Supprimer rootkit : System32\consrv.dll

Non je l'ai supprimé...

17:26:50.0596 2368 TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
17:26:50.0752 2368 ============================================================
17:26:50.0752 2368 Current date / time: 2012/09/08 17:26:50.0752
17:26:50.0752 2368 SystemInfo:
17:26:50.0752 2368
17:26:50.0752 2368 OS Version: 6.1.7601 ServicePack: 1.0
17:26:50.0752 2368 Product type: Workstation
17:26:50.0752 2368 ComputerName: DUPUIS
17:26:50.0798 2368 UserName: Dupuis Jean Luc
17:26:50.0798 2368 Windows directory: C:\Windows
17:26:50.0798 2368 System windows directory: C:\Windows
17:26:50.0798 2368 Running under WOW64
17:26:50.0798 2368 Processor architecture: Intel x64
17:26:50.0798 2368 Number of processors: 2
17:26:50.0798 2368 Page size: 0x1000
17:26:50.0798 2368 Boot type: Normal boot
17:26:50.0798 2368 ============================================================
17:26:53.0873 2368 BG loaded
17:26:54.0653 2368 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:26:54.0668 2368 ============================================================
17:26:54.0668 2368 \Device\Harddisk0\DR0:
17:26:54.0668 2368 MBR partitions:
17:26:54.0668 2368 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1B58800, BlocksNum 0x32000
17:26:54.0668 2368 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1B8A800, BlocksNum 0x395BE000
17:26:54.0668 2368 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x3B148800, BlocksNum 0x395BDDB0
17:26:54.0668 2368 ============================================================
17:26:54.0684 2368 C: <-> \Device\Harddisk0\DR0\Partition2
17:26:54.0715 2368 D: <-> \Device\Harddisk0\DR0\Partition3
17:26:54.0715 2368 ============================================================
17:26:54.0715 2368 Initialize success
17:26:54.0715 2368 ============================================================

