Yontoo layer runtime + virus help please
Résolu/Fermé
A voir également:
- Yontoo layer runtime + virus help please
- Directx runtime - Télécharger - Pilotes & Matériel
- Microsoft visual c++ runtime - Guide
- Java runtime - Télécharger - Langages
- Svchost.exe virus - Guide
- Altruistic virus ✓ - Forum Antivirus
22 réponses
Utilisateur anonyme
13 avril 2012 à 13:44
13 avril 2012 à 13:44
Bonjour
Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Ou ici : https://forospyware.com
>Renomme le pour l'enregistrer sur ton bureau en asdehi (tout simplement pour que l'infection ne le contre pas)
-> Double clique combofix.exe.(ou clic droit sous vista « exécuter en tant que... » )
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
Avant d'utiliser ComboFix :
-> Déconnecte toi d'Internet et referme les fenêtres de tous les programmes en cours.
-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
Une fois fait, sur ton bureau double-clic sur Combofix.exe ; (ou clic droit sous vista « exécuter en tant que... »)
- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.
- Installe le console de récupération comme demandé ;utile en cas de plantage
- Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programme. Risque de figer l'ordinateur
- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.
- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)
-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.
-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordinateur (plantage complet)
::Si combofix détecte quelque chose et de demande a redémarrer tu acceptes
@+
Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Ou ici : https://forospyware.com
>Renomme le pour l'enregistrer sur ton bureau en asdehi (tout simplement pour que l'infection ne le contre pas)
-> Double clique combofix.exe.(ou clic droit sous vista « exécuter en tant que... » )
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt
Avant d'utiliser ComboFix :
-> Déconnecte toi d'Internet et referme les fenêtres de tous les programmes en cours.
-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
Une fois fait, sur ton bureau double-clic sur Combofix.exe ; (ou clic droit sous vista « exécuter en tant que... »)
- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.
- Installe le console de récupération comme demandé ;utile en cas de plantage
- Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programme. Risque de figer l'ordinateur
- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.
- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)
-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.
-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.
/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordinateur (plantage complet)
::Si combofix détecte quelque chose et de demande a redémarrer tu acceptes
@+
voila le rapport qui cest affiché par contre plus aucun programme ne se lance
ca me dit que un marque de suppression sur un clé registre a été mise
plus rien ne se lance
ComboFix 12-04-13.01 - gerarg 13/04/2012 14:11:11.1.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3071.1357 [GMT 2:00]
Lancé depuis: c:\users\gerarg\Desktop\asdehi.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\~wJbQmiEnYI0qD1
c:\programdata\~wJbQmiEnYI0qD1r
c:\programdata\Tarma Installer
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setup.dll
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.dat
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.exe
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.ico
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\_Setup.dll
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\_Setupx.dll
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\Setup.dat
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\Setup.exe
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\Setup.ico
c:\programdata\wJbQmiEnYI0qD1
c:\users\gerarg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-03-13 au 2012-04-13 ))))))))))))))))))))))))))))))))))))
.
.
2012-04-13 12:41 . 2012-04-13 12:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-11 02:52 . 2012-03-14 03:27 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8BBD6EE1-2000-4DB5-BDBA-D48A4F0CAE14}\mpengine.dll
2012-04-05 19:12 . 2012-04-05 19:12 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-03-22 09:55 . 2012-03-22 09:55 -------- d-----w- c:\program files (x86)\hpmon
2012-03-22 09:54 . 2012-04-13 11:06 -------- d-----w- c:\program files (x86)\SweetIM
2012-03-22 09:54 . 2012-03-22 09:54 -------- d-----w- c:\programdata\SweetIM
2012-03-22 09:54 . 2012-03-22 09:54 -------- d-----w- c:\users\gerarg\AppData\Roaming\pdfforge
2012-03-22 09:54 . 2012-03-14 16:23 65024 ----a-w- c:\windows\system32\pdfcmon.dll
2012-03-22 09:54 . 2005-04-15 18:58 1071088 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2012-03-22 09:54 . 2004-03-08 23:00 662288 ----a-w- c:\windows\SysWow64\MSCOMCT2.OCX
2012-03-22 09:54 . 1998-06-23 23:00 137000 ----a-w- c:\windows\SysWow64\MSMAPI32.OCX
2012-03-22 09:54 . 1998-07-13 00:08 119568 ----a-w- c:\windows\SysWow64\VB6FR.DLL
2012-03-22 09:54 . 1998-07-13 00:08 59904 ----a-w- c:\windows\SysWow64\MSCC2FR.DLL
2012-03-22 09:54 . 1998-07-13 00:08 141312 ----a-w- c:\windows\SysWow64\MSCMCFR.DLL
2012-03-22 09:54 . 2012-03-22 09:54 -------- d-----w- c:\program files (x86)\PDFCreator
2012-03-22 09:54 . 1998-07-05 23:00 23552 ----a-w- c:\windows\SysWow64\MSMPIDE.DLL
2012-03-20 19:58 . 2012-03-20 19:58 -------- d-----w- c:\users\gerarg\AppData\Roaming\Nero
2012-03-20 19:36 . 2012-03-20 19:36 592824 ----a-w- c:\program files (x86)\Mozilla Firefox\gkmedias.dll
2012-03-20 19:36 . 2012-03-20 19:36 44472 ----a-w- c:\program files (x86)\Mozilla Firefox\mozglue.dll
2012-03-18 17:26 . 2012-03-18 17:26 -------- d-----w- c:\program files (x86)\Java
2012-03-18 11:19 . 2012-03-07 00:04 337240 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-03-18 11:19 . 2012-03-07 00:01 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-03-18 11:19 . 2012-03-07 00:02 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-03-18 11:19 . 2012-03-07 00:04 819032 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-03-18 11:19 . 2012-03-07 00:01 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-03-18 11:19 . 2012-03-07 00:15 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-03-18 11:19 . 2012-03-07 00:01 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-03-18 11:18 . 2012-03-07 00:15 41184 ----a-w- c:\windows\avastSS.scr
2012-03-18 11:18 . 2012-03-07 00:15 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-03-16 18:27 . 2012-03-17 21:10 -------- dc----w- c:\windows\system32\DRVSTORE
2012-03-16 18:27 . 2012-03-16 18:27 -------- d--h--w- c:\programdata\Lavasoft
2012-03-16 18:27 . 2012-03-16 18:27 -------- d-----w- c:\program files (x86)\Lavasoft
2012-03-16 18:18 . 2012-03-18 11:18 -------- d-----w- c:\programdata\AVAST Software
2012-03-16 18:18 . 2012-03-18 11:18 -------- d-----w- c:\program files\AVAST Software
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-05 19:12 . 2011-12-22 14:32 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-18 17:26 . 2011-12-31 13:06 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-02-23 08:18 . 2011-11-06 17:09 279656 ------w- c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{1392b8d2-5c05-419f-a8f6-b9f15a596612}"= "c:\program files (x86)\Freecorder\prxtbFree.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
2011-05-09 08:49 176936 ----a-w- c:\program files (x86)\Freecorder\prxtbFree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{1392b8d2-5c05-419f-a8f6-b9f15a596612}"= "c:\program files (x86)\Freecorder\prxtbFree.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"Hotkey Utility"="c:\program files (x86)\eMachines\Hotkey Utility\HotkeyUtility.exe" [2010-08-04 611872]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-25 98304]
"Freecorder FLV Service"="c:\program files (x86)\Freecorder\FLVSrvc.exe" [2011-03-24 167936]
"Hercules DJ Series"="c:\program files\Hercules\Audio\DJ Console Series\HDJSeriesCPL.exe" [2009-10-23 639784]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-07 4241512]
"SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2012-01-19 114992]
.
c:\users\gerarg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WiFi Station.lnk - c:\program files (x86)\Hercules\WiFiStation\WiFiN.exe [2011-4-11 130344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 253600]
R3 Bulk;HDJBulk;c:\windows\system32\Drivers\HDJBulk.sys [x]
R3 HDJMidi;DJ Control MP3 e2 MIDI;c:\windows\system32\DRIVERS\HDJMidi.sys [x]
R3 netr28ux;RT2870 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr28ux.sys [x]
R3 RTL8192su;%RTL8192su.DeviceDesc.DispName%;c:\windows\system32\DRIVERS\RTL8192su.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Greg_Service;GRegService;c:\program files (x86)\eMachines\Registration\GregHSRW.exe [2009-08-28 1150496]
S2 HerculesDJControlMP3;Hercules DJ Control MP3;c:\program files\Hercules\Audio\DJ Console Series\HerculesDJControlMP3.EXE [2007-11-21 20480]
S2 HerculesWiFi;HerculesWiFi;c:\program files (x86)\Hercules\WiFiStation\HerculesWiFiService.exe [2010-03-05 72488]
S2 Updater Service;Updater Service;c:\program files\eMachines\eMachines Updater\UpdaterService.exe [2010-01-28 243232]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - WS2IFSL
.
Contenu du dossier 'Tâches planifiées'
.
2012-04-13 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 19:12]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-30 10806816]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&m=et1840&r=17360411p403pe474v1j5r4701t49n
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&m=et1840&r=17360411p403pe474v1j5r4701t49n
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\gerarg\AppData\Roaming\Mozilla\Firefox\Profiles\2mo4gwnr.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - SweetIM Search
FF - user.js: extentions.y2layers.installId - eacd105d-b7cb-4380-b702-3a273b2f968a
FF - user.js: extentions.y2layers.defaultEnableAppsList - Buzzdock,BuzzdockTease,DropDownDeals,DropDownDeals,
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
.
**************************************************************************
.
Heure de fin: 2012-04-13 15:05:46 - La machine a redémarré
ComboFix-quarantined-files.txt 2012-04-13 13:05
.
Avant-CF: 245 128 310 784 octets libres
Après-CF: 245 387 132 928 octets libres
.
- - End Of File - - 71ED9179B32DE9070D60BE5F9E805765
ca me dit que un marque de suppression sur un clé registre a été mise
plus rien ne se lance
ComboFix 12-04-13.01 - gerarg 13/04/2012 14:11:11.1.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3071.1357 [GMT 2:00]
Lancé depuis: c:\users\gerarg\Desktop\asdehi.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\~wJbQmiEnYI0qD1
c:\programdata\~wJbQmiEnYI0qD1r
c:\programdata\Tarma Installer
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setup.dll
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.dat
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.exe
c:\programdata\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\Setup.ico
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\_Setup.dll
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\_Setupx.dll
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\Setup.dat
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\Setup.exe
c:\programdata\Tarma Installer\{DA00D550-BB91-4A26-AAE5-9172D626CAAE}\Setup.ico
c:\programdata\wJbQmiEnYI0qD1
c:\users\gerarg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-03-13 au 2012-04-13 ))))))))))))))))))))))))))))))))))))
.
.
2012-04-13 12:41 . 2012-04-13 12:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-04-11 02:52 . 2012-03-14 03:27 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8BBD6EE1-2000-4DB5-BDBA-D48A4F0CAE14}\mpengine.dll
2012-04-05 19:12 . 2012-04-05 19:12 418464 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-03-22 09:55 . 2012-03-22 09:55 -------- d-----w- c:\program files (x86)\hpmon
2012-03-22 09:54 . 2012-04-13 11:06 -------- d-----w- c:\program files (x86)\SweetIM
2012-03-22 09:54 . 2012-03-22 09:54 -------- d-----w- c:\programdata\SweetIM
2012-03-22 09:54 . 2012-03-22 09:54 -------- d-----w- c:\users\gerarg\AppData\Roaming\pdfforge
2012-03-22 09:54 . 2012-03-14 16:23 65024 ----a-w- c:\windows\system32\pdfcmon.dll
2012-03-22 09:54 . 2005-04-15 18:58 1071088 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX
2012-03-22 09:54 . 2004-03-08 23:00 662288 ----a-w- c:\windows\SysWow64\MSCOMCT2.OCX
2012-03-22 09:54 . 1998-06-23 23:00 137000 ----a-w- c:\windows\SysWow64\MSMAPI32.OCX
2012-03-22 09:54 . 1998-07-13 00:08 119568 ----a-w- c:\windows\SysWow64\VB6FR.DLL
2012-03-22 09:54 . 1998-07-13 00:08 59904 ----a-w- c:\windows\SysWow64\MSCC2FR.DLL
2012-03-22 09:54 . 1998-07-13 00:08 141312 ----a-w- c:\windows\SysWow64\MSCMCFR.DLL
2012-03-22 09:54 . 2012-03-22 09:54 -------- d-----w- c:\program files (x86)\PDFCreator
2012-03-22 09:54 . 1998-07-05 23:00 23552 ----a-w- c:\windows\SysWow64\MSMPIDE.DLL
2012-03-20 19:58 . 2012-03-20 19:58 -------- d-----w- c:\users\gerarg\AppData\Roaming\Nero
2012-03-20 19:36 . 2012-03-20 19:36 592824 ----a-w- c:\program files (x86)\Mozilla Firefox\gkmedias.dll
2012-03-20 19:36 . 2012-03-20 19:36 44472 ----a-w- c:\program files (x86)\Mozilla Firefox\mozglue.dll
2012-03-18 17:26 . 2012-03-18 17:26 -------- d-----w- c:\program files (x86)\Java
2012-03-18 11:19 . 2012-03-07 00:04 337240 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-03-18 11:19 . 2012-03-07 00:01 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-03-18 11:19 . 2012-03-07 00:02 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-03-18 11:19 . 2012-03-07 00:04 819032 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-03-18 11:19 . 2012-03-07 00:01 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-03-18 11:19 . 2012-03-07 00:15 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-03-18 11:19 . 2012-03-07 00:01 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-03-18 11:18 . 2012-03-07 00:15 41184 ----a-w- c:\windows\avastSS.scr
2012-03-18 11:18 . 2012-03-07 00:15 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-03-16 18:27 . 2012-03-17 21:10 -------- dc----w- c:\windows\system32\DRVSTORE
2012-03-16 18:27 . 2012-03-16 18:27 -------- d--h--w- c:\programdata\Lavasoft
2012-03-16 18:27 . 2012-03-16 18:27 -------- d-----w- c:\program files (x86)\Lavasoft
2012-03-16 18:18 . 2012-03-18 11:18 -------- d-----w- c:\programdata\AVAST Software
2012-03-16 18:18 . 2012-03-18 11:18 -------- d-----w- c:\program files\AVAST Software
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-05 19:12 . 2011-12-22 14:32 70304 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-18 17:26 . 2011-12-31 13:06 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-02-23 08:18 . 2011-11-06 17:09 279656 ------w- c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{1392b8d2-5c05-419f-a8f6-b9f15a596612}"= "c:\program files (x86)\Freecorder\prxtbFree.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
2011-05-09 08:49 176936 ----a-w- c:\program files (x86)\Freecorder\prxtbFree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{1392b8d2-5c05-419f-a8f6-b9f15a596612}"= "c:\program files (x86)\Freecorder\prxtbFree.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"Hotkey Utility"="c:\program files (x86)\eMachines\Hotkey Utility\HotkeyUtility.exe" [2010-08-04 611872]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-25 98304]
"Freecorder FLV Service"="c:\program files (x86)\Freecorder\FLVSrvc.exe" [2011-03-24 167936]
"Hercules DJ Series"="c:\program files\Hercules\Audio\DJ Console Series\HDJSeriesCPL.exe" [2009-10-23 639784]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-07 4241512]
"SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2012-01-19 114992]
.
