Mon ordinateur est infectè de rootkitsFermé

Question

Bonjour, J,ai un ordinateur avec window XP et lorsque j,essaye de faire un scan antivirus ,le deroulement est extremement lent et il m,indique ROOTKIT a des centaines de reprises! Pourriez m,aider s,il vous plait ,a règler mon probleme! Merci a l,avance Windows XP / Chrome 31.0.1650.63

Utilisateur anonyme · Answer

Bonsoir

[*] Télécharger sur le bureau RogueKiller (by tigzy)  (choisir entre la version 32 et 64 bits selon ton Windows, si tu ne sais pas, demande moi!) 
[*] Quitter tous les programmes 
[*] Lancer RogueKiller.exe. 
[*] Attendre que le Prescan ait fini ... 
[*] Cliquer sur Scan. Cliquer sur Rapport et copier coller le contenu du rapport

@+

naelectronic · Answer

Merci Guillaume mais j,ai deja essayè ca et ca me sort un rapport vierge !!!!

Utilisateur anonyme · Answer

Re

As tu un rapport de ton antivirus à poster;merci

@+

naelectronic · Answer

Mon antivirus est Mc afee total protection mais j,ai essayè plusieurs fois et il n,arrive jamais la fin, il s,eternise sur rootkit......donc il ne me donne pas de rapport

Utilisateur anonyme · Answer

Re

 Regarde ici : http://support.kaspersky.com/5350#block1   
*	Lancez le programme en cliquant sur TDSSKiller.exe, 
*	Une fenêtre s'ouvre « clique sur « start scan » ;
Des fiches sont dispo en fonction des configurations

Si TDSS.tdl2 est détecté: l'option delete sera cochée par défaut. 
Si TDSS.tdl3 est détecté: assure toi que Cure est bien cochée. 
Si TDSS.tdl4(\HardDisk0\MBR) est détecté: assure toi que Cure est bien cochée. 
Si Rootkit.Win32.ZAccess.* est détecté : règle sur "cure" en haut , et "delete" en bas 
Si Suspicious file est indiqué, laisse l''option cochée sur Skip 
une fois qu'il a terminé , redémarre s'il te le demande pour finir de nettoyer 

sinon , ferme TDSSKiller et le rapport s'affichera sur le bureau
 
Sinon il est enregistré ici : C:\TDSSKiller_N°Version_Date_Heure.txt :
  
Poste moi son rapport à l'issue; merci


@+

naelectronic · Answer

Bon, j,ai lancè TDSS killer mais par contre je n,ai pas vu qu,il incluait windowXP...il a fait le scan et me dit   NO THREAT FOUND  !!!!l  
Il a scannè 348 object.....est-ce que j,ai fait une erreurÉ

Utilisateur anonyme · Answer

Re

Il me faut un rapport.
 il est enregistré ici : C:\TDSSKiller_N°Version_Date_Heure.txt

