"System Restore"

Bonjour,

Depuis quelques jours, je ne peux plus éxécuter aucun programme sur mon pc. Les fichiers ont tous disparus, mon écran et noir, et dès le démarrage, "System Restore" s'ouvre, en m'affichant de nombreuses fenêtres "Windows-Delayed Write Failed".
Comment faire pour récupérer le contenu de mon PC et retirer ce "system restore" ?

Merci d'avance

2 réponses

  1. cela veut dire :
    Windows décalée écriture a était échoué
    est ce que tu peut accéder a ton pc ?
    1. Bonjour savannah
      Tu as un rogue dans ton PC
      Tu vas essayer ceci

      Télécharge sur le bureau RogueKiller
      * Quitte tous les programmes en cours, c'est important
      * Sous Vista/Seven , clic droit -> lancer en tant qu'administrateur
      * Sinon lance simplement RogueKiller.exe
      * Lorsque demandé, tape 2 et valide
      * Un rapport à dû s'ouvrir (RKreport.txt se trouve également à côté de l'exécutable), poste
      le contenu
      * Si le programme a été bloqué, ne pas hésiter a essayer plusieurs fois. Si vraiment cela ne passe pas (ça peut arriver), le renommer en winlogon.exe
      1. Merci beaucoup !
        Voici le rapport :

        RogueKiller V6.1.5 [29/10/2011] par Tigzy
        mail: tigzyRK<at>gmail<dot>com
        Remontees: https://www.luanagames.com/index.fr.html
        Blog: http://tigzyrk.blogspot.com

        Systeme d'exploitation: Windows Vista (6.0.6001 Service Pack 1) 32 bits version
        Demarrage : Mode normal
        Utilisateur: Marine [Droits d'admin]
        Mode: Suppression -- Date : 30/10/2011 17:41:15

        Processus malicieux: 2
        [SUSP PATH] SIyHoyHlXaPT.exe -- c:\programdata\siyhoyhlxapt.exe -> KILLED [TermProc]
        [SUSP PATH] 6DSS92c31Apgjk.exe -- c:\programdata\6dss92c31apgjk.exe -> KILLED [TermProc]

        Entrees de registre: 11
        [SUSP PATH] HKCU\[...]\Run : Facebook Update ("C:\Users\Marine\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver) -> DELETED
        [SUSP PATH] HKCU\[...]\Run : SIyHoyHlXaPT.exe (C:\ProgramData\SIyHoyHlXaPT.exe) -> DELETED
        [SUSP PATH] FacebookUpdateTaskUserS-1-5-21-2152259399-3126461063-1283464941-1000UA.job : C:\Users\Marine\AppData\Local\Facebook\Update\FacebookUpdate.exe -> DELETED
        [SUSP PATH] FacebookUpdateTaskUserS-1-5-21-2152259399-3126461063-1283464941-1000Core.job : C:\Users\Marine\AppData\Local\Facebook\Update\FacebookUpdate.exe -> DELETED
        [SUSP PATH] FacebookUpdateTaskUserS-1-5-21-2152259399-3126461063-1283464941-1000Core.job : C:\Users\Marine\AppData\Local\Facebook\Update\FacebookUpdate.exe -> DELETED
        [SUSP PATH] Notification de cadeaux MSN.lnk : C:\Users\Marine\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe -> DELETED
        [HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED ()
        [HJ] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED ()
        [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED ()
        [HJ] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED ()
        [HJ] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> REPLACED ()

        Fichiers / Dossiers particuliers:

        Driver: [LOADED]

        Fichier HOSTS:
        127.0.0.1 localhost
        ::1 localhost

        Termine : << RKreport[1].txt >>
        RKreport[1].txt
      2. Effectivement c'était infecté
        Relance Rogue Killer et tape 6, puis poste le rapport

        Ensuite
        On va vérifier s'il y a la présence d'un rootkit :
        Télécharge TDSSKiller (de Kaspersky) sur ton bureau
        https://support.kaspersky.com/downloads/utils/tdsskiller.exe

        Double clique sur TDSSKiller pour le lancer (avec Vista/Seven, clic droit
        dessus, et sur exécuter en tant qu'administrateur

        Clique sur Start scan, et laisse l'outil travailler

        Si des fichiers infectés sont trouvés, une nouvelle fenêtre va s'ouvrir

        Si TDSS. tdl2 est détecté, l'option delete sera cochée par défaut

        Si TDSS.tdl3 est détecté, vérifie que Cure est bien cochée

        Si TDSS.tdl4 (\HardDisk0\MBR) est détecté, vérifie que Cure
        est bien cochée

        Si Suspicious file est indiqué, laisse l'option cochée sur Skip

        Si Rootkit.Win32.ZAccess.* est détecté règle sur "cure" en haut , et "delete" en bas

        Clique sur Continue, puis sur Reboot now pour
        redémarrer le PC

        Poste le rapport qui est sauvegardé dans C:\TDSSKiller_Quarantine\
        JJ.MM.AA_HH.MM.SS.
        (JJ.MM.AA date du passage de l'outil, HH.MM.SS
        heure de passage).
      3. RogueKiller V6.1.5 [29/10/2011] par Tigzy
        mail: tigzyRK<at>gmail<dot>com
        Remontees: https://www.luanagames.com/index.fr.html
        Blog: http://tigzyrk.blogspot.com

