Virus inconnu
Bonjour,
Un virus vient de faire son apparition sur mon ordi, un fenêtre (spam) avec ecrit system check s'est ouverte et est devenu impossible a fermer.
De plus une 20ene de fenêtres s'ouvrent avec écrit:
failed to save all components for the file file\\system32\\00000f86 (cette partie diffère)
De plus une autre fenentre s'est ouverte avec ecrit File indexation process failed.
Toutes les 5 min un message d'erreur apparait me disant "hardrive clutcher partly dammage"
Encore une chose, mon bureau a disparu, il ne reste plus que la corbeille.
Dernier point Avast plante dès que je lance des scans.
Bref, si quelqu'un pouvait m'aider se serait super.
D'avance merci
Un virus vient de faire son apparition sur mon ordi, un fenêtre (spam) avec ecrit system check s'est ouverte et est devenu impossible a fermer.
De plus une 20ene de fenêtres s'ouvrent avec écrit:
failed to save all components for the file file\\system32\\00000f86 (cette partie diffère)
De plus une autre fenentre s'est ouverte avec ecrit File indexation process failed.
Toutes les 5 min un message d'erreur apparait me disant "hardrive clutcher partly dammage"
Encore une chose, mon bureau a disparu, il ne reste plus que la corbeille.
Dernier point Avast plante dès que je lance des scans.
Bref, si quelqu'un pouvait m'aider se serait super.
D'avance merci
5 réponses
-
ModérateurImportant - ton infection est venue par un exploit sur site web :
Un exploit sur site WEB permet l'infection de ton ordinateur de manière automatiquement à la visite d'un site WEB qui a été hacké, il tire partie du fait que tu as des logiciels (Java, Adobe Reader etc) qui sont pas à jour et possèdent des vulnérabilités qui permettent l'execution de code (malicieux dans notre cas) à ton insu.
Le fait de ne pas avoir des logiciels à jour et qui ont potentiellement des vulnérabilités permettent donc d'infecter ton système.
Exemple avec : Exploit Java
IMPORTANT : mettre à jour tes programmes notamment Java/Adobe Reader et Flash :
/faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
https://forum.malekal.com/viewtopic.php?t=15960&start=
Passe le mot à tes amis ! -
ModérateurRelance OTL.
o sous Personnalisation, copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction, un rapport apparraitra, copie/colle le contenu ici:
:OTL
[2012/01/24 05:31:52 | 000,000,629 | ---- | M] () -- C:\Users\lucile\Application Data\Microsoft\Internet Explorer\Quick Launch\System Check.lnk
[2012/01/24 05:20:58 | 000,000,456 | ---- | M] () -- C:\ProgramData\2lmW3Z5ADnC6rX
[2012/01/24 05:20:37 | 000,000,296 | -H-- | M] () -- C:\ProgramData\~2lmW3Z5ADnC6rX
[2012/01/24 05:20:37 | 000,000,184 | -H-- | M] () -- C:\ProgramData\~2lmW3Z5ADnC6rXr
[2012/01/01 19:53:02 | 021,073,936 | ---- | M] () -- C:\Users\lucile\Documents\vlc-1.1.11-win32.exe
* redemarre le pc sous windows et poste le rapport ici-
rapport avant de redémarrer:
========== OTL ==========
C:\Users\lucile\Application Data\Microsoft\Internet Explorer\Quick Launch\System Check.lnk moved successfully.
C:\ProgramData\2lmW3Z5ADnC6rX moved successfully.
C:\ProgramData\~2lmW3Z5ADnC6rX moved successfully.
C:\ProgramData\~2lmW3Z5ADnC6rXr moved successfully.
C:\Users\lucile\Documents\vlc-1.1.11-win32.exe moved successfully.
OTL by OldTimer - Version 3.2.31.0 log created on 01252012_070309
-
-
Rapport RogueKiller:
RogueKiller V6.2.4 [12/01/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: https://www.luanagames.com/index.fr.html
Blog: http://tigzyrk.blogspot.com
Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Demarrage : Mode normal
Utilisateur: lucile [Droits d'admin]
Mode: Raccourcis RAZ -- Date : 24/01/2012 21:38:17
¤¤¤ Processus malicieux: 0 ¤¤¤
¤¤¤ Driver: [LOADED] ¤¤¤
Attributs de fichiers restaures:
Bureau: Success 15 / Fail 0
Lancement rapide: Success 2 / Fail 0
Programmes: Success 10 / Fail 0
Menu demarrer: Success 54 / Fail 0
Dossier utilisateur: Success 4338 / Fail 0
Mes documents: Success 1050 / Fail 0
Mes favoris: Success 44 / Fail 0
Mes images: Success 1392 / Fail 0
Ma musique: Success 412 / Fail 0
Mes videos: Success 2 / Fail 0
Disques locaux: Success 1777 / Fail 0
Sauvegarde: [FOUND] Success 0 / Fail 1
Lecteurs:
[C:] \Device\HarddiskVolume2 -- 0x3 --> Restored
[D:] \Device\HarddiskVolume3 -- 0x3 --> Restored
[E:] \Device\CdRom0 -- 0x5 --> Skipped
¤¤¤ Infection : Rogue.FakeHDD ¤¤¤
Termine : << RKreport[1].txt >>
RKreport[1].txt -
Modérateurok si jamais tu as perdu tes raccourcis etc.