@+

naelectronic · Answer

ok est-ce que je fais un copier-coller ou pas

naelectronic · Answer

14:04:32.0296 0x07ec TDSS rootkit removing tool 3.0.0.19 Nov 18 2013 09:27:50 14:05:01.0281 0x07ec ============================================================ 14:05:01.0281 0x07ec Current date / time: 2013/12/11 14:05:01.0281 14:05:01.0281 0x07ec SystemInfo: 14:05:01.0281 0x07ec 14:05:01.0281 0x07ec OS Version: 5.1.2600 ServicePack: 3.0 14:05:01.0281 0x07ec Product type: Workstation 14:05:01.0281 0x07ec ComputerName: YOUR-4F1261A8E5 14:05:01.0281 0x07ec UserName: Michel 14:05:01.0281 0x07ec Windows directory: C:\WINDOWS 14:05:01.0281 0x07ec System windows directory: C:\WINDOWS 14:05:01.0281 0x07ec Processor architecture: Intel x86 14:05:01.0281 0x07ec Number of processors: 1 14:05:01.0281 0x07ec Page size: 0x1000 14:05:01.0281 0x07ec Boot type: Normal boot 14:05:01.0281 0x07ec ============================================================ 14:05:03.0312 0x07ec KLMD registered as C:\WINDOWS\system32\drivers\04722158.sys 14:05:03.0421 0x07ec System UUID: {4680BD1E-AA8B-A5DB-213C-CB431189F467} 14:05:04.0171 0x07ec Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054 14:05:04.0296 0x07ec ============================================================ 14:05:04.0296 0x07ec \Device\Harddisk0\DR0: 14:05:04.0296 0x07ec MBR partitions: 14:05:04.0296 0x07ec \Device\Harddisk0\DR0\Partition1: MBR, Type 0xB, StartLBA 0x3F, BlocksNum 0xB07E91 14:05:04.0296 0x07ec \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xB07ED0, BlocksNum 0x24921930 14:05:04.0296 0x07ec ============================================================ 14:05:04.0343 0x07ec C: <-> \Device\Harddisk0\DR0\Partition2 14:05:04.0343 0x07ec D: <-> \Device\Harddisk0\DR0\Partition1 14:05:04.0343 0x07ec ============================================================ 14:05:04.0343 0x07ec Initialize success 14:05:04.0343 0x07ec ============================================================ 14:05:37.0171 0x116c ============================================================ 14:05:37.0171 0x116c Scan started 14:05:37.0171 0x116c Mode: Manual; 14:05:37.0171 0x116c ============================================================ 14:05:37.0171 0x116c KSN ping started 14:05:39.0890 0x116c KSN ping finished: true 14:05:40.0562 0x116c ================ Scan system memory ======================== 14:05:40.0562 0x116c System memory - ok 14:05:40.0578 0x116c ================ Scan services ============================= 14:05:40.0703 0x116c Abiosdsk - ok 14:05:40.0718 0x116c abp480n5 - ok 14:05:40.0750 0x116c [ 8FD99680A539792A30E97944FDAECF17, 594F8E0C3695400B0C09A797AF6BDFAC6F750ECD67D0EE803914C572B1DCC43C ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys 14:05:40.0765 0x116c ACPI - ok 14:05:40.0875 0x116c [ 9859C0F6936E723E4892D7141B1327D5, 5E8F6A2FC4DF2E5E92A1D66ECC2810E08B42B64E9CD0DF4AD3F78EA8558B90AF ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys 14:05:40.0875 0x116c ACPIEC - ok 14:05:40.0890 0x116c adpu160m - ok 14:05:40.0906 0x116c [ 8BED39E3C35D6A489438B8141717A557, 1B5796E56B0927360CE0759641B1151828BC0A9E45620D2B2D880491F5CE33D0 ] aec C:\WINDOWS\system32\drivers\aec.sys 14:05:40.0906 0x116c aec - ok 14:05:40.0953 0x116c [ 1E44BC1E83D8FD2305F8D452DB109CF9, CF5EC07E0B589FA2A4701C6CFD69E893FC3ABF274AD57AE3C13FFE49063B02C8 ] AFD C:\WINDOWS\System32\drivers\afd.sys 14:05:40.0953 0x116c AFD - ok 14:05:41.0015 0x116c [ 593AEFC67283D409F34CC1245D00A509, 0845C09D8B76C20C2C43CC9FC42A07C23F006A0A4619D68445316BBC0CC28344 ] AgereSoftModem C:\WINDOWS\system32\DRIVERS\AGRSM.sys 14:05:41.0046 0x116c AgereSoftModem - ok 14:05:41.0062 0x116c Aha154x - ok 14:05:41.0062 0x116c aic78u2 - ok 14:05:41.0078 0x116c aic78xx - ok 14:05:41.0109 0x116c [ A9A3DAA780CA6C9671A19D52456705B4, 67C959144B57AE0BBF1D82DBED197F32CDB06FECD883A80C441A0202FE83FAB4 ] Alerter C:\WINDOWS\system32\alrsvc.dll 14:05:41.0109 0x116c Alerter - ok 14:05:41.0125 0x116c [ 8C515081584A38AA007909CD02020B3D, A5E13CA10F702928E0DE84C74D0EA8ACCB117FD76FBABC55220C75C4FFD596DC ] ALG C:\WINDOWS\System32\alg.exe 14:05:41.0125 0x116c ALG - ok 14:05:41.0140 0x116c AliIde - ok 14:05:41.0156 0x116c amsint - ok 14:05:41.0218 0x116c [ 018857EAD9A077A56AEDFC0E5EF7A24A, FC39B4C4E210D22BE40F41966578F9BAA67EE9301E848E6A7ADB8662BE5B1CB6 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 14:05:41.0218 0x116c Apple Mobile Device - ok 14:05:41.0234 0x116c AppMgmt - ok 14:05:41.0250 0x116c [ B5B8A80875C1DEDEDA8B02765642C32F, AD0C71D73B1B8225351FBF4FFB43001A32B4DAE69504C59970CD2428BB33D4EF ] Arp1394 C:\WINDOWS\system32\DRIVERS\arp1394.sys 14:05:41.0265 0x116c Arp1394 - ok 14:05:41.0265 0x116c asc - ok 14:05:41.0281 0x116c asc3350p - ok 14:05:41.0281 0x116c asc3550 - ok 14:05:41.0359 0x116c [ 0E5E4957549056E2BF2C49F4F6B601AD, F7F19FDC906B719A3516D30A9B4A2262C8CC5B36B94E3D4195C345EC4610FF2B ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe 14:05:41.0359 0x116c aspnet_state - ok 14:05:41.0375 0x116c [ B153AFFAC761E7F5FCFA822B9C4E97BC, 7E60F572A6B3C6219E3C86225AA37243AFFD74337DB7F108B04778042E5CC959 ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys 14:05:41.0375 0x116c AsyncMac - ok 14:05:41.0406 0x116c [ 9F3A2F5AA6875C72BF062C712CFA2674, B4DF1D2C56A593C6B54DE57395E3B51D288F547842893B32B0F59228A0CF70B9 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys 14:05:41.0406 0x116c atapi - ok 14:05:41.0406 0x116c Atdisk - ok 14:05:41.0421 0x116c [ 9916C1225104BA14794209CFA8012159, 5D6F05F715C52A16D05CAE15C3DFE77A139A7F27F7AE710EC9A10F9EE05115A1 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys 14:05:41.0421 0x116c Atmarpc - ok 14:05:41.0468 0x116c [ DEF7A7882BEC100FE0B2CE2549188F9D, 462C95B63D0A1058291A2DC8CBFCB13D7D74CCD1CA43B613A7EB43D49E3276F8 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll 14:05:41.0468 0x116c AudioSrv - ok 14:05:41.0468 0x116c [ D9F724AA26C010A217C97606B160ED68, 329B5118F2409731D06FDAE85B6ADD64A048292801BCB3546651CEB303111695 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys 14:05:41.0468 0x116c audstub - ok 14:05:41.0515 0x116c [ DA1F27D85E0D1525F6621372E7B685E9, 5A81A46A3BDD19DAFC6C87D277267A5D44F3A1B5302F2CC1111D84B7BAD5610D ] Beep C:\WINDOWS\system32\drivers\Beep.sys 14:05:41.0515 0x116c Beep - ok 14:05:41.0578 0x116c [ 574738F61FCA2935F5265DC4E5691314, 3C7CCF064397186C3A3863DD2370AB6414A61B330097DCA4F299CA7BBAA3D1B4 ] BITS C:\WINDOWS\system32\qmgr.dll 14:05:41.0578 0x116c BITS - ok 14:05:41.0625 0x116c [ F832F1505AD8B83474BD9A5B1B985E01, 205D9F237DD50FDF84F57CC53476B5ADB218A03A8B68B017AFF7CBD0DCAC71C4 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 14:05:41.0640 0x116c Bonjour Service - ok 14:05:41.0671 0x116c [ CFD4E51402DA9838B5A04AE680AF54A0, 5378F42B195B5832B00A05AD64E00473A45FFB86AC25C57241F26EA82B149FE1 ] Browser C:\WINDOWS\System32\browser.dll 14:05:41.0671 0x116c Browser - ok 14:05:41.0703 0x116c [ 90A673FC8E12A79AFBED2576F6A7AAF9, BDE7858A3457DB979FEDD8577FA6321BF72848E4A7BF9F173C78A6A10CBB3EBE ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys 14:05:41.0703 0x116c cbidf2k - ok 14:05:41.0718 0x116c [ 0BE5AEF125BE881C4F854C554F2B025C, 1770DD70B3F115A0EF460907DEDC1E4B7241C08615A98F194D61A49C3E2BAA54 ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 14:05:41.0718 0x116c CCDECODE - ok 14:05:41.0734 0x116c cd20xrnt - ok 14:05:41.0750 0x116c [ C1B486A7658353D33A10CC15211A873B, AA4DD9E7AAE5AAB1146B360B17001F975D2F29A1281CF7B13E7136480410F347 ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys 14:05:41.0750 0x116c Cdaudio - ok 14:05:41.0765 0x116c [ C885B02847F5D2FD45A24E219ED93B32, B26B2F8E3A831E2B65EB0C5195B0645CD50E22615CE79C9B0B391CD563B121DB ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys 14:05:41.0765 0x116c Cdfs - ok 14:05:41.0781 0x116c [ 1F4260CC5B42272D71F79E570A27A4FE, B51C2A3ED3C309953D0EA45869C8E464C10F2533DADE9E0286AF674979098D1D ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys 14:05:41.0781 0x116c Cdrom - ok 14:05:41.0828 0x116c [ D787C026F15BD8F762AB5829428FAA9C, 42A82265976C1B835EA52E133F368885AE8769D58EF6A82EE14E38FEF2A9327E ] cfwids C:\WINDOWS\system32\drivers\cfwids.sys 14:05:41.0828 0x116c cfwids - ok 14:05:41.0828 0x116c Changer - ok 14:05:41.0875 0x116c [ 1CFE720EB8D93A7158A4EBC3AB178BDE, 65D2A9D9A88F38D4AF323134C151BA0F4B3CD0F6A134AF86E7AC9D07319F1726 ] CiSvc C:\WINDOWS\system32\cisvc.exe 14:05:41.0875 0x116c CiSvc - ok 14:05:41.0890 0x116c [ 34CBE729F38138217F9C80212A2A0C82, A9FD7A758D12E0818A11BEEF1CE772FEFA8373E92EF6C0DA8628CD4572CC9A43 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe 14:05:41.0890 0x116c ClipSrv - ok 14:05:41.0921 0x116c [ D87ACAED61E417BBA546CED5E7E36D9C, 14AC6034A5BC0FB2A1AFDAD42BEF4DE641556E54AD30D0C46765660A4BE55462 ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 14:05:41.0921 0x116c clr_optimization_v2.0.50727_32 - ok 14:05:41.0953 0x116c [ C5A75EB48E2344ABDC162BDA79E16841, 6070A8AAFD38FBC6A68A2B10C20117612354DF21B4492D90CA522BFB6870D726 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 14:05:41.0968 0x116c clr_optimization_v4.0.30319_32 - ok 14:05:41.0968 0x116c CmdIde - ok 14:05:41.0984 0x116c COMSysApp - ok 14:05:42.0000 0x116c Cpqarray - ok 14:05:42.0015 0x116c [ 3D4E199942E29207970E04315D02AD3B, 0825960894CF9C86CC8775BDD2A262948A09CA495AA7FE9F210FAF49E7086383 ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll 14:05:42.0015 0x116c CryptSvc - ok 14:05:42.0031 0x116c dac2w2k - ok 14:05:42.0031 0x116c dac960nt - ok 14:05:42.0078 0x116c [ 6B27A5C03DFB94B4245739065431322C, 6AEAC16AB4E0DFD25123AAF4D4181FEE1B919B7B2793117006CE8CF30E826CFD ] DcomLaunch C:\WINDOWS\system32 pcss.dll 14:05:42.0093 0x116c DcomLaunch - ok 14:05:42.0140 0x116c [ 5E38D7684A49CACFB752B046357E0589, F192AD4190BCFB6939A5CBC91648FE63168AF79A5E227A111DEAD6A92E42AB8D ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll 14:05:42.0140 0x116c Dhcp - ok 14:05:42.0156 0x116c [ 044452051F3E02E7963599FC8F4F3E25, 584BDDB074618BE76454CF90E74829CFF588B5B5FAEB793E2F7AAD26352DD689 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys 14:05:42.0156 0x116c Disk - ok 14:05:42.0171 0x116c dmadmin - ok 14:05:42.0203 0x116c [ D992FE1274BDE0F84AD826ACAE022A41, C82BD6561A14F2932A761F5883A787B99031250EE5E9B7B5714AA045545C9B99 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys 14:05:42.0234 0x116c dmboot - ok 14:05:42.0250 0x116c [ 7C824CF7BBDE77D95C08005717A95F6F, A73CB323B7A6410C3D3F258BF204E716ADF8C84C9E4F6562C57AB73DAED8CCDE ] dmio C:\WINDOWS\system32\drivers\dmio.sys 14:05:42.0250 0x116c dmio - ok 14:05:42.0265 0x116c [ E9317282A63CA4D188C0DF5E09C6AC5F, D41E002F555FE9015EF620975255F58BB79198CA1FF0E09EC950CB450FF77CF7 ] dmload C:\WINDOWS\system32\drivers\dmload.sys 14:05:42.0265 0x116c dmload - ok 14:05:42.0296 0x116c [ 57EDEC2E5F59F0335E92F35184BC8631, 61F6F0DC2D1A6C61D5EF0D5CC4BE0FFC217F1E61FDA3EA9F704709293656600F ] dmserver C:\WINDOWS\System32\dmserver.dll 14:05:42.0296 0x116c dmserver - ok 14:05:42.0328 0x116c [ 8A208DFCF89792A484E76C40E5F50B45, 4E40E2EB38C6254E7CAA488200E89EE7DEBBBA773890BC6A84313CC68178D54F ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys 14:05:42.0328 0x116c DMusic - ok 14:05:42.0359 0x116c [ 5F7E24FA9EAB896051FFB87F840730D2, 356EEFDCD54DECAD0170B34B993E4BF80DD039E2B2922D7A8D09B84031E9FC7A ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll 14:05:42.0359 0x116c Dnscache - ok 14:05:42.0406 0x116c [ 0F0F6E687E5E15579EF4DA8DD6945814, 5C32D88119EB1465B2D719BEE2E05888D1A73454B5E33F2D4928DA710F8BFBA3 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll 14:05:42.0406 0x116c Dot3svc - ok 14:05:42.0437 0x116c [ 3E4B043F8BC6BE1D4820CC6C9C500306, 41F5AB9F3D65FEF3AB50562A3B91A3268B887CCF7FE5FC9D49478147700C72F4 ] Dot4 C:\WINDOWS\system32\DRIVERS\Dot4.sys 14:05:42.0437 0x116c Dot4 - ok 14:05:42.0468 0x116c [ 77CE63A8A34AE23D9FE4C7896D1DEBE7, FC17B00AEDC57AC436EACD2D576642098479E5CE10A42775D339B66A53460DC7 ] Dot4Print C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys 14:05:42.0468 0x116c Dot4Print - ok 14:05:42.0500 0x116c [ 6EC3AF6BB5B30E488A0C559921F012E1, 2BB92048A3FB4AEE6B852B9E2F2B2743A8EB73FEBD62273FDB40EF5C90CD5962 ] dot4usb C:\WINDOWS\system32\DRIVERS\dot4usb.sys 14:05:42.0500 0x116c dot4usb - ok 14:05:42.0500 0x116c dpti2o - ok 14:05:42.0515 0x116c [ 8F5FCFF8E8848AFAC920905FBD9D33C8, C8C6FB97AB0871C8C88A2201525A5CF10D5131CB6980D32692ED7A8F58399AD5 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys 14:05:42.0515 0x116c drmkaud - ok 14:05:42.0531 0x116c [ 2187855A7703ADEF0CEF9EE4285182CC, 8233CC11F637866C0074043835A785EA2B616739B6B1181B143A253CF2508CFD ] EapHost C:\WINDOWS\System32\eapsvc.dll 14:05:42.0546 0x116c EapHost - ok 14:05:42.0546 0x116c [ BC93B4A066477954555966D77FEC9ECB, 27F5B780175EF46DA102EE33F7F33559C8B40C077EEA4405D579D9507F4B1C23 ] ERSvc C:\WINDOWS\System32\ersvc.dll 14:05:42.0546 0x116c ERSvc - ok 14:05:42.0578 0x116c [ 65DF52F5B8B6E9BBD183505225C37315, 59C606977DB40A3443DFF0BE2A4C761824881B22C9FDB3D23F6486DB580E92A4 ] Eventlog C:\WINDOWS\system32\services.exe 14:05:42.0578 0x116c Eventlog - ok 14:05:42.0625 0x116c [ D4991D98F2DB73C60D042F1AEF79EFAE, 58AF949EAEBF4FF3E3314DFB66CE4198BF65F0836B68CD27A6ED319742CCCCD2 ] EventSystem C:\WINDOWS\system32\es.dll 14:05:42.0625 0x116c EventSystem - ok 14:05:42.0640 0x116c [ 38D332A6D56AF32635675F132548343E, E6909DB836AF679B4F4D62C7396D6C82769CC7ABB8C919C2AABFE934FCE268F6 ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys 14:05:42.0640 0x116c Fastfat - ok 14:05:42.0687 0x116c [ 99BC0B50F511924348BE19C7C7313BBF, A1006C687BD352F700B140DC741515A0CDD9E1352C0FBD1EE410D404E344444B ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll 14:05:42.0687 0x116c FastUserSwitchingCompatibility - ok 14:05:42.0718 0x116c [ E97D6A8684466DF94FF3BC24FB787A07, 89E5A6889E3C5AB9AD3E80FFC16DD608278F3ADC282048B40B60196336A5CBEB ] Fax C:\WINDOWS\system32\fxssvc.exe 14:05:42.0734 0x116c Fax - ok 14:05:42.0750 0x116c [ 92CDD60B6730B9F50F6A1A0C1F8CDC81, 8307A532AB4D05CBBCE206DC2759497708BF5AAA880BD00F0E4F281D8578A1F5 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys 14:05:42.0750 0x116c Fdc - ok 14:05:42.0781 0x116c [ B73EC688C29F81F9DA0FCF63682B3ECB, 07726D786C983D871711EC32D494D57C223472607A8301B4D62FCA9E9EA20677 ] FilterService C:\WINDOWS\system32\DRIVERS\lvuvcflt.sys 14:05:42.0781 0x116c FilterService - ok 14:05:42.0796 0x116c [ D45926117EB9FA946A6AF572FBE1CAA3, 4C94EF009D778BE0BDF8F812F026B96F91F641BE30AA2531427A5E63DBD280DA ] Fips C:\WINDOWS\system32\drivers\Fips.sys 14:05:42.0796 0x116c Fips - ok 14:05:42.0843 0x116c [ 9D27E7B80BFCDF1CDD9B555862D5E7F0, 69C271AD5BCEBFD8AE5A769BDD7EC51256DA3A8ADAD5D12E5C0D13F4E82D8805 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys 14:05:42.0843 0x116c Flpydisk - ok 14:05:42.0859 0x116c [ B2CF4B0786F8212CB92ED2B50C6DB6B0, 280F5CF8A90F7BEDE73ADD0DD0F8952088133A7CA9A3D3B7041957E33B36845D ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys 14:05:42.0859 0x116c FltMgr - ok 14:05:42.0937 0x116c [ 8BA7C024070F2B7FDD98ED8A4BA41789, 47585006F86B2C6016EC54250A416794792D1E4024FF229C120BC25B684AF66A ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe 14:05:42.0937 0x116c FontCache3.0.0.0 - ok 14:05:42.0968 0x116c [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A, EC635E071201A766845D48973772CBE0958942B4162F3F5F70660D114CC877E0 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys 14:05:42.0968 0x116c Fs_Rec - ok 14:05:43.0000 0x116c [ 6AC26732762483366C3969C9E4D2259D, FF2C9A23CC17F380093F0BEA955B1925794271C2FEA16B9B7639668E6999BAE3 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys 14:05:43.0000 0x116c Ftdisk - ok 14:05:43.0031 0x116c [ 3A74C423CF6BCCA6982715878F450A3B, A98D6D377B48D05BE3927F6E93D0DE7741E115C43125C0E0DE6EEFE023DE73BC ] gagp30kx C:\WINDOWS\system32\DRIVERS\gagp30kx.sys 14:05:43.0031 0x116c gagp30kx - ok 14:05:43.0078 0x116c [ 8182FF89C65E4D38B2DE4BB0FB18564E, 2ACFA64D48BF7D25641EC5819C8722144284B8A8E071BF297C1881B07EEAFE88 ] GEARAspiWDM C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys 14:05:43.0078 0x116c GEARAspiWDM - ok 14:05:43.0093 0x116c [ 0A02C63C8B144BD8C86B103DEE7C86A2, 7A3235DD3E1995DD72B212FAEB3ECA2A974434DE9BF6D269EA11BA65A80E7E50 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys 14:05:43.0093 0x116c Gpc - ok 14:05:43.0140 0x116c [ F02A533F517EB38333CB12A9E8963773, 1F72CD1CF660766FA8F912E40B7323A0192A300B376186C10F6803DC5EFE28DF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe 14:05:43.0140 0x116c gupdate - ok 14:05:43.0140 0x116c [ F02A533F517EB38333CB12A9E8963773, 1F72CD1CF660766FA8F912E40B7323A0192A300B376186C10F6803DC5EFE28DF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe 14:05:43.0156 0x116c gupdatem - ok 14:05:43.0203 0x116c [ C1B577B2169900F4CF7190C39F085794, 73E104B96A48F4C80D8C37254ECB0891D15C0D2F0C251B57C168F90D60316447 ] gusvc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 14:05:43.0203 0x116c gusvc - ok 14:05:43.0234 0x116c [ 160B24FD894E79E71C983EA403A6E6E7, 2D1A557BA9E1293A44BA00AB746A484A69B8DA1F95A1B6CEDA9D4352845E77C6 ] HdAudAddService C:\WINDOWS\system32\drivers\HdAudio.sys 14:05:43.0234 0x116c HdAudAddService - ok 14:05:43.0265 0x116c [ 573C7D0A32852B48F3058CFD8026F511, BC384BBA394AFDCDA1A9ABC858C692AA84A1F0A31AF3DDF7F38D120C027927FB ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 14:05:43.0265 0x116c HDAudBus - ok 14:05:43.0343 0x116c [ 4FCCA060DFE0C51A09DD5C3843888BCD, D82417706B517F2610DDF7C86BE03A72EFA9A2A389DF5C8F8ADEAB8144E2C80A ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll 14:05:43.0343 0x116c helpsvc - ok 14:05:43.0359 0x116c HidServ - ok 14:05:43.0390 0x116c [ CCF82C5EC8A7326C3066DE870C06DAF1, 93395FA4C26B2E82DC8B7025ED3BCF583885E5D8C5F60CD6EEAA6335D6A126EC ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys 14:05:43.0390 0x116c HidUsb - ok 14:05:43.0421 0x116c [ 156765F692192EA9039A6C4A809312FD, 73400BC5E5C92A2E7834CB8EB33B3D78BF73C875C98B1AD91B0112FBB8DB19E3 ] HipShieldK C:\WINDOWS\system32\drivers\HipShieldK.sys 14:05:43.0421 0x116c HipShieldK - ok 14:05:43.0453 0x116c [ 8878BD685E490239777BFE51320B88E9, C5C3ECF6B049B6736E35B39518A8F830B45C45A88FFE8E3A6B7922AD946597E2 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll 14:05:43.0453 0x116c hkmsvc - ok 14:05:43.0515 0x116c [ 5007E21208DA68F60EBF43352BDFE6D0, 698B6AB8260E05D6A2D168939E8D7F9F1CC1C78FDEC4F6B9D1A7289FD83C841B ] HomeNetSvc C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe 14:05:43.0531 0x116c HomeNetSvc - ok 14:05:43.0546 0x116c hpn - ok 14:05:43.0562 0x116c [ D03D10F7DED688FECF50F8FBF1EA9B8A, C19A733571BA831E24EE45EDB730FFFDBA22638F138A32A794BEAB8D8B71D8DD ] HPZid412 C:\WINDOWS\system32\DRIVERS\HPZid412.sys 14:05:43.0562 0x116c HPZid412 - ok 14:05:43.0578 0x116c [ 89F41658929393487B6B7D13C8528CE3, 5D06A11225A83F3F33417148BE53654080C88BFA876FEB486A7E43410AC99F23 ] HPZipr12 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys 14:05:43.0578 0x116c HPZipr12 - ok 14:05:43.0609 0x116c [ CF1B7951B4EC8D13F3C93B74BB2B461B, 3A1B8A9A9AB0E916288AD6198C377E3A4D278DB3D8DCD4299F0ADC83973F0495 ] HPZius12 C:\WINDOWS\system32\DRIVERS\HPZius12.sys 14:05:43.0609 0x116c HPZius12 - ok 14:05:43.0656 0x116c [ F80A415EF82CD06FFAF0D971528EAD38, 524D9E9201572929522F6805011783711B7C0F76308B924C89CF75F4B7A1FDF3 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys 14:05:43.0671 0x116c HTTP - ok 14:05:43.0703 0x116c [ 6100A808600F44D999CEBDEF8841C7A3, 61A75118C327812C60622010985A2E80E79B6FD9030A5732390EE5426E4AF6C9 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll 14:05:43.0703 0x116c HTTPFilter - ok 14:05:43.0703 0x116c i2omgmt - ok 14:05:43.0718 0x116c i2omp - ok 14:05:43.0734 0x116c [ 4A0B06AA8943C1E332520F7440C0AA30, DB2452390CCFE67E0C5FEB4FD42CA24ABE2DDD40D0B22DD5F5B8F70416863918 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys 14:05:43.0750 0x116c i8042prt - ok 14:05:43.0781 0x116c [ D4405BD2B6E95EFDC8E674ED4032874F, 0AF9C2EA9569F802908954218E021091BB50F46F447FA9436FF5037CB1E35B6C ] ialm C:\WINDOWS\system32\DRIVERS\ialmnt5.sys 14:05:43.0812 0x116c ialm - ok 14:05:43.0875 0x116c [ C01AC32DC5C03076CFB852CB5DA5229C, A4D7749220B5BC965D96A267F1E02FE8284A230BA249109207BD4B9EA8DFAC96 ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 14:05:43.0921 0x116c idsvc - ok 14:05:43.0937 0x116c [ 083A052659F5310DD8B6A6CB05EDCF8E, 48D39B03FFB6FAA1529B774443BA12618AE3982D9F65A7B9D18F2269F78B31F4 ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys 14:05:43.0937 0x116c Imapi - ok 14:05:43.0968 0x116c [ 30DEAF54A9755BB8546168CFE8A6B5E1, 3936228CD3125C763ABFCB93E86E4B43838202BCC0913A28E84AC0263B43EE0D ] ImapiService C:\WINDOWS\system32\imapi.exe 14:05:43.0984 0x116c ImapiService - ok 14:05:43.0984 0x116c ini910u - ok 14:05:44.0109 0x116c [ A4481D615F09DF12DEC8E0A079A09AD0, C223593FC3C724BBD00EC8D1D69195358154BE3F8CC49E69203FEE1278376A20 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys 14:05:44.0156 0x116c IntcAzAudAddService - ok 14:05:44.0187 0x116c [ B5466A9250342A7AA0CD1FBA13420678, 87E735C4E8924A883AB692D387A83BCBFAE6E165688336AE7AB488F7CA8D339E ] IntelIde C:\WINDOWS\system32\DRIVERS\intelide.sys 14:05:44.0187 0x116c IntelIde - ok 14:05:44.0203 0x116c [ 8C953733D8F36EB2133F5BB58808B66B, 555868F246D73652E998B0B1296476E42FCEDED30D646CC000F31ECE4EBC25E6 ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys 14:05:44.0203 0x116c intelppm - ok 14:05:44.0218 0x116c [ 3BB22519A194418D5FEC05D800A19AD0, F6662F440950596DC1382DD1DB5D7891CCEA30A6062BEA942C18445B5F0D8B16 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys 14:05:44.0218 0x116c Ip6Fw - ok 14:05:44.0250 0x116c [ 731F22BA402EE4B62748ADAF6363C182, 5C3BEBD008A5BE4DC2F92076FF41A10DDC01E10EC7E6552213CFA11970811848 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 14:05:44.0250 0x116c IpFilterDriver - ok 14:05:44.0265 0x116c [ B87AB476DCF76E72010632B5550955F5, E6E74D3A86A7917A8BAED44F8E97CCD2EB171E4E4B27E9907F60D1523FAF319A ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys 14:05:44.0265 0x116c IpInIp - ok 14:05:44.0296 0x116c [ CC748EA12C6EFFDE940EE98098BF96BB, AF523E21C25D9A1715EFEA573E4F52AF5D4FC9F28A2D613F5DB629C186C439E0 ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys 14:05:44.0296 0x116c IpNat - ok 14:05:44.0359 0x116c [ 0CA8C2E721617AA2F923A8151C96FB33, B13E52DBE889289A4099F60CB3FFF84C413C5DE68284EA69AC6C3C3B03F5F53E ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 14:05:44.0375 0x116c iPod Service - ok 14:05:44.0406 0x116c [ 23C74D75E36E7158768DD63D92789A91, 394D296F38E7D8EFD91A6EEC301D9CE6AF910E35EB9819F1A9E3363863AEDFDC ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys 14:05:44.0406 0x116c IPSec - ok 14:05:44.0421 0x116c [ C93C9FF7B04D772627A3646D89F7BF89, 805FA48E7A46D4F10240BF880A2468F53DEA36E83004399228AB70DB7D20544A ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys 14:05:44.0421 0x116c IRENUM - ok 14:05:44.0437 0x116c [ 05A299EC56E52649B1CF2FC52D20F2D7, 2654619DB3E6D6C385B63AB02F87D4241C4F0250CC31383D1B3586917166C2DC ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys 14:05:44.0437 0x116c isapnp - ok 14:05:44.0453 0x116c [ F59C3569A2F2C464BB78CB1BDCDCA55E, 7E24D866510DD2AE158E9C3B84133BF2B6A7202DEE23A4154C996ADBBEDA72FF ] Iviaspi C:\WINDOWS\system32\drivers\iviaspi.sys 14:05:44.0453 0x116c Iviaspi - ok 14:05:44.0484 0x116c [ 390A2A9B42F315338E392A39E4A78C57, BAC7E2B8FC1011C8B626E33992389EAD72839FFFB21CC5AD2BC5C8275B1017B5 ] JL2001 C:\WINDOWS\system32\Drivers\videocap.sys 14:05:44.0500 0x116c JL2001 - ok 14:05:44.0515 0x116c [ 463C1EC80CD17420A542B7F36A36F128, E3B11BA26AFEAFB50B0FC168EA07F6049DA6B88BCDDEEE20310602D7FC27A3A7 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys 14:05:44.0515 0x116c Kbdclass - ok 14:05:44.0546 0x116c [ 692BCF44383D056AED41B045A323D378, 