c:\users\gerarg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WiFi Station.lnk - c:\program files (x86)\Hercules\WiFiStation\WiFiN.exe [2011-4-11 130344]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 253600]
R3 Bulk;HDJBulk;c:\windows\system32\Drivers\HDJBulk.sys [x]
R3 HDJMidi;DJ Control MP3 e2 MIDI;c:\windows\system32\DRIVERS\HDJMidi.sys [x]
R3 netr28ux;RT2870 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr28ux.sys [x]
R3 RTL8192su;%RTL8192su.DeviceDesc.DispName%;c:\windows\system32\DRIVERS\RTL8192su.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Greg_Service;GRegService;c:\program files (x86)\eMachines\Registration\GregHSRW.exe [2009-08-28 1150496]
S2 HerculesDJControlMP3;Hercules DJ Control MP3;c:\program files\Hercules\Audio\DJ Console Series\HerculesDJControlMP3.EXE [2007-11-21 20480]
S2 HerculesWiFi;HerculesWiFi;c:\program files (x86)\Hercules\WiFiStation\HerculesWiFiService.exe [2010-03-05 72488]
S2 Updater Service;Updater Service;c:\program files\eMachines\eMachines Updater\UpdaterService.exe [2010-01-28 243232]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - WS2IFSL
.
Contenu du dossier 'Tâches planifiées'
.
2012-04-13 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 19:12]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-30 10806816]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&m=et1840&r=17360411p403pe474v1j5r4701t49n
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&m=et1840&r=17360411p403pe474v1j5r4701t49n
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\gerarg\AppData\Roaming\Mozilla\Firefox\Profiles\2mo4gwnr.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - SweetIM Search
FF - user.js: extentions.y2layers.installId - eacd105d-b7cb-4380-b702-3a273b2f968a
FF - user.js: extentions.y2layers.defaultEnableAppsList - Buzzdock,BuzzdockTease,DropDownDeals,DropDownDeals,
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
.
**************************************************************************
.
Heure de fin: 2012-04-13 15:05:46 - La machine a redémarré
ComboFix-quarantined-files.txt 2012-04-13 13:05
.
Avant-CF: 245 128 310 784 octets libres
Après-CF: 245 387 132 928 octets libres
.
- - End Of File - - 71ED9179B32DE9070D60BE5F9E805765
Utilisateur anonyme
13 avril 2012 à 16:21
13 avril 2012 à 16:21
Re
Arrête ton PC .
Démarre le à nouveau
[*] Télécharger sur le bureau https://www.luanagames.com/index.fr.html (by tigzy)
[*] Quitter tous les programmes
[*] Lancer RogueKiller.exe.
[*] Attendre que le Prescan ait fini ...
[*] Cliquer sur Scan. Cliquer sur Rapport et copier coller le contenu du rapport
@+
Arrête ton PC .
Démarre le à nouveau
[*] Télécharger sur le bureau https://www.luanagames.com/index.fr.html (by tigzy)
[*] Quitter tous les programmes
[*] Lancer RogueKiller.exe.
[*] Attendre que le Prescan ait fini ...
[*] Cliquer sur Scan. Cliquer sur Rapport et copier coller le contenu du rapport
@+
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
RogueKiller V7.3.2 [20/03/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com
Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Demarrage : Mode normal
Utilisateur: gerarg [Droits d'admin]
Mode: Recherche -- Date: 13/04/2012 16:44:34
¤¤¤ Processus malicieux: 0 ¤¤¤
¤¤¤ Entrees de registre: 2 ¤¤¤
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤
¤¤¤ Driver: [NON CHARGE] ¤¤¤
¤¤¤ Infection : Root.MBR ¤¤¤
¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost
¤¤¤ MBR Verif: ¤¤¤
+++++ PhysicalDrive0: WDC WD3200AAJS-22L7A0 ATA Device +++++
--- User ---
[MBR] abdf4f57939a8bb8e3a7791135b44f04
[BSP] 206085d6a729f42c48bfb5bc87d72ee5 : Acer tatooed MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 14336 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 29362176 | Size: 100 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29566976 | Size: 290798 Mo
User = LL1 ... OK!
User != LL2 ... KO!
--- LL2 ---
[MBR] 0bfa04e9dec01a1ea69cc36b7cdc4fe5
[BSP] 206085d6a729f42c48bfb5bc87d72ee5 : Acer tatooed MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 14336 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29362176 | Size: 100 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29566976 | Size: 290798 Mo
3 - [ACTIVE] NTFS (0x17) [HIDDEN!] Offset (sectors): 625140400 | Size: 0 Mo
Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com
Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Demarrage : Mode normal
Utilisateur: gerarg [Droits d'admin]
Mode: Recherche -- Date: 13/04/2012 16:44:34
¤¤¤ Processus malicieux: 0 ¤¤¤
¤¤¤ Entrees de registre: 2 ¤¤¤
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤
¤¤¤ Driver: [NON CHARGE] ¤¤¤
¤¤¤ Infection : Root.MBR ¤¤¤
¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost
¤¤¤ MBR Verif: ¤¤¤
+++++ PhysicalDrive0: WDC WD3200AAJS-22L7A0 ATA Device +++++
--- User ---
[MBR] abdf4f57939a8bb8e3a7791135b44f04
[BSP] 206085d6a729f42c48bfb5bc87d72ee5 : Acer tatooed MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 14336 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 29362176 | Size: 100 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29566976 | Size: 290798 Mo
User = LL1 ... OK!
User != LL2 ... KO!
--- LL2 ---
[MBR] 0bfa04e9dec01a1ea69cc36b7cdc4fe5
[BSP] 206085d6a729f42c48bfb5bc87d72ee5 : Acer tatooed MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 14336 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29362176 | Size: 100 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 29566976 | Size: 290798 Mo
3 - [ACTIVE] NTFS (0x17) [HIDDEN!] Offset (sectors): 625140400 | Size: 0 Mo
Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt
Utilisateur anonyme
13 avril 2012 à 16:50
13 avril 2012 à 16:50
Re
Télécharge TDSSKiller
*Créez un nouveau dossier sur votre bureau puis décompressez l'archive dedans
* Lancez le programme en cliquant sur TDSSKiller.exe, l'analyse se fait automatiquement, si l'infection est détectée, des éléments cachés (= hidden) seront alors affichés.
Si TDSS.tdl2 est détecté: l'option delete sera cochée par défaut.
Si TDSS.tdl3 est détecté: assure toi que Cure est bien cochée.
Si TDSS.tdl4(\HardDisk0\MBR) est détecté: assure toi que Cure est bien cochée.
Si Rootkit.Win32.ZAccess.* est détecté : règle sur "cure" en haut , et "delete" en bas
Si Suspicious file est indiqué, laisse l''option cochée sur Skip
une fois qu'il a terminé , redémarre s'il te le demande pour finir de nettoyer
sinon , ferme TDSSKiller et le rapport s'affichera sur le bureau
Poste moi son rapport à l'issue; merci
@+
Télécharge TDSSKiller
*Créez un nouveau dossier sur votre bureau puis décompressez l'archive dedans
* Lancez le programme en cliquant sur TDSSKiller.exe, l'analyse se fait automatiquement, si l'infection est détectée, des éléments cachés (= hidden) seront alors affichés.
Si TDSS.tdl2 est détecté: l'option delete sera cochée par défaut.
Si TDSS.tdl3 est détecté: assure toi que Cure est bien cochée.
Si TDSS.tdl4(\HardDisk0\MBR) est détecté: assure toi que Cure est bien cochée.
Si Rootkit.Win32.ZAccess.* est détecté : règle sur "cure" en haut , et "delete" en bas
Si Suspicious file est indiqué, laisse l''option cochée sur Skip
une fois qu'il a terminé , redémarre s'il te le demande pour finir de nettoyer
sinon , ferme TDSSKiller et le rapport s'affichera sur le bureau
Poste moi son rapport à l'issue; merci
@+
il a détecté une menace qu'il a "cure" et a demander un redemarage seulement aucun rapport n'a été générer sur le bureau
si je relance il ne détecte plus rien
si je relance il ne détecte plus rien
voila
16:56:51.0120 3044 TDSS rootkit removing tool 2.7.28.0 Apr 10 2012 16:54:05
16:56:51.0463 3044 ============================================================
16:56:51.0463 3044 Current date / time: 2012/04/13 16:56:51.0463
16:56:51.0463 3044 SystemInfo:
16:56:51.0463 3044
16:56:51.0463 3044 OS Version: 6.1.7601 ServicePack: 1.0
16:56:51.0463 3044 Product type: Workstation
16:56:51.0463 3044 ComputerName: GERARD
16:56:51.0463 3044 UserName: gerarg
16:56:51.0463 3044 Windows directory: C:\Windows
16:56:51.0463 3044 System windows directory: C:\Windows
16:56:51.0463 3044 Running under WOW64
16:56:51.0463 3044 Processor architecture: Intel x64
16:56:51.0463 3044 Number of processors: 2
16:56:51.0463 3044 Page size: 0x1000
16:56:51.0463 3044 Boot type: Normal boot
16:56:51.0463 3044 ============================================================
16:56:52.0134 3044 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:56:52.0165 3044 \Device\Harddisk0\DR0:
16:56:52.0165 3044 MBR used
16:56:52.0165 3044 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1C00800, BlocksNum 0x32000
16:56:52.0165 3044 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1C32800, BlocksNum 0x237F72B0
16:56:52.0181 3044 Initialize success
16:56:52.0181 3044 ============================================================
16:57:05.0176 3724 ============================================================
16:57:05.0176 3724 Scan started
16:57:05.0176 3724 Mode: Manual;
16:57:05.0176 3724 ============================================================
16:57:05.0659 3724 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
16:57:05.0659 3724 1394ohci - ok
16:57:05.0737 3724 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
16:57:05.0753 3724 ACPI - ok
16:57:05.0815 3724 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
16:57:05.0831 3724 AcpiPmi - ok
16:57:05.0924 3724 AdobeFlashPlayerUpdateSvc (0d4c486a24a711a45fd83acdf4d18506) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
16:57:05.0924 3724 AdobeFlashPlayerUpdateSvc - ok
16:57:06.0002 3724 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
16:57:06.0018 3724 adp94xx - ok
16:57:06.0049 3724 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
16:57:06.0049 3724 adpahci - ok
16:57:06.0080 3724 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
16:57:06.0080 3724 adpu320 - ok
16:57:06.0096 3724 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
16:57:06.0096 3724 AeLookupSvc - ok
16:57:06.0143 3724 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
16:57:06.0158 3724 AFD - ok
16:57:06.0190 3724 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
16:57:06.0205 3724 agp440 - ok
16:57:06.0236 3724 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
16:57:06.0236 3724 ALG - ok
16:57:06.0252 3724 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
16:57:06.0252 3724 aliide - ok
16:57:06.0299 3724 AMD External Events Utility (6a17a31af7d85435566970bc97f8385e) C:\Windows\system32\atiesrxx.exe
16:57:06.0299 3724 AMD External Events Utility - ok
16:57:06.0330 3724 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
16:57:06.0330 3724 amdide - ok
16:57:06.0377 3724 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
16:57:06.0377 3724 AmdK8 - ok
16:57:06.0533 3724 amdkmdag (4b24b270904a9c11e6433f89c06c07d9) C:\Windows\system32\DRIVERS\atipmdag.sys
16:57:06.0642 3724 amdkmdag - ok
16:57:06.0673 3724 amdkmdap (df0236c8eb72cf2698c9e74702d3e127) C:\Windows\system32\DRIVERS\atikmpag.sys
16:57:06.0673 3724 amdkmdap - ok
16:57:06.0689 3724 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
16:57:06.0689 3724 AmdPPM - ok
16:57:06.0720 3724 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
16:57:06.0720 3724 amdsata - ok
16:57:06.0736 3724 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
16:57:06.0736 3724 amdsbs - ok
16:57:06.0767 3724 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
16:57:06.0767 3724 amdxata - ok
16:57:06.0814 3724 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
16:57:06.0814 3724 AppID - ok
16:57:06.0845 3724 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
16:57:06.0845 3724 AppIDSvc - ok
16:57:06.0876 3724 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
16:57:06.0876 3724 Appinfo - ok
16:57:06.0938 3724 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
16:57:06.0938 3724 arc - ok
16:57:06.0954 3724 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
16:57:06.0954 3724 arcsas - ok
16:57:07.0001 3724 aswFsBlk (b9da213b5271db5fce962d827e6d620d) C:\Windows\system32\drivers\aswFsBlk.sys
16:57:07.0001 3724 aswFsBlk - ok
16:57:07.0032 3724 aswMonFlt (21c9835d0e5ad2ff0f16134bcb32cc71) C:\Windows\system32\drivers\aswMonFlt.sys
16:57:07.0032 3724 aswMonFlt - ok
16:57:07.0063 3724 aswRdr (1b96a5867abd4fa6135d8298fcccf9c6) C:\Windows\System32\Drivers\aswrdr2.sys
16:57:07.0079 3724 aswRdr - ok
16:57:07.0126 3724 aswSnx (6e98bb288696777a3a8a07a52b0eaee9) C:\Windows\system32\drivers\aswSnx.sys
16:57:07.0126 3724 aswSnx - ok
16:57:07.0157 3724 aswSP (d9fb49f16e4eb02efecae8cbfe4bcb4c) C:\Windows\system32\drivers\aswSP.sys
16:57:07.0172 3724 aswSP - ok
16:57:07.0172 3724 aswTdi (7352bb9a564b94bbd7c9cbf165f55006) C:\Windows\system32\drivers\aswTdi.sys
16:57:07.0188 3724 aswTdi - ok
16:57:07.0235 3724 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
16:57:07.0235 3724 AsyncMac - ok
16:57:07.0266 3724 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
16:57:07.0266 3724 atapi - ok
16:57:07.0313 3724 AtiHdmiService (77c149e6d702737b2e372dee166faef8) C:\Windows\system32\drivers\AtiHdmi.sys
16:57:07.0313 3724 AtiHdmiService - ok
16:57:07.0360 3724 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
16:57:07.0375 3724 AudioEndpointBuilder - ok
16:57:07.0391 3724 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
16:57:07.0406 3724 AudioSrv - ok
16:57:07.0469 3724 avast! Antivirus (4041d31508a2a084dfb42c595854090f) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
16:57:07.0469 3724 avast! Antivirus - ok
16:57:07.0547 3724 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
16:57:07.0547 3724 AxInstSV - ok
16:57:07.0609 3724 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
16:57:07.0625 3724 b06bdrv - ok
16:57:07.0656 3724 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
16:57:07.0672 3724 b57nd60a - ok
16:57:07.0703 3724 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
16:57:07.0703 3724 BDESVC - ok
16:57:07.0734 3724 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
16:57:07.0734 3724 Beep - ok
16:57:07.0796 3724 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
16:57:07.0812 3724 BFE - ok
16:57:07.0843 3724 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\system32\qmgr.dll
16:57:07.0874 3724 BITS - ok
16:57:07.0906 3724 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
16:57:07.0906 3724 blbdrive - ok
16:57:07.0937 3724 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
16:57:07.0937 3724 bowser - ok
16:57:07.0968 3724 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
16:57:07.0968 3724 BrFiltLo - ok
16:57:07.0984 3724 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
16:57:07.0984 3724 BrFiltUp - ok
16:57:08.0015 3724 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
16:57:08.0015 3724 BridgeMP - ok
16:57:08.0046 3724 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
16:57:08.0062 3724 Browser - ok
16:57:08.0077 3724 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
16:57:08.0077 3724 Brserid - ok
16:57:08.0093 3724 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
16:57:08.0093 3724 BrSerWdm - ok
16:57:08.0124 3724 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
16:57:08.0124 3724 BrUsbMdm - ok
16:57:08.0140 3724 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
16:57:08.0140 3724 BrUsbSer - ok
16:57:08.0155 3724 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