        Systeme d'exploitation: Windows Vista (6.0.6001 Service Pack 1) 32 bits version
        Demarrage : Mode normal
        Utilisateur: Marine [Droits d'admin]
        Mode: Raccourcis RAZ -- Date : 30/10/2011 17:53:49

        Processus malicieux: 0

        Driver: [LOADED]

        Attributs de fichiers restaures:
        Bureau: Success 25 / Fail 0
        Lancement rapide: Success 9 / Fail 0
        Programmes: Success 205 / Fail 0
        Menu demarrer: Success 40 / Fail 0
        Dossier utilisateur: Success 22597 / Fail 0
        Mes documents: Success 3096 / Fail 0
        Mes favoris: Success 82 / Fail 0
        Mes images: Success 29293 / Fail 0
        Ma musique: Success 4142 / Fail 0
        Mes videos: Success 9 / Fail 0
        Disques locaux: Success 7440 / Fail 0
        Sauvegarde: [FOUND] Success 28 / Fail 0

        Lecteurs:
        [C:] \Device\HarddiskVolume2 -- 0x3 --> Restored
        [D:] \Device\HarddiskVolume4 -- 0x2 --> Restored
        [E:] \Device\HarddiskVolume5 -- 0x2 --> Restored
        [F:] \Device\CdRom0 -- 0x5 --> Skipped