(et là le rapport avant redémarrage) : 17:24:20.0930 4996 TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
17:24:21.0393 4996 ============================================================
17:24:21.0393 4996 Current date / time: 2012/09/08 17:24:21.0393
17:24:21.0393 4996 SystemInfo:
17:24:21.0393 4996
17:24:21.0393 4996 OS Version: 6.1.7601 ServicePack: 1.0
17:24:21.0393 4996 Product type: Workstation
17:24:21.0393 4996 ComputerName: DUPUIS
17:24:21.0393 4996 UserName: Dupuis Jean Luc
17:24:21.0393 4996 Windows directory: C:\Windows
17:24:21.0393 4996 System windows directory: C:\Windows
17:24:21.0393 4996 Running under WOW64
17:24:21.0393 4996 Processor architecture: Intel x64
17:24:21.0393 4996 Number of processors: 2
17:24:21.0393 4996 Page size: 0x1000
17:24:21.0393 4996 Boot type: Normal boot
17:24:21.0393 4996 ============================================================
17:24:22.0722 4996 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:24:22.0732 4996 ============================================================
17:24:22.0732 4996 \Device\Harddisk0\DR0:
17:24:22.0732 4996 MBR partitions:
17:24:22.0732 4996 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1B58800, BlocksNum 0x32000
17:24:22.0732 4996 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1B8A800, BlocksNum 0x395BE000
17:24:22.0732 4996 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x3B148800, BlocksNum 0x395BDDB0
17:24:22.0732 4996 ============================================================
17:24:22.0754 4996 C: <-> \Device\Harddisk0\DR0\Partition2
17:24:22.0789 4996 D: <-> \Device\Harddisk0\DR0\Partition3
17:24:22.0790 4996 ============================================================
17:24:22.0790 4996 Initialize success
17:24:22.0790 4996 ============================================================
17:24:31.0196 4808 ============================================================
17:24:31.0197 4808 Scan started
17:24:31.0197 4808 Mode: Manual;
17:24:31.0197 4808 ============================================================
17:24:32.0211 4808 ================ Scan system memory ========================
17:24:32.0211 4808 System memory - ok
17:24:32.0212 4808 ================ Scan services =============================
17:24:32.0363 4808 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
17:24:32.0367 4808 1394ohci - ok
17:24:32.0467 4808 [ B33CF4DE909A5B30F526D82053A63C8E ] ABBYY.Licensing.FineReader.Sprint.9.0 C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
17:24:32.0479 4808 ABBYY.Licensing.FineReader.Sprint.9.0 - ok
17:24:32.0513 4808 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
17:24:32.0519 4808 ACPI - ok
17:24:32.0546 4808 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
17:24:32.0547 4808 AcpiPmi - ok
17:24:32.0663 4808 [ B2B64AF436FACCFA854DD397027C5360 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
17:24:32.0669 4808 AdobeFlashPlayerUpdateSvc - ok
17:24:32.0706 4808 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
17:24:32.0717 4808 adp94xx - ok
17:24:32.0734 4808 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
17:24:32.0742 4808 adpahci - ok
17:24:32.0750 4808 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
17:24:32.0755 4808 adpu320 - ok
17:24:32.0788 4808 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
17:24:32.0789 4808 AeLookupSvc - ok
17:24:32.0868 4808 [ D5B031C308A409A0A576BFF4CF083D30 ] AFD C:\Windows\system32\drivers\afd.sys
17:24:32.0878 4808 AFD - ok
17:24:32.0914 4808 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
17:24:32.0918 4808 agp440 - ok
17:24:33.0109 4808 [ 0923671CF87CD511E46D4668B53F5E76 ] Akamai c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll
17:24:33.0109 4808 Suspicious file (Hidden): c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll. md5: 0923671CF87CD511E46D4668B53F5E76
17:24:33.0117 4808 Akamai ( HiddenFile.Multi.Generic ) - warning
17:24:33.0117 4808 Akamai - detected HiddenFile.Multi.Generic (1)
17:24:33.0146 4808 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
17:24:33.0149 4808 ALG - ok
17:24:33.0165 4808 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
17:24:33.0167 4808 aliide - ok
17:24:33.0201 4808 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
17:24:33.0202 4808 amdide - ok
17:24:33.0221 4808 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
17:24:33.0222 4808 AmdK8 - ok
17:24:33.0263 4808 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
17:24:33.0265 4808 AmdPPM - ok
17:24:33.0301 4808 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
17:24:33.0305 4808 amdsata - ok
17:24:33.0330 4808 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
17:24:33.0334 4808 amdsbs - ok
17:24:33.0362 4808 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
17:24:33.0364 4808 amdxata - ok
17:24:33.0486 4808 [ B458A95F12D36F55F98A42FD66BAEBFA ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
17:24:33.0488 4808 AntiVirSchedulerService - ok
17:24:33.0541 4808 [ CC3110EEF77AA0810CAA03741168BA8F ] AntiVirService C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
17:24:33.0543 4808 AntiVirService - ok
17:24:33.0629 4808 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
17:24:33.0632 4808 AppID - ok
17:24:33.0648 4808 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
17:24:33.0651 4808 AppIDSvc - ok
17:24:33.0688 4808 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
17:24:33.0691 4808 Appinfo - ok
17:24:33.0781 4808 [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
17:24:33.0784 4808 Apple Mobile Device - ok
17:24:33.0854 4808 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
17:24:33.0857 4808 arc - ok
17:24:33.0869 4808 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
17:24:33.0873 4808 arcsas - ok
17:24:33.0964 4808 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
17:24:33.0967 4808 AsyncMac - ok
17:24:34.0008 4808 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
17:24:34.0010 4808 atapi - ok
17:24:34.0053 4808 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
17:24:34.0063 4808 AudioEndpointBuilder - ok
17:24:34.0097 4808 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
17:24:34.0108 4808 AudioSrv - ok
17:24:34.0179 4808 [ E29EA1A0EC7AB9FA2DC7E75A03F12A4F ] AVGIDSDriver C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
17:24:34.0181 4808 AVGIDSDriver - ok
17:24:34.0209 4808 [ F823D184B8E8FFB8DA3EAD45DBF5BD6A ] AVGIDSEH C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
17:24:34.0210 4808 AVGIDSEH - ok
17:24:34.0249 4808 [ ED2B25BD7FE35D1944211968842D30DA ] AVGIDSFilter C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
17:24:34.0250 4808 AVGIDSFilter - ok
17:24:34.0326 4808 [ DADFCCFB036DA99FA83E7E1D29290A6C ] Avgldx64 C:\Windows\system32\DRIVERS\avgldx64.sys
17:24:34.0331 4808 Avgldx64 - ok
17:24:34.0347 4808 [ 36B1A5843695766EAC714DAFFC5B84D1 ] Avgmfx64 C:\Windows\system32\DRIVERS\avgmfx64.sys
17:24:34.0348 4808 Avgmfx64 - ok
17:24:34.0413 4808 [ 26E38B5A58C6C55FAFBC563EEDDB0867 ] avgntflt C:\Windows\system32\DRIVERS\avgntflt.sys
17:24:34.0415 4808 avgntflt - ok
17:24:34.0468 4808 [ 1102239FB724527F1FEBBBBCCF6BF313 ] Avgrkx64 C:\Windows\system32\DRIVERS\avgrkx64.sys
17:24:34.0469 4808 Avgrkx64 - ok
17:24:34.0498 4808 [ 11F36D3EA82D9DB9AA05A476A210551B ] Avgtdia C:\Windows\system32\DRIVERS\avgtdia.sys
17:24:34.0505 4808 Avgtdia - ok
17:24:34.0532 4808 [ 9D1F00BEFF84CBBF46D7F052BC7E0565 ] avipbb C:\Windows\system32\DRIVERS\avipbb.sys
17:24:34.0534 4808 avipbb - ok
17:24:34.0548 4808 [ 248DB59FC86DE44D2779F4C7FB1A567D ] avkmgr C:\Windows\system32\DRIVERS\avkmgr.sys
17:24:34.0549 4808 avkmgr - ok
17:24:34.0592 4808 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
17:24:34.0595 4808 AxInstSV - ok
17:24:34.0642 4808 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
17:24:34.0647 4808 b06bdrv - ok
17:24:34.0700 4808 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
17:24:34.0705 4808 b57nd60a - ok
17:24:34.0799 4808 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
17:24:34.0803 4808 BDESVC - ok
17:24:34.0827 4808 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
17:24:34.0828 4808 Beep - ok
17:24:34.0897 4808 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
17:24:34.0908 4808 BFE - ok
17:24:34.0953 4808 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
17:24:34.0955 4808 blbdrive - ok
17:24:35.0010 4808 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
17:24:35.0014 4808 Bonjour Service - ok
17:24:35.0050 4808 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
17:24:35.0050 4808 bowser - ok
17:24:35.0050 4808 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
17:24:35.0065 4808 BrFiltLo - ok
17:24:35.0065 4808 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
17:24:35.0065 4808 BrFiltUp - ok
17:24:35.0081 4808 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
17:24:35.0097 4808 BridgeMP - ok
17:24:35.0128 4808 [ 8EF0D5C41EC907751B8429162B1239ED ] Browser C:\Windows\System32\browser.dll
17:24:35.0128 4808 Browser - ok
17:24:35.0315 4808 [ 7EFFCCD7B6EA4D3428F5B3ACE8DE8F5A ] Browser Defender Update Service C:\Program Files (x86)\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe
17:24:35.0315 4808 Browser Defender Update Service - ok
17:24:35.0331 4808 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
17:24:35.0331 4808 Brserid - ok