16:57:08.0155 3724 BTHMODEM - ok
16:57:08.0186 3724 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
16:57:08.0186 3724 bthserv - ok
16:57:08.0233 3724 Bulk (d8bd549336593ca304b3524ff2f42717) C:\Windows\system32\Drivers\HDJBulk.sys
16:57:08.0249 3724 Bulk - ok
16:57:08.0311 3724 catchme - ok
16:57:08.0374 3724 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
16:57:08.0374 3724 cdfs - ok
16:57:08.0420 3724 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
16:57:08.0420 3724 cdrom - ok
16:57:08.0467 3724 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
16:57:08.0467 3724 CertPropSvc - ok
16:57:08.0514 3724 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
16:57:08.0514 3724 circlass - ok
16:57:08.0545 3724 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
16:57:08.0545 3724 CLFS - ok
16:57:08.0608 3724 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:57:08.0608 3724 clr_optimization_v2.0.50727_32 - ok
16:57:08.0654 3724 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
16:57:08.0654 3724 clr_optimization_v2.0.50727_64 - ok
16:57:08.0717 3724 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16:57:08.0717 3724 clr_optimization_v4.0.30319_32 - ok
16:57:08.0748 3724 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
16:57:08.0748 3724 clr_optimization_v4.0.30319_64 - ok
16:57:08.0795 3724 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
16:57:08.0795 3724 CmBatt - ok
16:57:08.0842 3724 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
16:57:08.0842 3724 cmdide - ok
16:57:08.0888 3724 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
16:57:08.0904 3724 CNG - ok
16:57:08.0920 3724 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
16:57:08.0935 3724 Compbatt - ok
16:57:08.0966 3724 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
16:57:08.0966 3724 CompositeBus - ok
16:57:08.0982 3724 COMSysApp - ok
16:57:09.0013 3724 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
16:57:09.0013 3724 crcdisk - ok
16:57:09.0060 3724 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
16:57:09.0060 3724 CryptSvc - ok
16:57:09.0122 3724 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
16:57:09.0138 3724 DcomLaunch - ok
16:57:09.0185 3724 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
16:57:09.0200 3724 defragsvc - ok
16:57:09.0247 3724 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
16:57:09.0247 3724 DfsC - ok
16:57:09.0294 3724 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
16:57:09.0310 3724 Dhcp - ok
16:57:09.0341 3724 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
16:57:09.0341 3724 discache - ok
16:57:09.0372 3724 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
16:57:09.0388 3724 Disk - ok
16:57:09.0403 3724 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
16:57:09.0403 3724 Dnscache - ok
16:57:09.0450 3724 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
16:57:09.0466 3724 dot3svc - ok
16:57:09.0497 3724 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
16:57:09.0497 3724 DPS - ok
16:57:09.0544 3724 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
16:57:09.0544 3724 drmkaud - ok
16:57:09.0590 3724 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
16:57:09.0606 3724 DXGKrnl - ok
16:57:09.0637 3724 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
16:57:09.0637 3724 EapHost - ok
16:57:09.0715 3724 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
16:57:09.0778 3724 ebdrv - ok
16:57:09.0809 3724 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
16:57:09.0809 3724 EFS - ok
16:57:09.0871 3724 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
16:57:09.0902 3724 ehRecvr - ok
16:57:09.0918 3724 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
16:57:09.0918 3724 ehSched - ok
16:57:09.0980 3724 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
16:57:09.0996 3724 elxstor - ok
16:57:10.0027 3724 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
16:57:10.0027 3724 ErrDev - ok
16:57:10.0090 3724 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
16:57:10.0105 3724 EventSystem - ok
16:57:10.0136 3724 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
16:57:10.0152 3724 exfat - ok
16:57:10.0168 3724 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
16:57:10.0183 3724 fastfat - ok
16:57:10.0230 3724 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
16:57:10.0246 3724 Fax - ok
16:57:10.0261 3724 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
16:57:10.0261 3724 fdc - ok
16:57:10.0292 3724 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
16:57:10.0308 3724 fdPHost - ok
16:57:10.0324 3724 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
16:57:10.0324 3724 FDResPub - ok
16:57:10.0355 3724 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
16:57:10.0355 3724 FileInfo - ok
16:57:10.0370 3724 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
16:57:10.0370 3724 Filetrace - ok
16:57:10.0402 3724 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
16:57:10.0402 3724 flpydisk - ok
16:57:10.0433 3724 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
16:57:10.0448 3724 FltMgr - ok
16:57:10.0480 3724 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
16:57:10.0511 3724 FontCache - ok
16:57:10.0573 3724 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16:57:10.0573 3724 FontCache3.0.0.0 - ok
16:57:10.0604 3724 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
16:57:10.0620 3724 FsDepends - ok
16:57:10.0636 3724 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
16:57:10.0636 3724 Fs_Rec - ok
16:57:10.0682 3724 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
16:57:10.0682 3724 fvevol - ok
16:57:10.0698 3724 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
16:57:10.0698 3724 gagp30kx - ok
16:57:10.0776 3724 GameConsoleService (ce16683cfd11fe70bde435dda5ea1fca) C:\Program Files (x86)\eMachines Games\eMachines Game Console\GameConsoleService.exe
16:57:10.0776 3724 GameConsoleService - ok
16:57:10.0901 3724 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
16:57:10.0932 3724 gpsvc - ok
16:57:11.0026 3724 Greg_Service (816fd5a6f3c2f3d600900096632fc60e) C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe
16:57:11.0026 3724 Greg_Service - ok
16:57:11.0104 3724 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
16:57:11.0104 3724 hcw85cir - ok
16:57:11.0166 3724 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
16:57:11.0182 3724 HdAudAddService - ok
16:57:11.0213 3724 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
16:57:11.0213 3724 HDAudBus - ok
16:57:11.0260 3724 HDJMidi (f10b45171f7e8618e0868f3a0c9efe84) C:\Windows\system32\DRIVERS\HDJMidi.sys
16:57:11.0275 3724 HDJMidi - ok
16:57:11.0353 3724 HerculesDJControlMP3 (4141c2cbd8d6c9f3f4004fe842c48e79) C:\Program Files\Hercules\Audio\DJ Console Series\HerculesDJControlMP3.EXE
16:57:11.0353 3724 HerculesDJControlMP3 - ok
16:57:11.0416 3724 HerculesWiFi (c3293000e57269a790f77ab59a9eb3d8) C:\Program Files (x86)\Hercules\WiFiStation\HerculesWiFiService.exe
16:57:11.0416 3724 HerculesWiFi - ok
16:57:11.0494 3724 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
16:57:11.0494 3724 HidBatt - ok
16:57:11.0525 3724 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
16:57:11.0525 3724 HidBth - ok
16:57:11.0556 3724 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
16:57:11.0556 3724 HidIr - ok
16:57:11.0587 3724 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll
16:57:11.0587 3724 hidserv - ok
16:57:11.0634 3724 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
16:57:11.0634 3724 HidUsb - ok
16:57:11.0665 3724 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
16:57:11.0665 3724 hkmsvc - ok
16:57:11.0696 3724 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
16:57:11.0712 3724 HomeGroupListener - ok
16:57:11.0743 3724 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
16:57:11.0759 3724 HomeGroupProvider - ok
16:57:11.0806 3724 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
16:57:11.0806 3724 HpSAMD - ok
16:57:11.0852 3724 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
16:57:11.0868 3724 HTTP - ok
16:57:11.0899 3724 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
16:57:11.0915 3724 hwpolicy - ok
16:57:11.0946 3724 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
16:57:11.0946 3724 i8042prt - ok
16:57:11.0977 3724 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
16:57:11.0993 3724 iaStorV - ok
16:57:12.0071 3724 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
16:57:12.0102 3724 idsvc - ok
16:57:12.0258 3724 igfx (a87261ef1546325b559374f5689cf5bc) C:\Windows\system32\DRIVERS\igdkmd64.sys
16:57:12.0383 3724 igfx - ok
16:57:12.0414 3724 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
16:57:12.0414 3724 iirsp - ok
16:57:12.0461 3724 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
16:57:12.0476 3724 IKEEXT - ok
16:57:12.0554 3724 IntcAzAudAddService (96b0a408842b0e214edcb41e89438999) C:\Windows\system32\drivers\RTKVHD64.sys
16:57:12.0570 3724 IntcAzAudAddService - ok
16:57:12.0601 3724 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
16:57:12.0601 3724 intelide - ok
16:57:12.0632 3724 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
16:57:12.0632 3724 intelppm - ok
16:57:12.0664 3724 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
16:57:12.0664 3724 IPBusEnum - ok
16:57:12.0695 3724 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:57:12.0695 3724 IpFilterDriver - ok
16:57:12.0742 3724 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
16:57:12.0757 3724 iphlpsvc - ok
16:57:12.0773 3724 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
16:57:12.0788 3724 IPMIDRV - ok
16:57:12.0820 3724 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
16:57:12.0820 3724 IPNAT - ok
16:57:12.0835 3724 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
16:57:12.0851 3724 IRENUM - ok
16:57:12.0866 3724 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
16:57:12.0866 3724 isapnp - ok
16:57:12.0898 3724 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
16:57:12.0898 3724 iScsiPrt - ok
16:57:12.0944 3724 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
16:57:12.0944 3724 kbdclass - ok
16:57:12.0976 3724 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
16:57:12.0976 3724 kbdhid - ok
16:57:13.0007 3724 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:13.0022 3724 KeyIso - ok
16:57:13.0038 3724 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
16:57:13.0038 3724 KSecDD - ok
16:57:13.0100 3724 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
16:57:13.0100 3724 KSecPkg - ok
16:57:13.0132 3724 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
16:57:13.0132 3724 ksthunk - ok
16:57:13.0178 3724 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
16:57:13.0194 3724 KtmRm - ok
16:57:13.0241 3724 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\System32\srvsvc.dll
16:57:13.0256 3724 LanmanServer - ok
16:57:13.0303 3724 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
16:57:13.0319 3724 LanmanWorkstation - ok
16:57:13.0366 3724 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
16:57:13.0381 3724 lltdio - ok
16:57:13.0412 3724 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
16:57:13.0428 3724 lltdsvc - ok
16:57:13.0444 3724 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
16:57:13.0459 3724 lmhosts - ok
16:57:13.0506 3724 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
16:57:13.0506 3724 LSI_FC - ok
16:57:13.0537 3724 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
16:57:13.0537 3724 LSI_SAS - ok
16:57:13.0553 3724 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
16:57:13.0568 3724 LSI_SAS2 - ok
16:57:13.0568 3724 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
16:57:13.0584 3724 LSI_SCSI - ok
16:57:13.0615 3724 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
16:57:13.0615 3724 luafv - ok
16:57:13.0646 3724 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
16:57:13.0646 3724 Mcx2Svc - ok
16:57:13.0678 3724 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
16:57:13.0678 3724 megasas - ok
16:57:13.0693 3724 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
16:57:13.0709 3724 MegaSR - ok
16:57:13.0740 3724 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
16:57:13.0740 3724 MMCSS - ok
16:57:13.0756 3724 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
16:57:13.0756 3724 Modem - ok
16:57:13.0787 3724 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
16:57:13.0787 3724 monitor - ok
16:57:13.0818 3724 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
16:57:13.0818 3724 mouclass - ok
16:57:13.0849 3724 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
16:57:13.0849 3724 mouhid - ok
16:57:13.0880 3724 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
16:57:13.0880 3724 mountmgr - ok
16:57:13.0927 3724 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
16:57:13.0927 3724 mpio - ok
16:57:13.0943 3724 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
16:57:13.0943 3724 mpsdrv - ok
16:57:14.0005 3724 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
16:57:14.0036 3724 MpsSvc - ok
16:57:14.0068 3724 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
16:57:14.0068 3724 MRxDAV - ok
16:57:14.0099 3724 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
16:57:14.0099 3724 mrxsmb - ok
16:57:14.0130 3724 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:57:14.0161 3724 mrxsmb10 - ok
16:57:14.0177 3724 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:57:14.0177 3724 mrxsmb20 - ok
16:57:14.0208 3724 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
16:57:14.0208 3724 msahci - ok
16:57:14.0255 3724 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
16:57:14.0255 3724 msdsm - ok
16:57:14.0286 3724 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
16:57:14.0317 3724 MSDTC - ok
16:57:14.0333 3724 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
16:57:14.0333 3724 Msfs - ok
16:57:14.0364 3724 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
16:57:14.0364 3724 mshidkmdf - ok
16:57:14.0380 3724 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
16:57:14.0380 3724 msisadrv - ok
16:57:14.0426 3724 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
16:57:14.0426 3724 MSiSCSI - ok
16:57:14.0442 3724 msiserver - ok
16:57:14.0458 3724 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
16:57:14.0458 3724 MSKSSRV - ok
16:57:14.0489 3724 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
16:57:14.0489 3724 MSPCLOCK - ok
16:57:14.0520 3724 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
16:57:14.0520 3724 MSPQM - ok
16:57:14.0551 3724 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
16:57:14.0551 3724 MsRPC - ok
16:57:14.0582 3724 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
16:57:14.0582 3724 mssmbios - ok
16:57:14.0598 3724 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
16:57:14.0598 3724 MSTEE - ok
16:57:14.0614 3724 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
16:57:14.0614 3724 MTConfig - ok
16:57:14.0645 3724 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
16:57:14.0645 3724 Mup - ok
16:57:14.0676 3724 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
16:57:14.0707 3724 napagent - ok
16:57:14.0738 3724 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
16:57:14.0754 3724 NativeWifiP - ok