        Termine : << RKreport[2].txt >>
        RKreport[1].txt ; RKreport[2].txt

        Je télécharge ce que vous m'avez conseillé maintenant !
      4. D'accord, j'attends le résultat
      5. 17:57:38.0470 7624 TDSS rootkit removing tool 2.6.14.0 Oct 28 2011 11:11:01
        17:57:39.0240 7624 ============================================================
        17:57:39.0241 7624 Current date / time: 2011/10/30 17:57:39.0240
        17:57:39.0241 7624 SystemInfo:
        17:57:39.0241 7624
        17:57:39.0241 7624 OS Version: 6.0.6001 ServicePack: 1.0
        17:57:39.0241 7624 Product type: Workstation
        17:57:39.0241 7624 ComputerName: PC-DE-MARINE
        17:57:39.0241 7624 UserName: Marine
        17:57:39.0241 7624 Windows directory: C:\Windows
        17:57:39.0241 7624 System windows directory: C:\Windows
        17:57:39.0241 7624 Processor architecture: Intel x86
        17:57:39.0241 7624 Number of processors: 2
        17:57:39.0241 7624 Page size: 0x1000
        17:57:39.0241 7624 Boot type: Normal boot
        17:57:39.0242 7624 ============================================================
        17:57:40.0304 7624 Initialize success
        17:57:42.0711 3392 ============================================================
        17:57:42.0711 3392 Scan started
        17:57:42.0711 3392 Mode: Manual;
        17:57:42.0711 3392 ============================================================
        17:57:45.0385 3392 ACPI (fcb8c7210f0135e24c6580f7f649c73c) C:\Windows\system32\drivers\acpi.sys
        17:57:45.0394 3392 ACPI - ok
        17:57:45.0556 3392 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
        17:57:45.0603 3392 adp94xx - ok
        17:57:45.0769 3392 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
        17:57:45.0800 3392 adpahci - ok
        17:57:45.0924 3392 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
        17:57:45.0962 3392 adpu160m - ok
        17:57:46.0069 3392 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
        17:57:46.0091 3392 adpu320 - ok
        17:57:46.0256 3392 AFD (48eb99503533c27ac6135648e5474457) C:\Windows\system32\drivers\afd.sys
        17:57:46.0297 3392 AFD - ok
        17:57:46.0463 3392 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
        17:57:46.0507 3392 agp440 - ok
        17:57:46.0637 3392 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
        17:57:46.0662 3392 aic78xx - ok
        17:57:46.0775 3392 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
        17:57:46.0804 3392 aliide - ok
        17:57:46.0947 3392 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
        17:57:46.0985 3392 amdagp - ok
        17:57:47.0027 3392 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
        17:57:47.0045 3392 amdide - ok
        17:57:47.0173 3392 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
        17:57:47.0197 3392 AmdK7 - ok
        17:57:47.0296 3392 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
        17:57:47.0322 3392 AmdK8 - ok
        17:57:47.0570 3392 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
        17:57:47.0609 3392 arc - ok
        17:57:47.0754 3392 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
        17:57:47.0789 3392 arcsas - ok
        17:57:47.0888 3392 ArcSoftKsUFilter (857b48965a0503b7ab795d4bfe7cbd8b) C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys
        17:57:47.0929 3392 ArcSoftKsUFilter - ok
        17:57:48.0083 3392 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
        17:57:48.0100 3392 AsyncMac - ok
        17:57:48.0234 3392 atapi (2d9c903dc76a66813d350a562de40ed9) C:\Windows\system32\drivers\atapi.sys
        17:57:48.0252 3392 atapi - ok
        17:57:48.0356 3392 avgio (f1d43170fdd7399ee17ea32d4f868b0c) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
        17:57:48.0362 3392 avgio - ok
        17:57:48.0491 3392 avgntflt (14fe36d8f2c6a2435275338d061a0b66) C:\Windows\system32\DRIVERS\avgntflt.sys
        17:57:48.0518 3392 avgntflt - ok
        17:57:48.0618 3392 avipbb (ad9bd66a862116e79cb45bb6be46055f) C:\Windows\system32\DRIVERS\avipbb.sys
        17:57:48.0630 3392 avipbb - ok
        17:57:48.0723 3392 avshws (a31cb3fa1a98ffef7628a3170e6ed98b) C:\Windows\system32\DRIVERS\youup.sys
        17:57:48.0764 3392 avshws - ok
        17:57:48.0935 3392 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
        17:57:48.0961 3392 Beep - ok
        17:57:49.0081 3392 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
        17:57:49.0108 3392 blbdrive - ok
        17:57:49.0276 3392 bowser (8153396d5551276227fa146900f734e6) C:\Windows\system32\DRIVERS\bowser.sys
        17:57:49.0304 3392 bowser - ok
        17:57:49.0432 3392 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
        17:57:49.0468 3392 BrFiltLo - ok
        17:57:49.0571 3392 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
        17:57:49.0587 3392 BrFiltUp - ok
        17:57:49.0732 3392 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
        17:57:49.0763 3392 Brserid - ok
        17:57:49.0891 3392 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
        17:57:49.0913 3392 BrSerWdm - ok
        17:57:49.0948 3392 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
        17:57:49.0972 3392 BrUsbMdm - ok
        17:57:50.0090 3392 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
        17:57:50.0108 3392 BrUsbSer - ok
        17:57:50.0294 3392 BthEnum (ae19cfbbba41800f3d5343e21d2ca09f) C:\Windows\system32\DRIVERS\BthEnum.sys
        17:57:50.0321 3392 BthEnum - ok
        17:57:50.0566 3392 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
        17:57:50.0600 3392 BTHMODEM - ok
        17:57:50.0751 3392 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys
        17:57:50.0754 3392 BthPan - ok
        17:57:50.0902 3392 BTHPORT (75f19df0bc62992d05fdd8a32d968531) C:\Windows\system32\Drivers\BTHport.sys