17:24:35.0331 4808 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
17:24:35.0331 4808 BrSerWdm - ok
17:24:35.0346 4808 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
17:24:35.0346 4808 BrUsbMdm - ok
17:24:35.0346 4808 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
17:24:35.0346 4808 BrUsbSer - ok
17:24:35.0362 4808 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
17:24:35.0362 4808 BTHMODEM - ok
17:24:35.0377 4808 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
17:24:35.0377 4808 bthserv - ok
17:24:35.0393 4808 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
17:24:35.0393 4808 cdfs - ok
17:24:35.0442 4808 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
17:24:35.0444 4808 cdrom - ok
17:24:35.0489 4808 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
17:24:35.0490 4808 CertPropSvc - ok
17:24:35.0511 4808 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
17:24:35.0513 4808 circlass - ok
17:24:35.0532 4808 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
17:24:35.0537 4808 CLFS - ok
17:24:35.0595 4808 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:24:35.0598 4808 clr_optimization_v2.0.50727_32 - ok
17:24:35.0611 4808 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:24:35.0612 4808 clr_optimization_v2.0.50727_64 - ok
17:24:35.0696 4808 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:24:35.0697 4808 clr_optimization_v4.0.30319_32 - ok
17:24:35.0727 4808 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:24:35.0728 4808 clr_optimization_v4.0.30319_64 - ok
17:24:35.0737 4808 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
17:24:35.0738 4808 CmBatt - ok
17:24:35.0765 4808 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
17:24:35.0766 4808 cmdide - ok
17:24:35.0803 4808 [ D5FEA92400F12412B3922087C09DA6A5 ] CNG C:\Windows\system32\Drivers\cng.sys
17:24:35.0808 4808 CNG - ok
17:24:35.0845 4808 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
17:24:35.0846 4808 Compbatt - ok
17:24:35.0874 4808 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
17:24:35.0875 4808 CompositeBus - ok
17:24:35.0902 4808 COMSysApp - ok
17:24:35.0910 4808 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
17:24:35.0911 4808 crcdisk - ok
17:24:35.0963 4808 [ 15597883FBE9B056F276ADA3AD87D9AF ] CryptSvc C:\Windows\system32\cryptsvc.dll
17:24:35.0964 4808 CryptSvc - ok
17:24:36.0000 4808 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
17:24:36.0004 4808 DcomLaunch - ok
17:24:36.0034 4808 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
17:24:36.0038 4808 defragsvc - ok
17:24:36.0075 4808 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
17:24:36.0078 4808 DfsC - ok
17:24:36.0110 4808 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
17:24:36.0113 4808 Dhcp - ok
17:24:36.0138 4808 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
17:24:36.0139 4808 discache - ok
17:24:36.0190 4808 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
17:24:36.0217 4808 Disk - ok
17:24:36.0274 4808 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
17:24:36.0276 4808 Dnscache - ok
17:24:36.0320 4808 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
17:24:36.0328 4808 dot3svc - ok
17:24:36.0366 4808 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
17:24:36.0368 4808 DPS - ok
17:24:36.0397 4808 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
17:24:36.0398 4808 drmkaud - ok
17:24:36.0463 4808 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
17:24:36.0477 4808 DXGKrnl - ok
17:24:36.0500 4808 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
17:24:36.0503 4808 EapHost - ok
17:24:36.0588 4808 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
17:24:36.0642 4808 ebdrv - ok
17:24:36.0661 4808 [ 0793F40B9B8A1BDD266296409DBD91EA ] EFS C:\Windows\System32\lsass.exe
17:24:36.0662 4808 EFS - ok
17:24:36.0713 4808 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
17:24:36.0723 4808 ehRecvr - ok
17:24:36.0759 4808 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
17:24:36.0763 4808 ehSched - ok
17:24:36.0793 4808 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
17:24:36.0802 4808 elxstor - ok
17:24:36.0901 4808 [ 7DB097F4F6786307168C0DDDEC43A565 ] EPSON_EB_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
17:24:36.0904 4808 EPSON_EB_RPCV4_04 - ok
17:24:36.0928 4808 [ 258AA65A0862E19B7DE6981FDA3758AD ] EPSON_PM_RPCV4_04 C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
17:24:36.0931 4808 EPSON_PM_RPCV4_04 - ok
17:24:36.0967 4808 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
17:24:36.0970 4808 ErrDev - ok
17:24:37.0011 4808 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
17:24:37.0016 4808 EventSystem - ok
17:24:37.0040 4808 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
17:24:37.0045 4808 exfat - ok
17:24:37.0093 4808 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
17:24:37.0100 4808 fastfat - ok
17:24:37.0174 4808 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
17:24:37.0188 4808 Fax - ok
17:24:37.0218 4808 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
17:24:37.0221 4808 fdc - ok
17:24:37.0259 4808 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
17:24:37.0261 4808 fdPHost - ok
17:24:37.0277 4808 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
17:24:37.0280 4808 FDResPub - ok
17:24:37.0302 4808 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
17:24:37.0303 4808 FileInfo - ok
17:24:37.0322 4808 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
17:24:37.0324 4808 Filetrace - ok
17:24:37.0328 4808 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
17:24:37.0330 4808 flpydisk - ok
17:24:37.0367 4808 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
17:24:37.0373 4808 FltMgr - ok
17:24:37.0415 4808 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
17:24:37.0423 4808 FontCache - ok
17:24:37.0483 4808 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:24:37.0484 4808 FontCache3.0.0.0 - ok
17:24:37.0563 4808 [ A9FF65EA14E4CABFCC1BB8ECE111A249 ] ForceWare Intelligent Application Manager (IAM) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
17:24:37.0572 4808 ForceWare Intelligent Application Manager (IAM) - ok
17:24:37.0588 4808 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
17:24:37.0590 4808 FsDepends - ok
17:24:37.0615 4808 [ E95EF8547DE20CF0603557C0CF7A9462 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
17:24:37.0617 4808 Fs_Rec - ok
17:24:37.0685 4808 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
17:24:37.0690 4808 fvevol - ok
17:24:37.0714 4808 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
17:24:37.0718 4808 gagp30kx - ok
17:24:37.0750 4808 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
17:24:37.0751 4808 GEARAspiWDM - ok
17:24:37.0841 4808 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
17:24:37.0854 4808 gpsvc - ok
17:24:37.0916 4808 [ 816FD5A6F3C2F3D600900096632FC60E ] Greg_Service C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
17:24:37.0932 4808 Greg_Service - ok
17:24:38.0055 4808 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:24:38.0058 4808 gupdate - ok
17:24:38.0083 4808 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
17:24:38.0086 4808 gupdatem - ok
17:24:38.0120 4808 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
17:24:38.0123 4808 hcw85cir - ok
17:24:38.0176 4808 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
17:24:38.0184 4808 HdAudAddService - ok
17:24:38.0219 4808 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
17:24:38.0221 4808 HDAudBus - ok
17:24:38.0240 4808 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
17:24:38.0242 4808 HidBatt - ok
17:24:38.0254 4808 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
17:24:38.0257 4808 HidBth - ok
17:24:38.0266 4808 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
17:24:38.0267 4808 HidIr - ok
17:24:38.0278 4808 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
17:24:38.0280 4808 hidserv - ok
17:24:38.0324 4808 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
17:24:38.0326 4808 HidUsb - ok
17:24:38.0358 4808 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
17:24:38.0362 4808 hkmsvc - ok
17:24:38.0397 4808 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
17:24:38.0404 4808 HomeGroupListener - ok
17:24:38.0436 4808 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
17:24:38.0440 4808 HomeGroupProvider - ok
17:24:38.0485 4808 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
17:24:38.0488 4808 HpSAMD - ok
17:24:38.0544 4808 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
17:24:38.0559 4808 HTTP - ok
17:24:38.0585 4808 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
17:24:38.0586 4808 hwpolicy - ok
17:24:38.0641 4808 [ 4B7423FCC37664954460AC3E71752B62 ] hxctlflt C:\Windows\system32\Drivers\hxctlflt.sys
17:24:38.0644 4808 hxctlflt - ok
17:24:38.0703 4808 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
17:24:38.0706 4808 i8042prt - ok
17:24:38.0775 4808 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
17:24:38.0784 4808 iaStorV - ok
17:24:38.0828 4808 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:24:38.0837 4808 idsvc - ok
17:24:38.0865 4808 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
17:24:38.0867 4808 iirsp - ok
17:24:38.0889 4808 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