1A99DEE83FFAF64E73067FC049C0A4CE07D94E4AE31EFA17B38CEFA9E41D67DC ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys 14:05:44.0562 0x116c kmixer - ok 14:05:44.0578 0x116c [ B467646C54CC746128904E1654C750C1, 3BD71BE3663EA23463D236D8A2A2E42DFA10C502BDB4B6E131FAF0FBA748219E ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys 14:05:44.0578 0x116c KSecDD - ok 14:05:44.0609 0x116c [ 3A7C3CBE5D96B8AE96CE81F0B22FB527, 0044F03132596A494448CCE5F3D6ECC12617BB4CF6BAE348F79D4DC40ACD6EE0 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll 14:05:44.0609 0x116c lanmanserver - ok 14:05:44.0625 0x116c [ A8888A5327621856C0CEC4E385F69309, B08B63300D824E35E31EEEA2C4C086DFA2C2A964CEDAE512E74D3D88AADAA2C1 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll 14:05:44.0640 0x116c lanmanworkstation - ok 14:05:44.0640 0x116c lbrtfdc - ok 14:05:44.0671 0x116c [ 75F8FDF480DBED5358188E0EAA2020D9, DF9FC7AC9D3B3722014C31D289871E76000B3D27F0A132568BB537BE52BCE36F ] LightScribeService c:\Program Files\Common Files\LightScribe\LSSrvc.exe 14:05:44.0671 0x116c LightScribeService - ok 14:05:44.0687 0x116c [ A7DB739AE99A796D91580147E919CC59, EDF4E039BA277B0E6D66FEB0B28096E67D682C09DFC18ECECF062D9DCFB75ACF ] LmHosts C:\WINDOWS\System32\lmhsvc.dll 14:05:44.0687 0x116c LmHosts - ok 14:05:44.0718 0x116c [ 9FB982DE1C8DD769F8ED681DD878B12F, 52239A2E7E9F1FCBE0050D525B2FF3888A3DB81C780CB0DE684FBD0E1C9A941C ] lvpopflt C:\WINDOWS\system32\DRIVERS\lvpopflt.sys 14:05:44.0718 0x116c lvpopflt - ok 14:05:44.0750 0x116c [ 1A7DB7A00A4B0D8DA24CD691A4547291, 604E29E827841EA06313172D9063FD946CE592BF844CEA8D10173CAA397704F8 ] LVPr2Mon C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys 14:05:44.0750 0x116c LVPr2Mon - ok 14:05:44.0796 0x116c [ 0DDFDCAA92C7F553328DB06BA599BEA9, DB779E38B1CF1CAD69193857043F8ED8BBEB603E97363CD798F6699431D94A41 ] LVPrcSrv C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe 14:05:44.0796 0x116c LVPrcSrv - ok 14:05:44.0843 0x116c [ 37072EC9299E825F4335CC554B6FAC6A, AF5809137454A1DFE029F96BF6C6198CB19D469A0FE3285D7CDE7B0D84D8A465 ] LVRS C:\WINDOWS\system32\DRIVERS\lvrs.sys 14:05:44.0843 0x116c LVRS - ok 14:05:45.0109 0x116c [ A240E42A7402E927A71B6E8AA4629B13, 43E361B97FCC11F4F81C3211489AE5938D5422D3FCEC3C143CF5C4C4D4E553DB ] LVUVC C:\WINDOWS\system32\DRIVERS\lvuvc.sys 14:05:45.0250 0x116c LVUVC - ok 14:05:45.0312 0x116c [ 805C6F337968C7271F0421D0A386C8EE, 1FAB99BA07A4B1012857EC2F1E38696BBBE1E494AF6E165A76FE41E46BDC463A ] mbamchameleon C:\WINDOWS\system32\drivers\mbamchameleon.sys 14:05:45.0312 0x116c mbamchameleon - ok 14:05:45.0343 0x116c [ ECAB006AC6136F1307E140B633CDB8C2, CAF7B51C0BE52A80FAEE6A2F93D5AF0D9ACD7C2255C4D711EC467755C4F8B9B6 ] McAfee SiteAdvisor Service C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe 14:05:45.0359 0x116c McAfee SiteAdvisor Service - ok 14:05:45.0390 0x116c [ C59D9F880BEA416BAB4C57AD04242A71, 4B4E41C81DFEACA319DDBE4857C1C7AF03934E902005F601646CFB7A2865A9A6 ] McAPExe C:\Program Files\McAfee\MSC\McAPExe.exe 14:05:45.0406 0x116c McAPExe - ok 14:05:45.0421 0x116c [ 5007E21208DA68F60EBF43352BDFE6D0, 698B6AB8260E05D6A2D168939E8D7F9F1CC1C78FDEC4F6B9D1A7289FD83C841B ] McMPFSvc C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe 14:05:45.0437 0x116c McMPFSvc - ok 14:05:45.0453 0x116c [ 5007E21208DA68F60EBF43352BDFE6D0, 698B6AB8260E05D6A2D168939E8D7F9F1CC1C78FDEC4F6B9D1A7289FD83C841B ] McNaiAnn C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe 14:05:45.0468 0x116c McNaiAnn - ok 14:05:45.0515 0x116c [ 3A01047FFF666D33EBDE3513D20DA1F5, 360A1D6C2CBDF9C25E72B872ACE36E69D43218E532248A08753490ED6C266CBE ] McODS C:\Program Files\McAfee\VirusScan\mcods.exe 14:05:45.0531 0x116c McODS - ok 14:05:45.0546 0x116c [ 5007E21208DA68F60EBF43352BDFE6D0, 698B6AB8260E05D6A2D168939E8D7F9F1CC1C78FDEC4F6B9D1A7289FD83C841B ] mcpltsvc C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe 14:05:45.0562 0x116c mcpltsvc - ok 14:05:45.0578 0x116c [ 5007E21208DA68F60EBF43352BDFE6D0, 698B6AB8260E05D6A2D168939E8D7F9F1CC1C78FDEC4F6B9D1A7289FD83C841B ] McProxy C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe 14:05:45.0578 0x116c McProxy - ok 14:05:45.0625 0x116c [ 263418671C2F112C72524B6B236E7518, B72AFC0D87F8F369254552F06186E66E67361D0A98ACE2BDCF2048E04F552193 ] McPvDrv C:\WINDOWS\system32\drivers\McPvDrv.sys 14:05:45.0625 0x116c McPvDrv - ok 14:05:45.0687 0x116c [ 11F714F85530A2BD134074DC30E99FCA, BDB5FD3B2DF4ADD19B31965B3E789768B59E872B3EA85912B1FFB32B2AF9D5D8 ] MDM C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE 14:05:45.0687 0x116c MDM - ok 14:05:45.0718 0x116c [ 986B1FF5814366D71E0AC5755C88F2D3, E6AF051174531C24B38E73987755D366ABEC595476C6D17793E8DCCC73F55340 ] Messenger C:\WINDOWS\System32\msgsvc.dll 14:05:45.0734 0x116c Messenger - ok 14:05:45.0750 0x116c [ 75A2B9F70B77AA3DB15E96BDAAE484A2, AE13AB63F53CBB929B498145E0E18DEEFEB7EBC5C3BD58A7A4D60697CCBBDBFB ] mfeapfk C:\WINDOWS\system32\drivers\mfeapfk.sys 14:05:45.0750 0x116c mfeapfk - ok 14:05:45.0781 0x116c [ 070850EFFC731B4A22FB7DDEAD41B943, E3139F47BDBBCBA255EEBA0BA956C2F8746B91656E3EBD0FEFBA339D55EF6499 ] mfeavfk C:\WINDOWS\system32\drivers\mfeavfk.sys 14:05:45.0781 0x116c mfeavfk - ok 14:05:45.0812 0x116c [ FC28E41FE9D4F3283FB41717C0BF0109, 7148412F8DFBCA1A3971226F13CDD0891777EA70ECB172310913FA149C4049CB ] mfebopk C:\WINDOWS\system32\drivers\mfebopk.sys 14:05:45.0828 0x116c mfebopk - ok 14:05:45.0875 0x116c [ 1F0F4B564BFFD1E5C319F39DC3EEA17F, EF28D130E1BA96B9733A3AAEE6233CE7911DA12E7B12DCDCBCBDE86E5F2C0240 ] mfecore C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe 14:05:45.0890 0x116c mfecore - ok 14:05:45.0953 0x116c [ 7A9F90099CBF6FA6D4011E10F36EF0C7, C88953DE4DF7B63349350A9AE024CC6F48647D2252994DE4C00D339734BF2085 ] mfefire C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe 14:05:45.0953 0x116c mfefire - ok 14:05:45.0984 0x116c [ 768AA2C44C589EA27E80E4EC05BD5F76, 572DCA5DFBF9142348E8E15378FD96D0865B1D700EB9E4484012DE61A9735240 ] mfefirek C:\WINDOWS\system32\drivers\mfefirek.sys 14:05:46.0000 0x116c mfefirek - ok 14:05:46.0046 0x116c [ 24E6ABD47FD50FC187FFC3583A14F339, 4EA62F6691E020E944C6CA145D42F33AE770160D298F3CEAE19287424ADF3463 ] mfehidk C:\WINDOWS\system32\drivers\mfehidk.sys 14:05:46.0062 0x116c mfehidk - ok 14:05:46.0078 0x116c [ CDDF227A0D048CB0EEA75E868D308687, 64D8E15914576314F9A2554343F98513D062F49EF8E1F5DE80310AB35BD27EAC ] mfencbdc C:\WINDOWS\system32\DRIVERS\mfencbdc.sys 14:05:46.0093 0x116c mfencbdc - ok 14:05:46.0140 0x116c [ 4A4B3FCC03A3A924F51F26043D363A80, 78D561DB742C5E75288E4562227C03D0C80902FF5175197BD3F47A99685B3544 ] mfencrk C:\WINDOWS\system32\DRIVERS\mfencrk.sys 14:05:46.0140 0x116c mfencrk - ok 14:05:46.0187 0x116c [ B475C9545475B44EA23CE22119149440, AAC252F2A546C9E8563418193705C292EDC564E15CB5A247BEA5B5EE04AAC678 ] mfendisk C:\WINDOWS\system32\DRIVERS\mfendisk.sys 14:05:46.0187 0x116c mfendisk - ok 14:05:46.0203 0x116c [ B475C9545475B44EA23CE22119149440, AAC252F2A546C9E8563418193705C292EDC564E15CB5A247BEA5B5EE04AAC678 ] mfendiskmp C:\WINDOWS\system32\DRIVERS\mfendisk.sys 14:05:46.0203 0x116c mfendiskmp - ok 14:05:46.0218 0x116c [ E487B1ABF6B4E17AEE023022FA927841, EB0ADA2EC3602D8D64BE37A638B5CD6EC07080EBC8A1C7F6656BACA15B4D54E0 ] mfetdi2k C:\WINDOWS\system32\drivers\mfetdi2k.sys 14:05:46.0218 0x116c mfetdi2k - ok 14:05:46.0281 0x116c [ A1262E7DC2394EA04AB97D48752F7332, E572C19113823E4B4CD4171843E9AB98CC8F02B97740D7C9CD671583DF29A9D3 ] mfevtp C:\WINDOWS\system32\mfevtps.exe 14:05:46.0281 0x116c mfevtp - ok 14:05:46.0375 0x116c MFE_RR - ok 14:05:46.0406 0x116c [ 4AE068242760A1FB6E1A44BF4E16AFA6, 1FB771162B96AAF787AC24867B818DF8511F0780BB094FA9A38C11D8DBFE68BC ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys 14:05:46.0406 0x116c mnmdd - ok 14:05:46.0437 0x116c [ D18F1F0C101D06A1C1ADF26EED16FCDD, BA0837C7780BD8262E143E2935AFA63BE59C3C39EF56CB8608EED0F50AF070D4 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe 14:05:46.0437 0x116c mnmsrvc - ok 14:05:46.0484 0x116c [ 35176FA09A0FC58DB630991A81A0BA39, 190FCA6C60C8E8431BAC916D6190E7D68DCEA8ED42554A35F495143F6C7A85A6 ] MOBKbackup C:\Program Files\McAfee Online Backup\MOBKbackup.exe 14:05:46.0500 0x116c MOBKbackup - ok 14:05:46.0515 0x116c [ E896775837A8BCE436348DF460522394, FF912F42CDF9FAB7BDF1C22B692201B707CF3A4DF7DD515AF8B9C4CCCE593CF8 ] MOBKFilter C:\WINDOWS\system32\DRIVERS\MOBK.sys 14:05:46.0515 0x116c MOBKFilter - ok 14:05:46.0546 0x116c [ DFCBAD3CEC1C5F964962AE10E0BCC8E1, B342CC9EC3729AB1AB4B5E2E99F890C1E0CA649162DE91F6768AB857B719E97B ] Modem C:\WINDOWS\system32\drivers\Modem.sys 14:05:46.0546 0x116c Modem - ok 14:05:46.0546 0x116c [ 35C9E97194C8CFB8430125F8DBC34D04, 0C0FCE6B0A23FB0ECB92E1663E1C72D2DD5B177D82E04782957690B69530DB39 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys 14:05:46.0546 0x116c Mouclass - ok 14:05:46.0562 0x116c [ A80B9A0BAD1B73637DBCBBA7DF72D3FD, 2A5E15ED2C24C6C65EF2F7E1FD93374774076C9D8D451E4422561F4D269C012F ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys 14:05:46.0562 0x116c MountMgr - ok 14:05:46.0578 0x116c mraid35x - ok 14:05:46.0593 0x116c [ 11D42BB6206F33FBB3BA0288D3EF81BD, 76ABCFB62C5AC549F58C231F72A99882CDEB74928104B77FE52554765C2B1A22 ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys 14:05:46.0593 0x116c MRxDAV - ok 14:05:46.0640 0x116c [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0, DB9B186F7076D7B94F45041AF7B77C1AD2CAB504D683B459C6CB1C22840ED170 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 14:05:46.0656 0x116c MRxSmb - ok 14:05:46.0687 0x116c [ A137F1470499A205ABBB9AAFB3B6F2B1, FB4951727543030D9E6ED74149C3FAACE2CA9DA8C1B5F616301B30B858C724E8 ] MSDTC C:\WINDOWS\system32\msdtc.exe 14:05:46.0687 0x116c MSDTC - ok 14:05:46.0703 0x116c [ C941EA2454BA8350021D774DAF0F1027, C940E978C7B66A713A0FDAB54B5F995DF59D089AFCD96221DD3222948CD49BBD ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys 14:05:46.0703 0x116c Msfs - ok 14:05:46.0718 0x116c MSIServer - ok 14:05:46.0750 0x116c [ 5007E21208DA68F60EBF43352BDFE6D0, 698B6AB8260E05D6A2D168939E8D7F9F1CC1C78FDEC4F6B9D1A7289FD83C841B ] MSK80Service C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe 14:05:46.0750 0x116c MSK80Service - ok 14:05:46.0781 0x116c [ D1575E71568F4D9E14CA56B7B0453BF1, 4ABE0E24786C0D39FA2B885447E56204CA6942FB175E534DCE675D7BCF0B176A ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys 14:05:46.0781 0x116c MSKSSRV - ok 14:05:46.0812 0x116c [ 325BB26842FC7CCC1FCCE2C457317F3E, C07BE560513B1FB91D756494F0BA4AEEB2E1998DE0E1C21EE83DB1183B0CEE91 ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys 14:05:46.0812 0x116c MSPCLOCK - ok 14:05:46.0828 0x116c [ BAD59648BA099DA4A17680B39730CB3D, 9AD4C7C94C186C8815D0BC75DCAFB962158DA6935A244BA243EDDDEB33F9816C ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys 14:05:46.0828 0x116c MSPQM - ok 14:05:46.0859 0x116c [ AF5F4F3F14A8EA2C26DE30F7A1E17136, AC93A1E4ABB0D038B772E429015567E44CC2EDB66C54DBE23A5F98176FAC1520 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys 14:05:46.0859 0x116c mssmbios - ok 14:05:46.0890 0x116c [ E53736A9E30C45FA9E7B5EAC55056D1D, 38602F280BF69EBA3706AD175AFC1AEB561A8302B4B61E3FECB3C27D7A9BDB41 ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys 14:05:46.0890 0x116c MSTEE - ok 14:05:46.0906 0x116c [ DE6A75F5C270E756C5508D94B6CF68F5, FCC972DDC36C2C44D836913F10004C2C33B11C54DEFFF0C63E0FDF901D2F9261 ] Mup C:\WINDOWS\system32\drivers\Mup.sys 14:05:46.0906 0x116c Mup - ok 14:05:46.0937 0x116c [ 5B50F1B2A2ED47D560577B221DA734DB, C16A554B6E1A7F5F98C94DFA88163E0F7426506BF2F51FD351B1A05FC0DB3BC5 ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 14:05:46.0937 0x116c NABTSFEC - ok 14:05:47.0000 0x116c [ 0102140028FAD045756796E1C685D695, 5335B8278418CA200E2772124F0602C3E15A5CAF2D5CC59F6785DFAABF339B09 ] napagent C:\WINDOWS\System32\qagentrt.dll 14:05:47.0015 0x116c napagent - ok 14:05:47.0031 0x116c [ 