16:57:14.0801 3724 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
16:57:14.0832 3724 NDIS - ok
16:57:14.0863 3724 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
16:57:14.0863 3724 NdisCap - ok
16:57:14.0894 3724 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
16:57:14.0894 3724 NdisTapi - ok
16:57:14.0941 3724 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
16:57:14.0941 3724 Ndisuio - ok
16:57:14.0972 3724 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
16:57:14.0972 3724 NdisWan - ok
16:57:15.0004 3724 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
16:57:15.0019 3724 NDProxy - ok
16:57:15.0097 3724 Nero BackItUp Scheduler 4.0 (7d2633295eb6ff2b938185874884059d) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
16:57:15.0128 3724 Nero BackItUp Scheduler 4.0 - ok
16:57:15.0191 3724 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
16:57:15.0206 3724 NetBIOS - ok
16:57:15.0253 3724 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
16:57:15.0253 3724 NetBT - ok
16:57:15.0300 3724 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:15.0300 3724 Netlogon - ok
16:57:15.0347 3724 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
16:57:15.0362 3724 Netman - ok
16:57:15.0378 3724 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
16:57:15.0394 3724 netprofm - ok
16:57:15.0472 3724 netr28ux (53d7442aa919c91d055dbd44635f32b1) C:\Windows\system32\DRIVERS\netr28ux.sys
16:57:15.0487 3724 netr28ux - ok
16:57:15.0534 3724 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:57:15.0534 3724 NetTcpPortSharing - ok
16:57:15.0581 3724 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
16:57:15.0581 3724 nfrd960 - ok
16:57:15.0628 3724 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
16:57:15.0643 3724 NlaSvc - ok
16:57:15.0659 3724 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
16:57:15.0659 3724 Npfs - ok
16:57:15.0690 3724 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
16:57:15.0690 3724 nsi - ok
16:57:15.0706 3724 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
16:57:15.0706 3724 nsiproxy - ok
16:57:15.0752 3724 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
16:57:15.0799 3724 Ntfs - ok
16:57:15.0815 3724 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
16:57:15.0815 3724 Null - ok
16:57:15.0846 3724 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
16:57:15.0846 3724 nvraid - ok
16:57:15.0877 3724 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
16:57:15.0877 3724 nvstor - ok
16:57:15.0893 3724 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
16:57:15.0893 3724 nv_agp - ok
16:57:15.0908 3724 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
16:57:15.0908 3724 ohci1394 - ok
16:57:15.0940 3724 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
16:57:15.0955 3724 p2pimsvc - ok
16:57:16.0002 3724 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
16:57:16.0018 3724 p2psvc - ok
16:57:16.0049 3724 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
16:57:16.0049 3724 Parport - ok
16:57:16.0096 3724 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
16:57:16.0096 3724 partmgr - ok
16:57:16.0111 3724 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
16:57:16.0127 3724 PcaSvc - ok
16:57:16.0158 3724 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
16:57:16.0158 3724 pci - ok
16:57:16.0174 3724 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
16:57:16.0174 3724 pciide - ok
16:57:16.0205 3724 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
16:57:16.0220 3724 pcmcia - ok
16:57:16.0236 3724 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
16:57:16.0236 3724 pcw - ok
16:57:16.0267 3724 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
16:57:16.0283 3724 PEAUTH - ok
16:57:16.0330 3724 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
16:57:16.0330 3724 PerfHost - ok
16:57:16.0408 3724 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
16:57:16.0439 3724 pla - ok
16:57:16.0501 3724 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
16:57:16.0517 3724 PlugPlay - ok
16:57:16.0532 3724 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
16:57:16.0548 3724 PNRPAutoReg - ok
16:57:16.0564 3724 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
16:57:16.0579 3724 PNRPsvc - ok
16:57:16.0626 3724 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
16:57:16.0642 3724 PolicyAgent - ok
16:57:16.0673 3724 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
16:57:16.0688 3724 Power - ok
16:57:16.0735 3724 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
16:57:16.0735 3724 PptpMiniport - ok
16:57:16.0766 3724 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
16:57:16.0766 3724 Processor - ok
16:57:16.0813 3724 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
16:57:16.0829 3724 ProfSvc - ok
16:57:16.0876 3724 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:16.0876 3724 ProtectedStorage - ok
16:57:16.0922 3724 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
16:57:16.0922 3724 Psched - ok
16:57:16.0985 3724 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
16:57:17.0016 3724 ql2300 - ok
16:57:17.0047 3724 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
16:57:17.0047 3724 ql40xx - ok
16:57:17.0078 3724 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
16:57:17.0094 3724 QWAVE - ok
16:57:17.0110 3724 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
16:57:17.0110 3724 QWAVEdrv - ok
16:57:17.0125 3724 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
16:57:17.0125 3724 RasAcd - ok
16:57:17.0156 3724 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
16:57:17.0156 3724 RasAgileVpn - ok
16:57:17.0203 3724 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
16:57:17.0203 3724 RasAuto - ok
16:57:17.0234 3724 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
16:57:17.0250 3724 Rasl2tp - ok
16:57:17.0281 3724 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
16:57:17.0297 3724 RasMan - ok
16:57:17.0312 3724 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
16:57:17.0328 3724 RasPppoe - ok
16:57:17.0328 3724 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
16:57:17.0344 3724 RasSstp - ok
16:57:17.0375 3724 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
16:57:17.0375 3724 rdbss - ok
16:57:17.0390 3724 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
16:57:17.0406 3724 rdpbus - ok
16:57:17.0422 3724 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
16:57:17.0422 3724 RDPCDD - ok
16:57:17.0437 3724 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
16:57:17.0437 3724 RDPENCDD - ok
16:57:17.0453 3724 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
16:57:17.0468 3724 RDPREFMP - ok
16:57:17.0500 3724 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
16:57:17.0500 3724 RDPWD - ok
16:57:17.0546 3724 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
16:57:17.0546 3724 rdyboost - ok
16:57:17.0578 3724 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
16:57:17.0578 3724 RemoteAccess - ok
16:57:17.0609 3724 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
16:57:17.0624 3724 RemoteRegistry - ok
16:57:17.0671 3724 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
16:57:17.0671 3724 RpcEptMapper - ok
16:57:17.0702 3724 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
16:57:17.0702 3724 RpcLocator - ok
16:57:17.0749 3724 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
16:57:17.0765 3724 RpcSs - ok
16:57:17.0796 3724 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
16:57:17.0796 3724 rspndr - ok
16:57:17.0827 3724 RTL8167 (b49dc435ae3695bac5623dd94b05732d) C:\Windows\system32\DRIVERS\Rt64win7.sys
16:57:17.0827 3724 RTL8167 - ok
16:57:17.0890 3724 RTL8192su (45959f6069c2de97caa697320b22926f) C:\Windows\system32\DRIVERS\RTL8192su.sys
16:57:17.0905 3724 RTL8192su - ok
16:57:17.0952 3724 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:17.0952 3724 SamSs - ok
16:57:17.0983 3724 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
16:57:17.0983 3724 sbp2port - ok
16:57:18.0014 3724 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
16:57:18.0030 3724 SCardSvr - ok
16:57:18.0077 3724 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
16:57:18.0077 3724 scfilter - ok
16:57:18.0124 3724 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
16:57:18.0155 3724 Schedule - ok
16:57:18.0186 3724 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
16:57:18.0202 3724 SCPolicySvc - ok
16:57:18.0233 3724 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
16:57:18.0248 3724 SDRSVC - ok
16:57:18.0295 3724 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
16:57:18.0311 3724 secdrv - ok
16:57:18.0342 3724 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
16:57:18.0342 3724 seclogon - ok
16:57:18.0373 3724 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\system32\sens.dll
16:57:18.0373 3724 SENS - ok
16:57:18.0404 3724 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
16:57:18.0404 3724 SensrSvc - ok
16:57:18.0467 3724 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
16:57:18.0467 3724 Serenum - ok
16:57:18.0498 3724 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
16:57:18.0498 3724 Serial - ok
16:57:18.0529 3724 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
16:57:18.0529 3724 sermouse - ok
16:57:18.0560 3724 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
16:57:18.0576 3724 SessionEnv - ok
16:57:18.0607 3724 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
16:57:18.0607 3724 sffdisk - ok
16:57:18.0623 3724 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
16:57:18.0623 3724 sffp_mmc - ok
16:57:18.0638 3724 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
16:57:18.0638 3724 sffp_sd - ok
16:57:18.0654 3724 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
16:57:18.0654 3724 sfloppy - ok
16:57:18.0685 3724 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
16:57:18.0701 3724 SharedAccess - ok
16:57:18.0732 3724 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
16:57:18.0748 3724 ShellHWDetection - ok
16:57:18.0763 3724 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
16:57:18.0779 3724 SiSRaid2 - ok
16:57:18.0794 3724 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
16:57:18.0794 3724 SiSRaid4 - ok
16:57:18.0826 3724 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
16:57:18.0826 3724 Smb - ok
16:57:18.0857 3724 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
16:57:18.0857 3724 SNMPTRAP - ok
16:57:18.0888 3724 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
16:57:18.0888 3724 spldr - ok
16:57:18.0935 3724 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
16:57:18.0950 3724 Spooler - ok
16:57:19.0044 3724 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
16:57:19.0091 3724 sppsvc - ok
16:57:19.0122 3724 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
16:57:19.0122 3724 sppuinotify - ok
16:57:19.0169 3724 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
16:57:19.0184 3724 srv - ok
16:57:19.0216 3724 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
16:57:19.0231 3724 srv2 - ok
16:57:19.0247 3724 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
16:57:19.0247 3724 srvnet - ok
16:57:19.0278 3724 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
16:57:19.0294 3724 SSDPSRV - ok
16:57:19.0325 3724 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
16:57:19.0325 3724 SstpSvc - ok
16:57:19.0372 3724 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
16:57:19.0372 3724 stexstor - ok
16:57:19.0418 3724 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
16:57:19.0450 3724 stisvc - ok
16:57:19.0465 3724 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
16:57:19.0465 3724 swenum - ok
16:57:19.0512 3724 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
16:57:19.0528 3724 swprv - ok
16:57:19.0606 3724 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
16:57:19.0652 3724 SysMain - ok
16:57:19.0684 3724 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
16:57:19.0699 3724 TabletInputService - ok
16:57:19.0730 3724 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
16:57:19.0762 3724 TapiSrv - ok
16:57:19.0793 3724 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
16:57:19.0793 3724 TBS - ok
16:57:19.0871 3724 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
16:57:19.0902 3724 Tcpip - ok
16:57:19.0949 3724 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
16:57:19.0964 3724 TCPIP6 - ok
16:57:20.0011 3724 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
16:57:20.0011 3724 tcpipreg - ok
16:57:20.0042 3724 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
16:57:20.0042 3724 TDPIPE - ok
16:57:20.0058 3724 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
16:57:20.0058 3724 TDTCP - ok
16:57:20.0105 3724 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
16:57:20.0105 3724 tdx - ok
16:57:20.0136 3724 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
16:57:20.0136 3724 TermDD - ok
16:57:20.0183 3724 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
16:57:20.0198 3724 TermService - ok
16:57:20.0230 3724 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
16:57:20.0245 3724 Themes - ok
16:57:20.0261 3724 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
16:57:20.0261 3724 THREADORDER - ok
16:57:20.0292 3724 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
16:57:20.0308 3724 TrkWks - ok
16:57:20.0354 3724 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
16:57:20.0354 3724 TrustedInstaller - ok
16:57:20.0401 3724 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
16:57:20.0401 3724 tssecsrv - ok
16:57:20.0464 3724 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
16:57:20.0464 3724 TsUsbFlt - ok
16:57:20.0510 3724 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
16:57:20.0510 3724 tunnel - ok
16:57:20.0542 3724 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
16:57:20.0542 3724 uagp35 - ok
16:57:20.0588 3724 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
16:57:20.0588 3724 udfs - ok
16:57:20.0620 3724 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
16:57:20.0635 3724 UI0Detect - ok
16:57:20.0666 3724 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
16:57:20.0666 3724 uliagpkx - ok
16:57:20.0698 3724 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
16:57:20.0713 3724 umbus - ok
16:57:20.0744 3724 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
16:57:20.0744 3724 UmPass - ok
16:57:20.0791 3724 Updater Service (f9ec9acd504d823d9b9ca98a4f8d3ca2) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
16:57:20.0807 3724 Updater Service - ok
16:57:20.0838 3724 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
16:57:20.0854 3724 upnphost - ok
16:57:20.0885 3724 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
16:57:20.0885 3724 usbccgp - ok
16:57:20.0932 3724 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
16:57:20.0932 3724 usbcir - ok
16:57:20.0963 3724 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
16:57:20.0963 3724 usbehci - ok
16:57:20.0994 3724 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
16:57:21.0010 3724 usbhub - ok
16:57:21.0025 3724 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
16:57:21.0025 3724 usbohci - ok
16:57:21.0056 3724 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
16:57:21.0072 3724 usbprint - ok