Télécharge RogueKiller : https://www.luanagames.com/index.fr.html
Lances en option 6.
Poste le rapport ici.
~~
puis :
Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/
* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)
* Lance OTL
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\*.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
consrv.dll
explorer.exe
winlogon.exe
wininit.exe
/md5stop
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
CREATERESTOREPOINT
nslookup www.google.fr /c
SAVEMBR:0
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
* Clique sur le bouton Analyse.
* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent), donne le ou les liens pjjoint qui pointent vers ces rapports ici dans un nouveau message.
-
ModérateurSalut,
Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start=
Lire ce qui est écrit au niveau des suppressions/réparation (delete et cure), ne pas supprimer n'importe quoi.
Poste le rapport ici.-
merci pour ta reponse, voici le rapport:
17:22:37.0410 6104 TDSS rootkit removing tool 2.7.7.0 Jan 24 2012 16:44:27
17:22:37.0632 6104 ============================================================
17:22:37.0632 6104 Current date / time: 2012/01/24 17:22:37.0632
17:22:37.0632 6104 SystemInfo:
17:22:37.0632 6104
17:22:37.0632 6104 OS Version: 6.0.6002 ServicePack: 2.0
17:22:37.0632 6104 Product type: Workstation
17:22:37.0632 6104 ComputerName: PC-DE
17:22:37.0632 6104 UserName: lucile
17:22:37.0632 6104 Windows directory: C:\Windows
17:22:37.0632 6104 System windows directory: C:\Windows
17:22:37.0632 6104 Processor architecture: Intel x86
17:22:37.0632 6104 Number of processors: 2
17:22:37.0632 6104 Page size: 0x1000
17:22:37.0632 6104 Boot type: Normal boot
17:22:37.0633 6104 ============================================================
17:22:38.0362 6104 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
17:22:38.0455 6104 Initialize success
17:22:45.0113 4404 ============================================================
17:22:45.0114 4404 Scan started
17:22:45.0114 4404 Mode: Manual;
17:22:45.0114 4404 ============================================================
17:22:45.0924 4404 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
17:22:45.0930 4404 ACPI - ok
17:22:46.0006 4404 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
17:22:46.0015 4404 adp94xx - ok
17:22:46.0101 4404 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
17:22:46.0109 4404 adpahci - ok
17:22:46.0165 4404 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
17:22:46.0169 4404 adpu160m - ok
17:22:46.0247 4404 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
17:22:46.0251 4404 adpu320 - ok
17:22:46.0385 4404 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
17:22:46.0393 4404 AFD - ok
17:22:46.0490 4404 AgereSoftModem (ce91b158fa490cf4c4d487a4130f4660) C:\Windows\system32\DRIVERS\AGRSM.sys
17:22:46.0510 4404 AgereSoftModem - ok
17:22:46.0609 4404 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
17:22:46.0612 4404 agp440 - ok
17:22:46.0662 4404 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
17:22:46.0665 4404 aic78xx - ok
17:22:46.0700 4404 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
17:22:46.0702 4404 aliide - ok
17:22:46.0733 4404 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
17:22:46.0736 4404 amdagp - ok
17:22:46.0831 4404 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
17:22:46.0833 4404 amdide - ok
17:22:46.0878 4404 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
17:22:46.0881 4404 AmdK7 - ok
17:22:46.0908 4404 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
17:22:46.0910 4404 AmdK8 - ok
17:22:47.0030 4404 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
17:22:47.0033 4404 arc - ok
17:22:47.0091 4404 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
17:22:47.0095 4404 arcsas - ok
17:22:47.0200 4404 aswFsBlk (054df24c92b55427e0757cfff160e4f2) C:\Windows\system32\drivers\aswFsBlk.sys
17:22:47.0202 4404 aswFsBlk - ok
17:22:47.0251 4404 aswMonFlt (258143605e77e4008f1758481d6a977d) C:\Windows\system32\drivers\aswMonFlt.sys
17:22:47.0253 4404 aswMonFlt - ok
17:22:47.0338 4404 aswRdr (352d5a48ebab35a7693b048679304831) C:\Windows\system32\drivers\aswRdr.sys
17:22:47.0341 4404 aswRdr - ok
17:22:47.0435 4404 aswSnx (8d34d2b24297e27d93e847319abfdec4) C:\Windows\system32\drivers\aswSnx.sys
17:22:47.0444 4404 aswSnx - ok
17:22:47.0530 4404 aswSP (010012597333da1f46c3243f33f8409e) C:\Windows\system32\drivers\aswSP.sys
17:22:47.0536 4404 aswSP - ok
17:22:47.0607 4404 aswTdi (f9f84364416658e9786235904d448d37) C:\Windows\system32\drivers\aswTdi.sys
17:22:47.0609 4404 aswTdi - ok