1DF7F42665C94B825322FAE71721130D, FE0DCB728471465B39A42A7511F4133021FBA5DF88F88BCB5FE2FF34CFD713F9 ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys 14:05:47.0031 0x116c NDIS - ok 14:05:47.0046 0x116c [ 7FF1F1FD8609C149AA432F95A8163D97, 18CD1FF5AC1EF8A38D1EC53014F2BADD28D9CDF4ECE2EBC2313D08903776F323 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys 14:05:47.0046 0x116c NdisIP - ok 14:05:47.0078 0x116c [ 0109C4F3850DFBAB279542515386AE22, 4F6DB1E499AC853FD36FD603FBB6D3AC9BDCEB298C7FE1FB59A9236CB46729B2 ] NdisTapi C:\WINDOWS\system32\DRIVERS distapi.sys 14:05:47.0078 0x116c NdisTapi - ok 14:05:47.0093 0x116c [ F927A4434C5028758A842943EF1A3849, B1AA3AF150C05307461774925901789456B0CCCD03A5E71ADA4AB58455962BEE ] Ndisuio C:\WINDOWS\system32\DRIVERS disuio.sys 14:05:47.0093 0x116c Ndisuio - ok 14:05:47.0109 0x116c [ EDC1531A49C80614B2CFDA43CA8659AB, 494042F790F33721328B4451E79842E21919681CC421A4F9633EC4D383E06097 ] NdisWan C:\WINDOWS\system32\DRIVERS diswan.sys 14:05:47.0109 0x116c NdisWan - ok 14:05:47.0140 0x116c [ 9282BD12DFB069D3889EB3FCC1000A9B, 09A46F1712BD9165068D8E153585FE3E6E5CBF4F1DDEC142115555D3A91AEC09 ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys 14:05:47.0140 0x116c NDProxy - ok 14:05:47.0140 0x116c [ 5D81CF9A2F1A3A756B66CF684911CDF0, 7989C36607CAEA17AFA2C1C9904145CA0714A54B9F712D9D4C1AB140D0B2CC0C ] NetBIOS C:\WINDOWS\system32\DRIVERS etbios.sys 14:05:47.0140 0x116c NetBIOS - ok 14:05:47.0171 0x116c [ 74B2B2F5BEA5E9A3DC021D685551BD3D, 7932B71F98B4122BE88F576BF6D745A757AE378A48924B7F4358837B75640A82 ] NetBT C:\WINDOWS\system32\DRIVERS etbt.sys 14:05:47.0171 0x116c NetBT - ok 14:05:47.0218 0x116c [ B857BA82860D7FF85AE29B095645563B, 86FF0E4CDD9C394E8BABD93A4D57E73FF9A779261717DEC6E9CDE99F1C6B0F4C ] NetDDE C:\WINDOWS\system32 etdde.exe 14:05:47.0218 0x116c NetDDE - ok 14:05:47.0234 0x116c [ B857BA82860D7FF85AE29B095645563B, 86FF0E4CDD9C394E8BABD93A4D57E73FF9A779261717DEC6E9CDE99F1C6B0F4C ] NetDDEdsdm C:\WINDOWS\system32 etdde.exe 14:05:47.0234 0x116c NetDDEdsdm - ok 14:05:47.0265 0x116c [ BF2466B3E18E970D8A976FB95FC1CA85, F7794B5D12DC5D820A162850F4388E2AA80426AD07CB221799CF941C682AB501 ] Netlogon C:\WINDOWS\system32\lsass.exe 14:05:47.0265 0x116c Netlogon - ok 14:05:47.0312 0x116c [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE, 4E0A67B3CC897E80D4B342FFE8B7B4CC4F6CA2EF2D34C136027A098B2E1C6166 ] Netman C:\WINDOWS\System32 etman.dll 14:05:47.0312 0x116c Netman - ok 14:05:47.0343 0x116c [ D34612C5D02D026535B3095D620626AE, 1BBCCCBF49EB8807240A77DCB43C25C21682073CC5356594E2C4F53EF36BF657 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 14:05:47.0359 0x116c NetTcpPortSharing - ok 14:05:47.0375 0x116c [ E9E47CFB2D461FA0FC75B7A74C6383EA, 544136F5BFD4DC23D45E90F12FA48B82FD9EAEA9EAF3E0F5F0BD27E23D672C3E ] NIC1394 C:\WINDOWS\system32\DRIVERS ic1394.sys 14:05:47.0390 0x116c NIC1394 - ok 14:05:47.0421 0x116c [ 943337D786A56729263071623BBB9DE5, B631B47C869FE4ACF46E4AA272435D9A9CA536E3349E3FFBB8602636FEE7AFD4 ] Nla C:\WINDOWS\System32\mswsock.dll 14:05:47.0437 0x116c Nla - ok 14:05:47.0453 0x116c [ 3182D64AE053D6FB034F44B6DEF8034A, 4ADFC76965BA2A5F488E71789A4E4EA702A74AF42725F72130D1CA919406CF19 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys 14:05:47.0453 0x116c Npfs - ok 14:05:47.0484 0x116c [ 78A08DD6A8D65E697C18E1DB01C5CDCA, E0E6F3ED05068E32F1D5C2D2B38CDEF4536B8656DB6756C66CF6B40B60C8F3DA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys 14:05:47.0500 0x116c Ntfs - ok 14:05:47.0500 0x116c [ BF2466B3E18E970D8A976FB95FC1CA85, F7794B5D12DC5D820A162850F4388E2AA80426AD07CB221799CF941C682AB501 ] NtLmSsp C:\WINDOWS\system32\lsass.exe 14:05:47.0500 0x116c NtLmSsp - ok 14:05:47.0546 0x116c [ 156F64A3345BD23C600655FB4D10BC08, 9611BE411586E068D9297D77102DB3BE48AA67F1BAD6F61A84F83FC3043FA9CD ] NtmsSvc C:\WINDOWS\system32 tmssvc.dll 14:05:47.0562 0x116c NtmsSvc - ok 14:05:47.0609 0x116c [ 73C1E1F395918BC2C6DD67AF7591A3AD, B21133A75253EC15E2DFF66D3B480AB1A7E1A2360476C810E7AA55D0F0EB08D4 ] Null C:\WINDOWS\system32\drivers\Null.sys 14:05:47.0609 0x116c Null - ok 14:05:47.0625 0x116c [ B305F3FAD35083837EF46A0BBCE2FC57, 9D0E0E666D652D0FC9EAB97280A5D67AAF61D6B21929DF7CF8ED72A367720464 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS wlnkflt.sys 14:05:47.0625 0x116c NwlnkFlt - ok 14:05:47.0640 0x116c [ C99B3415198D1AAB7227F2C88FD664B9, DD8DA4B5E804F134AB9233859544C025062902DFC3E8FB8A09A67337A4E73F55 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS wlnkfwd.sys 14:05:47.0640 0x116c NwlnkFwd - ok 14:05:47.0656 0x116c [ CA33832DF41AFB202EE7AEB05145922F, 9DD0089C2E13C7F81214C3B5A4A61276292052F9BBFEA7FCD0F6AA27815D5F95 ] ohci1394 C:\WINDOWS\system32\DRIVERS\ohci1394.sys 14:05:47.0656 0x116c ohci1394 - ok 14:05:47.0687 0x116c [ 7A56CF3E3F12E8AF599963B16F50FB6A, 882C82BAE96D263138D4C0D6C425458B770B7B9C8E9C1D28AC918BF6BE94A5C2 ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 14:05:47.0687 0x116c ose - ok 14:05:47.0703 0x116c [ 5575FAF8F97CE5E713D108C2A58D7C7C, 96D4595D19A78CCBE8B325A08780AC077AE5CC99642ACD72FB47AEAE8D344D3B ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys 14:05:47.0703 0x116c Parport - ok 14:05:47.0718 0x116c [ BEB3BA25197665D82EC7065B724171C6, 7E71C13BA30CD95CEE8A9CC85E6F48A01F30EDEAADEE69D80AE828BF97E5A5CA ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys 14:05:47.0718 0x116c PartMgr - ok 14:05:47.0750 0x116c [ 70E98B3FD8E963A6A46A2E6247E0BEA1, 6771313EC41B3B5BFD398F60706E40BE71617046880CC352DD110B001AFC22A1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys 14:05:47.0750 0x116c ParVdm - ok 14:05:47.0765 0x116c [ A219903CCF74233761D92BEF471A07B1, D4E6C360A1D2FCA4D17C991B834D68BF20F5111DD06B1FAB8B22984804CEC269 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys 14:05:47.0765 0x116c PCI - ok 14:05:47.0781 0x116c PCIDump - ok 14:05:47.0796 0x116c [ CCF5F451BB1A5A2A522A76E670000FF0, D63F7E5A39653EC9CCE94B7D84B2D3EBD4F54533BD65701020198724042C9257 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys 14:05:47.0796 0x116c PCIIde - ok 14:05:47.0828 0x116c [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1, 0BA3DB21DC7C641C181E2635B5C9B73965FDCDCD3EBBBE48FCFEC1C8C987F617 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys 14:05:47.0828 0x116c Pcmcia - ok 14:05:47.0843 0x116c PDCOMP - ok 14:05:47.0843 0x116c PDFRAME - ok 14:05:47.0859 0x116c PDRELI - ok 14:05:47.0859 0x116c PDRFRAME - ok 14:05:47.0875 0x116c perc2 - ok 14:05:47.0890 0x116c perc2hib - ok 14:05:47.0906 0x116c [ 444F122E68DB44C0589227781F3C8B3F, 99581AD22CBD3B647E719E250291C315099B62FDF80671225F0C5A05489D0F91 ] Pfc C:\WINDOWS\system32\drivers\pfc.sys 14:05:47.0906 0x116c Pfc - ok 14:05:47.0937 0x116c [ 65DF52F5B8B6E9BBD183505225C37315, 59C606977DB40A3443DFF0BE2A4C761824881B22C9FDB3D23F6486DB580E92A4 ] PlugPlay C:\WINDOWS\system32\services.exe 14:05:47.0937 0x116c PlugPlay - ok 14:05:47.0968 0x116c [ 9D84376931440F3679BEEF2A414FA493, C800227A67C3C10A26114DB54F5390D2A475D36BE65E87CB890A6819B0BB4884 ] Pml Driver HPZ12 C:\WINDOWS\system32\HPZipm12.exe 14:05:47.0968 0x116c Pml Driver HPZ12 - ok 14:05:47.0984 0x116c [ BF2466B3E18E970D8A976FB95FC1CA85, F7794B5D12DC5D820A162850F4388E2AA80426AD07CB221799CF941C682AB501 ] PolicyAgent C:\WINDOWS\system32\lsass.exe 14:05:47.0984 0x116c PolicyAgent - ok 14:05:48.0000 0x116c [ EFEEC01B1D3CF84F16DDD24D9D9D8F99, C5F0C8C66A3AF7E7BB04CEDE4AC5306F8387AB384A2107DC5BE413AAE968EFF1 ] PptpMiniport C:\WINDOWS\system32\DRIVERS aspptp.sys 14:05:48.0000 0x116c PptpMiniport - ok 14:05:48.0015 0x116c [ A32BEBAF723557681BFC6BD93E98BD26, 35039BA72A29F87B2CA37DCDE4EFDAABBDEAD8CE3EB8652ACC665994118145A6 ] Processor C:\WINDOWS\system32\DRIVERS\processr.sys 14:05:48.0015 0x116c Processor - ok 14:05:48.0031 0x116c [ BF2466B3E18E970D8A976FB95FC1CA85, F7794B5D12DC5D820A162850F4388E2AA80426AD07CB221799CF941C682AB501 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe 14:05:48.0031 0x116c ProtectedStorage - ok 14:05:48.0031 0x116c [ BFFDB363485501A38F0BCA83AEC810DB, FFD5DB5D5C2E088EE5E2A5F586A5DC0CC70E15DA811406465B4940FCE0B61B3A ] Ps2 C:\WINDOWS\system32\DRIVERS\PS2.sys 14:05:48.0046 0x116c Ps2 - ok 14:05:48.0046 0x116c [ 09298EC810B07E5D582CB3A3F9255424, 35473A1BE25AC289474090EB0806AC6B3035DC33D1F3DF97A14BF1E361AC6AC3 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys 14:05:48.0046 0x116c PSched - ok 14:05:48.0078 0x116c [ 80D317BD1C3DBC5D4FE7B1678C60CADD, DA76804B55D0CAB3DDD01EFC06673764AE4860693375C658B6063FB14AF7F12C ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys 14:05:48.0078 0x116c Ptilink - ok 14:05:48.0093 0x116c [ 30CBAE0A34359F1CD19D1576245149ED, 3342640F1B3114CD4B426EE3B082AC008E244BF592BB0A9644ADB78A43C85A35 ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys 14:05:48.0093 0x116c PxHelp20 - ok 14:05:48.0093 0x116c ql1080 - ok 14:05:48.0109 0x116c Ql10wnt - ok 14:05:48.0125 0x116c ql12160 - ok 14:05:48.0125 0x116c ql1240 - ok 14:05:48.0140 0x116c ql1280 - ok 14:05:48.0140 0x116c [ FE0D99D6F31E4FAD8159F690D68DED9C, 998685622ABE631984B7E4DBF91AB3594B1F574378D75EB9F6265F4650470692 ] RasAcd C:\WINDOWS\system32\DRIVERS asacd.sys 14:05:48.0140 0x116c RasAcd - ok 14:05:48.0171 0x116c [ AD188BE7BDF94E8DF4CA0A55C00A5073, C7D76CB579FAEBCCC2873499441BACDD6BD6668ACF5ED7F31862656E96E2B20C ] RasAuto C:\WINDOWS\System32 asauto.dll 14:05:48.0187 0x116c RasAuto - ok 14:05:48.0203 0x116c [ 11B4A627BC9614B885C4969BFA5FF8A6, EAE0A412A2B0F68919C32A96B3A08CC1A06585E4998819F5C9051745F63FF5AD ] Rasl2tp C:\WINDOWS\system32\DRIVERS asl2tp.sys 14:05:48.0203 0x116c Rasl2tp - ok 14:05:48.0250 0x116c [ 76A9A3CBEADD68CC57CDA5E1D7448235, 4AFD048C5D2306AB8DE46F3AA60AC0213333DDA3B09A9E91F7585DB6EB978EC8 ] RasMan C:\WINDOWS\System32 asmans.dll 14:05:48.0250 0x116c RasMan - ok 14:05:48.0265 0x116c [ 5BC962F2654137C9909C3D4603587DEE, A5CE5653D0105240F5E86CFAAB89E7917D42D939E2F27A5A7D6979289CA651B8 ] RasPppoe C:\WINDOWS\system32\DRIVERS aspppoe.sys 14:05:48.0265 0x116c RasPppoe - ok 14:05:48.0281 0x116c [ FDBB1D60066FCFBB7452FD8F9829B242, 10A2DACF944BD000032EBA8C095CB3D879CC55B28C377ADF6E52E508E47444DB ] Raspti C:\WINDOWS\system32\DRIVERS aspti.sys 14:05:48.0281 0x116c Raspti - ok 14:05:48.0296 0x116c [ 7AD224AD1A1437FE28D89CF22B17780A, 6645235CA27D671954E3557FA37082881C3D7D47492C71264CD8CB8D108EC801 ] Rdbss C:\WINDOWS\system32\DRIVERS dbss.sys 14:05:48.0296 0x116c Rdbss - ok 14:05:48.0312 0x116c [ 4912D5B403614CE99C28420F75353332, 975341ECD660209987B5E5171B8315E032439E408CBE8A5986E67AF767F373BB ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 14:05:48.0312 0x116c RDPCDD - ok 14:05:48.0359 0x116c [ 43AF5212BD8FB5BA6EED9754358BD8F7, AF330F61CECA4AFA359CEABC5EB3227E6B56A9A2DCE50701381D665122D7356D ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys 14:05:48.0359 0x116c RDPWD - ok 14:05:48.0390 0x116c [ 3C37BF86641BDA977C3BF8A840F3B7FA, AB9A6E54DBA3F4561CD4837372BECCE0D73943D02E3288F944333039375AC08C ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe 14:05:48.0406 0x116c RDSessMgr - ok 14:05:48.0406 0x116c [ F828DD7E1419B6653894A8F97A0094C5, E6150E1F598BA4CFEDB8FF075BC0D576518C331B864388F1CAE8812EFF106ECF ] redbook C:\WINDOWS\system32\DRIVERS edbook.sys 14:05:48.0406 0x116c redbook - ok 14:05:48.0437 0x116c [ 7E699FF5F59B5D9DE5390E3C34C67CF5, 3FCF0442D80AB181FED4303E570378736AA1F8718C0B8B70F689A1E45200FFE4 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll 14:05:48.0453 0x116c RemoteAccess - ok 14:05:48.0468 0x116c [ AAED593F84AFA419BBAE8572AF87CF6A, CC0FFC5A69394C8830DC66320DA01A820BBF41AD7E57D0FC343561DC5EF9A360 ] RpcLocator C:\WINDOWS\system32\locator.exe 14:05:48.0468 0x116c RpcLocator - ok 14:05:48.0515 0x116c [ 6B27A5C03DFB94B4245739065431322C, 6AEAC16AB4E0DFD25123AAF4D4181FEE1B919B7B2793117006CE8CF30E826CFD ] RpcSs C:\WINDOWS\system32 pcss.dll 14:05:48.0515 0x116c RpcSs - ok 14:05:48.0562 0x116c [ 