        17:57:50.0945 3392 BTHPORT - ok
        17:57:51.0094 3392 BTHUSB (4ce2a25c5936bc515357d60fee73f221) C:\Windows\system32\Drivers\BTHUSB.sys
        17:57:51.0115 3392 BTHUSB - ok
        17:57:51.0235 3392 btwaudio (6e41621e03d91167ceae555ce2b468b8) C:\Windows\system32\drivers\btwaudio.sys
        17:57:51.0265 3392 btwaudio - ok
        17:57:51.0388 3392 btwavdt (7e67b295081b33ea22c0fb04798b306c) C:\Windows\system32\drivers\btwavdt.sys
        17:57:51.0416 3392 btwavdt - ok
        17:57:51.0539 3392 btwl2cap (54c2ee0a3cec586629035d771aacae67) C:\Windows\system32\DRIVERS\btwl2cap.sys
        17:57:51.0558 3392 btwl2cap - ok
        17:57:51.0610 3392 btwrchid (4b4f992ee709c40efd33ba4d2bafa402) C:\Windows\system32\DRIVERS\btwrchid.sys
        17:57:51.0635 3392 btwrchid - ok
        17:57:51.0734 3392 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
        17:57:51.0756 3392 cdfs - ok
        17:57:51.0869 3392 cdrom (1ec25cea0de6ac4718bf89f9e1778b57) C:\Windows\system32\DRIVERS\cdrom.sys
        17:57:51.0897 3392 cdrom - ok
        17:57:51.0950 3392 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
        17:57:52.0001 3392 circlass - ok
        17:57:52.0109 3392 CLFS (465745561c832b29f7c48b488aab3842) C:\Windows\system32\CLFS.sys
        17:57:52.0143 3392 CLFS - ok
        17:57:52.0302 3392 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
        17:57:52.0327 3392 CmBatt - ok
        17:57:52.0405 3392 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
        17:57:52.0426 3392 cmdide - ok
        17:57:52.0492 3392 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
        17:57:52.0523 3392 Compbatt - ok
        17:57:52.0617 3392 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
        17:57:52.0660 3392 crcdisk - ok
        17:57:52.0704 3392 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
        17:57:52.0730 3392 Crusoe - ok
        17:57:52.0831 3392 DfsC (a3e9fa213f443ac77c7746119d13feec) C:\Windows\system32\Drivers\dfsc.sys
        17:57:52.0833 3392 DfsC - ok
        17:57:53.0020 3392 disk (64109e623abd6955c8fb110b592e68b7) C:\Windows\system32\drivers\disk.sys
        17:57:53.0023 3392 disk - ok
        17:57:53.0167 3392 DMICall (f206e28ed74c491fd5d7c0a1119ce37f) C:\Windows\system32\DRIVERS\DMICall.sys
        17:57:53.0189 3392 DMICall - ok
        17:57:53.0347 3392 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys
        17:57:53.0382 3392 Dot4 - ok
        17:57:53.0504 3392 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys
        17:57:53.0528 3392 Dot4Print - ok
        17:57:53.0649 3392 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys
        17:57:53.0673 3392 dot4usb - ok
        17:57:53.0810 3392 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
        17:57:53.0827 3392 drmkaud - ok
        17:57:53.0872 3392 DXGKrnl (85f33880b8cfb554bd3d9ccdb486845a) C:\Windows\System32\drivers\dxgkrnl.sys
        17:57:53.0887 3392 DXGKrnl - ok
        17:57:54.0012 3392 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
        17:57:54.0033 3392 E1G60 - ok
        17:57:54.0177 3392 Ecache (dd2cd259d83d8b72c02c5f2331ff9d68) C:\Windows\system32\drivers\ecache.sys
        17:57:54.0216 3392 Ecache - ok
        17:57:54.0370 3392 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
        17:57:54.0417 3392 elxstor - ok
        17:57:54.0541 3392 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
        17:57:54.0557 3392 ErrDev - ok
        17:57:54.0705 3392 exfat (0d858eb20589a34efb25695acaa6aa2d) C:\Windows\system32\drivers\exfat.sys
        17:57:54.0734 3392 exfat - ok
        17:57:54.0856 3392 fastfat (3c489390c2e2064563727752af8eab9e) C:\Windows\system32\drivers\fastfat.sys
        17:57:54.0888 3392 fastfat - ok
        17:57:55.0014 3392 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
        17:57:55.0039 3392 fdc - ok
        17:57:55.0140 3392 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
        17:57:55.0164 3392 FileInfo - ok
        17:57:55.0227 3392 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
        17:57:55.0234 3392 Filetrace - ok
        17:57:55.0349 3392 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
        17:57:55.0365 3392 flpydisk - ok
        17:57:55.0456 3392 FltMgr (05ea53afe985443011e36dab07343b46) C:\Windows\system32\drivers\fltmgr.sys
        17:57:55.0489 3392 FltMgr - ok
        17:57:55.0598 3392 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
        17:57:55.0603 3392 Fs_Rec - ok
        17:57:55.0641 3392 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
        17:57:55.0669 3392 gagp30kx - ok
        17:57:55.0811 3392 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
        17:57:55.0831 3392 GEARAspiWDM - ok
        17:57:56.0028 3392 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
        17:57:56.0045 3392 HdAudAddService - ok
        17:57:56.0075 3392 HDAudBus (c87b1ee051c0464491c1a7b03fa0bc99) C:\Windows\system32\DRIVERS\HDAudBus.sys
        17:57:56.0078 3392 HDAudBus - ok
        17:57:56.0194 3392 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
        17:57:56.0219 3392 HidBth - ok
        17:57:56.0336 3392 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
        17:57:56.0357 3392 HidIr - ok
        17:57:56.0472 3392 HidUsb (e2b5bd48afcc0f0974fb44641b223250) C:\Windows\system32\DRIVERS\hidusb.sys
        17:57:56.0474 3392 HidUsb - ok
        17:57:56.0559 3392 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
        17:57:56.0581 3392 HpCISSs - ok
        17:57:56.0707 3392 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
        17:57:56.0723 3392 HSFHWAZL - ok
        17:57:56.0840 3392 HTTP (96e241624c71211a79c84f50a8e71cab) C:\Windows\system32\drivers\HTTP.sys
        17:57:56.0886 3392 HTTP - ok
        17:57:56.0994 3392 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