17:22:47.0755 4404 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
17:22:47.0757 4404 AsyncMac - ok
17:22:47.0826 4404 atapi (2d9c903dc76a66813d350a562de40ed9) C:\Windows\system32\drivers\atapi.sys
17:22:47.0828 4404 atapi - ok
17:22:47.0953 4404 athr (f32fee7cb2ee32c1f808409bc8019701) C:\Windows\system32\DRIVERS\athr.sys
17:22:47.0972 4404 athr - ok
17:22:48.0108 4404 bcm4sbxp (08015d34f6fdd0b355805bad978497c3) C:\Windows\system32\DRIVERS\bcm4sbxp.sys
17:22:48.0110 4404 bcm4sbxp - ok
17:22:48.0146 4404 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
17:22:48.0147 4404 Beep - ok
17:22:48.0285 4404 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
17:22:48.0288 4404 blbdrive - ok
17:22:48.0368 4404 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
17:22:48.0371 4404 bowser - ok
17:22:48.0478 4404 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
17:22:48.0479 4404 BrFiltLo - ok
17:22:48.0504 4404 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
17:22:48.0506 4404 BrFiltUp - ok
17:22:48.0537 4404 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
17:22:48.0540 4404 Brserid - ok
17:22:48.0565 4404 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
17:22:48.0567 4404 BrSerWdm - ok
17:22:48.0667 4404 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
17:22:48.0669 4404 BrUsbMdm - ok
17:22:48.0694 4404 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
17:22:48.0696 4404 BrUsbSer - ok
17:22:48.0746 4404 BthEnum (da7b195275bda7f8fcf79b40e0f45dde) C:\Windows\system32\DRIVERS\BthEnum.sys
17:22:48.0748 4404 BthEnum - ok
17:22:48.0850 4404 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
17:22:48.0853 4404 BTHMODEM - ok
17:22:48.0906 4404 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys
17:22:48.0909 4404 BthPan - ok
17:22:49.0027 4404 BTHPORT (671134053d59e23704f08db19f11e10b) C:\Windows\system32\Drivers\BTHport.sys
17:22:49.0034 4404 BTHPORT - ok
17:22:49.0075 4404 BTHUSB (93d7007e2c660dfcca6ae72622740b14) C:\Windows\system32\Drivers\BTHUSB.sys
17:22:49.0077 4404 BTHUSB - ok
17:22:49.0228 4404 btwaudio (3ea1a20dc0ca1ad23e7aa8c37a91bcd1) C:\Windows\system32\drivers\btwaudio.sys
17:22:49.0232 4404 btwaudio - ok
17:22:49.0294 4404 btwavdt (195872e48a7fb01f8bc9b800f70f4054) C:\Windows\system32\drivers\btwavdt.sys
17:22:49.0297 4404 btwavdt - ok
17:22:49.0399 4404 btwrchid (0724e7d6c9b6a289eddda33fa8176e80) C:\Windows\system32\DRIVERS\btwrchid.sys
17:22:49.0401 4404 btwrchid - ok
17:22:49.0445 4404 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
17:22:49.0449 4404 cdfs - ok
17:22:49.0555 4404 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
17:22:49.0558 4404 cdrom - ok
17:22:49.0605 4404 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
17:22:49.0608 4404 circlass - ok
17:22:49.0667 4404 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
17:22:49.0675 4404 CLFS - ok
17:22:49.0801 4404 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
17:22:49.0803 4404 CmBatt - ok
17:22:49.0841 4404 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
17:22:49.0843 4404 cmdide - ok
17:22:49.0871 4404 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
17:22:49.0874 4404 Compbatt - ok
17:22:49.0888 4404 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
17:22:49.0889 4404 crcdisk - ok
17:22:49.0921 4404 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
17:22:49.0923 4404 Crusoe - ok
17:22:50.0033 4404 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
17:22:50.0036 4404 DfsC - ok
17:22:50.0175 4404 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
17:22:50.0177 4404 disk - ok
17:22:50.0234 4404 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
17:22:50.0235 4404 drmkaud - ok
17:22:50.0353 4404 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
17:22:50.0364 4404 DXGKrnl - ok
17:22:50.0411 4404 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
17:22:50.0415 4404 E1G60 - ok
17:22:50.0551 4404 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
17:22:50.0554 4404 Ecache - ok
17:22:50.0613 4404 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
17:22:50.0622 4404 elxstor - ok
17:22:50.0733 4404 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
17:22:50.0735 4404 ErrDev - ok
17:22:50.0818 4404 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
17:22:50.0822 4404 exfat - ok
17:22:50.0927 4404 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
17:22:50.0932 4404 fastfat - ok
17:22:50.0980 4404 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
17:22:50.0982 4404 fdc - ok
17:22:51.0113 4404 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
17:22:51.0116 4404 FileInfo - ok