17:24:38.0894 4808 IKEEXT - ok
17:24:38.0974 4808 [ A9E7A3FE06D451DD5DD1D3DCB060E467 ] imapi C:\Windows\system32\coste.dll
17:24:38.0975 4808 imapi ( Backdoor.Multi.ZAccess.gen ) - infected
17:24:38.0975 4808 imapi - detected Backdoor.Multi.ZAccess.gen (0)
17:24:39.0065 4808 [ BC64B75E8E0A0B8982AB773483164E72 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
17:24:39.0080 4808 IntcAzAudAddService - ok
17:24:39.0116 4808 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
17:24:39.0118 4808 intelide - ok
17:24:39.0144 4808 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
17:24:39.0147 4808 intelppm - ok
17:24:39.0179 4808 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
17:24:39.0182 4808 IPBusEnum - ok
17:24:39.0215 4808 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:24:39.0217 4808 IpFilterDriver - ok
17:24:39.0257 4808 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
17:24:39.0267 4808 iphlpsvc - ok
17:24:39.0300 4808 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
17:24:39.0302 4808 IPMIDRV - ok
17:24:39.0323 4808 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
17:24:39.0327 4808 IPNAT - ok
17:24:39.0397 4808 [ A9AB99EE7D39725EAFEC82732D2B3271 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
17:24:39.0411 4808 iPod Service - ok
17:24:39.0452 4808 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
17:24:39.0455 4808 IRENUM - ok
17:24:39.0469 4808 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
17:24:39.0472 4808 isapnp - ok
17:24:39.0516 4808 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
17:24:39.0520 4808 iScsiPrt - ok
17:24:39.0553 4808 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
17:24:39.0554 4808 kbdclass - ok
17:24:39.0581 4808 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
17:24:39.0583 4808 kbdhid - ok
17:24:39.0594 4808 [ 0793F40B9B8A1BDD266296409DBD91EA ] KeyIso C:\Windows\system32\lsass.exe
17:24:39.0596 4808 KeyIso - ok
17:24:39.0618 4808 [ CCD53B5BD33CE0C889E830D839C8B66E ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
17:24:39.0620 4808 KSecDD - ok
17:24:39.0653 4808 [ 9FF918A261752C12639E8AD4208D2C2F ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
17:24:39.0657 4808 KSecPkg - ok
17:24:39.0669 4808 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
17:24:39.0671 4808 ksthunk - ok
17:24:39.0698 4808 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
17:24:39.0707 4808 KtmRm - ok
17:24:39.0763 4808 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
17:24:39.0770 4808 LanmanServer - ok
17:24:39.0812 4808 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
17:24:39.0815 4808 LanmanWorkstation - ok
17:24:39.0860 4808 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
17:24:39.0863 4808 lltdio - ok
17:24:39.0900 4808 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
17:24:39.0909 4808 lltdsvc - ok
17:24:39.0923 4808 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
17:24:39.0926 4808 lmhosts - ok
17:24:39.0964 4808 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
17:24:39.0968 4808 LSI_FC - ok
17:24:39.0978 4808 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
17:24:39.0981 4808 LSI_SAS - ok
17:24:39.0990 4808 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
17:24:39.0992 4808 LSI_SAS2 - ok
17:24:40.0003 4808 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
17:24:40.0005 4808 LSI_SCSI - ok
17:24:40.0020 4808 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
17:24:40.0022 4808 luafv - ok
17:24:40.0061 4808 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
17:24:40.0063 4808 Mcx2Svc - ok
17:24:40.0071 4808 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
17:24:40.0072 4808 megasas - ok
17:24:40.0084 4808 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
17:24:40.0087 4808 MegaSR - ok
17:24:40.0116 4808 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
17:24:40.0118 4808 MMCSS - ok
17:24:40.0122 4808 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
17:24:40.0123 4808 Modem - ok
17:24:40.0135 4808 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
17:24:40.0136 4808 monitor - ok
17:24:40.0164 4808 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\drivers\mouclass.sys
17:24:40.0164 4808 mouclass - ok
17:24:40.0181 4808 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
17:24:40.0183 4808 mouhid - ok
17:24:40.0221 4808 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
17:24:40.0224 4808 mountmgr - ok
17:24:40.0263 4808 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
17:24:40.0268 4808 mpio - ok
17:24:40.0278 4808 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
17:24:40.0281 4808 mpsdrv - ok
17:24:40.0334 4808 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
17:24:40.0348 4808 MpsSvc - ok
17:24:40.0385 4808 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
17:24:40.0388 4808 MRxDAV - ok
17:24:40.0421 4808 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
17:24:40.0423 4808 mrxsmb - ok
17:24:40.0460 4808 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:24:40.0464 4808 mrxsmb10 - ok
17:24:40.0480 4808 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:24:40.0483 4808 mrxsmb20 - ok
17:24:40.0508 4808 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
17:24:40.0510 4808 msahci - ok
17:24:40.0535 4808 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
17:24:40.0537 4808 msdsm - ok
17:24:40.0567 4808 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
17:24:40.0570 4808 MSDTC - ok
17:24:40.0625 4808 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
17:24:40.0627 4808 Msfs - ok
17:24:40.0671 4808 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
17:24:40.0673 4808 mshidkmdf - ok
17:24:40.0704 4808 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
17:24:40.0705 4808 msisadrv - ok
17:24:40.0732 4808 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
17:24:40.0738 4808 MSiSCSI - ok
17:24:40.0747 4808 msiserver - ok
17:24:40.0798 4808 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
17:24:40.0801 4808 MSKSSRV - ok
17:24:40.0823 4808 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
17:24:40.0824 4808 MSPCLOCK - ok
17:24:40.0834 4808 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
17:24:40.0837 4808 MSPQM - ok
17:24:40.0871 4808 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
17:24:40.0876 4808 MsRPC - ok
17:24:40.0902 4808 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
17:24:40.0903 4808 mssmbios - ok
17:24:40.0960 4808 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
17:24:40.0962 4808 MSTEE - ok
17:24:40.0974 4808 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
17:24:40.0977 4808 MTConfig - ok
17:24:41.0009 4808 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
17:24:41.0010 4808 Mup - ok
17:24:41.0051 4808 [ 6FFECC25B39DC7652A0CEC0ADA9DB589 ] mwlPSDFilter C:\Windows\system32\DRIVERS\mwlPSDFilter.sys
17:24:41.0052 4808 mwlPSDFilter - ok
17:24:41.0074 4808 [ 0BEFE32CA56D6EE89D58175725596A85 ] mwlPSDNServ C:\Windows\system32\DRIVERS\mwlPSDNServ.sys
17:24:41.0075 4808 mwlPSDNServ - ok
17:24:41.0088 4808 [ D43BC633B8660463E446E28E14A51262 ] mwlPSDVDisk C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys
17:24:41.0090 4808 mwlPSDVDisk - ok
17:24:41.0153 4808 [ 2F139207F618EC2933830227EEFFDDB4 ] MWLService C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe
17:24:41.0158 4808 MWLService - ok
17:24:41.0208 4808 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
17:24:41.0219 4808 napagent - ok
17:24:41.0258 4808 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
17:24:41.0283 4808 NativeWifiP - ok
17:24:41.0400 4808 [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS C:\Windows\system32\drivers\ndis.sys
17:24:41.0413 4808 NDIS - ok
17:24:41.0485 4808 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
17:24:41.0513 4808 NdisCap - ok
17:24:41.0552 4808 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
17:24:41.0554 4808 NdisTapi - ok
17:24:41.0607 4808 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
17:24:41.0611 4808 Ndisuio - ok
17:24:41.0650 4808 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
17:24:41.0654 4808 NdisWan - ok
17:24:41.0695 4808 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
17:24:41.0698 4808 NDProxy - ok
17:24:41.0713 4808 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
17:24:41.0716 4808 NetBIOS - ok
17:24:41.0766 4808 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
17:24:41.0770 4808 NetBT - ok
17:24:41.0783 4808 [ 0793F40B9B8A1BDD266296409DBD91EA ] Netlogon C:\Windows\system32\lsass.exe
17:24:41.0785 4808 Netlogon - ok
17:24:41.0837 4808 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
17:24:41.0845 4808 Netman - ok
17:24:41.0873 4808 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
17:24:41.0877 4808 netprofm - ok
17:24:41.0901 4808 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:24:41.0903 4808 NetTcpPortSharing - ok
17:24:41.0916 4808 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
17:24:41.0917 4808 nfrd960 - ok
17:24:41.0972 4808 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll
17:24:41.0979 4808 NlaSvc - ok
17:24:42.0004 4808 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
17:24:42.0007 4808 Npfs - ok
17:24:42.0019 4808 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