        17:57:57.0018 3392 i2omp - ok
        17:57:57.0153 3392 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
        17:57:57.0183 3392 i8042prt - ok
        17:57:57.0301 3392 iaStor (db0cc620b27a928d968c1a1e9cd9cb87) C:\Windows\system32\DRIVERS\iaStor.sys
        17:57:57.0305 3392 iaStor - ok
        17:57:57.0376 3392 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
        17:57:57.0418 3392 iaStorV - ok
        17:57:57.0540 3392 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
        17:57:57.0566 3392 iirsp - ok
        17:57:57.0760 3392 IntcAzAudAddService (5d26ccb06e1f3b5c26e863df3f4f2611) C:\Windows\system32\drivers\RTKVHDA.sys
        17:57:57.0844 3392 IntcAzAudAddService - ok
        17:57:57.0972 3392 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
        17:57:57.0990 3392 intelide - ok
        17:57:58.0093 3392 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
        17:57:58.0095 3392 intelppm - ok
        17:57:58.0213 3392 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
        17:57:58.0221 3392 IpFilterDriver - ok
        17:57:58.0295 3392 IpInIp - ok
        17:57:58.0375 3392 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
        17:57:58.0403 3392 IPMIDRV - ok
        17:57:58.0486 3392 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
        17:57:58.0522 3392 IPNAT - ok
        17:57:58.0586 3392 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
        17:57:58.0601 3392 IRENUM - ok
        17:57:58.0710 3392 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
        17:57:58.0720 3392 isapnp - ok
        17:57:58.0786 3392 iScsiPrt (f247eec28317f6c739c16de420097301) C:\Windows\system32\DRIVERS\msiscsi.sys
        17:57:58.0792 3392 iScsiPrt - ok
        17:57:58.0886 3392 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
        17:57:58.0909 3392 iteatapi - ok
        17:57:59.0015 3392 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
        17:57:59.0040 3392 iteraid - ok
        17:57:59.0156 3392 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
        17:57:59.0178 3392 kbdclass - ok
        17:57:59.0210 3392 kbdhid (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\DRIVERS\kbdhid.sys
        17:57:59.0237 3392 kbdhid - ok
        17:57:59.0376 3392 KSecDD (7a0cf7908b6824d6a2a1d313e5ae3dca) C:\Windows\system32\Drivers\ksecdd.sys
        17:57:59.0435 3392 KSecDD - ok
        17:57:59.0560 3392 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
        17:57:59.0586 3392 lltdio - ok
        17:57:59.0726 3392 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
        17:57:59.0793 3392 LSI_FC - ok
        17:57:59.0952 3392 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
        17:57:59.0986 3392 LSI_SAS - ok
        17:58:00.0098 3392 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
        17:58:00.0127 3392 LSI_SCSI - ok
        17:58:00.0263 3392 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
        17:58:00.0289 3392 luafv - ok
        17:58:00.0396 3392 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\Windows\system32\DRIVERS\mdmxsdk.sys
        17:58:00.0420 3392 mdmxsdk - ok
        17:58:00.0585 3392 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
        17:58:00.0593 3392 megasas - ok
        17:58:00.0719 3392 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
        17:58:00.0756 3392 MegaSR - ok
        17:58:00.0850 3392 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
        17:58:00.0876 3392 Modem - ok
        17:58:00.0969 3392 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
        17:58:00.0971 3392 monitor - ok
        17:58:00.0994 3392 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
        17:58:01.0019 3392 mouclass - ok
        17:58:01.0117 3392 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
        17:58:01.0142 3392 mouhid - ok
        17:58:01.0266 3392 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
        17:58:01.0277 3392 MountMgr - ok
        17:58:01.0413 3392 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
        17:58:01.0441 3392 mpio - ok
        17:58:01.0541 3392 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
        17:58:01.0566 3392 mpsdrv - ok
        17:58:01.0662 3392 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
        17:58:01.0688 3392 Mraid35x - ok
        17:58:01.0786 3392 MRxDAV (ae3de84536b6799d2267443cec8edbb9) C:\Windows\system32\drivers\mrxdav.sys
        17:58:01.0817 3392 MRxDAV - ok
        17:58:01.0916 3392 mrxsmb (5734a0f2be7e495f7d3ed6efd4b9f5a1) C:\Windows\system32\DRIVERS\mrxsmb.sys
        17:58:01.0928 3392 mrxsmb - ok
        17:58:02.0052 3392 mrxsmb10 (6b5fa5adfacac9dbbe0991f4566d7d55) C:\Windows\system32\DRIVERS\mrxsmb10.sys
        17:58:02.0092 3392 mrxsmb10 - ok
        17:58:02.0245 3392 mrxsmb20 (5c80d8159181c7abf1b14ba703b01e0b) C:\Windows\system32\DRIVERS\mrxsmb20.sys
        17:58:02.0278 3392 mrxsmb20 - ok
        17:58:02.0410 3392 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
        17:58:02.0428 3392 msahci - ok
        17:58:02.0548 3392 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
        17:58:02.0580 3392 msdsm - ok
        17:58:02.0714 3392 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
        17:58:02.0732 3392 Msfs - ok
        17:58:02.0840 3392 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
        17:58:02.0868 3392 msisadrv - ok
        17:58:02.0988 3392 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
        17:58:02.0993 3392 MSKSSRV - ok
        17:58:03.0089 3392 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
        17:58:03.0094 3392 MSPCLOCK - ok
        17:58:03.0244 3392 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
        17:58:03.0270 3392 MSPQM - ok
        17:58:03.0374 3392 MsRPC (b5614aecb05a9340aa0fb55bf561cc63) C:\Windows\system32\drivers\MsRPC.sys