17:22:51.0147 4404 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
17:22:51.0149 4404 Filetrace - ok
17:22:51.0182 4404 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
17:22:51.0184 4404 flpydisk - ok
17:22:51.0223 4404 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
17:22:51.0229 4404 FltMgr - ok
17:22:51.0356 4404 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\Windows\system32\DRIVERS\fssfltr.sys
17:22:51.0359 4404 fssfltr - ok
17:22:51.0424 4404 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
17:22:51.0426 4404 Fs_Rec - ok
17:22:51.0524 4404 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
17:22:51.0527 4404 gagp30kx - ok
17:22:51.0605 4404 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
17:22:51.0612 4404 HdAudAddService - ok
17:22:51.0722 4404 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
17:22:51.0735 4404 HDAudBus - ok
17:22:51.0781 4404 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
17:22:51.0783 4404 HidBth - ok
17:22:51.0866 4404 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
17:22:51.0868 4404 HidIr - ok
17:22:51.0913 4404 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
17:22:51.0916 4404 HidUsb - ok
17:22:52.0004 4404 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
17:22:52.0006 4404 HpCISSs - ok
17:22:52.0123 4404 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
17:22:52.0133 4404 HTTP - ok
17:22:52.0171 4404 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
17:22:52.0173 4404 i2omp - ok
17:22:52.0267 4404 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
17:22:52.0270 4404 i8042prt - ok
17:22:52.0618 4404 ialm (dce0b53570703cce580d066f89ef58cd) C:\Windows\system32\DRIVERS\igdkmd32.sys
17:22:52.0862 4404 ialm - ok
17:22:52.0966 4404 iaStor (f263a9036f8897ffa2ae54685e03ad60) C:\Windows\system32\DRIVERS\iaStor.sys
17:22:52.0969 4404 iaStor - ok
17:22:53.0018 4404 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
17:22:53.0023 4404 iaStorV - ok
17:22:53.0377 4404 igfx (dce0b53570703cce580d066f89ef58cd) C:\Windows\system32\DRIVERS\igdkmd32.sys
17:22:53.0477 4404 igfx - ok
17:22:53.0713 4404 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
17:22:53.0715 4404 iirsp - ok
17:22:53.0821 4404 IntcAzAudAddService (ffd2b3bc042596abe785d3c15f51ab46) C:\Windows\system32\drivers\RTKVHDA.sys
17:22:53.0848 4404 IntcAzAudAddService - ok
17:22:53.0954 4404 IntcHdmiAddService (ab8b0206bcdff0ed03cec500fa03a32a) C:\Windows\system32\drivers\IntcHdmi.sys
17:22:53.0957 4404 IntcHdmiAddService - ok
17:22:54.0002 4404 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
17:22:54.0003 4404 intelide - ok
17:22:54.0090 4404 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
17:22:54.0092 4404 intelppm - ok
17:22:54.0147 4404 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:22:54.0150 4404 IpFilterDriver - ok
17:22:54.0228 4404 IpInIp - ok
17:22:54.0260 4404 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
17:22:54.0263 4404 IPMIDRV - ok
17:22:54.0297 4404 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
17:22:54.0301 4404 IPNAT - ok
17:22:54.0342 4404 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
17:22:54.0344 4404 IRENUM - ok
17:22:54.0447 4404 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
17:22:54.0450 4404 isapnp - ok
17:22:54.0495 4404 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
17:22:54.0499 4404 iScsiPrt - ok
17:22:54.0531 4404 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
17:22:54.0533 4404 iteatapi - ok
17:22:54.0638 4404 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
17:22:54.0640 4404 iteraid - ok
17:22:54.0666 4404 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
17:22:54.0668 4404 kbdclass - ok
17:22:54.0705 4404 kbdhid (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\drivers\kbdhid.sys
17:22:54.0706 4404 kbdhid - ok
17:22:54.0816 4404 KMDFMEMIO (ebc507f129df8f0e0ca270dcfc0cf87f) C:\Windows\system32\DRIVERS\kmdfmemio.sys
17:22:54.0818 4404 KMDFMEMIO - ok
17:22:54.0861 4404 KSecDD (2b2f1638466e8cb091400c9019cc730e) C:\Windows\system32\Drivers\ksecdd.sys
17:22:54.0870 4404 KSecDD - ok
17:22:54.0997 4404 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
17:22:54.0999 4404 lltdio - ok
17:22:55.0050 4404 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
17:22:55.0055 4404 LSI_FC - ok
17:22:55.0086 4404 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
17:22:55.0089 4404 LSI_SAS - ok
17:22:55.0191 4404 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
17:22:55.0195 4404 LSI_SCSI - ok
17:22:55.0238 4404 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
17:22:55.0242 4404 luafv - ok