16:57:21.0103 3724 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:57:21.0103 3724 USBSTOR - ok
16:57:21.0119 3724 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\DRIVERS\usbuhci.sys
16:57:21.0119 3724 usbuhci - ok
16:57:21.0150 3724 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
16:57:21.0150 3724 UxSms - ok
16:57:21.0197 3724 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:21.0212 3724 VaultSvc - ok
16:57:21.0228 3724 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
16:57:21.0228 3724 vdrvroot - ok
16:57:21.0275 3724 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
16:57:21.0306 3724 vds - ok
16:57:21.0337 3724 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
16:57:21.0337 3724 vga - ok
16:57:21.0353 3724 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
16:57:21.0353 3724 VgaSave - ok
16:57:21.0400 3724 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
16:57:21.0400 3724 vhdmp - ok
16:57:21.0415 3724 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
16:57:21.0431 3724 viaide - ok
16:57:21.0446 3724 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
16:57:21.0446 3724 volmgr - ok
16:57:21.0478 3724 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
16:57:21.0493 3724 volmgrx - ok
16:57:21.0524 3724 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
16:57:21.0524 3724 volsnap - ok
16:57:21.0556 3724 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
16:57:21.0571 3724 vsmraid - ok
16:57:21.0634 3724 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
16:57:21.0665 3724 VSS - ok
16:57:21.0680 3724 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
16:57:21.0680 3724 vwifibus - ok
16:57:21.0727 3724 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
16:57:21.0727 3724 vwififlt - ok
16:57:21.0758 3724 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
16:57:21.0774 3724 W32Time - ok
16:57:21.0790 3724 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
16:57:21.0805 3724 WacomPen - ok
16:57:21.0836 3724 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:57:21.0852 3724 WANARP - ok
16:57:21.0852 3724 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:57:21.0868 3724 Wanarpv6 - ok
16:57:21.0930 3724 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
16:57:21.0946 3724 WatAdminSvc - ok
16:57:22.0008 3724 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
16:57:22.0055 3724 wbengine - ok
16:57:22.0086 3724 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
16:57:22.0102 3724 WbioSrvc - ok
16:57:22.0133 3724 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
16:57:22.0148 3724 wcncsvc - ok
16:57:22.0164 3724 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
16:57:22.0180 3724 WcsPlugInService - ok
16:57:22.0211 3724 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
16:57:22.0211 3724 Wd - ok
16:57:22.0242 3724 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
16:57:22.0258 3724 Wdf01000 - ok
16:57:22.0273 3724 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
16:57:22.0273 3724 WdiServiceHost - ok
16:57:22.0289 3724 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
16:57:22.0289 3724 WdiSystemHost - ok
16:57:22.0320 3724 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
16:57:22.0336 3724 WebClient - ok
16:57:22.0367 3724 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
16:57:22.0382 3724 Wecsvc - ok
16:57:22.0398 3724 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
16:57:22.0398 3724 wercplsupport - ok
16:57:22.0429 3724 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
16:57:22.0445 3724 WerSvc - ok
16:57:22.0492 3724 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
16:57:22.0492 3724 WfpLwf - ok
16:57:22.0507 3724 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
16:57:22.0523 3724 WIMMount - ok
16:57:22.0554 3724 WinDefend - ok
16:57:22.0570 3724 WinHttpAutoProxySvc - ok
16:57:22.0616 3724 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
16:57:22.0616 3724 Winmgmt - ok
16:57:22.0679 3724 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
16:57:22.0726 3724 WinRM - ok
16:57:22.0788 3724 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
16:57:22.0788 3724 WinUsb - ok
16:57:22.0835 3724 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
16:57:22.0866 3724 Wlansvc - ok
16:57:22.0882 3724 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
16:57:22.0882 3724 WmiAcpi - ok
16:57:22.0928 3724 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
16:57:22.0944 3724 wmiApSrv - ok
16:57:22.0975 3724 WMPNetworkSvc - ok
16:57:23.0006 3724 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
16:57:23.0006 3724 WPCSvc - ok
16:57:23.0038 3724 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
16:57:23.0053 3724 WPDBusEnum - ok
16:57:23.0084 3724 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
16:57:23.0084 3724 ws2ifsl - ok
16:57:23.0116 3724 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll
16:57:23.0116 3724 wscsvc - ok
16:57:23.0131 3724 WSearch - ok
16:57:23.0225 3724 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
16:57:23.0256 3724 wuauserv - ok
16:57:23.0303 3724 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
16:57:23.0318 3724 WudfPf - ok
16:57:23.0350 3724 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
16:57:23.0350 3724 WUDFRd - ok
16:57:23.0381 3724 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
16:57:23.0381 3724 wudfsvc - ok
16:57:23.0428 3724 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
16:57:23.0443 3724 WwanSvc - ok
16:57:23.0490 3724 MBR (0x1B8) (70e629b51c16b3c007730c6ae57144c9) \Device\Harddisk0\DR0
16:57:23.0521 3724 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
16:57:23.0521 3724 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
16:57:23.0568 3724 Boot (0x1200) (1b018d123c71e25aec2f14de7b72121f) \Device\Harddisk0\DR0\Partition0
16:57:23.0568 3724 \Device\Harddisk0\DR0\Partition0 - ok
16:57:23.0568 3724 Boot (0x1200) (c9123aaca2471887b0c0d78dfb6f4486) \Device\Harddisk0\DR0\Partition1
16:57:23.0568 3724 \Device\Harddisk0\DR0\Partition1 - ok
16:57:23.0568 3724 ============================================================
16:57:23.0568 3724 Scan finished
16:57:23.0568 3724 ============================================================
16:57:23.0584 2980 Detected object count: 1
16:57:23.0584 2980 Actual detected object count: 1
16:57:58.0777 2980 \Device\Harddisk0\DR0\# - copied to quarantine
16:57:58.0777 2980 \Device\Harddisk0\DR0 - copied to quarantine
16:57:58.0933 2980 \Device\Harddisk0\DR0\TDLFS\mbr - copied to quarantine
16:57:58.0933 2980 \Device\Harddisk0\DR0\TDLFS\vbr - copied to quarantine
16:57:58.0949 2980 \Device\Harddisk0\DR0\TDLFS\bid - copied to quarantine
16:57:58.0949 2980 \Device\Harddisk0\DR0\TDLFS\affid - copied to quarantine
16:57:58.0949 2980 \Device\Harddisk0\DR0\TDLFS\boot - copied to quarantine
16:57:58.0949 2980 \Device\Harddisk0\DR0\TDLFS\cmd32 - copied to quarantine
16:58:00.0946 2980 \Device\Harddisk0\DR0\TDLFS\cmd64 - copied to quarantine
16:58:01.0040 2980 \Device\Harddisk0\DR0\TDLFS\dbg32 - copied to quarantine
16:58:01.0102 2980 \Device\Harddisk0\DR0\TDLFS\dbg64 - copied to quarantine
16:58:01.0128 2980 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
16:58:01.0204 2980 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
16:58:01.0254 2980 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
16:58:01.0285 2980 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
16:58:01.0314 2980 \Device\Harddisk0\DR0\TDLFS\subid - copied to quarantine
16:58:01.0316 2980 \Device\Harddisk0\DR0\TDLFS\info - copied to quarantine
16:58:01.0317 2980 \Device\Harddisk0\DR0\TDLFS\main - copied to quarantine
16:58:01.0319 2980 \Device\Harddisk0\DR0\TDLFS\mainfb.script - copied to quarantine
16:58:01.0348 2980 \Device\Harddisk0\DR0\TDLFS\com64 - copied to quarantine
16:58:01.0407 2980 \Device\Harddisk0\DR0\TDLFS\bbr232 - copied to quarantine
16:58:02.0932 2980 \Device\Harddisk0\DR0\TDLFS\serf332 - copied to quara
16:56:51.0120 3044 TDSS rootkit removing tool 2.7.28.0 Apr 10 2012 16:54:05
16:56:51.0463 3044 ============================================================
16:56:51.0463 3044 Current date / time: 2012/04/13 16:56:51.0463
16:56:51.0463 3044 SystemInfo:
16:56:51.0463 3044
16:56:51.0463 3044 OS Version: 6.1.7601 ServicePack: 1.0
16:56:51.0463 3044 Product type: Workstation
16:56:51.0463 3044 ComputerName: GERARD
16:56:51.0463 3044 UserName: gerarg
16:56:51.0463 3044 Windows directory: C:\Windows
16:56:51.0463 3044 System windows directory: C:\Windows
16:56:51.0463 3044 Running under WOW64
16:56:51.0463 3044 Processor architecture: Intel x64
16:56:51.0463 3044 Number of processors: 2
16:56:51.0463 3044 Page size: 0x1000
16:56:51.0463 3044 Boot type: Normal boot
16:56:51.0463 3044 ============================================================
16:56:52.0134 3044 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:56:52.0165 3044 \Device\Harddisk0\DR0:
16:56:52.0165 3044 MBR used
16:56:52.0165 3044 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1C00800, BlocksNum 0x32000
16:56:52.0165 3044 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1C32800, BlocksNum 0x237F72B0
16:56:52.0181 3044 Initialize success
16:56:52.0181 3044 ============================================================
16:57:05.0176 3724 ============================================================
16:57:05.0176 3724 Scan started
16:57:05.0176 3724 Mode: Manual;
16:57:05.0176 3724 ============================================================
16:57:05.0659 3724 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
16:57:05.0659 3724 1394ohci - ok
16:57:05.0737 3724 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
16:57:05.0753 3724 ACPI - ok
16:57:05.0815 3724 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
16:57:05.0831 3724 AcpiPmi - ok
16:57:05.0924 3724 AdobeFlashPlayerUpdateSvc (0d4c486a24a711a45fd83acdf4d18506) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
16:57:05.0924 3724 AdobeFlashPlayerUpdateSvc - ok
16:57:06.0002 3724 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
16:57:06.0018 3724 adp94xx - ok
16:57:06.0049 3724 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
16:57:06.0049 3724 adpahci - ok
16:57:06.0080 3724 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
16:57:06.0080 3724 adpu320 - ok
16:57:06.0096 3724 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
16:57:06.0096 3724 AeLookupSvc - ok
16:57:06.0143 3724 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
16:57:06.0158 3724 AFD - ok
16:57:06.0190 3724 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
16:57:06.0205 3724 agp440 - ok
16:57:06.0236 3724 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
16:57:06.0236 3724 ALG - ok
16:57:06.0252 3724 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
16:57:06.0252 3724 aliide - ok
16:57:06.0299 3724 AMD External Events Utility (6a17a31af7d85435566970bc97f8385e) C:\Windows\system32\atiesrxx.exe
16:57:06.0299 3724 AMD External Events Utility - ok
16:57:06.0330 3724 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
16:57:06.0330 3724 amdide - ok
16:57:06.0377 3724 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
16:57:06.0377 3724 AmdK8 - ok
16:57:06.0533 3724 amdkmdag (4b24b270904a9c11e6433f89c06c07d9) C:\Windows\system32\DRIVERS\atipmdag.sys
16:57:06.0642 3724 amdkmdag - ok
16:57:06.0673 3724 amdkmdap (df0236c8eb72cf2698c9e74702d3e127) C:\Windows\system32\DRIVERS\atikmpag.sys
16:57:06.0673 3724 amdkmdap - ok
16:57:06.0689 3724 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
16:57:06.0689 3724 AmdPPM - ok
16:57:06.0720 3724 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
16:57:06.0720 3724 amdsata - ok
16:57:06.0736 3724 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
16:57:06.0736 3724 amdsbs - ok
16:57:06.0767 3724 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
16:57:06.0767 3724 amdxata - ok
16:57:06.0814 3724 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
16:57:06.0814 3724 AppID - ok
16:57:06.0845 3724 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
16:57:06.0845 3724 AppIDSvc - ok
16:57:06.0876 3724 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
16:57:06.0876 3724 Appinfo - ok
16:57:06.0938 3724 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
16:57:06.0938 3724 arc - ok
16:57:06.0954 3724 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
16:57:06.0954 3724 arcsas - ok
16:57:07.0001 3724 aswFsBlk (b9da213b5271db5fce962d827e6d620d) C:\Windows\system32\drivers\aswFsBlk.sys
16:57:07.0001 3724 aswFsBlk - ok
16:57:07.0032 3724 aswMonFlt (21c9835d0e5ad2ff0f16134bcb32cc71) C:\Windows\system32\drivers\aswMonFlt.sys
16:57:07.0032 3724 aswMonFlt - ok
16:57:07.0063 3724 aswRdr (1b96a5867abd4fa6135d8298fcccf9c6) C:\Windows\System32\Drivers\aswrdr2.sys
16:57:07.0079 3724 aswRdr - ok
16:57:07.0126 3724 aswSnx (6e98bb288696777a3a8a07a52b0eaee9) C:\Windows\system32\drivers\aswSnx.sys
16:57:07.0126 3724 aswSnx - ok
16:57:07.0157 3724 aswSP (d9fb49f16e4eb02efecae8cbfe4bcb4c) C:\Windows\system32\drivers\aswSP.sys
16:57:07.0172 3724 aswSP - ok
16:57:07.0172 3724 aswTdi (7352bb9a564b94bbd7c9cbf165f55006) C:\Windows\system32\drivers\aswTdi.sys
16:57:07.0188 3724 aswTdi - ok
16:57:07.0235 3724 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
16:57:07.0235 3724 AsyncMac - ok
16:57:07.0266 3724 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
16:57:07.0266 3724 atapi - ok
16:57:07.0313 3724 AtiHdmiService (77c149e6d702737b2e372dee166faef8) C:\Windows\system32\drivers\AtiHdmi.sys
16:57:07.0313 3724 AtiHdmiService - ok
16:57:07.0360 3724 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
16:57:07.0375 3724 AudioEndpointBuilder - ok
16:57:07.0391 3724 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
16:57:07.0406 3724 AudioSrv - ok
16:57:07.0469 3724 avast! Antivirus (4041d31508a2a084dfb42c595854090f) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
16:57:07.0469 3724 avast! Antivirus - ok
16:57:07.0547 3724 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
16:57:07.0547 3724 AxInstSV - ok
16:57:07.0609 3724 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
16:57:07.0625 3724 b06bdrv - ok
16:57:07.0656 3724 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
16:57:07.0672 3724 b57nd60a - ok
16:57:07.0703 3724 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
16:57:07.0703 3724 BDESVC - ok
16:57:07.0734 3724 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
16:57:07.0734 3724 Beep - ok
16:57:07.0796 3724 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
16:57:07.0812 3724 BFE - ok
16:57:07.0843 3724 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\system32\qmgr.dll
16:57:07.0874 3724 BITS - ok
16:57:07.0906 3724 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
16:57:07.0906 3724 blbdrive - ok
16:57:07.0937 3724 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
16:57:07.0937 3724 bowser - ok
16:57:07.0968 3724 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
16:57:07.0968 3724 BrFiltLo - ok
16:57:07.0984 3724 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
16:57:07.0984 3724 BrFiltUp - ok
16:57:08.0015 3724 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
16:57:08.0015 3724 BridgeMP - ok
16:57:08.0046 3724 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
16:57:08.0062 3724 Browser - ok
16:57:08.0077 3724 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