17:24:42.0022 4808 nsi - ok
17:24:42.0043 4808 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
17:24:42.0045 4808 nsiproxy - ok
17:24:42.0068 4808 [ C04F5DEF37E55F6A34428B050F44D3D6 ] nSvcIp C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
17:24:42.0071 4808 nSvcIp - ok
17:24:42.0136 4808 [ A2F74975097F52A00745F9637451FDD8 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
17:24:42.0175 4808 Ntfs - ok
17:24:42.0246 4808 [ BD691091AC7D9713D8F0B07C6B099E6C ] NTI IScheduleSvc C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
17:24:42.0248 4808 NTI IScheduleSvc - ok
17:24:42.0260 4808 [ 64DDD0DEE976302F4BD93E5EFCC2F013 ] NTIDrvr C:\Windows\system32\drivers\NTIDrvr.sys
17:24:42.0262 4808 NTIDrvr - ok
17:24:42.0283 4808 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
17:24:42.0285 4808 Null - ok
17:24:42.0317 4808 [ A85B4F2EF3A7304A5399EF0526423040 ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x64.sys
17:24:42.0325 4808 NVENETFD - ok
17:24:42.0385 4808 [ CB599955CE2CE9694721562F9481CD84 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
17:24:42.0387 4808 NVHDA - ok
17:24:42.0623 4808 [ D7A2CD1D76E6CC996A0852D566AF2F73 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
17:24:42.0687 4808 nvlddmkm - ok
17:24:42.0738 4808 [ 956A1F47826514C1EA0C295FE13C7377 ] NVNET C:\Windows\system32\DRIVERS\nvmf6264.sys
17:24:42.0744 4808 NVNET - ok
17:24:42.0781 4808 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
17:24:42.0783 4808 nvraid - ok
17:24:42.0823 4808 [ AFDE3015BB8D76E26BEC3B287C5443A0 ] nvsmu C:\Windows\system32\DRIVERS\nvsmu.sys
17:24:42.0825 4808 nvsmu - ok
17:24:42.0856 4808 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
17:24:42.0860 4808 nvstor - ok
17:24:42.0892 4808 [ 7C7EEF51979658CE15BBC04F96A77D56 ] nvstor64 C:\Windows\system32\DRIVERS\nvstor64.sys
17:24:42.0896 4808 nvstor64 - ok
17:24:42.0952 4808 [ 59DD481E0063F8F7EA8B9F149FCACF32 ] nvsvc C:\Windows\system32\nvvsvc.exe
17:24:42.0960 4808 nvsvc - ok
17:24:43.0016 4808 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
17:24:43.0019 4808 nv_agp - ok
17:24:43.0082 4808 [ 1F0E05DFF4F5A833168E49BE1256F002 ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
17:24:43.0089 4808 odserv - ok
17:24:43.0128 4808 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
17:24:43.0131 4808 ohci1394 - ok
17:24:43.0178 4808 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:24:43.0181 4808 ose - ok
17:24:43.0216 4808 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
17:24:43.0223 4808 p2pimsvc - ok
17:24:43.0244 4808 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
17:24:43.0249 4808 p2psvc - ok
17:24:43.0273 4808 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
17:24:43.0274 4808 Parport - ok
17:24:43.0308 4808 [ 871EADAC56B0A4C6512BBE32753CCF79 ] partmgr C:\Windows\system32\drivers\partmgr.sys
17:24:43.0310 4808 partmgr - ok
17:24:43.0352 4808 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
17:24:43.0354 4808 PcaSvc - ok
17:24:43.0387 4808 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
17:24:43.0389 4808 pci - ok
17:24:43.0404 4808 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
17:24:43.0404 4808 pciide - ok
17:24:43.0416 4808 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
17:24:43.0418 4808 pcmcia - ok
17:24:43.0467 4808 [ A87932FF09593BA8D197667A13E2A628 ] PCTBD C:\Windows\system32\Drivers\PCTBD64.sys
17:24:43.0470 4808 PCTBD - ok
17:24:43.0537 4808 [ 876FD95B7A3B7FE6179FBD16E7A6486C ] PCTCore C:\Windows\system32\drivers\PCTCore64.sys
17:24:43.0546 4808 PCTCore - ok
17:24:43.0602 4808 [ BA1F42A42F405F62CEFF6B69A2797F7C ] pctDS C:\Windows\system32\drivers\pctDS64.sys
17:24:43.0611 4808 pctDS - ok
17:24:43.0688 4808 [ 146CC91C93CED13E7FE40E8D8615BE39 ] pctEFA C:\Windows\system32\drivers\pctEFA64.sys
17:24:43.0719 4808 pctEFA - ok
17:24:43.0756 4808 [ 2734C67950C2ECCF46D2709DB6CFFC20 ] pctgntdi C:\Windows\System32\drivers\pctgntdi64.sys
17:24:43.0762 4808 pctgntdi - ok
17:24:43.0827 4808 [ 8131A2C7B6D39A995DC73E20C31BC177 ] pctplsg C:\Windows\System32\drivers\pctplsg64.sys
17:24:43.0830 4808 pctplsg - ok
17:24:43.0885 4808 [ C4775E7F54F3CC6307B73462B1B802C6 ] PCTSD C:\Windows\system32\Drivers\PCTSD64.sys
17:24:43.0889 4808 PCTSD - ok
17:24:43.0907 4808 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
17:24:43.0908 4808 pcw - ok
17:24:43.0934 4808 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
17:24:43.0943 4808 PEAUTH - ok
17:24:44.0014 4808 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
17:24:44.0016 4808 PerfHost - ok
17:24:44.0100 4808 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
17:24:44.0144 4808 pla - ok
17:24:44.0219 4808 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
17:24:44.0228 4808 PlugPlay - ok
17:24:44.0249 4808 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
17:24:44.0254 4808 PNRPAutoReg - ok
17:24:44.0281 4808 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
17:24:44.0289 4808 PNRPsvc - ok
17:24:44.0317 4808 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
17:24:44.0325 4808 PolicyAgent - ok
17:24:44.0363 4808 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
17:24:44.0368 4808 Power - ok
17:24:44.0405 4808 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
17:24:44.0407 4808 PptpMiniport - ok
17:24:44.0437 4808 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
17:24:44.0439 4808 Processor - ok
17:24:44.0466 4808 [ 5C78838B4D166D1A27DB3A8A820C799A ] ProfSvc C:\Windows\system32\profsvc.dll
17:24:44.0469 4808 ProfSvc - ok
17:24:44.0483 4808 [ 0793F40B9B8A1BDD266296409DBD91EA ] ProtectedStorage C:\Windows\system32\lsass.exe
17:24:44.0485 4808 ProtectedStorage - ok
17:24:44.0522 4808 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
17:24:44.0523 4808 Psched - ok
17:24:44.0556 4808 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
17:24:44.0589 4808 ql2300 - ok
17:24:44.0599 4808 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
17:24:44.0601 4808 ql40xx - ok
17:24:44.0635 4808 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
17:24:44.0639 4808 QWAVE - ok
17:24:44.0649 4808 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
17:24:44.0650 4808 QWAVEdrv - ok
17:24:44.0658 4808 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
17:24:44.0659 4808 RasAcd - ok
17:24:44.0695 4808 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
17:24:44.0697 4808 RasAgileVpn - ok
17:24:44.0718 4808 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
17:24:44.0721 4808 RasAuto - ok
17:24:44.0752 4808 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
17:24:44.0756 4808 Rasl2tp - ok
17:24:44.0792 4808 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
17:24:44.0797 4808 RasMan - ok
17:24:44.0833 4808 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
17:24:44.0836 4808 RasPppoe - ok
17:24:44.0867 4808 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
17:24:44.0870 4808 RasSstp - ok
17:24:44.0902 4808 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
17:24:44.0909 4808 rdbss - ok
17:24:44.0931 4808 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
17:24:44.0934 4808 rdpbus - ok
17:24:44.0955 4808 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
17:24:44.0957 4808 RDPCDD - ok
17:24:44.0999 4808 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
17:24:45.0000 4808 RDPENCDD - ok
17:24:45.0025 4808 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
17:24:45.0026 4808 RDPREFMP - ok
17:24:45.0061 4808 [ 15B66C206B5CB095BAB980553F38ED23 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
17:24:45.0065 4808 RDPWD - ok
17:24:45.0098 4808 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
17:24:45.0100 4808 rdyboost - ok
17:24:45.0120 4808 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
17:24:45.0125 4808 RemoteAccess - ok
17:24:45.0149 4808 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
17:24:45.0154 4808 RemoteRegistry - ok
17:24:45.0195 4808 [ 71B48DDAF5E9C2B40E64DE5C405F5AAC ] RimUsb C:\Windows\system32\Drivers\RimUsb_AMD64.sys
17:24:45.0198 4808 RimUsb - ok
17:24:45.0234 4808 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
17:24:45.0238 4808 RpcEptMapper - ok
17:24:45.0262 4808 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
17:24:45.0265 4808 RpcLocator - ok
17:24:45.0314 4808 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
17:24:45.0325 4808 RpcSs - ok
17:24:45.0346 4808 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
17:24:45.0350 4808 rspndr - ok
17:24:45.0361 4808 [ 0793F40B9B8A1BDD266296409DBD91EA ] SamSs C:\Windows\system32\lsass.exe
17:24:45.0364 4808 SamSs - ok
17:24:45.0395 4808 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
17:24:45.0398 4808 sbp2port - ok
17:24:45.0465 4808 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
17:24:45.0480 4808 SBSDWSCService - ok
17:24:45.0496 4808 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
17:24:45.0496 4808 SCardSvr - ok
17:24:45.0538 4808 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
17:24:45.0540 4808 scfilter - ok
17:24:45.0593 4808 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
17:24:45.0612 4808 Schedule - ok
17:24:45.0644 4808 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
17:24:45.0646 4808 SCPolicySvc - ok