471B3F9741D762ABE75E9DEEA4787E47, D9ADE42965EC22AEB4B2AD21D429C3C8232A60AA9853DEFDA7AED86A13FE8623 ] RSVP C:\WINDOWS\system32 svp.exe 14:05:48.0562 0x116c RSVP - ok 14:05:48.0578 0x116c rt2870 - ok 14:05:48.0609 0x116c [ 2EF9C0DC26B30B2318B1FC3FAA1F0AE7, 34BBA614CEA83A99D92A16591D04CFBA3AE309652CC1B505A036E34E3F8F037A ] rtl8139 C:\WINDOWS\system32\DRIVERS\R8139n51.SYS 14:05:48.0609 0x116c rtl8139 - ok 14:05:48.0609 0x116c [ BF2466B3E18E970D8A976FB95FC1CA85, F7794B5D12DC5D820A162850F4388E2AA80426AD07CB221799CF941C682AB501 ] SamSs C:\WINDOWS\system32\lsass.exe 14:05:48.0609 0x116c SamSs - ok 14:05:48.0640 0x116c [ 86D007E7A654B9A71D1D7D856B104353, 7B1DE53D637A5FC9619D5D07C48927AFEC89D959207F6F2E2F45DD054EEA04C7 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe 14:05:48.0656 0x116c SCardSvr - ok 14:05:48.0687 0x116c [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA, 0B582F47BD70732BAC48B8B86E5D06CE7F299A20E8177F3F2E6F28217C3FB605 ] Schedule C:\WINDOWS\system32\schedsvc.dll 14:05:48.0687 0x116c Schedule - ok 14:05:48.0703 0x116c Scutum50 - ok 14:05:48.0734 0x116c [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys 14:05:48.0734 0x116c Secdrv - ok 14:05:48.0750 0x116c [ CBE612E2BB6A10E3563336191EDA1250, C331797DC3569F0E715766561DE2562F60B924378842246C35D2B1CF867E9D96 ] seclogon C:\WINDOWS\System32\seclogon.dll 14:05:48.0750 0x116c seclogon - ok 14:05:48.0765 0x116c [ 7FDD5D0684ECA8C1F68B4D99D124DCD0, 7105B026F966A992430F86C3698ABE15EC73E4772F1A3E362E29FD5247A5DCA6 ] SENS C:\WINDOWS\system32\sens.dll 14:05:48.0765 0x116c SENS - ok 14:05:48.0781 0x116c [ 0F29512CCD6BEAD730039FB4BD2C85CE, 4F98AE390D1B14A755700DD6CEFB9CF921F0404AF2145D2D7E5F52394F87C6A5 ] Serenum C:\WINDOWS\system32\DRIVERS\serenum.sys 14:05:48.0781 0x116c Serenum - ok 14:05:48.0812 0x116c [ CCA207A8896D4C6A0C9CE29A4AE411A7, 5999B39242283CD803319AADCA171CCCC6E2A40FB2FAFA51B1D29F3FF2DD8D6C ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys 14:05:48.0812 0x116c Serial - ok 14:05:48.0859 0x116c [ 8E6B8C671615D126FDC553D1E2DE5562, CEEC0067514555D5CA489F50E3D7562FCA8DB8E952C3C878604C9277FC77959F ] Sfloppy C:\WINDOWS\system32\DRIVERS\sfloppy.sys 14:05:48.0859 0x116c Sfloppy - ok 14:05:48.0906 0x116c [ 83F41D0D89645D7235C051AB1D9523AC, B681F33EEAA511D6A2DCB9FBAA407B739184C9FF6067C6B7E51F1FC37E9D4DD7 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll 14:05:48.0921 0x116c SharedAccess - ok 14:05:48.0953 0x116c [ 99BC0B50F511924348BE19C7C7313BBF, A1006C687BD352F700B140DC741515A0CDD9E1352C0FBD1EE410D404E344444B ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll 14:05:48.0953 0x116c ShellHWDetection - ok 14:05:48.0968 0x116c Simbad - ok 14:05:49.0000 0x116c [ 3FBB6EF8B5A71A2FA11F5F461BB73219, E71F7BB8F690351ACB0C02B2BC01F8837F55645B9BF7682C0F9329BA00637F0A ] SISNIC C:\WINDOWS\system32\DRIVERS\sisnic.sys 14:05:49.0000 0x116c SISNIC - ok 14:05:49.0031 0x116c [ 7C15061CD0372487903B07B9BB03AFAD, FB96CDA29C7C1E8A315BA89E8B150918E59F32CE749D3EF43FCBEB3FB57BF1C6 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe 14:05:49.0031 0x116c SkypeUpdate - ok 14:05:49.0046 0x116c [ 866D538EBE33709A5C9F5C62B73B7D14, BC94BEB7C17B4FCAC8B5D0D5006A203BC209E0504EECE149651D8691935696CD ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys 14:05:49.0046 0x116c SLIP - ok 14:05:49.0062 0x116c Sparrow - ok 14:05:49.0093 0x116c [ AB8B92451ECB048A4D1DE7C3FFCB4A9F, DD17733CBB370FCA08F0296704D7CBEACA3C8F76D0ABE4761C3B1FFDF7481D9E ] splitter C:\WINDOWS\system32\drivers\splitter.sys 14:05:49.0093 0x116c splitter - ok 14:05:49.0125 0x116c [ 60784F891563FB1B767F70117FC2428F, E0B07F08E60FFBAD36C2E58180F4B2A16DCA47716044CBE0213DF7B74D742F1F ] Spooler C:\WINDOWS\system32\spoolsv.exe 14:05:49.0125 0x116c Spooler - ok 14:05:49.0140 0x116c [ 76BB022C2FB6902FD5BDD4F78FC13A5D, 6031CB2344D7277FC703480EB43CF856A0F8F818EA98FF26A2CA532336CD2DFA ] sr C:\WINDOWS\system32\DRIVERS\sr.sys 14:05:49.0156 0x116c sr - ok 14:05:49.0171 0x116c [ 3805DF0AC4296A34BA4BF93B346CC378, B57A14F1B7B0997E619DDD62B73157AA2399A9852166FB58139CBB358A88F6F3 ] srservice C:\WINDOWS\system32\srsvc.dll 14:05:49.0187 0x116c srservice - ok 14:05:49.0218 0x116c [ 47DDFC2F003F7F9F0592C6874962A2E7, 17C643BD4EB09B5666FE41817DC785BE04A6E491CE79E8E5A702CDBD98E1BDD7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys 14:05:49.0218 0x116c Srv - ok 14:05:49.0250 0x116c [ 64E44ACD8C238FCBBB78F0BA4BDC4B05, 59D015DD86EA35AC8F667C063AE76FAFA9497F04225D256DF5A37EB1461F15D4 ] ssadbus C:\WINDOWS\system32\DRIVERS\ssadbus.sys 14:05:49.0250 0x116c ssadbus - ok 14:05:49.0265 0x116c [ BB2C84A15C765DA89FD832B0E73F26CE, BAE3E7726F075340B8CC7BCA18869DFEA304A03B0A0429B4C3D186B1149E9A9A ] ssadmdfl C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys 14:05:49.0265 0x116c ssadmdfl - ok 14:05:49.0281 0x116c [ 6D0D132DDC6F43EDA00DCED6D8B1CA31, 0A37081D95A56861C3E48592048DFCFAE6FB38510D21AB41C9C73744743E7646 ] ssadmdm C:\WINDOWS\system32\DRIVERS\ssadmdm.sys 14:05:49.0296 0x116c ssadmdm - ok 14:05:49.0312 0x116c [ 0A5679B3714EDAB99E357057EE88FCA6, 01E1A101FFF48402C77E385A78FEF27876E04533B60EB1C18558A737E57E5FA8 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll 14:05:49.0328 0x116c SSDPSRV - ok 14:05:49.0343 0x116c [ A9573045BAA16EAB9B1085205B82F1ED, 6A4D68BCD4968C17451EB1C4AB420FFA844D089845520D222BC4A2BD14583C56 ] StillCam C:\WINDOWS\system32\DRIVERS\serscan.sys 14:05:49.0359 0x116c StillCam - ok 14:05:49.0375 0x116c [ 8BAD69CBAC032D4BBACFCE0306174C30, 2AA0DA710FCBFF38FE8DA91EE02E7A4503269347E61F8D3246FCA3384BBA2305 ] stisvc C:\WINDOWS\system32\wiaservc.dll 14:05:49.0390 0x116c stisvc - ok 14:05:49.0406 0x116c [ 77813007BA6265C4B6098187E6ED79D2, 93939120E803C46FBFD577C8FC2E6C7E71C0460E01D25CB29579490640AB50C7 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys 14:05:49.0406 0x116c streamip - ok 14:05:49.0421 0x116c [ 3941D127AEF12E93ADDF6FE6EE027E0F, EA1F0E32E1C5E90FA4AAC421DEBBE086512340758D3217A6334E886BCE638B51 ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys 14:05:49.0421 0x116c swenum - ok 14:05:49.0437 0x116c [ 8CE882BCC6CF8A62F2B2323D95CB3D01, B408550A581F3DA222355964AFA4E976AD8471F0AA37573C42C4948AE5A23A3B ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys 14:05:49.0437 0x116c swmidi - ok 14:05:49.0453 0x116c SwPrv - ok 14:05:49.0515 0x116c [ 267C914667C94E5F47D342311C1C577F, E4FE7A8E41680E6845AD4D0FEEF4EDA6DACAE7728D2401520175AAD8ED16ABAD ] Symantec RemoteAssist C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe 14:05:49.0515 0x116c Symantec RemoteAssist - ok 14:05:49.0531 0x116c symc810 - ok 14:05:49.0546 0x116c symc8xx - ok 14:05:49.0546 0x116c sym_hi - ok 14:05:49.0562 0x116c sym_u3 - ok 14:05:49.0593 0x116c [ 8B83F3ED0F1688B4958F77CD6D2BF290, 546D3602183702B4F53E84413CFA2C933D64C8540378E54A8DCD148F3F36A2DA ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys 14:05:49.0593 0x116c sysaudio - ok 14:05:49.0609 0x116c [ C7ABBC59B43274B1109DF6B24D617051, 4384CA0AA6CE9B603CF7DB775A3C721E46715D5B120B94FB57DEADAADE18535B ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe 14:05:49.0625 0x116c SysmonLog - ok 14:05:49.0656 0x116c [ 3CB78C17BB664637787C9A1C98F79C38, F35C31F6B7F366CB949D1044B357C76DEC9170441C5E559802794F62B72FD255 ] TapiSrv C:\WINDOWS\System32 apisrv.dll 14:05:49.0656 0x116c TapiSrv - ok 14:05:49.0703 0x116c [ 9AEFA14BD6B182D61E3119FA5F436D3D, EA29E49434585409272E7901AF89771FE9D6E911A7DC44AB3C7020CFF8A44552 ] Tcpip C:\WINDOWS\system32\DRIVERS cpip.sys 14:05:49.0718 0x116c Tcpip - ok 14:05:49.0750 0x116c [ 6471A66807F5E104E4885F5B67349397, F35CBFFB8BB235CCE30EF94A5273333900DD49FD506BF9D55D99A320B8A53A5A ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys 14:05:49.0750 0x116c TDPIPE - ok 14:05:49.0765 0x116c [ C56B6D0402371CF3700EB322EF3AAF61, 7743FA4C734BCE38EFB1CA69BC17364D8421E2CD172F856F7E38E7AE1EE93F2F ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys 14:05:49.0765 0x116c TDTCP - ok 14:05:49.0796 0x116c [ 88155247177638048422893737429D9E, B6D4E8691917946332C2208D01F8C8281978C1AD1E9951C5D99DF0D49AC34B3B ] TermDD C:\WINDOWS\system32\DRIVERS ermdd.sys 14:05:49.0796 0x116c TermDD - ok 14:05:49.0843 0x116c [ FF3477C03BE7201C294C35F684B3479F, D6246521539BA4ACD022D26983182F5E323D2EF1EA7C54265A248C43A1CE5202 ] TermService C:\WINDOWS\System32 ermsrv.dll 14:05:49.0843 0x116c TermService - ok 14:05:49.0890 0x116c [ 99BC0B50F511924348BE19C7C7313BBF, A1006C687BD352F700B140DC741515A0CDD9E1352C0FBD1EE410D404E344444B ] Themes C:\WINDOWS\System32\shsvcs.dll 14:05:49.0890 0x116c Themes - ok 14:05:49.0906 0x116c TosIde - ok 14:05:49.0921 0x116c [ 55BCA12F7F523D35CA3CB833C725F54E, 849FB1AE31B143B14B298BBC0D91230693D41DEB95F46516878F53A7F4186C38 ] TrkWks C:\WINDOWS\system32 rkwks.dll 14:05:49.0921 0x116c TrkWks - ok 14:05:49.0937 0x116c [ 5787B80C2E3C5E2F56C2A233D91FA2C9, 3774905CF77954DFCECDA5BCC7CDE3D0ED72712BFAAD85ADAE5246306447E46C ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys 14:05:49.0953 0x116c Udfs - ok 14:05:49.0953 0x116c ultra - ok 14:05:49.0984 0x116c [ 402DDC88356B1BAC0EE3DD1580C76A31, 32A686595710336A6BFD54C03F552AE39439611662F84EF5D24193AE5665C6F3 ] Update C:\WINDOWS\system32\DRIVERS\update.sys 14:05:50.0000 0x116c Update - ok 14:05:50.0031 0x116c [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91, 7746916DB48E3F5B243B63C066596AD9037A494BF1AD935946DD04AC85D983DF ] upnphost C:\WINDOWS\System32\upnphost.dll 14:05:50.0046 0x116c upnphost - ok 14:05:50.0062 0x116c [ 05365FB38FCA1E98F7A566AAAF5D1815, 16843048CEEC3DAA3B953A12FF1EE339E86783A08F2A56DA7F94AD9F9717D77D ] UPS C:\WINDOWS\System32\ups.exe 14:05:50.0062 0x116c UPS - ok 14:05:50.0093 0x116c [ 65898A183FBF1D1F7759D5CCB364DCD4, 85E823123FDB4CA5F8255064E22A444627999055EC3419DFD001371893F36AB9 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys 14:05:50.0093 0x116c usbaudio - ok 14:05:50.0140 0x116c [ 1B611611C28D2DF25BC057D79C6F13FC, B0D86F63E44B40413BBAE6402CC088046CFAE082D41BBC2ED5A916293356B846 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys 14:05:50.0140 0x116c usbccgp - ok 14:05:50.0156 0x116c [ 4BAC8DF07F1D8434FC640E677A62204E, 76C1351AF6752224BF59DEEE0F8665FE699F3DFD679F5BCD01C7D9383E6402A4 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys 14:05:50.0156 0x116c usbehci - ok 14:05:50.0171 0x116c [ 1AB3CDDE553B6E064D2E754EFE20285C, A99C4528C4227B1E96847614745AAFACD3C5F1BDFE435214DBF78740FFB300FE ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys 14:05:50.0187 0x116c usbhub - ok 14:05:50.0203 0x116c [ 0DAECCE65366EA32B162F85F07C6753B, 3C33AC2FC95E876933F2016CF0CDA2745491679728684DA8DF95A515CE4804BD ] usbohci C:\WINDOWS\system32\DRIVERS\usbohci.sys 14:05:50.0203 0x116c usbohci - ok 14:05:50.0234 0x116c [ A717C8721046828520C9EDF31288FC00, 1530BBE832EDBB0974AD89D723A03FF7A0094B368992D73C2C3E62A181DF1E0A ] usbprint C:\WINDOWS\system32\DRIVERS\usbprint.sys 14:05:50.0234 0x116c usbprint - ok 14:05:50.0265 0x116c [ F8EDE2B6928970DCE3D5614C27D9E7F6, 6E5EBBC8B70C1D593634DAF0C190DEADFDA18C3CBC8F552A76F156F3869EF05B ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys 14:05:50.0265 0x116c usbscan - ok 14:05:50.0281 0x116c [ 84C44D720655A8AA475E57A9E764D675, 2D450199338A217FBD951317812A74223E8B477974C7634667E8896316C3FEA0 ] usbser C:\WINDOWS\system32\DRIVERS\usbser.sys 14:05:50.0281 0x116c usbser - ok 14:05:50.0312 0x116c [ A32426D9B14A089EAA1D922E0C5801A9, ED1DC52EE45F8EAD3AEC4B1F817BB25634141CF48295494C5947DCE6CF7A9817 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 14:05:50.0312 0x116c USBSTOR - ok 14:05:50.0328 0x116c [ 26496F9DEE2D787FC3E61AD54821FFE6, 8BE7FF647470B9A951CBB478FAF83D657A15CC78037F42348A6B738F21D523DA ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys 14:05:50.0328 0x116c usbuhci - ok 14:05:50.0359 0x116c [ 813236B1183CFCF289E367BD5DE6E29E, 167FE18A96F330AEEC1A4C419770C15EFEB536D43838285E51E7A62E95DF4674 ] usbvideo C:\WINDOWS\system32\Drivers\usbvideo.sys 14:0