16:57:08.0077 3724 Brserid - ok
16:57:08.0093 3724 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
16:57:08.0093 3724 BrSerWdm - ok
16:57:08.0124 3724 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
16:57:08.0124 3724 BrUsbMdm - ok
16:57:08.0140 3724 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
16:57:08.0140 3724 BrUsbSer - ok
16:57:08.0155 3724 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
16:57:08.0155 3724 BTHMODEM - ok
16:57:08.0186 3724 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
16:57:08.0186 3724 bthserv - ok
16:57:08.0233 3724 Bulk (d8bd549336593ca304b3524ff2f42717) C:\Windows\system32\Drivers\HDJBulk.sys
16:57:08.0249 3724 Bulk - ok
16:57:08.0311 3724 catchme - ok
16:57:08.0374 3724 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
16:57:08.0374 3724 cdfs - ok
16:57:08.0420 3724 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
16:57:08.0420 3724 cdrom - ok
16:57:08.0467 3724 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
16:57:08.0467 3724 CertPropSvc - ok
16:57:08.0514 3724 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
16:57:08.0514 3724 circlass - ok
16:57:08.0545 3724 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
16:57:08.0545 3724 CLFS - ok
16:57:08.0608 3724 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
16:57:08.0608 3724 clr_optimization_v2.0.50727_32 - ok
16:57:08.0654 3724 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
16:57:08.0654 3724 clr_optimization_v2.0.50727_64 - ok
16:57:08.0717 3724 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
16:57:08.0717 3724 clr_optimization_v4.0.30319_32 - ok
16:57:08.0748 3724 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
16:57:08.0748 3724 clr_optimization_v4.0.30319_64 - ok
16:57:08.0795 3724 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
16:57:08.0795 3724 CmBatt - ok
16:57:08.0842 3724 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
16:57:08.0842 3724 cmdide - ok
16:57:08.0888 3724 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
16:57:08.0904 3724 CNG - ok
16:57:08.0920 3724 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
16:57:08.0935 3724 Compbatt - ok
16:57:08.0966 3724 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
16:57:08.0966 3724 CompositeBus - ok
16:57:08.0982 3724 COMSysApp - ok
16:57:09.0013 3724 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
16:57:09.0013 3724 crcdisk - ok
16:57:09.0060 3724 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
16:57:09.0060 3724 CryptSvc - ok
16:57:09.0122 3724 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
16:57:09.0138 3724 DcomLaunch - ok
16:57:09.0185 3724 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
16:57:09.0200 3724 defragsvc - ok
16:57:09.0247 3724 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
16:57:09.0247 3724 DfsC - ok
16:57:09.0294 3724 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
16:57:09.0310 3724 Dhcp - ok
16:57:09.0341 3724 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
16:57:09.0341 3724 discache - ok
16:57:09.0372 3724 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
16:57:09.0388 3724 Disk - ok
16:57:09.0403 3724 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
16:57:09.0403 3724 Dnscache - ok
16:57:09.0450 3724 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
16:57:09.0466 3724 dot3svc - ok
16:57:09.0497 3724 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
16:57:09.0497 3724 DPS - ok
16:57:09.0544 3724 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
16:57:09.0544 3724 drmkaud - ok
16:57:09.0590 3724 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
16:57:09.0606 3724 DXGKrnl - ok
16:57:09.0637 3724 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
16:57:09.0637 3724 EapHost - ok
16:57:09.0715 3724 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
16:57:09.0778 3724 ebdrv - ok
16:57:09.0809 3724 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
16:57:09.0809 3724 EFS - ok
16:57:09.0871 3724 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
16:57:09.0902 3724 ehRecvr - ok
16:57:09.0918 3724 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
16:57:09.0918 3724 ehSched - ok
16:57:09.0980 3724 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
16:57:09.0996 3724 elxstor - ok
16:57:10.0027 3724 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
16:57:10.0027 3724 ErrDev - ok
16:57:10.0090 3724 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
16:57:10.0105 3724 EventSystem - ok
16:57:10.0136 3724 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
16:57:10.0152 3724 exfat - ok
16:57:10.0168 3724 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
16:57:10.0183 3724 fastfat - ok
16:57:10.0230 3724 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
16:57:10.0246 3724 Fax - ok
16:57:10.0261 3724 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
16:57:10.0261 3724 fdc - ok
16:57:10.0292 3724 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
16:57:10.0308 3724 fdPHost - ok
16:57:10.0324 3724 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
16:57:10.0324 3724 FDResPub - ok
16:57:10.0355 3724 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
16:57:10.0355 3724 FileInfo - ok
16:57:10.0370 3724 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
16:57:10.0370 3724 Filetrace - ok
16:57:10.0402 3724 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
16:57:10.0402 3724 flpydisk - ok
16:57:10.0433 3724 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
16:57:10.0448 3724 FltMgr - ok
16:57:10.0480 3724 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
16:57:10.0511 3724 FontCache - ok
16:57:10.0573 3724 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
16:57:10.0573 3724 FontCache3.0.0.0 - ok
16:57:10.0604 3724 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
16:57:10.0620 3724 FsDepends - ok
16:57:10.0636 3724 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
16:57:10.0636 3724 Fs_Rec - ok
16:57:10.0682 3724 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
16:57:10.0682 3724 fvevol - ok
16:57:10.0698 3724 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
16:57:10.0698 3724 gagp30kx - ok
16:57:10.0776 3724 GameConsoleService (ce16683cfd11fe70bde435dda5ea1fca) C:\Program Files (x86)\eMachines Games\eMachines Game Console\GameConsoleService.exe
16:57:10.0776 3724 GameConsoleService - ok
16:57:10.0901 3724 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
16:57:10.0932 3724 gpsvc - ok
16:57:11.0026 3724 Greg_Service (816fd5a6f3c2f3d600900096632fc60e) C:\Program Files (x86)\eMachines\Registration\GregHSRW.exe
16:57:11.0026 3724 Greg_Service - ok
16:57:11.0104 3724 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
16:57:11.0104 3724 hcw85cir - ok
16:57:11.0166 3724 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
16:57:11.0182 3724 HdAudAddService - ok
16:57:11.0213 3724 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
16:57:11.0213 3724 HDAudBus - ok
16:57:11.0260 3724 HDJMidi (f10b45171f7e8618e0868f3a0c9efe84) C:\Windows\system32\DRIVERS\HDJMidi.sys
16:57:11.0275 3724 HDJMidi - ok
16:57:11.0353 3724 HerculesDJControlMP3 (4141c2cbd8d6c9f3f4004fe842c48e79) C:\Program Files\Hercules\Audio\DJ Console Series\HerculesDJControlMP3.EXE
16:57:11.0353 3724 HerculesDJControlMP3 - ok
16:57:11.0416 3724 HerculesWiFi (c3293000e57269a790f77ab59a9eb3d8) C:\Program Files (x86)\Hercules\WiFiStation\HerculesWiFiService.exe
16:57:11.0416 3724 HerculesWiFi - ok
16:57:11.0494 3724 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
16:57:11.0494 3724 HidBatt - ok
16:57:11.0525 3724 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
16:57:11.0525 3724 HidBth - ok
16:57:11.0556 3724 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
16:57:11.0556 3724 HidIr - ok
16:57:11.0587 3724 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll
16:57:11.0587 3724 hidserv - ok
16:57:11.0634 3724 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
16:57:11.0634 3724 HidUsb - ok
16:57:11.0665 3724 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
16:57:11.0665 3724 hkmsvc - ok
16:57:11.0696 3724 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
16:57:11.0712 3724 HomeGroupListener - ok
16:57:11.0743 3724 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
16:57:11.0759 3724 HomeGroupProvider - ok
16:57:11.0806 3724 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
16:57:11.0806 3724 HpSAMD - ok
16:57:11.0852 3724 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
16:57:11.0868 3724 HTTP - ok
16:57:11.0899 3724 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
16:57:11.0915 3724 hwpolicy - ok
16:57:11.0946 3724 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
16:57:11.0946 3724 i8042prt - ok
16:57:11.0977 3724 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
16:57:11.0993 3724 iaStorV - ok
16:57:12.0071 3724 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
16:57:12.0102 3724 idsvc - ok
16:57:12.0258 3724 igfx (a87261ef1546325b559374f5689cf5bc) C:\Windows\system32\DRIVERS\igdkmd64.sys
16:57:12.0383 3724 igfx - ok
16:57:12.0414 3724 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
16:57:12.0414 3724 iirsp - ok
16:57:12.0461 3724 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
16:57:12.0476 3724 IKEEXT - ok
16:57:12.0554 3724 IntcAzAudAddService (96b0a408842b0e214edcb41e89438999) C:\Windows\system32\drivers\RTKVHD64.sys
16:57:12.0570 3724 IntcAzAudAddService - ok
16:57:12.0601 3724 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
16:57:12.0601 3724 intelide - ok
16:57:12.0632 3724 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
16:57:12.0632 3724 intelppm - ok
16:57:12.0664 3724 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
16:57:12.0664 3724 IPBusEnum - ok
16:57:12.0695 3724 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
16:57:12.0695 3724 IpFilterDriver - ok
16:57:12.0742 3724 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
16:57:12.0757 3724 iphlpsvc - ok
16:57:12.0773 3724 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
16:57:12.0788 3724 IPMIDRV - ok
16:57:12.0820 3724 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
16:57:12.0820 3724 IPNAT - ok
16:57:12.0835 3724 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
16:57:12.0851 3724 IRENUM - ok
16:57:12.0866 3724 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
16:57:12.0866 3724 isapnp - ok
16:57:12.0898 3724 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
16:57:12.0898 3724 iScsiPrt - ok
16:57:12.0944 3724 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
16:57:12.0944 3724 kbdclass - ok
16:57:12.0976 3724 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
16:57:12.0976 3724 kbdhid - ok
16:57:13.0007 3724 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:13.0022 3724 KeyIso - ok
16:57:13.0038 3724 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
16:57:13.0038 3724 KSecDD - ok
16:57:13.0100 3724 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
16:57:13.0100 3724 KSecPkg - ok
16:57:13.0132 3724 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
16:57:13.0132 3724 ksthunk - ok
16:57:13.0178 3724 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
16:57:13.0194 3724 KtmRm - ok
16:57:13.0241 3724 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\System32\srvsvc.dll
16:57:13.0256 3724 LanmanServer - ok
16:57:13.0303 3724 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
16:57:13.0319 3724 LanmanWorkstation - ok
16:57:13.0366 3724 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
16:57:13.0381 3724 lltdio - ok
16:57:13.0412 3724 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
16:57:13.0428 3724 lltdsvc - ok
16:57:13.0444 3724 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
16:57:13.0459 3724 lmhosts - ok
16:57:13.0506 3724 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
16:57:13.0506 3724 LSI_FC - ok
16:57:13.0537 3724 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
16:57:13.0537 3724 LSI_SAS - ok
16:57:13.0553 3724 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
16:57:13.0568 3724 LSI_SAS2 - ok
16:57:13.0568 3724 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
16:57:13.0584 3724 LSI_SCSI - ok
16:57:13.0615 3724 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
16:57:13.0615 3724 luafv - ok
16:57:13.0646 3724 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
16:57:13.0646 3724 Mcx2Svc - ok
16:57:13.0678 3724 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
16:57:13.0678 3724 megasas - ok
16:57:13.0693 3724 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
16:57:13.0709 3724 MegaSR - ok
16:57:13.0740 3724 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
16:57:13.0740 3724 MMCSS - ok
16:57:13.0756 3724 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
16:57:13.0756 3724 Modem - ok
16:57:13.0787 3724 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
16:57:13.0787 3724 monitor - ok
16:57:13.0818 3724 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
16:57:13.0818 3724 mouclass - ok
16:57:13.0849 3724 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
16:57:13.0849 3724 mouhid - ok
16:57:13.0880 3724 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
16:57:13.0880 3724 mountmgr - ok
16:57:13.0927 3724 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
16:57:13.0927 3724 mpio - ok
16:57:13.0943 3724 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
16:57:13.0943 3724 mpsdrv - ok
16:57:14.0005 3724 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
16:57:14.0036 3724 MpsSvc - ok
16:57:14.0068 3724 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
16:57:14.0068 3724 MRxDAV - ok
16:57:14.0099 3724 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
16:57:14.0099 3724 mrxsmb - ok
16:57:14.0130 3724 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
16:57:14.0161 3724 mrxsmb10 - ok
16:57:14.0177 3724 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
16:57:14.0177 3724 mrxsmb20 - ok
16:57:14.0208 3724 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
16:57:14.0208 3724 msahci - ok
16:57:14.0255 3724 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
16:57:14.0255 3724 msdsm - ok
16:57:14.0286 3724 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
16:57:14.0317 3724 MSDTC - ok
16:57:14.0333 3724 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
16:57:14.0333 3724 Msfs - ok
16:57:14.0364 3724 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
16:57:14.0364 3724 mshidkmdf - ok
16:57:14.0380 3724 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
16:57:14.0380 3724 msisadrv - ok
16:57:14.0426 3724 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
16:57:14.0426 3724 MSiSCSI - ok
16:57:14.0442 3724 msiserver - ok
16:57:14.0458 3724 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
16:57:14.0458 3724 MSKSSRV - ok
16:57:14.0489 3724 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
16:57:14.0489 3724 MSPCLOCK - ok
16:57:14.0520 3724 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
16:57:14.0520 3724 MSPQM - ok
16:57:14.0551 3724 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
16:57:14.0551 3724 MsRPC - ok
16:57:14.0582 3724 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
16:57:14.0582 3724 mssmbios - ok
16:57:14.0598 3724 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
16:57:14.0598 3724 MSTEE - ok