17:24:45.0789 4808 [ CFEB26A26452D5337C2F3AADD8218FC3 ] sdAuxService C:\Program Files (x86)\PC Tools\PC Tools Security\pctsAuxs.exe
17:24:45.0798 4808 sdAuxService - ok
17:24:45.0856 4808 [ B906C04F469060F2DD7FCB84706B4493 ] sdCoreService C:\Program Files (x86)\PC Tools\PC Tools Security\pctsSvc.exe
17:24:45.0873 4808 sdCoreService - ok
17:24:45.0909 4808 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
17:24:45.0915 4808 SDRSVC - ok
17:24:45.0954 4808 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
17:24:45.0956 4808 secdrv - ok
17:24:45.0991 4808 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
17:24:45.0994 4808 seclogon - ok
17:24:46.0018 4808 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
17:24:46.0023 4808 SENS - ok
17:24:46.0065 4808 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
17:24:46.0070 4808 SensrSvc - ok
17:24:46.0088 4808 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
17:24:46.0090 4808 Serenum - ok
17:24:46.0101 4808 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
17:24:46.0106 4808 Serial - ok
17:24:46.0121 4808 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
17:24:46.0122 4808 sermouse - ok
17:24:46.0156 4808 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
17:24:46.0159 4808 SessionEnv - ok
17:24:46.0181 4808 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
17:24:46.0182 4808 sffdisk - ok
17:24:46.0198 4808 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
17:24:46.0199 4808 sffp_mmc - ok
17:24:46.0213 4808 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
17:24:46.0214 4808 sffp_sd - ok
17:24:46.0218 4808 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
17:24:46.0220 4808 sfloppy - ok
17:24:46.0295 4808 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
17:24:46.0300 4808 SharedAccess - ok
17:24:46.0346 4808 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
17:24:46.0355 4808 ShellHWDetection - ok
17:24:46.0380 4808 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
17:24:46.0383 4808 SiSRaid2 - ok
17:24:46.0395 4808 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
17:24:46.0398 4808 SiSRaid4 - ok
17:24:46.0415 4808 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
17:24:46.0418 4808 Smb - ok
17:24:46.0449 4808 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
17:24:46.0453 4808 SNMPTRAP - ok
17:24:46.0583 4808 [ BA2E864CDC01731A4F144019FB3BF598 ] SNP2UVC C:\Windows\system32\DRIVERS\snp2uvc.sys
17:24:46.0644 4808 SNP2UVC - ok
17:24:46.0779 4808 [ 5177D14A78E60FD61DCFC6B388E7E971 ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
17:24:46.0782 4808 Sony PC Companion - ok
17:24:46.0805 4808 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
17:24:46.0806 4808 spldr - ok
17:24:46.0854 4808 [ B96C17B5DC1424D56EEA3A99E97428CD ] Spooler C:\Windows\System32\spoolsv.exe
17:24:46.0865 4808 Spooler - ok
17:24:46.0993 4808 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
17:24:47.0016 4808 sppsvc - ok
17:24:47.0033 4808 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
17:24:47.0039 4808 sppuinotify - ok
17:24:47.0119 4808 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
17:24:47.0129 4808 srv - ok
17:24:47.0157 4808 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
17:24:47.0163 4808 srv2 - ok
17:24:47.0181 4808 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
17:24:47.0185 4808 srvnet - ok
17:24:47.0232 4808 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
17:24:47.0238 4808 SSDPSRV - ok
17:24:47.0255 4808 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
17:24:47.0261 4808 SstpSvc - ok
17:24:47.0277 4808 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
17:24:47.0279 4808 stexstor - ok
17:24:47.0304 4808 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
17:24:47.0311 4808 stisvc - ok
17:24:47.0376 4808 [ 01855B153ACD1269FE1F550319AEED9B ] supdate C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe
17:24:47.0379 4808 supdate - ok
17:24:47.0395 4808 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
17:24:47.0397 4808 swenum - ok
17:24:47.0423 4808 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
17:24:47.0432 4808 swprv - ok
17:24:47.0499 4808 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
17:24:47.0515 4808 SysMain - ok
17:24:47.0538 4808 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
17:24:47.0542 4808 TabletInputService - ok
17:24:47.0565 4808 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
17:24:47.0572 4808 TapiSrv - ok
17:24:47.0594 4808 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
17:24:47.0597 4808 TBS - ok
17:24:47.0669 4808 [ F0E98C00A09FDF791525829A1D14240F ] Tcpip C:\Windows\system32\drivers\tcpip.sys
17:24:47.0717 4808 Tcpip - ok
17:24:47.0799 4808 [ F0E98C00A09FDF791525829A1D14240F ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
17:24:47.0811 4808 TCPIP6 - ok
17:24:47.0853 4808 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
17:24:47.0854 4808 tcpipreg - ok
17:24:47.0878 4808 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
17:24:47.0880 4808 TDPIPE - ok
17:24:47.0888 4808 [ E4245BDA3190A582D55ED09E137401A9 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
17:24:47.0889 4808 TDTCP - ok
17:24:47.0939 4808 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
17:24:47.0942 4808 tdx - ok
17:24:47.0962 4808 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
17:24:47.0964 4808 TermDD - ok
17:24:47.0998 4808 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
17:24:48.0012 4808 TermService - ok
17:24:48.0036 4808 [ 9CD5C339754E2310790CA27DBBD31F88 ] TfFsMon C:\Windows\system32\drivers\TfFsMon.sys
17:24:48.0038 4808 TfFsMon - ok
17:24:48.0056 4808 [ 00809507FAFA1BE93DBBACE5029F27BB ] TfNetMon C:\Windows\system32\drivers\TfNetMon.sys
17:24:48.0057 4808 TfNetMon - ok
17:24:48.0101 4808 [ 3593A7B1264FBA24FE9E097A99B3E848 ] TFSysMon C:\Windows\system32\drivers\TfSysMon.sys
17:24:48.0110 4808 TFSysMon - ok
17:24:48.0131 4808 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
17:24:48.0133 4808 Themes - ok
17:24:48.0160 4808 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
17:24:48.0162 4808 THREADORDER - ok
17:24:48.0229 4808 ThreatFire - ok
17:24:48.0254 4808 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
17:24:48.0260 4808 TrkWks - ok
17:24:48.0310 4808 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
17:24:48.0315 4808 TrustedInstaller - ok
17:24:48.0356 4808 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
17:24:48.0358 4808 tssecsrv - ok
17:24:48.0424 4808 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
17:24:48.0427 4808 TsUsbFlt - ok
17:24:48.0481 4808 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
17:24:48.0485 4808 tunnel - ok
17:24:48.0507 4808 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
17:24:48.0510 4808 uagp35 - ok
17:24:48.0546 4808 [ 2E22C1FD397A5A9FFEF55E9D1FC96C00 ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
17:24:48.0547 4808 UBHelper - ok
17:24:48.0582 4808 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
17:24:48.0589 4808 udfs - ok
17:24:48.0617 4808 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
17:24:48.0632 4808 UI0Detect - ok
17:24:48.0692 4808 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
17:24:48.0694 4808 uliagpkx - ok
17:24:48.0746 4808 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
17:24:48.0749 4808 umbus - ok
17:24:48.0760 4808 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
17:24:48.0762 4808 UmPass - ok
17:24:48.0820 4808 [ 70DDE3A86DBEB1D6C3C30AD687B1877A ] Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe
17:24:48.0824 4808 Updater Service - ok
17:24:48.0859 4808 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
17:24:48.0868 4808 upnphost - ok
17:24:48.0897 4808 [ AA33FC47ED58C34E6E9261E4F850B7EB ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
17:24:48.0898 4808 USBAAPL64 - ok
17:24:48.0947 4808 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
17:24:48.0950 4808 usbaudio - ok
17:24:48.0984 4808 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
17:24:48.0988 4808 usbccgp - ok
17:24:49.0039 4808 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
17:24:49.0042 4808 usbcir - ok
17:24:49.0076 4808 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
17:24:49.0079 4808 usbehci - ok
17:24:49.0131 4808 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
17:24:49.0139 4808 usbhub - ok
17:24:49.0162 4808 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
17:24:49.0164 4808 usbohci - ok
17:24:49.0183 4808 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
17:24:49.0185 4808 usbprint - ok
17:24:49.0212 4808 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
17:24:49.0214 4808 usbscan - ok
17:24:49.0239 4808 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:24:49.0241 4808 USBSTOR - ok
17:24:49.0272 4808 [ 81FB2216D3A60D1284455D511797DB3D ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
17:24:49.0274 4808 usbuhci - ok
17:24:49.0305 4808 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
17:24:49.0307 4808 UxSms - ok
17:24:49.0327 4808 [ 0793F40B9B8A1BDD266296409DBD91EA ] VaultSvc C:\Windows\system32\lsass.exe
17:24:49.0329 4808 VaultSvc - ok
17:24:49.0376 4808 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
17:24:49.0378 4808 vdrvroot - ok
17:24:49.0425 4808 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\v