17:22:55.0360 4404 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\Windows\system32\drivers\mbam.sys
17:22:55.0363 4404 MBAMProtector - ok
17:22:55.0420 4404 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
17:22:55.0423 4404 megasas - ok
17:22:55.0535 4404 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
17:22:55.0544 4404 MegaSR - ok
17:22:55.0585 4404 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
17:22:55.0587 4404 Modem - ok
17:22:55.0685 4404 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
17:22:55.0687 4404 monitor - ok
17:22:55.0730 4404 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
17:22:55.0733 4404 mouclass - ok
17:22:55.0760 4404 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
17:22:55.0763 4404 mouhid - ok
17:22:55.0795 4404 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
17:22:55.0797 4404 MountMgr - ok
17:22:55.0908 4404 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
17:22:55.0911 4404 mpio - ok
17:22:55.0934 4404 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
17:22:55.0936 4404 mpsdrv - ok
17:22:55.0992 4404 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
17:22:55.0994 4404 Mraid35x - ok
17:22:56.0084 4404 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
17:22:56.0087 4404 MRxDAV - ok
17:22:56.0127 4404 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
17:22:56.0130 4404 mrxsmb - ok
17:22:56.0236 4404 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:22:56.0241 4404 mrxsmb10 - ok
17:22:56.0252 4404 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:22:56.0256 4404 mrxsmb20 - ok
17:22:56.0297 4404 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
17:22:56.0299 4404 msahci - ok
17:22:56.0324 4404 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
17:22:56.0328 4404 msdsm - ok
17:22:56.0423 4404 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
17:22:56.0425 4404 Msfs - ok
17:22:56.0482 4404 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
17:22:56.0483 4404 msisadrv - ok
17:22:56.0535 4404 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
17:22:56.0537 4404 MSKSSRV - ok
17:22:56.0628 4404 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
17:22:56.0630 4404 MSPCLOCK - ok
17:22:56.0699 4404 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
17:22:56.0701 4404 MSPQM - ok
17:22:56.0750 4404 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
17:22:56.0755 4404 MsRPC - ok
17:22:56.0836 4404 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
17:22:56.0838 4404 mssmbios - ok
17:22:56.0901 4404 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
17:22:56.0903 4404 MSTEE - ok
17:22:56.0951 4404 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
17:22:56.0954 4404 Mup - ok
17:22:57.0062 4404 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
17:22:57.0067 4404 NativeWifiP - ok
17:22:57.0189 4404 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
17:22:57.0201 4404 NDIS - ok
17:22:57.0272 4404 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
17:22:57.0275 4404 NdisTapi - ok
17:22:57.0342 4404 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
17:22:57.0345 4404 Ndisuio - ok
17:22:57.0393 4404 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
17:22:57.0398 4404 NdisWan - ok
17:22:57.0468 4404 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
17:22:57.0471 4404 NDProxy - ok
17:22:57.0549 4404 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
17:22:57.0552 4404 NetBIOS - ok
17:22:57.0633 4404 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
17:22:57.0639 4404 netbt - ok
17:22:57.0812 4404 NETw3v32 (35d5458d9a1b26b2005abffbf4c1c5e7) C:\Windows\system32\DRIVERS\NETw3v32.sys
17:22:57.0865 4404 NETw3v32 - ok
17:22:57.0973 4404 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
17:22:57.0977 4404 nfrd960 - ok
17:22:58.0032 4404 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
17:22:58.0035 4404 Npfs - ok
17:22:58.0136 4404 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
17:22:58.0139 4404 nsiproxy - ok
17:22:58.0207 4404 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
17:22:58.0234 4404 Ntfs - ok
17:22:58.0330 4404 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
17:22:58.0333 4404 ntrigdigi - ok
17:22:58.0357 4404 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
17:22:58.0360 4404 Null - ok
17:22:58.0396 4404 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
17:22:58.0401 4404 nvraid - ok
17:22:58.0500 4404 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
17:22:58.0502 4404 nvstor - ok
17:22:58.0529 4404 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
17:22:58.0533 4404 nv_agp - ok
17:22:58.0546 4404 NwlnkFlt - ok