16:57:14.0614 3724 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
16:57:14.0614 3724 MTConfig - ok
16:57:14.0645 3724 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
16:57:14.0645 3724 Mup - ok
16:57:14.0676 3724 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
16:57:14.0707 3724 napagent - ok
16:57:14.0738 3724 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
16:57:14.0754 3724 NativeWifiP - ok
16:57:14.0801 3724 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
16:57:14.0832 3724 NDIS - ok
16:57:14.0863 3724 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
16:57:14.0863 3724 NdisCap - ok
16:57:14.0894 3724 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
16:57:14.0894 3724 NdisTapi - ok
16:57:14.0941 3724 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
16:57:14.0941 3724 Ndisuio - ok
16:57:14.0972 3724 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
16:57:14.0972 3724 NdisWan - ok
16:57:15.0004 3724 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
16:57:15.0019 3724 NDProxy - ok
16:57:15.0097 3724 Nero BackItUp Scheduler 4.0 (7d2633295eb6ff2b938185874884059d) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
16:57:15.0128 3724 Nero BackItUp Scheduler 4.0 - ok
16:57:15.0191 3724 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
16:57:15.0206 3724 NetBIOS - ok
16:57:15.0253 3724 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
16:57:15.0253 3724 NetBT - ok
16:57:15.0300 3724 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:15.0300 3724 Netlogon - ok
16:57:15.0347 3724 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
16:57:15.0362 3724 Netman - ok
16:57:15.0378 3724 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
16:57:15.0394 3724 netprofm - ok
16:57:15.0472 3724 netr28ux (53d7442aa919c91d055dbd44635f32b1) C:\Windows\system32\DRIVERS\netr28ux.sys
16:57:15.0487 3724 netr28ux - ok
16:57:15.0534 3724 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
16:57:15.0534 3724 NetTcpPortSharing - ok
16:57:15.0581 3724 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
16:57:15.0581 3724 nfrd960 - ok
16:57:15.0628 3724 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
16:57:15.0643 3724 NlaSvc - ok
16:57:15.0659 3724 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
16:57:15.0659 3724 Npfs - ok
16:57:15.0690 3724 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
16:57:15.0690 3724 nsi - ok
16:57:15.0706 3724 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
16:57:15.0706 3724 nsiproxy - ok
16:57:15.0752 3724 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
16:57:15.0799 3724 Ntfs - ok
16:57:15.0815 3724 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
16:57:15.0815 3724 Null - ok
16:57:15.0846 3724 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
16:57:15.0846 3724 nvraid - ok
16:57:15.0877 3724 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
16:57:15.0877 3724 nvstor - ok
16:57:15.0893 3724 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
16:57:15.0893 3724 nv_agp - ok
16:57:15.0908 3724 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
16:57:15.0908 3724 ohci1394 - ok
16:57:15.0940 3724 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
16:57:15.0955 3724 p2pimsvc - ok
16:57:16.0002 3724 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
16:57:16.0018 3724 p2psvc - ok
16:57:16.0049 3724 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
16:57:16.0049 3724 Parport - ok
16:57:16.0096 3724 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
16:57:16.0096 3724 partmgr - ok
16:57:16.0111 3724 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
16:57:16.0127 3724 PcaSvc - ok
16:57:16.0158 3724 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
16:57:16.0158 3724 pci - ok
16:57:16.0174 3724 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
16:57:16.0174 3724 pciide - ok
16:57:16.0205 3724 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
16:57:16.0220 3724 pcmcia - ok
16:57:16.0236 3724 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
16:57:16.0236 3724 pcw - ok
16:57:16.0267 3724 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
16:57:16.0283 3724 PEAUTH - ok
16:57:16.0330 3724 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
16:57:16.0330 3724 PerfHost - ok
16:57:16.0408 3724 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
16:57:16.0439 3724 pla - ok
16:57:16.0501 3724 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
16:57:16.0517 3724 PlugPlay - ok
16:57:16.0532 3724 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
16:57:16.0548 3724 PNRPAutoReg - ok
16:57:16.0564 3724 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
16:57:16.0579 3724 PNRPsvc - ok
16:57:16.0626 3724 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
16:57:16.0642 3724 PolicyAgent - ok
16:57:16.0673 3724 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
16:57:16.0688 3724 Power - ok
16:57:16.0735 3724 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
16:57:16.0735 3724 PptpMiniport - ok
16:57:16.0766 3724 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
16:57:16.0766 3724 Processor - ok
16:57:16.0813 3724 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
16:57:16.0829 3724 ProfSvc - ok
16:57:16.0876 3724 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:16.0876 3724 ProtectedStorage - ok
16:57:16.0922 3724 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
16:57:16.0922 3724 Psched - ok
16:57:16.0985 3724 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
16:57:17.0016 3724 ql2300 - ok
16:57:17.0047 3724 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
16:57:17.0047 3724 ql40xx - ok
16:57:17.0078 3724 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
16:57:17.0094 3724 QWAVE - ok
16:57:17.0110 3724 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
16:57:17.0110 3724 QWAVEdrv - ok
16:57:17.0125 3724 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
16:57:17.0125 3724 RasAcd - ok
16:57:17.0156 3724 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
16:57:17.0156 3724 RasAgileVpn - ok
16:57:17.0203 3724 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
16:57:17.0203 3724 RasAuto - ok
16:57:17.0234 3724 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
16:57:17.0250 3724 Rasl2tp - ok
16:57:17.0281 3724 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
16:57:17.0297 3724 RasMan - ok
16:57:17.0312 3724 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
16:57:17.0328 3724 RasPppoe - ok
16:57:17.0328 3724 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
16:57:17.0344 3724 RasSstp - ok
16:57:17.0375 3724 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
16:57:17.0375 3724 rdbss - ok
16:57:17.0390 3724 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
16:57:17.0406 3724 rdpbus - ok
16:57:17.0422 3724 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
16:57:17.0422 3724 RDPCDD - ok
16:57:17.0437 3724 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
16:57:17.0437 3724 RDPENCDD - ok
16:57:17.0453 3724 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
16:57:17.0468 3724 RDPREFMP - ok
16:57:17.0500 3724 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
16:57:17.0500 3724 RDPWD - ok
16:57:17.0546 3724 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
16:57:17.0546 3724 rdyboost - ok
16:57:17.0578 3724 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
16:57:17.0578 3724 RemoteAccess - ok
16:57:17.0609 3724 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
16:57:17.0624 3724 RemoteRegistry - ok
16:57:17.0671 3724 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
16:57:17.0671 3724 RpcEptMapper - ok
16:57:17.0702 3724 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
16:57:17.0702 3724 RpcLocator - ok
16:57:17.0749 3724 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
16:57:17.0765 3724 RpcSs - ok
16:57:17.0796 3724 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
16:57:17.0796 3724 rspndr - ok
16:57:17.0827 3724 RTL8167 (b49dc435ae3695bac5623dd94b05732d) C:\Windows\system32\DRIVERS\Rt64win7.sys
16:57:17.0827 3724 RTL8167 - ok
16:57:17.0890 3724 RTL8192su (45959f6069c2de97caa697320b22926f) C:\Windows\system32\DRIVERS\RTL8192su.sys
16:57:17.0905 3724 RTL8192su - ok
16:57:17.0952 3724 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:17.0952 3724 SamSs - ok
16:57:17.0983 3724 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
16:57:17.0983 3724 sbp2port - ok
16:57:18.0014 3724 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
16:57:18.0030 3724 SCardSvr - ok
16:57:18.0077 3724 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
16:57:18.0077 3724 scfilter - ok
16:57:18.0124 3724 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
16:57:18.0155 3724 Schedule - ok
16:57:18.0186 3724 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
16:57:18.0202 3724 SCPolicySvc - ok
16:57:18.0233 3724 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
16:57:18.0248 3724 SDRSVC - ok
16:57:18.0295 3724 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
16:57:18.0311 3724 secdrv - ok
16:57:18.0342 3724 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
16:57:18.0342 3724 seclogon - ok
16:57:18.0373 3724 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\system32\sens.dll
16:57:18.0373 3724 SENS - ok
16:57:18.0404 3724 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
16:57:18.0404 3724 SensrSvc - ok
16:57:18.0467 3724 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
16:57:18.0467 3724 Serenum - ok
16:57:18.0498 3724 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
16:57:18.0498 3724 Serial - ok
16:57:18.0529 3724 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
16:57:18.0529 3724 sermouse - ok
16:57:18.0560 3724 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
16:57:18.0576 3724 SessionEnv - ok
16:57:18.0607 3724 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
16:57:18.0607 3724 sffdisk - ok
16:57:18.0623 3724 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
16:57:18.0623 3724 sffp_mmc - ok
16:57:18.0638 3724 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
16:57:18.0638 3724 sffp_sd - ok
16:57:18.0654 3724 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
16:57:18.0654 3724 sfloppy - ok
16:57:18.0685 3724 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
16:57:18.0701 3724 SharedAccess - ok
16:57:18.0732 3724 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
16:57:18.0748 3724 ShellHWDetection - ok
16:57:18.0763 3724 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
16:57:18.0779 3724 SiSRaid2 - ok
16:57:18.0794 3724 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
16:57:18.0794 3724 SiSRaid4 - ok
16:57:18.0826 3724 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
16:57:18.0826 3724 Smb - ok
16:57:18.0857 3724 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
16:57:18.0857 3724 SNMPTRAP - ok
16:57:18.0888 3724 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
16:57:18.0888 3724 spldr - ok
16:57:18.0935 3724 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
16:57:18.0950 3724 Spooler - ok
16:57:19.0044 3724 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
16:57:19.0091 3724 sppsvc - ok
16:57:19.0122 3724 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
16:57:19.0122 3724 sppuinotify - ok
16:57:19.0169 3724 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
16:57:19.0184 3724 srv - ok
16:57:19.0216 3724 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
16:57:19.0231 3724 srv2 - ok
16:57:19.0247 3724 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
16:57:19.0247 3724 srvnet - ok
16:57:19.0278 3724 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
16:57:19.0294 3724 SSDPSRV - ok
16:57:19.0325 3724 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
16:57:19.0325 3724 SstpSvc - ok
16:57:19.0372 3724 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
16:57:19.0372 3724 stexstor - ok
16:57:19.0418 3724 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
16:57:19.0450 3724 stisvc - ok
16:57:19.0465 3724 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
16:57:19.0465 3724 swenum - ok
16:57:19.0512 3724 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
16:57:19.0528 3724 swprv - ok
16:57:19.0606 3724 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
16:57:19.0652 3724 SysMain - ok
16:57:19.0684 3724 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
16:57:19.0699 3724 TabletInputService - ok
16:57:19.0730 3724 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
16:57:19.0762 3724 TapiSrv - ok
16:57:19.0793 3724 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
16:57:19.0793 3724 TBS - ok
16:57:19.0871 3724 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
16:57:19.0902 3724 Tcpip - ok
16:57:19.0949 3724 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
16:57:19.0964 3724 TCPIP6 - ok
16:57:20.0011 3724 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
16:57:20.0011 3724 tcpipreg - ok
16:57:20.0042 3724 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
16:57:20.0042 3724 TDPIPE - ok
16:57:20.0058 3724 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
16:57:20.0058 3724 TDTCP - ok
16:57:20.0105 3724 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
16:57:20.0105 3724 tdx - ok
16:57:20.0136 3724 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
16:57:20.0136 3724 TermDD - ok
16:57:20.0183 3724 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
16:57:20.0198 3724 TermService - ok
16:57:20.0230 3724 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
16:57:20.0245 3724 Themes - ok
16:57:20.0261 3724 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
16:57:20.0261 3724 THREADORDER - ok
16:57:20.0292 3724 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
16:57:20.0308 3724 TrkWks - ok
16:57:20.0354 3724 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
16:57:20.0354 3724 TrustedInstaller - ok
16:57:20.0401 3724 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
16:57:20.0401 3724 tssecsrv - ok
16:57:20.0464 3724 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
16:57:20.0464 3724 TsUsbFlt - ok
16:57:20.0510 3724 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
16:57:20.0510 3724 tunnel - ok
16:57:20.0542 3724 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
16:57:20.0542 3724 uagp35 - ok
16:57:20.0588 3724 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
16:57:20.0588 3724 udfs - ok
16:57:20.0620 3724 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
16:57:20.0635 3724 UI0Detect - ok
16:57:20.0666 3724 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
16:57:20.0666 3724 uliagpkx - ok
16:57:20.0698 3724 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
16:57:20.0713 3724 umbus - ok
16:57:20.0744 3724 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
16:57:20.0744 3724 UmPass - ok
16:57:20.0791 3724 Updater Service (f9ec9acd504d823d9b9ca98a4f8d3ca2) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
16:57:20.0807 3724 Updater Service - ok
16:57:20.0838 3724 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
16:57:20.0854 3724 upnphost - ok
16:57:20.0885 3724 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
16:57:20.0885 3724 usbccgp - ok
16:57:20.0932 3724 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
16:57:20.0932 3724 usbcir - ok