oui !

Il n'a pas eu besoin de redémarrer, voici le rapport : ComboFix 12-09-08.02 - Dupuis Jean Luc 08/09/2012 17:43:45.1.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3839.2633 [GMT 2:00]
Lancé depuis: c:\users\Dupuis Jean Luc\Downloads\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: PC Tools Spyware Doctor *Disabled/Updated* {94076BB2-F3DA-227F-9A1E-F060FF73600F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Common Files\Acer GameZone online.ico
c:\programdata\NVIDIA
c:\programdata\NVIDIA\NvApps.xml
c:\programdata\NVIDIA\NvStarted
c:\users\Dupuis Jean Luc\AppData\Roaming\.#
c:\users\Dupuis Jean Luc\AppData\Roaming\app
c:\users\Dupuis Jean Luc\AppData\Roaming\app\Jerakine_lang.dat
c:\users\Dupuis Jean Luc\AppData\Roaming\app\Jerakine_lang_vesrion.dat
c:\windows\assembly\tmp\U
c:\windows\av_ico
c:\windows\av_ico\ico_avast_desktop.ico
c:\windows\av_ico\ico_avast_start.ico
c:\windows\av_ico\ico_avira_start.ico
c:\windows\update.7.1
c:\windows\update.tray-8-0-lnk
c:\windows\update.tray-8-0
c:\windows\winlog-dirs.txt
c:\windows\winlog-ids.txt
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-08-08 au 2012-09-08 ))))))))))))))))))))))))))))))))))))
.
.
2012-09-08 15:55 . 2012-09-08 15:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-08 15:25 . 2012-09-08 15:25 -------- d-----w- C:\TDSSKiller_Quarantine
2012-09-02 11:38 . 2012-09-02 11:38 -------- d-----w- c:\windows\SysWow64\WCID
2012-09-02 09:00 . 2012-09-02 09:00 73416 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-09-02 09:00 . 2012-09-02 09:00 696520 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-09-02 09:00 . 2012-09-02 09:00 -------- d-----w- c:\windows\system32\Macromed
2012-09-02 08:47 . 2012-06-22 12:21 706776 --s---w- c:\windows\system32\drivers\TfSysMon.sys
2012-09-02 08:47 . 2012-06-22 12:21 65664 --s---w- c:\windows\system32\drivers\TfFsMon.sys
2012-09-02 08:47 . 2012-06-22 12:21 41968 --s---w- c:\windows\system32\drivers\TfNetMon.sys
2012-09-02 08:46 . 2012-06-22 09:39 85224 ----a-w- c:\windows\system32\drivers\PCTBD64.sys
2012-09-02 08:46 . 2012-06-22 09:38 767960 ----a-w- c:\windows\BDTSupport.dll
2012-09-02 08:46 . 2012-06-22 09:39 149464 ----a-w- c:\windows\SGDetectionTool.dll
2012-09-02 08:46 . 2012-06-22 09:39 2267096 ----a-w- c:\windows\PCTBDCore.dll
2012-09-02 08:46 . 2012-06-22 09:39 1689560 ----a-w- c:\windows\PCTBDRes.dll
2012-09-02 08:45 . 2012-06-22 13:29 145464 ----a-w- c:\windows\system32\drivers\pctwfpfilter64.sys
2012-09-02 08:45 . 2012-06-22 13:29 341200 ----a-w- c:\windows\system32\drivers\pctgntdi64.sys
2012-09-02 08:45 . 2012-06-22 13:33 14808 ----a-w- c:\windows\system32\drivers\pctBTFix64.sys
2012-09-02 08:45 . 2012-06-22 13:35 92928 ----a-w- c:\windows\system32\drivers\pctplsg64.sys
2012-09-02 08:45 . 2012-09-02 08:45 -------- d-----w- c:\program files (x86)\PC Tools
2012-09-02 08:41 . 2012-02-28 09:43 1096176 ----a-w- c:\windows\system32\drivers\pctEFA64.sys
2012-09-02 08:41 . 2012-02-28 09:43 453896 ----a-w- c:\windows\system32\drivers\pctDS64.sys
2012-09-02 08:41 . 2012-04-23 10:36 426616 ----a-w- c:\windows\system32\drivers\PCTCore64.sys
2012-09-02 08:41 . 2012-06-22 13:35 251560 ----a-w- c:\windows\system32\drivers\PCTSD64.sys
2012-09-02 08:33 . 2012-09-02 08:33 -------- d-sh--w- c:\windows\system32\%APPDATA%
2012-09-02 08:29 . 2012-09-08 15:13 0 --sha-w- c:\windows\system32\dds_log_ad13.cmd
2012-09-01 16:04 . 2012-09-01 16:05 -------- d-----w- C:\raphael
2012-09-01 13:45 . 2012-09-01 13:45 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2012-09-01 10:15 . 2012-09-01 10:15 -------- d-----w- c:\program files (x86)\COMODO
2012-09-01 10:15 . 2012-09-01 10:15 -------- d-----w- c:\programdata\CPA_VA
2012-08-31 18:29 . 2012-09-02 08:28 -------- d-----w- c:\programdata\Comodo
2012-08-31 17:30 . 2012-08-27 23:49 9310152 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{49318F09-1CFF-4E73-A3C6-6A2E1B29E513}\mpengine.dll
2012-08-27 09:41 . 2012-08-27 09:41 -------- d-----w- c:\users\Dupuis Jean Luc\AppData\Local\Yahoo
2012-08-27 09:26 . 2012-08-27 09:26 -------- d-----w- c:\users\Dupuis Jean Luc\AppData\Roaming\com.adobe.example.widget.F826D533138FC008516DC0DE4625BA08DCDBC443.1
2012-08-26 13:56 . 2012-08-26 13:56 -------- d-----w- c:\users\Dupuis Jean Luc\AppData\Roaming\BabylonToolbar
2012-08-26 11:54 . 2012-08-29 11:42 -------- d-----w- c:\users\Dupuis Jean Luc\AppData\Roaming\uTorrent
2012-08-26 11:51 . 2012-09-01 13:36 -------- d-----w- c:\program files (x86)\Boxore
2012-08-26 11:50 . 2012-08-26 11:50 -------- d-----w- c:\program files (x86)\Software
2012-08-26 10:50 . 2012-08-26 10:51 -------- d-----w- c:\program files\iTunes
2012-08-26 10:50 . 2012-08-26 10:50 -------- d-----w- c:\program files\iPod
2012-08-26 10:48 . 2012-08-26 10:48 -------- d-----w- c:\program files\Bonjour
2012-08-26 10:48 . 2012-08-26 10:48 -------- d-----w- c:\program files (x86)\Bonjour
2012-08-26 10:46 . 2012-08-26 10:46 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin7.dll
2012-08-26 10:46 . 2012-08-26 10:46 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin6.dll
2012-08-26 10:46 . 2012-08-26 10:46 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin5.dll
2012-08-26 10:46 . 2012-08-26 10:46 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin4.dll
2012-08-26 10:46 . 2012-08-26 10:46 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin3.dll
2012-08-26 10:46 . 2012-08-26 10:46 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin2.dll
2012-08-26 10:46 . 2012-08-26 10:46 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin.dll
2012-08-26 10:46 . 2012-08-26 10:46 -------- d-----w- c:\program files (x86)\QuickTime
2012-08-26 10:36 . 2012-08-27 10:37 98848 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2012-08-26 10:36 . 2012-08-27 10:37 132832 ----a-w- c:\windows\system32\drivers\avipbb.sys
2012-08-26 10:36 . 2011-12-01 15:55 27760 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-08-26 10:36 . 2012-09-01 13:36 -------- d-----w- c:\program files (x86)\Avira
2012-08-26 10:27 . 2012-09-01 13:36 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-08-26 10:27 . 2012-08-26 10:29 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-22 08:43 . 2012-09-02 08:46 3488 ----a-w- c:\windows\UDB.zip
2012-06-22 08:43 . 2012-09-02 08:46 131 ----a-w- c:\windows\IDB.zip
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\Dupuis Jean Luc\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\Dupuis Jean Luc\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\Dupuis Jean Luc\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-09-10 13:41 120104 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"="c:\users\Dupuis Jean Luc\AppData\Local\Akamai\netsession_win.exe" [2012-08-10 4440896]
"Sony PC Companion"="c:\program files (x86)\Sony\Sony PC Companion\PCCompanion.exe" [2012-05-31 445624]
"SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-08-12 261888]
"Hotkey Utility"="c:\program files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe" [2009-08-18 629280]
"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 199464]
"PlayMovie"="c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2009-09-29 181480]
"RIMBBLaunchAgent.exe"="c:\program files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe" [2011-02-18 79192]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-09-29 128296]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-06-07 421776]
"Boxore Client"="c:\program files (x86)\Boxore\BoxoreClient\boxore.exe" [2012-08-29 606520]
.
c:\users\Dupuis Jean Luc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Yahoo! Widgets.lnk - c:\program files (x86)\Yahoo!\Widgets\YahooWidgets.exe [2008-3-19 4742184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableSecureUIAPaths"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"DisableThumbnailCache"=dword:00000001
.
R2 AntiVirSchedulerService;Avira Planificateur;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-08-27 86224]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-20 136176]
R2 supdate;Software Update Service (supdate);c:\program files (x86)\Software\Update\SoftwareUpdate.exe [2012-08-26 140080]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-02 250568]
R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [2011-07-10 120400]
R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [2011-07-10 29776]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-20 136176]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-09-10 305448]
R3 pctplsg;pctplsg;c:\windows\System32\drivers\pctplsg64.sys [2012-06-22 92928]
R3 sdAuxService;PC Tools Auxiliary Service;c:\program files (x86)\PC Tools\PC Tools Security\pctsAuxs.exe [2012-06-22 402368]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
R3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [2012-06-22 41968]
R3 ThreatFire;ThreatFire;c:\program files (x86)\PC Tools\PC Tools Security\TFEngine\TFService.exe service [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2011-05-10 51712]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-11-27 1255736]
S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [2011-07-10 26704]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2011-09-13 37456]
S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore64.sys [2012-04-23 426616]
S0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS64.sys [2012-02-28 453896]
S0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA64.sys [2012-02-28 1096176]
S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [2012-06-22 65664]
S0 TFSysMon;TFSysMon;c:\windows\system32\drivers\TfSysMon.sys [2012-06-22 706776]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2011-07-10 282704]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2011-08-08 46672]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2011-07-10 375376]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2011-12-01 27760]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-02 22576]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-02 20016]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-02 60464]
S1 pctgntdi;pctgntdi;c:\windows\System32\drivers\pctgntdi64.sys [2012-06-22 341200]
S1 PCTSD;PC Tools Spyware Doctor Driver;c:\windows\system32\Drivers\PCTSD64.sys [2012-06-22 251560]
S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 Browser Defender Update Service;Browser Defender Update Service;c:\program files (x86)\PC Tools\PC Tools Security\BDT\BDTUpdateService.exe [2012-06-22 575448]
S2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [2009-09-14 166400]
S2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);c:\program files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [2009-09-14 128512]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe [2009-08-28 1150496]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-08-12 62208]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S3 hxctlflt;hxctlflt;c:\windows\system32\Drivers\hxctlflt.sys [2009-02-08 111104]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2009-06-26 83488]
S3 PCTBD;PC Tools Browser Defender Driver;c:\windows\system32\Drivers\PCTBD64.sys [2012-06-22 85224]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - 68885484
*NewlyCreated* - 89261094
*Deregistered* - 68885484
*Deregistered* - 89261094
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Contenu du dossier 'Tâches planifiées'
.
2012-09-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-02 09:00]
.
2012-07-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cd64c857dfa5e0.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-20 21:28]
.
2012-09-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-20 21:28]
.
2012-07-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3224299066-1294148903-758974097-1000Core1cd6686fa0d5910.job
- c:\users\Dupuis Jean Luc\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-27 17:29]
.
2012-09-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3224299066-1294148903-758974097-1000UA.job
- c:\users\Dupuis Jean Luc\AppData\Local\Google\Update\GoogleUpdate.exe [2010-11-27 17:29]
.
2012-09-08 c:\windows\Tasks\SoftwareUpdateTaskMachineCore.job
- c:\program files (x86)\Software\Update\SoftwareUpdate.exe [2012-08-26 11:56]
.
2012-09-08 c:\windows\Tasks\SoftwareUpdateTaskMachineUA.job
- c:\program files (x86)\Software\Update\SoftwareUpdate.exe [2012-08-26 11:56]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 97792 ----a-w- c:\users\Dupuis Jean Luc\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 97792 ----a-w- c:\users\Dupuis Jean Luc\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 97792 ----a-w- c:\users\Dupuis Jean Luc\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 97792 ----a-w- c:\users\Dupuis Jean Luc\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-09-10 13:44 137512 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-20 7981088]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-07-14 16333856]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
vzfw
SQLAgent$LG_LP2
PhilCam8116
mi-raysat_3dsmax9_32
Si3132
VNUSB
sptisrv
pavagente
F700ius
ccdecode
avgfwsrv
imapi
tfsndrct
tbaspi
CoachVc
Anydlc
genregistrar
SGHIDI
LVVI500A
OsaFsLoc
mssql$microsoftsmlbiz
sglfb
backupexecagentbrowser
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://search.babylon.com/?affID=112185&tt=201208_mnt_n_3412_2&babsrc=HP_ss&mntrId=481fcba400000000000000262d34840f
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&m=aspire_x3300&r=17361110d407pe418v155w4691s05s
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = 127.0.0.1:9421;*.local;<local>
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Rechercher sur le Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
LSP: c:\program files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll
TCP: DhcpNameServer = 212.27.40.241 212.27.40.240
FF - ProfilePath - c:\users\Dupuis Jean Luc\AppData\Roaming\Mozilla\Firefox\Profiles\uq9zo5kz.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - Search the web (Babylon)
FF - prefs.js: browser.startup.homepage - hxxp://search.babylon.com/?affID=112185&tt=201208_mnt_n_3412_2&babsrc=HP_ss&mntrId=481fcba400000000000000262d34840f
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?affID=112185&tt=201208_mnt_n_3412_2&babsrc=KW_ss&mntrId=481fcba400000000000000262d34840f&q=
FF - prefs.js: network.proxy.type - 0
FF - user.js: extensions.BabylonToolbar_i.id - 481fcba400000000000000262d34840f
FF - user.js: extensions.BabylonToolbar_i.hardId - 481fcba400000000000000262d34840f
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15450
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
FF - user.js: extensions.BabylonToolbar.autoRvrt - false
FF - user.js: extensions.BabylonToolbar_i.newTab - false
FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://search.babylon.com/?babsrc=TB_def&mntrId=481fcba400000000000000262d34840f&q=
FF - user.js: extensions.BabylonToolbar.id - 481fcba400000000000000262d34840f
FF - user.js: extensions.BabylonToolbar.appId - {BDB69379-802F-4eaf-B541-F8DE92DD98DB}
FF - user.js: extensions.BabylonToolbar.instlDay - 15578
FF - user.js: extensions.BabylonToolbar.vrsn - 1.6.9.12
FF - user.js: extensions.BabylonToolbar.vrsni - 1.6.9.12
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.6.9.1215:56
FF - user.js: extensions.BabylonToolbar.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar.tlbrId - base
FF - user.js: extensions.BabylonToolbar.instlRef - sst
FF - user.js: extensions.BabylonToolbar.dfltLng - en
FF - user.js: extensions.BabylonToolbar.excTlbr - false
FF - user.js: extensions.BabylonToolbar.admin - false
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=112185&tt=201208_mnt_n_3412_2
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-swg - c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
Wow6432Node-HKLM-Run-tray_ico - (no file)
Wow6432Node-HKLM-Run-tray_ico3 - (no file)
Wow6432Node-HKLM-Run-tray_ico4 - (no file)
Wow6432Node-HKLM-Run-Sweetpacks Communicator - c:\program files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
Wow6432Node-HKLM-Run-SweetIM - c:\program files (x86)\SweetIM\Messenger\SweetIM.exe
SafeBoot-68885484.sys
Toolbar-Locked - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\Akamai]
"ServiceDll"="c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2012-09-08 18:15:02
ComboFix-quarantined-files.txt 2012-09-08 16:14
.
Avant-CF: 174 735 667 200 octets libres
Après-CF: 174 396 526 592 octets libres
.
- - End Of File - - B5C46903AD4FFB628FEDA77063058761