Utilisateur anonyme · Answer

Re

Le rapport est incomplet.
Pour transmettre le rapport clique sur ce lien : 

 
http://pjjoint.malekal.com/

Si problème utilise un des suivants

https://forums-fec.be/upload 
 https://www.cjoint.com/


Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier (Fichier demandé )
Clique sur Ouvrir. 

Clique sur "Envoyer le fichier". 

Un lien de cette forme : 

http://pjjoint.malekal.com/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.


@+

naelectronic · Answer

Oh.....mon internet ne fonctionne plus!!!!! Je t,ecris d,un laptop que j,ai car j,ai le wifi.........j,essaye de trouver ce qui ne va pas sur mon ordi et des que mon internet refonctionne  ,je t,envoie le rapport
Je pourrais copier ce rapport sur une cle usb  mais j,ai trop peur d,infecter mon laptop!
Je tiens a t,exprimer toute ma reconnaissance pour ton aide...a tres bientot  j,espere

naelectronic · Answer

http://pjjoint.malekal.com/files.php?id=20131211_s7g8s14c13x10

Utilisateur anonyme · Answer

Re

Aucune trace

Dans quel dossiers et fichiers sont ces Rootkits?

@+

naelectronic · Answer

Quand je lance un scan antivirus ,ils sont tellement nombreux que le scan fige une bonne cinquantaine de fois et indique rootkit pendant  plusieurs minutes a chaque fois.....je n,ai pas reussi a atteindre plus que 50%  des fichiers a scanner.....