17:22:58.0562 4404 NwlnkFwd - ok
17:22:58.0696 4404 ohci1394 (790e27c3db53410b40ff9ef2fd10a1d9) C:\Windows\system32\DRIVERS\ohci1394.sys
17:22:58.0701 4404 ohci1394 - ok
17:22:58.0866 4404 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
17:22:58.0870 4404 Parport - ok
17:22:58.0929 4404 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
17:22:58.0932 4404 partmgr - ok
17:22:59.0052 4404 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
17:22:59.0054 4404 Parvdm - ok
17:22:59.0090 4404 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
17:22:59.0096 4404 pci - ok
17:22:59.0198 4404 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
17:22:59.0201 4404 pciide - ok
17:22:59.0254 4404 pcmcia (b7c5a8769541900f6dfa6fe0c5e4d513) C:\Windows\system32\DRIVERS\pcmcia.sys
17:22:59.0260 4404 pcmcia - ok
17:22:59.0405 4404 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
17:22:59.0426 4404 PEAUTH - ok
17:22:59.0591 4404 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
17:22:59.0594 4404 PptpMiniport - ok
17:22:59.0623 4404 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
17:22:59.0626 4404 Processor - ok
17:22:59.0680 4404 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
17:22:59.0684 4404 PSched - ok
17:22:59.0825 4404 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
17:22:59.0852 4404 ql2300 - ok
17:22:59.0958 4404 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
17:22:59.0962 4404 ql40xx - ok
17:22:59.0996 4404 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
17:22:59.0999 4404 QWAVEdrv - ok
17:23:00.0024 4404 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
17:23:00.0026 4404 RasAcd - ok
17:23:00.0054 4404 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
17:23:00.0058 4404 Rasl2tp - ok
17:23:00.0170 4404 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
17:23:00.0172 4404 RasPppoe - ok
17:23:00.0188 4404 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
17:23:00.0191 4404 RasSstp - ok
17:23:00.0218 4404 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
17:23:00.0223 4404 rdbss - ok
17:23:00.0323 4404 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
17:23:00.0325 4404 RDPCDD - ok
17:23:00.0357 4404 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
17:23:00.0362 4404 rdpdr - ok
17:23:00.0453 4404 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
17:23:00.0455 4404 RDPENCDD - ok
17:23:00.0509 4404 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
17:23:00.0513 4404 RDPWD - ok
17:23:00.0646 4404 RFCOMM (10536b0ad6f416fc7f1149977c28ccdc) C:\Windows\system32\DRIVERS\rfcomm.sys
17:23:00.0648 4404 RFCOMM - ok
17:23:00.0696 4404 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
17:23:00.0699 4404 rspndr - ok
17:23:00.0828 4404 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
17:23:00.0832 4404 sbp2port - ok
17:23:00.0874 4404 sdbus (126ea89bcc413ee45e3004fb0764888f) C:\Windows\system32\DRIVERS\sdbus.sys
17:23:00.0877 4404 sdbus - ok
17:23:00.0910 4404 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
17:23:00.0912 4404 secdrv - ok
17:23:01.0020 4404 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
17:23:01.0023 4404 Serenum - ok
17:23:01.0055 4404 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
17:23:01.0058 4404 Serial - ok
17:23:01.0082 4404 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
17:23:01.0084 4404 sermouse - ok
17:23:01.0208 4404 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
17:23:01.0210 4404 sffdisk - ok
17:23:01.0233 4404 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
17:23:01.0237 4404 sffp_mmc - ok
17:23:01.0263 4404 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
17:23:01.0266 4404 sffp_sd - ok
17:23:01.0293 4404 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
17:23:01.0295 4404 sfloppy - ok
17:23:01.0420 4404 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
17:23:01.0424 4404 sisagp - ok
17:23:01.0466 4404 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
17:23:01.0469 4404 SiSRaid2 - ok
17:23:01.0504 4404 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
17:23:01.0508 4404 SiSRaid4 - ok
17:23:01.0645 4404 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
17:23:01.0649 4404 Smb - ok
17:23:01.0713 4404 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
17:23:01.0716 4404 spldr - ok
17:23:01.0813 4404 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
17:23:01.0820 4404 srv - ok
17:23:01.0901 4404 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
17:23:01.0907 4404 srv2 - ok
17:23:01.0942 4404 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
17:23:01.0946 4404 srvnet - ok