salut Elec je viens de mettre un nouvelle version en ligne si vous voulez tester.....

yo,

vas y, je t'en prie :D

# AdwCleaner v2.000 - Rapport créé le 08/09/2012 à 18:27:44
# Mis à jour le 30/08/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Dupuis Jean Luc - DUPUIS
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Dupuis Jean Luc\Downloads\adwcleaner.exe
# Option [Suppression]


***** [Services] *****

Arrêté & Supprimé : supdate

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files (x86)\Ask.com
Dossier Supprimé : C:\Program Files (x86)\BabylonToolbar
Dossier Supprimé : C:\Program Files (x86)\Boxore
Dossier Supprimé : C:\Program Files (x86)\Software
Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\InstallMate
Dossier Supprimé : C:\ProgramData\Partner
Dossier Supprimé : C:\ProgramData\Premium
Dossier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Dossier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Local\OpenCandy
Dossier Supprimé : C:\Users\Dupuis Jean Luc\AppData\LocalLow\BabylonToolbar
Dossier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Roaming\BabylonToolbar
Dossier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Roaming\FissaSearch
Dossier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Roaming\Mozilla\Firefox\Profiles\uq9zo5kz.default\extensions\ffxtlbr@babylon.com
Dossier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Roaming\Mozilla\Firefox\Profiles\uq9zo5kz.default\extensions\staged
Dossier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Roaming\Mozilla\Firefox\Profiles\uq9zo5kz.default\SweetPacksToolbarData
Dossier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Roaming\OpenCandy
Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Fichier Supprimé : C:\user.js
Fichier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Roaming\Mozilla\Firefox\Profiles\uq9zo5kz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
Fichier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Roaming\Mozilla\Firefox\Profiles\uq9zo5kz.default\searchplugins\Askcom.xml
Fichier Supprimé : C:\Users\Dupuis Jean Luc\AppData\Roaming\Mozilla\Firefox\Profiles\uq9zo5kz.default\searchplugins\SweetIm.xml
Fichier Supprimé : C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
Fichier Supprimé : C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job

***** [Registre] *****

Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar
Clé Supprimée : HKCU\Software\BabylonToolbar
Clé Supprimée : HKCU\Software\FissaSearch
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Rechercher sur le Web
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\SweetIm
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B41306C6-96D0-442A-BCC4-B0F621E82CE9}
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\Software\BabylonToolbar
Clé Supprimée : HKLM\Software\Boxore
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\b
Clé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Clé Supprimée : HKLM\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.software.oneclickctrl.8
Clé Supprimée : HKLM\SOFTWARE\Classes\Software.OneClickCtrl.8
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\Software\FissaSearch
Clé Supprimée : HKLM\Software\Iminent
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@www.dlmanager.net/omaha/tools//Software Update;version=8
Clé Supprimée : HKLM\Software\SweetIm
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{092A2C6B-43EE-4F9F-8F8E-14ED5E11C14B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{257A6158-1416-4B31-9BF8-29FF49F3814F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{32451DFC-C23B-4E12-866C-FC7982238504}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AC5C4189-A8A0-4C9D-8910-C9CEF8360077}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jeaihkehdlhkocphopopahkfjcfcphef
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{006E6A46-8D55-4F10-BBA8-2C9653B4278B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4BD271AB-66E2-4D58-AF88-80FE3B0770C4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Boxore Client]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.7601.17514

Restauré : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restauré : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=112185&tt=201208_mnt_n_3412_2&babsrc=HP_ss&mntrId=481fcba400000000000000262d34840f --> hxxp://www.google.com
Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=112185&tt=201208_mnt_n_3412_2&babsrc=NT_ss&mntrId=481fcba400000000000000262d34840f --> hxxp://www.google.com

-\\ Mozilla Firefox v11.0 (fr)

Nom du profil : default
Fichier : C:\Users\Dupuis Jean Luc\AppData\Roaming\Mozilla\Firefox\Profiles\uq9zo5kz.default\prefs.js

C:\Users\Dupuis Jean Luc\AppData\Roaming\Mozilla\Firefox\Profiles\uq9zo5kz.default\user.js ... Supprimé !

Supprimée : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Supprimée : user_pref("browser.search.defaultengine", "Ask.com");
Supprimée : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
Supprimée : user_pref("browser.search.order.1", "Search the web (Babylon)");
Supprimée : user_pref("browser.search.selectedEngine", "Search the web (Babylon)");
Supprimée : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?affID=112185&tt=201208_mnt_n_3412_[...]
Supprimée : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");
Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112454");
Supprimée : user_pref("extensions.BabylonToolbar_i.hardId", "481fcba400000000000000262d34840f");
Supprimée : user_pref("extensions.BabylonToolbar_i.id", "481fcba400000000000000262d34840f");
Supprimée : user_pref("extensions.BabylonToolbar_i.instlDay", "15450");
Supprimée : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", true);
Supprimée : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112454&babsrc=N[...]
Supprimée : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Supprimée : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Supprimée : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1715:49:01");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Supprimée : user_pref("keyword.URL", "hxxp://search.babylon.com/?affID=112185&tt=201208_mnt_n_3412_2&babsrc=KW_s[...]
Supprimée : user_pref("sweetim.toolbar.cargo", "3.1010000.10011");
Supprimée : user_pref("sweetim.toolbar.dialogs.0.enable", "true");
Supprimée : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-h[...]
Supprimée : user_pref("sweetim.toolbar.dialogs.0.height", "335");
Supprimée : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
Supprimée : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
Supprimée : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff.html")[...]
Supprimée : user_pref("sweetim.toolbar.dialogs.0.width", "761");
Supprimée : user_pref("sweetim.toolbar.dialogs.1.enable", "true");
Supprimée : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-h[...]
Supprimée : user_pref("sweetim.toolbar.dialogs.1.height", "300");
Supprimée : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
Supprimée : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
Supprimée : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html"[...]
Supprimée : user_pref("sweetim.toolbar.dialogs.1.width", "500");
Supprimée : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.goog[...]
Supprimée : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Supprimée : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Supprimée : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Supprimée : user_pref("sweetim.toolbar.mode.debug", "false");
Supprimée : user_pref("sweetim.toolbar.prad.initialized_by_rc", "true");
Supprimée : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Search the web (Babylon)");
Supprimée : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "");
Supprimée : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Search the web (Babylon)");
Supprimée : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://search.babylon.com/?affID=112[...]
Supprimée : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.sweetim.com/search.asp?src=2&q=");
Supprimée : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
Supprimée : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
Supprimée : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
Supprimée : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
Supprimée : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
Supprimée : user_pref("sweetim.toolbar.scripts.0.enable", "true");
Supprimée : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
Supprimée : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
Supprimée : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "false");
Supprimée : user_pref("sweetim.toolbar.scripts.1.callback", "");
Supprimée : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..[...]
Supprimée : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "");
Supprimée : user_pref("sweetim.toolbar.scripts.1.elementid", "id_predict_include_script");
Supprimée : user_pref("sweetim.toolbar.scripts.1.enable", "true");
Supprimée : user_pref("sweetim.toolbar.scripts.1.id", "id_script_prad");
Supprimée : user_pref("sweetim.toolbar.scripts.1.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?[...]
Supprimée : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Supprimée : user_pref("sweetim.toolbar.search.history", "agenda%20partag%C3%A9%20jlespiraudsmn%40hotmail.fr,agen[...]
Supprimée : user_pref("sweetim.toolbar.search.history.capacity", "10");
Supprimée : user_pref("sweetim.toolbar.searchguard.enable", "true");
Supprimée : user_pref("sweetim.toolbar.simapp_id", "{0525F720-977A-11E1-A662-00262D34840F}");
Supprimée : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?crg=3.1010000.10011");
Supprimée : user_pref("sweetim.toolbar.version", "1.5.0.2");
Supprimée : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=112185&tt=201208_mnt_n_3412_2&babs[...]

-\\ Google Chrome v21.0.1180.89

Fichier : C:\Users\Dupuis Jean Luc\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [22567 octets] - [08/09/2012 18:25:22]
AdwCleaner[S1].txt - [23202 octets] - [08/09/2012 18:27:44]

########## EOF - C:\AdwCleaner[S1].txt - [23263 octets] ##########

C'est bon c'est désinstallé, y a t'il encore des problèmes à régler ?

ok merci je lance pre_scan!

ok à te lire :)

https://pjjoint.malekal.com/files.php?id=20120908_s513w12h12f15

https://pjjoint.malekal.com/files.php?id=20120908_p13b8j10j6e12

Antivir je l'avais installé, puis désinstallé, mais pas complètement parce que il me mettait un message d'erreur lors de la suppression. J'ai eu aussi installé comodo et pc tools. Actuellement c'est pctools spyware doctor que j'ai et c'est tout, mon abonnement n'est plus valable que quelques jours.
A propos, j'aimerais bien savoir ce dont un pc a besoin pour être bien protégé, et quels logiciels sont conseillés?

oui :) il y a un an j'avais eu un virus qui avait bloqué mon pc et j'avais vu une pub et comme ça bloqué j'avais pas du tout le temps de chercher... C'est nul ?

Ah merde quel boulet !!! Pourtant ça ressemble bien à un antivirus... Bon et bien je le désinstalle alors. Et donc que me faut-il alors comme protection pour mon pc?

Pour l'instant j'ai jamais eu de soucis avec mon compte bancaire ouf ! mais merci du conseil. et sinon j'ai tout désinstallé, j'ai plus l'impression d'en voir la trace...

Oui en effet c'est une bonne nouvelle !!
C'est pas bien java? je pensais que ça servait pour les mises à jour?

Donc faut-il que je le réinstalle?

Je l'ai désinstallé via le panneau de config.

"Vire tout" sous-entend que j'ai d'autres trucs à virer?

le lien n'est plus dispo