        17:58:03.0407 3392 MsRPC - ok
        17:58:03.0510 3392 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
        17:58:03.0512 3392 mssmbios - ok
        17:58:03.0602 3392 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
        17:58:03.0606 3392 MSTEE - ok
        17:58:03.0700 3392 Mup (6dfd1d322de55b0b7db7d21b90bec49c) C:\Windows\system32\Drivers\mup.sys
        17:58:03.0723 3392 Mup - ok
        17:58:03.0847 3392 NativeWifiP (3c21ce48ff529bb73dadb98770b54025) C:\Windows\system32\DRIVERS\nwifi.sys
        17:58:03.0874 3392 NativeWifiP - ok
        17:58:03.0992 3392 NDIS (9bdc71790fa08f0a0b5f10462b1bd0b1) C:\Windows\system32\drivers\ndis.sys
        17:58:04.0004 3392 NDIS - ok
        17:58:04.0091 3392 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
        17:58:04.0108 3392 NdisTapi - ok
        17:58:04.0228 3392 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
        17:58:04.0253 3392 Ndisuio - ok
        17:58:04.0369 3392 NdisWan (3d14c3b3496f88890d431e8aa022a411) C:\Windows\system32\DRIVERS\ndiswan.sys
        17:58:04.0392 3392 NdisWan - ok
        17:58:04.0483 3392 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
        17:58:04.0511 3392 NDProxy - ok
        17:58:04.0612 3392 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
        17:58:04.0641 3392 NetBIOS - ok
        17:58:04.0740 3392 netbt (7c5fee5b1c5728507cd96fb4a13e7a02) C:\Windows\system32\DRIVERS\netbt.sys
        17:58:04.0767 3392 netbt - ok
        17:58:04.0999 3392 NETw5v32 (ba420e8ebfcad35581fe8e4c64f71469) C:\Windows\system32\DRIVERS\NETw5v32.sys
        17:58:05.0133 3392 NETw5v32 - ok
        17:58:05.0240 3392 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
        17:58:05.0265 3392 nfrd960 - ok
        17:58:05.0352 3392 Npfs (ecb5003f484f9ed6c608d6d6c7886cbb) C:\Windows\system32\drivers\Npfs.sys
        17:58:05.0380 3392 Npfs - ok
        17:58:05.0490 3392 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
        17:58:05.0495 3392 nsiproxy - ok
        17:58:05.0621 3392 Ntfs (b4effe29eb4f15538fd8a9681108492d) C:\Windows\system32\drivers\Ntfs.sys
        17:58:05.0676 3392 Ntfs - ok
        17:58:05.0778 3392 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
        17:58:05.0803 3392 ntrigdigi - ok
        17:58:05.0891 3392 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
        17:58:05.0911 3392 Null - ok
        17:58:06.0248 3392 nvlddmkm (00d9589b379710782e7b341433190fc9) C:\Windows\system32\DRIVERS\nvlddmkm.sys
        17:58:06.0601 3392 nvlddmkm - ok
        17:58:06.0699 3392 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
        17:58:06.0710 3392 nvraid - ok
        17:58:06.0814 3392 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
        17:58:06.0841 3392 nvstor - ok
        17:58:06.0959 3392 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
        17:58:06.0971 3392 nv_agp - ok
        17:58:07.0061 3392 NwlnkFlt - ok
        17:58:07.0077 3392 NwlnkFwd - ok
        17:58:07.0225 3392 ohci1394 (790e27c3db53410b40ff9ef2fd10a1d9) C:\Windows\system32\DRIVERS\ohci1394.sys
        17:58:07.0228 3392 ohci1394 - ok
        17:58:07.0410 3392 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
        17:58:07.0438 3392 Parport - ok
        17:58:07.0519 3392 partmgr (3b38467e7c3daed009dfe359e17f139f) C:\Windows\system32\drivers\partmgr.sys
        17:58:07.0547 3392 partmgr - ok
        17:58:07.0640 3392 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
        17:58:07.0665 3392 Parvdm - ok
        17:58:07.0769 3392 pci (01b94418deb235dff777cc80076354b4) C:\Windows\system32\drivers\pci.sys
        17:58:07.0806 3392 pci - ok
        17:58:07.0909 3392 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
        17:58:07.0932 3392 pciide - ok
        17:58:08.0035 3392 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
        17:58:08.0060 3392 pcmcia - ok
        17:58:08.0249 3392 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
        17:58:08.0316 3392 PEAUTH - ok
        17:58:08.0482 3392 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
        17:58:08.0512 3392 PptpMiniport - ok
        17:58:08.0618 3392 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
        17:58:08.0644 3392 Processor - ok
        17:58:08.0759 3392 PSched (bfef604508a0ed1eae2a73e872555ffb) C:\Windows\system32\DRIVERS\pacer.sys
        17:58:08.0761 3392 PSched - ok
        17:58:08.0867 3392 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\Windows\system32\Drivers\PxHelp20.sys
        17:58:08.0896 3392 PxHelp20 - ok
        17:58:09.0050 3392 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
        17:58:09.0106 3392 ql2300 - ok
        17:58:09.0240 3392 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
        17:58:09.0268 3392 ql40xx - ok
        17:58:09.0377 3392 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
        17:58:09.0379 3392 QWAVEdrv - ok
        17:58:09.0478 3392 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
        17:58:09.0495 3392 RasAcd - ok
        17:58:09.0600 3392 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
        17:58:09.0609 3392 Rasl2tp - ok
        17:58:09.0710 3392 RasPppoe (3e9d9b048107b40d87b97df2e48e0744) C:\Windows\system32\DRIVERS\raspppoe.sys
        17:58:09.0737 3392 RasPppoe - ok
        17:58:09.0828 3392 RasSstp (a7d141684e9500ac928a772ed8e6b671) C:\Windows\system32\DRIVERS\rassstp.sys
        17:58:09.0855 3392 RasSstp - ok
        17:58:09.0962 3392 rdbss (6e1c5d0457622f9ee35f683110e93d14) C:\Windows\system32\DRIVERS\rdbss.sys
        17:58:09.0998 3392 rdbss - ok
        17:58:10.0085 3392 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
        17:58:10.0105 3392 RDPCDD - ok
        17:58:10.0236 3392 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
        17:58:10.0267 3392 rdpdr - ok