17:23:02.0055 4404 ss_bbus (3f0164fbc0bd1adbd02df9759181451a) C:\Windows\system32\DRIVERS\ss_bbus.sys
17:23:02.0059 4404 ss_bbus - ok
17:23:02.0100 4404 ss_bmdfl (b89d62206034e5fe573c80a24dd55675) C:\Windows\system32\DRIVERS\ss_bmdfl.sys
17:23:02.0103 4404 ss_bmdfl - ok
17:23:02.0140 4404 ss_bmdm (1ed0fcea586fe2a416ee15196e5631dd) C:\Windows\system32\DRIVERS\ss_bmdm.sys
17:23:02.0145 4404 ss_bmdm - ok
17:23:02.0238 4404 ss_bserd (994d2e5378cc337ec7dd73c1e04fcaa4) C:\Windows\system32\DRIVERS\ss_bserd.sys
17:23:02.0242 4404 ss_bserd - ok
17:23:02.0299 4404 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
17:23:02.0302 4404 swenum - ok
17:23:02.0346 4404 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
17:23:02.0349 4404 Symc8xx - ok
17:23:02.0417 4404 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
17:23:02.0419 4404 Sym_hi - ok
17:23:02.0437 4404 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
17:23:02.0439 4404 Sym_u3 - ok
17:23:02.0507 4404 SynTP (451e8037e2eb6da6bdf0a66f65d1810b) C:\Windows\system32\DRIVERS\SynTP.sys
17:23:02.0511 4404 SynTP - ok
17:23:02.0646 4404 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys
17:23:02.0663 4404 Tcpip - ok
17:23:02.0700 4404 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys
17:23:02.0707 4404 Tcpip6 - ok
17:23:02.0745 4404 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
17:23:02.0747 4404 tcpipreg - ok
17:23:02.0824 4404 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
17:23:02.0826 4404 TDPIPE - ok
17:23:02.0854 4404 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
17:23:02.0855 4404 TDTCP - ok
17:23:02.0913 4404 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
17:23:02.0919 4404 tdx - ok
17:23:02.0996 4404 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
17:23:02.0998 4404 TermDD - ok
17:23:03.0058 4404 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
17:23:03.0060 4404 tssecsrv - ok
17:23:03.0108 4404 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
17:23:03.0109 4404 tunmp - ok
17:23:03.0185 4404 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
17:23:03.0187 4404 tunnel - ok
17:23:03.0223 4404 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
17:23:03.0225 4404 uagp35 - ok
17:23:03.0269 4404 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
17:23:03.0274 4404 udfs - ok
17:23:03.0362 4404 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
17:23:03.0364 4404 uliagpkx - ok
17:23:03.0433 4404 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
17:23:03.0439 4404 uliahci - ok
17:23:03.0503 4404 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
17:23:03.0506 4404 UlSata - ok
17:23:03.0570 4404 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
17:23:03.0573 4404 ulsata2 - ok
17:23:03.0603 4404 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
17:23:03.0605 4404 umbus - ok
17:23:03.0649 4404 USBAAPL (5c2bdc152bbab34f36473deaf7713f22) C:\Windows\system32\Drivers\usbaapl.sys
17:23:03.0652 4404 USBAAPL - ok
17:23:03.0733 4404 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
17:23:03.0736 4404 usbccgp - ok
17:23:03.0794 4404 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
17:23:03.0797 4404 usbcir - ok
17:23:03.0888 4404 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
17:23:03.0890 4404 usbehci - ok
17:23:03.0941 4404 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
17:23:03.0945 4404 usbhub - ok
17:23:03.0990 4404 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
17:23:03.0992 4404 usbohci - ok
17:23:04.0080 4404 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
17:23:04.0083 4404 usbprint - ok
17:23:04.0146 4404 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:23:04.0149 4404 USBSTOR - ok
17:23:04.0225 4404 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
17:23:04.0228 4404 usbuhci - ok
17:23:04.0299 4404 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
17:23:04.0305 4404 usbvideo - ok
17:23:04.0405 4404 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
17:23:04.0408 4404 vga - ok
17:23:04.0458 4404 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
17:23:04.0461 4404 VgaSave - ok
17:23:04.0494 4404 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
17:23:04.0497 4404 viaagp - ok
17:23:04.0584 4404 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
17:23:04.0587 4404 ViaC7 - ok
17:23:04.0656 4404 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
17:23:04.0659 4404 viaide - ok
17:23:04.0745 4404 VMC302 (2b0970a8c0a65874eff4aa436e651d85) C:\Windows\system32\Drivers\VMC302.sys
17:23:04.0753 4404 VMC302 - ok
17:23:04.0809 4404 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
