok
    23:14:49.0935 3628 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
    23:14:49.0935 3628 usbohci - ok
    23:14:49.0950 3628 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
    23:14:49.0950 3628 usbprint - ok
    23:14:49.0981 3628 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
    23:14:49.0981 3628 USBSTOR - ok
    23:14:49.0997 3628 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
    23:14:49.0997 3628 usbuhci - ok
    23:14:50.0028 3628 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
    23:14:50.0028 3628 UxSms - ok
    23:14:50.0044 3628 [ 35FD8AAE93B9D8CA4B355166CF22CBBE ] UxTuneUp C:\Windows\System32\uxtuneup.dll
    23:14:50.0044 3628 UxTuneUp - ok
    23:14:50.0059 3628 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
    23:14:50.0059 3628 VaultSvc - ok
    23:14:50.0075 3628 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
    23:14:50.0075 3628 vdrvroot - ok
    23:14:50.0106 3628 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
    23:14:50.0106 3628 vds - ok
    23:14:50.0122 3628 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
    23:14:50.0122 3628 vga - ok
    23:14:50.0137 3628 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
    23:14:50.0137 3628 VgaSave - ok
    23:14:50.0169 3628 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
    23:14:50.0169 3628 vhdmp - ok
    23:14:50.0184 3628 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
    23:14:50.0184 3628 viaide - ok
    23:14:50.0200 3628 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
    23:14:50.0200 3628 volmgr - ok
    23:14:50.0215 3628 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
    23:14:50.0231 3628 volmgrx - ok
    23:14:50.0247 3628 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
    23:14:50.0247 3628 volsnap - ok
    23:14:50.0262 3628 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
    23:14:50.0262 3628 vsmraid - ok
    23:14:50.0325 3628 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
    23:14:50.0325 3628 VSS - ok
    23:14:50.0340 3628 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
    23:14:50.0340 3628 vwifibus - ok
    23:14:50.0356 3628 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
    23:14:50.0356 3628 vwififlt - ok
    23:14:50.0371 3628 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
    23:14:50.0371 3628 vwifimp - ok
    23:14:50.0387 3628 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
    23:14:50.0387 3628 W32Time - ok
    23:14:50.0418 3628 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
    23:14:50.0418 3628 WacomPen - ok
    23:14:50.0434 3628 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
    23:14:50.0434 3628 WANARP - ok
    23:14:50.0449 3628 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
    23:14:50.0449 3628 Wanarpv6 - ok
    23:14:50.0496 3628 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
    23:14:50.0496 3628 WatAdminSvc - ok
    23:14:50.0543 3628 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
    23:14:50.0559 3628 wbengine - ok
    23:14:50.0574 3628 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
    23:14:50.0574 3628 WbioSrvc - ok
    23:14:50.0605 3628 [ 8BDA6DB43AA54E8BB5E0794541DDC209 ] WcesComm C:\Windows\WindowsMobile\wcescomm.dll
    23:14:50.0605 3628 WcesComm - ok
    23:14:50.0637 3628 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
    23:14:50.0637 3628 wcncsvc - ok
    23:14:50.0652 3628 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
    23:14:50.0668 3628 WcsPlugInService - ok
    23:14:50.0683 3628 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
    23:14:50.0683 3628 Wd - ok
    23:14:50.0715 3628 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
    23:14:50.0715 3628 Wdf01000 - ok
    23:14:50.0730 3628 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
    23:14:50.0746 3628 WdiServiceHost - ok
    23:14:50.0746 3628 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
    23:14:50.0746 3628 WdiSystemHost - ok
    23:14:50.0777 3628 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
    23:14:50.0777 3628 WebClient - ok
    23:14:50.0793 3628 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
    23:14:50.0808 3628 Wecsvc - ok
    23:14:50.0808 3628 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
    23:14:50.0824 3628 wercplsupport - ok
    23:14:50.0824 3628 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
    23:14:50.0839 3628 WerSvc - ok
    23:14:50.0855 3628 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
    23:14:50.0855 3628 WfpLwf - ok
    23:14:50.0871 3628 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
    23:14:50.0871 3628 WIMMount - ok
    23:14:50.0871 3628 WinHttpAutoProxySvc - ok
    23:14:50.0917 3628 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
    23:14:50.0917 3628 Winmgmt - ok
    23:14:50.0964 3628 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
    23:14:50.0980 3628 WinRM - ok
    23:14:51.0011 3628 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
    23:14:51.0011 3628 WinUsb - ok
    23:14:51.0042 3628 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
    23:14:51.0042 3628 Wlansvc - ok
    23:14:51.0073 3628 [ C71EE856C4F5B52E2D094F494CEE4936 ] WlanWpsSvc C:\Program Files (x86)\D-Link\DWA-131 revA\WlanWpsSvc.exe
    23:14:51.0073 3628 WlanWpsSvc - ok
    23:14:51.0105 3628 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
    23:14:51.0105 3628 wlcrasvc - ok
    23:14:51.0183 3628 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    23:14:51.0198 3628 wlidsvc - ok
    23:14:51.0214 3628 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
    23:14:51.0214 3628 WmiAcpi - ok
    23:14:51.0245 3628 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
    23:14:51.0245 3628 wmiApSrv - ok
    23:14:51.0261 3628 WMPNetworkSvc - ok
    23:14:51.0292 3628 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
    23:14:51.0292 3628 WPCSvc - ok
    23:14:51.0307 3628 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
    23:14:51.0323 3628 WPDBusEnum - ok
    23:14:51.0339 3628 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
    23:14:51.0339 3628 ws2ifsl - ok
    23:14:51.0354 3628 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
    23:14:51.0354 3628 wscsvc - ok
    23:14:51.0370 3628 WSearch - ok
    23:14:51.0385 3628 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
    23:14:51.0385 3628 WudfPf - ok
    23:14:51.0401 3628 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
    23:14:51.0401 3628 WUDFRd - ok
    23:14:51.0432 3628 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
    23:14:51.0432 3628 wudfsvc - ok
    23:14:51.0463 3628 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll
    23:14:51.0463 3628 WwanSvc - ok
    23:14:51.0495 3628 [ 2C6BC21B2D5B58D8B1D638C1704CB494 ] xusb21 C:\Windows\system32\DRIVERS\xusb21.sys
    23:14:51.0495 3628 xusb21 - ok
    23:14:51.0495 3628 ================ Scan global ===============================
    23:14:51.0526 3628 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
    23:14:51.0541 3628 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
    23:14:51.0541 3628 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
    23:14:51.0573 3628 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
    23:14:51.0604 3628 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
    23:14:51.0604 3628 [Global] - ok
    23:14:51.0604 3628 ================ Scan MBR ==================================
    23:14:51.0619 3628 [ 70E629B51C16B3C007730C6AE57144C9 ] \Device\Harddisk0\DR0
    23:14:53.0335 3628 \Device\Harddisk0\DR0 - ok
    23:14:53.0335 3628 ================ Scan VBR ==================================
    23:14:53.0335 3628 [ E9F401263F172D14FD207B40EAF7506E ] \Device\Harddisk0\DR0\Partition1
    23:14:53.0335 3628 \Device\Harddisk0\DR0\Partition1 - ok
    23:14:53.0351 3628 [ 460010EEC79078509656602426351B33 ] \Device\Harddisk0\DR0\Partition2
    23:14:53.0351 3628 \Device\Harddisk0\DR0\Partition2 - ok
    23:14:53.0351 3628 ============================================================
    23:14:53.0351 3628 Scan finished
    23:14:53.0351 3628 ============================================================
    23:14:53.0367 3740 Detected object count: 1
    23:14:53.0367 3740 Actual detected object count: 1
    23:15:30.0822 3740 sptd ( LockedFile.Multi.Generic ) - skipped by user
    23:15:30.0822 3740 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
    23:15:34.0847 1828 Deinitialize success
    0
    1. papayedu02 Messages postés 33 Statut Membre
       