Ca semble etre lièe avec l,antivirus l,historique de window,je ne sais pas vraiment !J, ai rajoutè des barettes ram il y a environ 1 mois (usages) Mais la semaine derniere j,ai ouvert une image dans hotmail courrier indesirable....peut etre que le rootkit etait la.........
Et puis ce qui arrive c,est que lorsque je suis sur internet, mon pare-feu Mc afee se desactive tout seul......genre 10 ou 20 fois par heure !!

naelectronic · Answer

Qu,est ce que ca ferait si je desinstallais cet antivirus Mc afee ( je sais il est payant et bon pour encore 6 mois,mais de toute facon ca semble etre une cochonnerie vu les problemes qu,il me donne..
Aurais-tu un vrai bon antivirus a me suggerer
Au fait ,je n,ai pas coupè l,alimentation sur mon ordi depuis que j,ai vu le probleme,il y a 5 ou 6 jours maintenant...
J,ai peur qu,en le redemarrant ,plus rien ne fonctionne....
Que penses-tu de tout cela

naelectronic · Answer

Au fait,voulais-tu dire aucune trace de rootkit  ou aucune trace de mon dossier dans ce que je t,ai envoye

Utilisateur anonyme · Answer

Bonjour

1)Pour de plus amples informations, fait ceci stp

Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

en bas de la page ZHP avec un numéro de version.
 
Une fois le téléchargement achevé, 

Double-clique sur l'icône pour lancer le programme.  Sous Vista ; Seven ou Windows 8 clic droit «  exécuter en tant que administrateur » 

 
Dans la fenêtre ZHPDiag qui vient de s'ouvrir,  clique sur "Configurer"

Clique sur  la loupe  en bas à gauche avec le signe plus   pour lancer l'analyse.


Laisse l'outil travailler, il peut être assez long. 

Un rapport s'ouvre. Ce rapport se trouve également sur ton bureau 

Pour transmettre le rapport clique sur ce lien: 
http://pjjoint.malekal.com/

Si problème utilise un des suivants

https://forums-fec.be/upload 
 https://www.cjoint.com/


Regarde sur le bureau
 
Sélectionne le fichier ZHPDiag.txt. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.com/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.

Merci

@+

           --------Contributeur Sécurité---------
On a tous été un jour débutant dans quelque chose.
Mais le savoir est la récompense de l'assiduité.

naelectronic · Answer

Bonjour Guillaume
Tot d,abord un enorme merci pour ton aide!
Est.ce que je ne devrais pas redemarrer mon ordinateur avant de faire ca,vu que ca fait 6 jours ,je pense que je ne l,ai pas redemarrer

Utilisateur anonyme · Answer

Re

Oui ,tu peux prendre le temps de le redémarrer

naelectronic · Answer

Guillaume,est-ce que j,entreprends la restauration comme tu me l,avais mentionnè plus tot ou je passe au ZHP
Au fait,je l,ai redemarrè et ca a bien ete....

Utilisateur anonyme · Answer

Re

Poste moi ce rapport ZHPDiag;merci

De plus je ne t'ai jamais demandé de restaurer

@+

naelectronic · Answer

https://pjjoint.malekal.com/files.php?id=20131212_o7m10m12l7s6

Utilisateur anonyme · Answer

Re

1) Télécharge AdwCleaner ( d'Xplode ) sur ton bureau. 
Lance le, clique sur [Scanner]   puis patiente le temps du scan. 
Une fois le scan terminé clique sur le bouton  [Nettoyer] 
Patiente durant le nettoyage. Lis le message qui apparaît, puis clique sur  Ok  . Le PC va être redémarré automatiquement et le rapport s'ouvrira à la fin du redémarrage. 
Poste le rapport


2)Télécharge Malwaresbytes anti malware ici  
https://www.malwarebytes.com/
 
* Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et  mets le à jour .   

* Potasse le tuto pour te familiariser avec le prg : 

https://forum.pcastuces.com/sujet.asp?f=31&s=3 

(cela dis, il est très simple d'utilisation). 

relance Malwaresbytes en suivant scrupuleusement ces consignes : 

! Déconnecte toi et ferme toutes applications en cours ! 

* Lance Malwarebyte's.   Sous Vista ;Seven ou Windows 8   (clic droit de la souris « exécuter en tant que administrateur »)

*Procèdes à une mise à jour

*Fais un examen dit "Rapide"

--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ). 
--> à la fin tu cliques sur  "Afficher les résultats" "   . 
--> Vérifie que tous les objets infectés soient validés, puis  clique sur " supprimer la sélection "   . 

 Note   : si il faut redémarrer ton PC pour finir le nettoyage, fais le ! 


 Poste le rapport sauvegardé après la suppression des objets infectés   (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

@+

naelectronic · Answer

Excuses-moi,est-ce que c,est bien le  adwcleaner free download version window  pc.file.com adwcleaner

naelectronic · Answer

Je ne suis pas sur d,avoir telecharge le bon adwcleaner........je suis a la page wajam ,j,ai fait next ,puis next mais je n etrouve pas de bouton scan...

Utilisateur anonyme · Answer

Re

Ici:http://general-changelog-team.fr/fr/downloads/view.download/2

@+

naelectronic · Answer

Voila pour le adwcleaner..maintenant je vais passer a la suite comme tu m,as dit...
Michel
 https://pjjoint.malekal.com/files.php?id=20131212_w15f12y11n12g14

naelectronic · Answer

Ca va mal j,ai telecharger malwarebytes mais il a du se passer quelque chose mon ordi est gele et j,arrive plus a rien faire..... je te tiens au courant

naelectronic · Answer

C,est reparti.....par contre j,avais clique sur la version d,essai gratuite...il se peut que ca me demande maintenant d,acheter pour pouvoir nettoyer.......j,ai deja 5 elements detectes en rouge....

naelectronic · Answer

Bon,j,ai eu des sueurs froides.......le Malwarebytes a terminé,il a trouvé 19 fichiers que j,ai effacés...et j,ai redemarré le pc,,et ca a pris au moins 10minutes pour que l,ecran se charge des icones !!!
Je suis maintenant a la recherche du rapport  de malwarebytes........des que j ele trouve ,je l,envoie....

Utilisateur anonyme · Answer

Re

Tu regardes dans Malwaresbytes après l'avoir lancé.
Onglet rapports/logs

@+

naelectronic · Answer

https://pjjoint.malekal.com/files.php?id=20131212_u10t11e13m14g8

Utilisateur anonyme · Answer

Re

Tu n'as pas tout supprimé !!!
Tu reprends une analyse rapide;merci

@+

naelectronic · Answer

Si j,ai supprime les 19 fichiers..desole,je ne savais pas!!!!..reprendre une analyse avec malwarebytes

Utilisateur anonyme · Answer

Re

Ce n'est pas ce que le rapport montre !!

@+

naelectronic · Answer

Voila,il n,a rien trouvé... https://pjjoint.malekal.com/files.php?id=20131212_z10v11z7j15z5

Utilisateur anonyme · Answer

Re

Poste moi un nouveau rapport ZHPDiag;merci

@+

naelectronic · Answer

https://pjjoint.malekal.com/files.php?id=20131212_p5x10m8u12g5

Est-ce que je peux passer l,antivirus maintenant? J,ai des fichiers bonjour, dois-je absolument les gardés?
Mes remerciements les plus sinceres pour ta precieuse aide!
Puis-je encore te demander quelque chose.J,ai une clé usb de 64G vierge. J,aimerais faire une sauvegarde complete de tout mon systeme et de mon pc..comment dois-je proceder ,s,il te plait
Michel

Utilisateur anonyme · Answer

Re

Utilisation de l'outil ZHPFix : 

* Copie  tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 

Script ZHPFix
ShortcutFix
G2 - GCE: Preference [User Data\Default] [flpcjncodpafbgdpnkljologafpionhb] Managera v.0.1 (Activé)     
O42 - Logiciel: ViewPassword - (.ViewPassword Software.) [HKLM] -- {2cdc4922-d450-41eb-b3eb-70fe57d334ce}  
[HKCU\Software\BearShare]  
[HKCU\Software\ViewPassword]  
O43 - CFD: 2011-11-11 - 14:12:01 - [74,317] ----D C:\Documents and Settings\Michel\Local Settings\Application Data\BearShare  
O47 - AAKE:Key Export SP - "C:\Program Files\BearShare Applications\BearShare\BearShare.exe" [Enabled] .(...) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe (.not file.)  
O47 - AAKE:Key Export DP - "C:\Program Files\BearShare Applications\BearShare\BearShare.exe" [Enabled] .(...) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe (.not file.)  
O61 - LFC: 2013-12-12 - 12:21:07 ---A- . (...) -- C:\Documents and Settings\Michel\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_static.live-lyrics.com_0.localstorage   [2344960]  
O61 - LFC: 2013-12-12 - 12:21:07 ---A- . (...) -- C:\Documents and Settings\Michel\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_static.live-lyrics.com_0.localstorage-journal   [16384]  
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2cdc4922-d450-41eb-b3eb-70fe57d334ce}]    
C:\Documents and Settings\Michel\Local Settings\Application Data\BearShare    
[HKCU\Software\BearShare]    
[HKCU\Software\ViewPassword]    
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Orphan key     
O39 - APT:Automatic Planified Task  - C:\WINDOWS\Tasks\Registry Cleaner Pro_scan_schedule_task_2e0ba364-dcdf-450c-bb16-df4a85a48b2d.job   [368] 
OPT:O4 - HKLM\..\Run: [HPHUPD06] . (.Hewlett-Packard - HPHupd06.) -- c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe 

FirewallRAZ
Emptytemp
EmptyCLSID

--------------------------------------------------------------------------------------------
Lance ZHPFix à partir du raccourci sur ton Bureau (si tu es sous Windows Vista ou Windows 7 ou 8, fais le par un clic-droit --> Exécuter en tant qu'administrateur) 

Cliquer sur le bouton  Importer. Le contenu du Presse-papier vient se coller dans la zone de saisie de ZHPFix

 NB (W8)   : Dans certains cas le script se colle automatiquement dans la zone de script et ne nécessite pas de cliquer sur le bouton "IMPORTER".
 
* Clique sur le bouton GO  pour lancer le nettoyage.

-> laisse travailler l'outil et ne touche à rien ... 
-> S'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le ! 


Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ... 
Ce rapport est copié sur le bureau

( ce rapport est en outre sauvegardé dans ce dossier : 
- Pour XP : C:\Documents and Settings\username\Local Settings\Application Data\ZHP
- Depuis Vista : C:\Users\username\AppData\Roaming\ZHP\ZHPFix [R1].txt)


@+

naelectronic · Answer

Guillaume j,ai passè le ZHP fix mais a la fin il me demande si je veux jeter tout a la corbeille ou pas

naelectronic · Answer

Je voulais dire ,a la fin du zhp fix il est ecrit    you confirm the clean up to the recycle bin
Je n evoudrais pas faire une betise......donc j,envoie les residus du zhp fix a la corbeille puis je vide la corbeille...c,est bien ca

naelectronic · Answer

https://pjjoint.malekal.com/files.php?id=20131212_b9u5i8d11j5

Mon internet est vraiment vraiment lent.......

Utilisateur anonyme · Answer

Re

C'est peut être tout simplement ta connexion Internet.

Je te propose donc de mettre ce sujet en résolu,si tu n'as plus de rootkits

@+

naelectronic · Answer

C,est desesperant, je viens de lancer un scan par l,antivirus mcafee  et il plante encore et s,arrete sur rootkit !!!!!!!!!!!!!!!!

La seule chose que je peux voir  c,est que je suis allè manger pendant que le zhp fix etait en operation et en revenant j,ai vu qu,un scan automatique etait en route...s,il en restait 1 ou 2 ,est ce que ca a pu le repandre encore ailleurs et le multiplier

naelectronic · Answer

https://pjjoint.malekal.com/files.php?id=20131212_i9k8n7v10o8

Alors,est-il encore infecté

naelectronic · Answer

Je n,arrive pas a avoir un rapport car je n,arrive pas a avoir un scan complet........rootkit s,affiche tellement souvent
On dirait que le fait de passer l,antivirus,ca multiplie les rootkits
Est-ce que je ne pourrais pas plutot installer un autre antivirus (genre avast) et faire le scan avec lui

naelectronic · Answer

Aie.......au secours Guillaume.....j,ai telechargè Avast (j,avais deja Mcafee total protection) d,installè....
et la l,ordi est plantè sur une page blanche...surement un conflit..............que dois-je faire

Utilisateur anonyme · Answer

Bonjour

Tu n'as fait que télécharger Avast?

@+

naelectronic · Answer

Bonjour Guillaume
Oui c,est a la toute fin du telechargement qu,il a completement plantè.meme ctr-alt-del ne faisait rien. Donc ,j,ai tenu le bouton on-off
Donc maintenant que me conseilles-tu de faire. Demarrage sans echec ,peut etre mais comment je supprime avast apres ca

Utilisateur anonyme · Answer

Bonjour

Je te conseillerais d'aller voir un dépanneur en informatique.

@+

naelectronic · Answer

J,ai remis le courant sur mon ordi pour voir........Et tout est reparti..!!!! comme si de rien n,etait.....
Donc,est ce que j epeux avoir dans l,ordi Mc afee antivirus total protection  et avast

naelectronic · Answer

Donc me conseillerais-tu d,enlever Mcafee ou avast

Mon ordinateur est infectè de rootkits

52 réponses

Discussions similaires

Newsletters