17:23:04.0813 4404 volmgr - ok
17:23:04.0870 4404 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
17:23:04.0878 4404 volmgrx - ok
17:23:04.0947 4404 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
17:23:04.0954 4404 volsnap - ok
17:23:05.0031 4404 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
17:23:05.0036 4404 vsmraid - ok
17:23:05.0127 4404 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
17:23:05.0130 4404 WacomPen - ok
17:23:05.0170 4404 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
17:23:05.0174 4404 Wanarp - ok
17:23:05.0202 4404 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
17:23:05.0205 4404 Wanarpv6 - ok
17:23:05.0272 4404 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
17:23:05.0275 4404 Wd - ok
17:23:05.0355 4404 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
17:23:05.0368 4404 Wdf01000 - ok
17:23:05.0512 4404 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\drivers\wmiacpi.sys
17:23:05.0514 4404 WmiAcpi - ok
17:23:05.0635 4404 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
17:23:05.0637 4404 WpdUsb - ok
17:23:05.0685 4404 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
17:23:05.0688 4404 ws2ifsl - ok
17:23:05.0767 4404 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
17:23:05.0770 4404 WUDFRd - ok
17:23:05.0888 4404 yukonwlh (04e268adfc81964c49dc0c082d520f7e) C:\Windows\system32\DRIVERS\yk60x86.sys
17:23:05.0893 4404 yukonwlh - ok
17:23:05.0920 4404 MBR (0x1B8) (61a349592c4728853f4a90ff78f7628e) \Device\Harddisk0\DR0
17:23:06.0196 4404 \Device\Harddisk0\DR0 - ok
17:23:06.0201 4404 Boot (0x1200) (c588c4d3eb22916cdeb78d11d2681a90) \Device\Harddisk0\DR0\Partition0
17:23:06.0202 4404 \Device\Harddisk0\DR0\Partition0 - ok
17:23:06.0229 4404 Boot (0x1200) (33f490b75f70d32dcf0b7be66e6c8758) \Device\Harddisk0\DR0\Partition1
17:23:06.0231 4404 \Device\Harddisk0\DR0\Partition1 - ok
17:23:06.0231 4404 ============================================================
17:23:06.0231 4404 Scan finished
17:23:06.0231 4404 ============================================================
17:23:06.0252 5856 Detected object count: 0
17:23:06.0252 5856 Actual detected object count: 0
Pour info ce matin j'ai "réparer" avec Malwarebytes Anti malware, voici le rapport si ca peut aider:
Malwarebytes Anti-Malware (Essai) 1.60.0.1800
www.malwarebytes.org
Version de la base de données: v2012.01.24.02
Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
lucile :: PC-DE- [administrateur]
Protection: Activé
24/01/2012 07:02:51
mbam-log-2012-01-24 (07-02-51).txt
Type d'examen: Examen complet
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 301086
Temps écoulé: 1 heure(s), 26 minute(s), 5 seconde(s)
Processus mémoire détecté(s): 2
C:\ProgramData\RJwgFTFfCSs.exe (Rogue.FakeHDD) -> 3284 -> Suppression au redémarrage.
C:\ProgramData\2lmW3Z5ADnC6rX.exe (Rogue.FakeHDD) -> 3476 -> Suppression au redémarrage.
Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)
Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)
Valeur(s) du Registre détectée(s): 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|RJwgFTFfCSs.exe (Rogue.FakeHDD) -> Données: C:\ProgramData\RJwgFTFfCSs.exe -> Mis en quarantaine et supprimé avec succès.
Elément(s) de données du Registre détecté(s): 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyComputer (PUM.Hijack.StartMenu) -> Mauvais: (0) Bon: (1) -> Mis en quarantaine et réparé avec succès
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowSearch (PUM.Hijack.StartMenu) -> Mauvais: (0) Bon: (1) -> Mis en quarantaine et réparé avec succès
Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)
Fichier(s) détecté(s): 5
C:\ProgramData\RJwgFTFfCSs.exe (Rogue.FakeHDD) -> Suppression au redémarrage.
C:\ProgramData\2lmW3Z5ADnC6rX.exe (Rogue.FakeHDD) -> Suppression au redémarrage.
C:\Users\lucile\AppData\Local\Temp\KOFb70Agj3KTFT.exe.tmp (Rogue.FakeHDD) -> Mis en quarantaine et supprimé avec succès.
C:\Users\lucile\AppData\Local\Temp\6BC6.tmp (Trojan.FakeAlert) -> Mis en quarantaine et supprimé avec succès.
C:\Users\lucile\AppData\Local\Temp\audiosrv.exe (Trojan.FakeAlert) -> Mis en quarantaine et supprimé avec succès.
(fin)
2012/01/24 17:11:21 GMT PC-DE- DETECTION C:\ProgramData\RJwgFTFfCSs.exe Rogue.FakeHDD QUARANTINE
2012/01/24 17:11:21 GMT PC-DE- ERROR Quarantine failed: DeleteFile failed with error code 5
2012/01/24 17:15:36 GMT PC-DE MESSAGE Starting protection
2012/01/24 17:15:39 GMT PC-DE- MESSAGE Protection started successfully
2012/01/24 17:15:42 GMT PC-DE- MESSAGE Starting IP protection
2012/01/24 17:15:44 GMT PC-DE- MESSAGE IP Protection started successfully
Voila merci encore pour ton aide
-