        17:58:10.0364 3392 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
        17:58:10.0383 3392 RDPENCDD - ok
        17:58:10.0494 3392 RDPWD (e1c18f4097a5abcec941dc4b2f99db7e) C:\Windows\system32\drivers\RDPWD.sys
        17:58:10.0519 3392 RDPWD - ok
        17:58:10.0620 3392 regi (001b4278407f4303efc902a2b16f2453) C:\Windows\system32\drivers\regi.sys
        17:58:10.0640 3392 regi - ok
        17:58:10.0772 3392 RFCOMM (23f486726da7a9b2f3ec7326421a9c36) C:\Windows\system32\DRIVERS\rfcomm.sys
        17:58:10.0805 3392 RFCOMM - ok
        17:58:10.0897 3392 rimsptsk (f7d9ecf41ebd3cf6c65944368150f66b) C:\Windows\system32\DRIVERS\rimsptsk.sys
        17:58:10.0898 3392 rimsptsk - ok
        17:58:10.0922 3392 risdptsk (1be6c42767a7c67ba31ae32b293b37a3) C:\Windows\system32\DRIVERS\risdptsk.sys
        17:58:10.0924 3392 risdptsk - ok
        17:58:11.0029 3392 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
        17:58:11.0050 3392 rspndr - ok
        17:58:11.0178 3392 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
        17:58:11.0206 3392 sbp2port - ok
        17:58:11.0333 3392 sdbus (126ea89bcc413ee45e3004fb0764888f) C:\Windows\system32\DRIVERS\sdbus.sys
        17:58:11.0355 3392 sdbus - ok
        17:58:11.0453 3392 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
        17:58:11.0479 3392 secdrv - ok
        17:58:11.0592 3392 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
        17:58:11.0610 3392 Serenum - ok
        17:58:11.0709 3392 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
        17:58:11.0736 3392 Serial - ok
        17:58:11.0830 3392 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
        17:58:11.0836 3392 sermouse - ok
        17:58:11.0958 3392 SFEP (8b7c1768d2cde2e02e09a66563ddfd16) C:\Windows\system32\DRIVERS\SFEP.sys
        17:58:11.0963 3392 SFEP - ok
        17:58:11.0999 3392 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
        17:58:12.0004 3392 sffdisk - ok
        17:58:12.0111 3392 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
        17:58:12.0116 3392 sffp_mmc - ok
        17:58:12.0234 3392 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
        17:58:12.0240 3392 sffp_sd - ok
        17:58:12.0292 3392 sfloppy (c33bfbd6e9e41fcd9ffef9729e9faed6) C:\Windows\system32\DRIVERS\sfloppy.sys
        17:58:12.0318 3392 sfloppy - ok
        17:58:12.0461 3392 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
        17:58:12.0480 3392 sisagp - ok
        17:58:12.0572 3392 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
        17:58:12.0595 3392 SiSRaid2 - ok
        17:58:12.0697 3392 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
        17:58:12.0721 3392 SiSRaid4 - ok
        17:58:12.0834 3392 Smb (031e6bcd53c9b2b9ace111eafec347b6) C:\Windows\system32\DRIVERS\smb.sys
        17:58:12.0844 3392 Smb - ok
        17:58:12.0982 3392 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
        17:58:13.0009 3392 spldr - ok
        17:58:13.0122 3392 srv (2252aef839b1093d16761189f45af885) C:\Windows\system32\DRIVERS\srv.sys
        17:58:13.0167 3392 srv - ok
        17:58:13.0265 3392 srv2 (b7ff59408034119476b00a81bb53d5d1) C:\Windows\system32\DRIVERS\srv2.sys
        17:58:13.0288 3392 srv2 - ok
        17:58:13.0392 3392 srvnet (2accc9b12af02030f531e6cca6f8b76e) C:\Windows\system32\DRIVERS\srvnet.sys
        17:58:13.0418 3392 srvnet - ok
        17:58:13.0519 3392 ssmdrv (3ad0362cf68de3ac500e981700242cca) C:\Windows\system32\DRIVERS\ssmdrv.sys
        17:58:13.0539 3392 ssmdrv - ok
        17:58:13.0654 3392 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
        17:58:13.0661 3392 swenum - ok
        17:58:13.0769 3392 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
        17:58:13.0787 3392 Symc8xx - ok
        17:58:13.0892 3392 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
        17:58:13.0899 3392 Sym_hi - ok
        17:58:14.0002 3392 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
        17:58:14.0030 3392 Sym_u3 - ok
        17:58:14.0169 3392 SynTP (5f298993ae2910df72ccec1480b7c3d0) C:\Windows\system32\DRIVERS\SynTP.sys
        17:58:14.0184 3392 SynTP - ok
        17:58:14.0316 3392 Tcpip (782568ab6a43160a159b6215b70bcce9) C:\Windows\system32\drivers\tcpip.sys
        17:58:14.0366 3392 Tcpip - ok
        17:58:14.0482 3392 Tcpip6 (782568ab6a43160a159b6215b70bcce9) C:\Windows\system32\DRIVERS\tcpip.sys
        17:58:14.0491 3392 Tcpip6 - ok
        17:58:14.0583 3392 tcpipreg (d4a2e4a4b011f3a883af77315a5ae76b) C:\Windows\system32\drivers\tcpipreg.sys
        17:58:14.0610 3392 tcpipreg - ok
        17:58:14.0714 3392 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
        17:58:14.0720 3392 TDPIPE - ok
        17:58:14.0813 3392 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
        17:58:14.0835 3392 TDTCP - ok
        17:58:14.0932 3392 tdx (d09276b1fab033ce1d40dcbdf303d10f) C:\Windows\system32\DRIVERS\tdx.sys
        17:58:14.0941 3392 tdx - ok
        17:58:15.0029 3392 TermDD (a048056f5e1a96a9bf3071b91741a5aa) C:\Windows\system32\DRIVERS\termdd.sys
        17:58:15.0039 3392 TermDD - ok
        17:58:15.0207 3392 TrueSight (f69641efdb19acb4753b0155f7fdeed5) c:\windows\system32\drivers\TrueSight.sys
        17:58:15.0209 3392 TrueSight - ok
        17:58:15.0320 3392 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
        17:58:15.0345 3392 tssecsrv - ok
        17:58:15.0458 3392 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
        17:58:15.0481 3392 tunmp - ok
        17:58:15.0574 3392 tunnel (6042505ff6fa9ac1ef7684d0e03b6940) C:\Windows\system32\DRIVERS\tunnel.sys
        17:58:15.0594 3392 tunnel - ok
        17:58:15.0692 3392 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
        17:58:15.0721 3392 uagp35 - ok
        17:58:15.0841 3392 udfs (8b5088058fa1d1cd897a2113ccff6c58) C:\Windows\system32\DRIVERS\udfs.sys