      tout a l'air ok je pense
      0
  12. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Cela semble bon.
    Mais comme le rapport est trop long, je voudrais que tu l'héberge sur e site pjjoint.
    Tout ceci pour être sûr.

    Smart
    0
  13. papayedu02 Messages postés 33 Statut Membre
     
    0
  14. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    OK.
    Refais un scan ZHPDiag en suivant la procédure indiquée plus haut et poste le rapport via pjjoint.

    Smart
    0
  15. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Il ya encore des traces.

    Télécharde sur ton bureau ce fichier papaye.txt en faisant clic droit enregistrer sous.
    Ouvre papaye.txt , sélectionne toutes les lignes et copie les.

    - Ferme toutes tes applications en cours
    - Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 n'oublie pas clic droit ==> en tant qu'administrateur")
    - Si tu ne l'as pas, télécharge le depuis ce lien: https://www.zebulon.fr/telechargements/securite/systeme/zhpfix.html
    - Si tu obtiens le message "Voulez-vous autoriser le programme suivant..." tu réponds Oui
    - As-tu bien copier les lignes de papaye.txt, sinon fais le
    - Clique sur l'icône représentant le presse-papier ("coller le presse-papier")
    - Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
    - Clique sur le bouton « GO » pour le lancer le nettoyage
    - Copie/colle la totalité du rapport dans ta prochaine réponse

    Et redémarre le PC

    Smart
    0
  16. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Comment se comporte ton PC ?

    Refais un scan ZHPDiag en suivant la procédure donnée plus haut, poste le rapport via pjjoint.

    Ensuite on passe à la phase finale. Il nous reste à faire:
    - les mises à jour prioritaires
    - l'optimisation du PC
    - la désinstallation des outils de désinfection
    - les conseils de prévention quand on surfe sur Internet

    Smart
    0
  17. Smart91 Messages postés 30146 Statut Contributeur sécurité 2 331
     
    Je voudrais quand même vérifier quelque chose:

    * Va sur ce lien https://www.luanagames.com/index.fr.html (par tigzy)
    * Clique sur l'icône RogueKiller qui correspond à ta version de Windows (64 bits ou non) pour télécharger RogueKiller

    * Quitte tous les programmes en cours
    * Lance RogueKiller.exe.
    * Attendre la fin du Prescan ...
    * Clique sur Scan.
    * A la fin du scan Clique sur Rapport. Copie et colle le rapport dans ta réponse

    Smart
    0
  • 1
  • 2