        17:58:15.0871 3392 udfs - ok
        17:58:15.0980 3392 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
        17:58:16.0010 3392 uliagpkx - ok
        17:58:16.0114 3392 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
        17:58:16.0129 3392 uliahci - ok
        17:58:16.0229 3392 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
        17:58:16.0257 3392 UlSata - ok
        17:58:16.0355 3392 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
        17:58:16.0387 3392 ulsata2 - ok
        17:58:16.0490 3392 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
        17:58:16.0512 3392 umbus - ok
        17:58:16.0633 3392 USBAAPL (5c2bdc152bbab34f36473deaf7713f22) C:\Windows\system32\Drivers\usbaapl.sys
        17:58:16.0661 3392 USBAAPL - ok
        17:58:16.0769 3392 usbccgp (a7cd5b4adea26765cab06bdab7b07b13) C:\Windows\system32\DRIVERS\usbccgp.sys
        17:58:16.0792 3392 usbccgp - ok
        17:58:16.0889 3392 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
        17:58:16.0917 3392 usbcir - ok
        17:58:17.0024 3392 usbehci (686d4188ae36254c3008b71fedacadf3) C:\Windows\system32\DRIVERS\usbehci.sys
        17:58:17.0055 3392 usbehci - ok
        17:58:17.0172 3392 usbhub (4e42f665a658f08d153f7fffe7c83806) C:\Windows\system32\DRIVERS\usbhub.sys
        17:58:17.0187 3392 usbhub - ok
        17:58:17.0295 3392 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
        17:58:17.0319 3392 usbohci - ok
        17:58:17.0420 3392 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
        17:58:17.0441 3392 usbprint - ok
        17:58:17.0548 3392 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
        17:58:17.0574 3392 usbscan - ok
        17:58:17.0678 3392 USBSTOR (87ba6b83c5d19b69160968d07d6e2982) C:\Windows\system32\DRIVERS\USBSTOR.SYS
        17:58:17.0681 3392 USBSTOR - ok
        17:58:17.0778 3392 usbuhci (40f95a3d6d50d82f947f1d167c2ec39d) C:\Windows\system32\DRIVERS\usbuhci.sys
        17:58:17.0798 3392 usbuhci - ok
        17:58:17.0919 3392 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
        17:58:17.0943 3392 usbvideo - ok
        17:58:18.0084 3392 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
        17:58:18.0102 3392 vga - ok
        17:58:18.0134 3392 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
        17:58:18.0153 3392 VgaSave - ok
        17:58:18.0254 3392 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
        17:58:18.0285 3392 viaagp - ok
        17:58:18.0389 3392 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
        17:58:18.0425 3392 ViaC7 - ok
        17:58:18.0527 3392 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
        17:58:18.0535 3392 viaide - ok
        17:58:18.0623 3392 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
        17:58:18.0645 3392 volmgr - ok
        17:58:18.0750 3392 volmgrx (98f5ffe6316bd74e9e2c97206c190196) C:\Windows\system32\drivers\volmgrx.sys
        17:58:18.0787 3392 volmgrx - ok
        17:58:18.0893 3392 volsnap (d8b4a53dd2769f226b3eb374374987c9) C:\Windows\system32\drivers\volsnap.sys
        17:58:18.0900 3392 volsnap - ok
        17:58:19.0011 3392 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
        17:58:19.0044 3392 vsmraid - ok
        17:58:19.0221 3392 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
        17:58:19.0246 3392 WacomPen - ok
        17:58:19.0342 3392 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
        17:58:19.0369 3392 Wanarp - ok
        17:58:19.0381 3392 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
        17:58:19.0383 3392 Wanarpv6 - ok
        17:58:19.0491 3392 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
        17:58:19.0499 3392 Wd - ok
        17:58:19.0620 3392 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
        17:58:19.0645 3392 Wdf01000 - ok
        17:58:19.0764 3392 WimFltr (090a2b8f055343815556a01f725f6c35) C:\Windows\system32\DRIVERS\wimfltr.sys
        17:58:19.0792 3392 WimFltr - ok
        17:58:19.0912 3392 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\drivers\wmiacpi.sys
        17:58:19.0936 3392 WmiAcpi - ok
        17:58:20.0087 3392 WpdUsb (0cec23084b51b8288099eb710224e955) C:\Windows\system32\DRIVERS\wpdusb.sys
        17:58:20.0094 3392 WpdUsb - ok
        17:58:20.0220 3392 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
        17:58:20.0238 3392 ws2ifsl - ok
        17:58:20.0356 3392 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
        17:58:20.0360 3392 WUDFRd - ok
        17:58:20.0451 3392 XAudio (dab33cfa9dd24251aaa389ff36b64d4b) C:\Windows\system32\DRIVERS\xaudio.sys
        17:58:20.0456 3392 XAudio - ok
        17:58:20.0570 3392 yukonwlh (3e1c915c6291ab5d1cfca680e1bd6bad) C:\Windows\system32\DRIVERS\yk60x86.sys
        17:58:20.0578 3392 yukonwlh - ok
        17:58:20.0618 3392 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
        17:58:20.0644 3392 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
        17:58:20.0644 3392 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
        17:58:20.0680 3392 Boot (0x1200) (9975497c3c67292d561d0ecdf91fcdd9) \Device\Harddisk0\DR0\Partition0
        17:58:20.0681 3392 \Device\Harddisk0\DR0\Partition0 - ok
        17:58:20.0682 3392 ============================================================
        17:58:20.0682 3392 Scan finished
        17:58:20.0682 3392 ============================================================
        17:58:20.0702 7756 Detected object count: 1
        17:58:20.0702 7756 Actual detected object count: 1
        17:58:48.0244 7756 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - will be cured on reboot
        17:58:48.0245 7756 \Device\Harddisk0\DR0 - ok
        17:58:48.0245 7756 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - User select action: Cure
        17:59:54.0592 1464 Deinitialize success