16:57:20.0963 3724 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
16:57:20.0963 3724 usbehci - ok
16:57:20.0994 3724 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
16:57:21.0010 3724 usbhub - ok
16:57:21.0025 3724 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
16:57:21.0025 3724 usbohci - ok
16:57:21.0056 3724 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
16:57:21.0072 3724 usbprint - ok
16:57:21.0103 3724 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
16:57:21.0103 3724 USBSTOR - ok
16:57:21.0119 3724 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\DRIVERS\usbuhci.sys
16:57:21.0119 3724 usbuhci - ok
16:57:21.0150 3724 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
16:57:21.0150 3724 UxSms - ok
16:57:21.0197 3724 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
16:57:21.0212 3724 VaultSvc - ok
16:57:21.0228 3724 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
16:57:21.0228 3724 vdrvroot - ok
16:57:21.0275 3724 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
16:57:21.0306 3724 vds - ok
16:57:21.0337 3724 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
16:57:21.0337 3724 vga - ok
16:57:21.0353 3724 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
16:57:21.0353 3724 VgaSave - ok
16:57:21.0400 3724 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
16:57:21.0400 3724 vhdmp - ok
16:57:21.0415 3724 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
16:57:21.0431 3724 viaide - ok
16:57:21.0446 3724 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
16:57:21.0446 3724 volmgr - ok
16:57:21.0478 3724 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
16:57:21.0493 3724 volmgrx - ok
16:57:21.0524 3724 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
16:57:21.0524 3724 volsnap - ok
16:57:21.0556 3724 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
16:57:21.0571 3724 vsmraid - ok
16:57:21.0634 3724 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
16:57:21.0665 3724 VSS - ok
16:57:21.0680 3724 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
16:57:21.0680 3724 vwifibus - ok
16:57:21.0727 3724 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
16:57:21.0727 3724 vwififlt - ok
16:57:21.0758 3724 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
16:57:21.0774 3724 W32Time - ok
16:57:21.0790 3724 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
16:57:21.0805 3724 WacomPen - ok
16:57:21.0836 3724 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:57:21.0852 3724 WANARP - ok
16:57:21.0852 3724 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
16:57:21.0868 3724 Wanarpv6 - ok
16:57:21.0930 3724 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
16:57:21.0946 3724 WatAdminSvc - ok
16:57:22.0008 3724 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
16:57:22.0055 3724 wbengine - ok
16:57:22.0086 3724 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
16:57:22.0102 3724 WbioSrvc - ok
16:57:22.0133 3724 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
16:57:22.0148 3724 wcncsvc - ok
16:57:22.0164 3724 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
16:57:22.0180 3724 WcsPlugInService - ok
16:57:22.0211 3724 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
16:57:22.0211 3724 Wd - ok
16:57:22.0242 3724 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
16:57:22.0258 3724 Wdf01000 - ok
16:57:22.0273 3724 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
16:57:22.0273 3724 WdiServiceHost - ok
16:57:22.0289 3724 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
16:57:22.0289 3724 WdiSystemHost - ok
16:57:22.0320 3724 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
16:57:22.0336 3724 WebClient - ok
16:57:22.0367 3724 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
16:57:22.0382 3724 Wecsvc - ok
16:57:22.0398 3724 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
16:57:22.0398 3724 wercplsupport - ok
16:57:22.0429 3724 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
16:57:22.0445 3724 WerSvc - ok
16:57:22.0492 3724 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
16:57:22.0492 3724 WfpLwf - ok
16:57:22.0507 3724 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
16:57:22.0523 3724 WIMMount - ok
16:57:22.0554 3724 WinDefend - ok
16:57:22.0570 3724 WinHttpAutoProxySvc - ok
16:57:22.0616 3724 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
16:57:22.0616 3724 Winmgmt - ok
16:57:22.0679 3724 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
16:57:22.0726 3724 WinRM - ok
16:57:22.0788 3724 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
16:57:22.0788 3724 WinUsb - ok
16:57:22.0835 3724 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
16:57:22.0866 3724 Wlansvc - ok
16:57:22.0882 3724 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
16:57:22.0882 3724 WmiAcpi - ok
16:57:22.0928 3724 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
16:57:22.0944 3724 wmiApSrv - ok
16:57:22.0975 3724 WMPNetworkSvc - ok
16:57:23.0006 3724 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
16:57:23.0006 3724 WPCSvc - ok
16:57:23.0038 3724 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
16:57:23.0053 3724 WPDBusEnum - ok
16:57:23.0084 3724 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
16:57:23.0084 3724 ws2ifsl - ok
16:57:23.0116 3724 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll
16:57:23.0116 3724 wscsvc - ok
16:57:23.0131 3724 WSearch - ok
16:57:23.0225 3724 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
16:57:23.0256 3724 wuauserv - ok
16:57:23.0303 3724 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
16:57:23.0318 3724 WudfPf - ok
16:57:23.0350 3724 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
16:57:23.0350 3724 WUDFRd - ok
16:57:23.0381 3724 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
16:57:23.0381 3724 wudfsvc - ok
16:57:23.0428 3724 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll
16:57:23.0443 3724 WwanSvc - ok
16:57:23.0490 3724 MBR (0x1B8) (70e629b51c16b3c007730c6ae57144c9) \Device\Harddisk0\DR0
16:57:23.0521 3724 \Device\Harddisk0\DR0 ( Rootkit.Boot.SST.b ) - infected
16:57:23.0521 3724 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.b (0)
16:57:23.0568 3724 Boot (0x1200) (1b018d123c71e25aec2f14de7b72121f) \Device\Harddisk0\DR0\Partition0
16:57:23.0568 3724 \Device\Harddisk0\DR0\Partition0 - ok
16:57:23.0568 3724 Boot (0x1200) (c9123aaca2471887b0c0d78dfb6f4486) \Device\Harddisk0\DR0\Partition1
16:57:23.0568 3724 \Device\Harddisk0\DR0\Partition1 - ok
16:57:23.0568 3724 ============================================================
16:57:23.0568 3724 Scan finished
16:57:23.0568 3724 ============================================================
16:57:23.0584 2980 Detected object count: 1
16:57:23.0584 2980 Actual detected object count: 1
16:57:58.0777 2980 \Device\Harddisk0\DR0\# - copied to quarantine
16:57:58.0777 2980 \Device\Harddisk0\DR0 - copied to quarantine
16:57:58.0933 2980 \Device\Harddisk0\DR0\TDLFS\mbr - copied to quarantine
16:57:58.0933 2980 \Device\Harddisk0\DR0\TDLFS\vbr - copied to quarantine
16:57:58.0949 2980 \Device\Harddisk0\DR0\TDLFS\bid - copied to quarantine
16:57:58.0949 2980 \Device\Harddisk0\DR0\TDLFS\affid - copied to quarantine
16:57:58.0949 2980 \Device\Harddisk0\DR0\TDLFS\boot - copied to quarantine
16:57:58.0949 2980 \Device\Harddisk0\DR0\TDLFS\cmd32 - copied to quarantine
16:58:00.0946 2980 \Device\Harddisk0\DR0\TDLFS\cmd64 - copied to quarantine
16:58:01.0040 2980 \Device\Harddisk0\DR0\TDLFS\dbg32 - copied to quarantine
16:58:01.0102 2980 \Device\Harddisk0\DR0\TDLFS\dbg64 - copied to quarantine
16:58:01.0128 2980 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
16:58:01.0204 2980 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
16:58:01.0254 2980 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
16:58:01.0285 2980 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
16:58:01.0314 2980 \Device\Harddisk0\DR0\TDLFS\subid - copied to quarantine
16:58:01.0316 2980 \Device\Harddisk0\DR0\TDLFS\info - copied to quarantine
16:58:01.0317 2980 \Device\Harddisk0\DR0\TDLFS\main - copied to quarantine
16:58:01.0319 2980 \Device\Harddisk0\DR0\TDLFS\mainfb.script - copied to quarantine
16:58:01.0348 2980 \Device\Harddisk0\DR0\TDLFS\com64 - copied to quarantine
16:58:01.0407 2980 \Device\Harddisk0\DR0\TDLFS\bbr232 - copied to quarantine
16:58:02.0932 2980 \Device\Harddisk0\DR0\TDLFS\serf332 - copied to quara
Utilisateur anonyme
13 avril 2012 à 17:55
13 avril 2012 à 17:55
Re
Le rapport est incomplet.
Pour transmettre le rapport clique sur ce lien :
http://pjjoint.malekal.com/
https://www.cjoint.com/
Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier (Fichier demandé )
Clique sur Ouvrir.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt
est ajouté dans la page.
Copie ce lien dans ta réponse.
@+
Le rapport est incomplet.
Pour transmettre le rapport clique sur ce lien :
http://pjjoint.malekal.com/
https://www.cjoint.com/
Clique sur Parcourir et cherche le fichier : Nom_complet_du_fichier (Fichier demandé )
Clique sur Ouvrir.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt
est ajouté dans la page.
Copie ce lien dans ta réponse.
@+
Utilisateur anonyme
13 avril 2012 à 18:03
13 avril 2012 à 18:03
Re
Inscris toi avant tout
Pour de plus amples informations, fait ceci stp
Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman :
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
Ou
https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
Serveur N°2
Ou
http://www.premiumorange.com/zeb-help-process/zhpdiag.html
en bas de la page ZHP avec un numéro de version.
Une fois le téléchargement achevé, dé zippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.
Double-clique sur l'icône pour lancer le programme. Sous Vista ou Seven clic droit « exécuter en tant que administrateur »
Clique sur la loupe pour lancer l'analyse.
Laisse l'outil travailler, il peut être assez long.
Ferme ZHPDiag en fin d'analyse.
Pour transmettre le rapport clique sur ce lien :
http://pjjoint.malekal.com/
https://www.cjoint.com/
Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).
Sélectionne le fichier ZHPDiag.txt.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt
est ajouté dans la page.
Copie ce lien dans ta réponse.
Merci
A+
Inscris toi avant tout
Pour de plus amples informations, fait ceci stp
Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman :
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
Ou
https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
Serveur N°2
Ou
http://www.premiumorange.com/zeb-help-process/zhpdiag.html
en bas de la page ZHP avec un numéro de version.
Une fois le téléchargement achevé, dé zippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.
Double-clique sur l'icône pour lancer le programme. Sous Vista ou Seven clic droit « exécuter en tant que administrateur »
Clique sur la loupe pour lancer l'analyse.
Laisse l'outil travailler, il peut être assez long.
Ferme ZHPDiag en fin d'analyse.
Pour transmettre le rapport clique sur ce lien :
http://pjjoint.malekal.com/
https://www.cjoint.com/
Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).
Sélectionne le fichier ZHPDiag.txt.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt
est ajouté dans la page.
Copie ce lien dans ta réponse.
Merci
A+
voici le rapport de zhpdiag comme demander
http://cjoint.com/?BDntPQWuZSo
encore merci pour ton aide
http://cjoint.com/?BDntPQWuZSo
encore merci pour ton aide
Utilisateur anonyme
13 avril 2012 à 20:07
13 avril 2012 à 20:07
Re
1)Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
Lance le, clique sur [Suppression] puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.
Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=
2)Télécharge Malwaresbytes anti malware ici
http://www.malwarebytes.org/mbam.php
Bouton »Download free version »
* Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/
* Potasse le tuto pour te familiariser avec le prg :
https://forum.pcastuces.com/sujet.asp?f=31&s=3
(cela dis, il est très simple d'utilisation).
relance Malwaresbytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
* Lance Malwarebyte's. Sous Vista et Seven (clic droit de la souris « exécuter en tant que administrateur »)
*Procèdes à une mise à jour
*Fais un examen dit "Complet"
--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "Afficher les résultats" " .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .
Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)
@+
1)Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
Lance le, clique sur [Suppression] puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.
Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt
Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=
2)Télécharge Malwaresbytes anti malware ici
http://www.malwarebytes.org/mbam.php
Bouton »Download free version »
* Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/
* Potasse le tuto pour te familiariser avec le prg :
https://forum.pcastuces.com/sujet.asp?f=31&s=3
(cela dis, il est très simple d'utilisation).
relance Malwaresbytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
* Lance Malwarebyte's. Sous Vista et Seven (clic droit de la souris « exécuter en tant que administrateur »)
*Procèdes à une mise à jour
*Fais un examen dit "Complet"
--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "Afficher les résultats" " .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .
Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)
@+
salut
voici pour le premier rapport de adw cleaner
http://cjoint.com/?BDojQrWhKgR
je fait suivre le deuxieme des qu'il a fini
voici pour le premier rapport de adw cleaner
http://cjoint.com/?BDojQrWhKgR
je fait suivre le deuxieme des qu'il a fini
voila pour malware apparement aucun souci détecté
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Version de la base de données: v2012.04.14.02
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
gerarg :: GERARD [administrateur]
14/04/2012 09:47:08
mbam-log-2012-04-14 (09-47-08).txt
Type d'examen: Examen complet
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 324616
Temps écoulé: 32 minute(s), 30 seconde(s)
Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)
Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)
Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)
Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)
Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)
Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)
Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)
(fin)
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Version de la base de données: v2012.04.14.02
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
gerarg :: GERARD [administrateur]
14/04/2012 09:47:08
mbam-log-2012-04-14 (09-47-08).txt
Type d'examen: Examen complet
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 324616
Temps écoulé: 32 minute(s), 30 seconde(s)
Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)
Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)
Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)
Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)
Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)
Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)
Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)
(fin)
Utilisateur anonyme
14 avril 2012 à 14:38
14 avril 2012 à 14:38
Re
Utilisation de l'outil ZHPFix :
* Copie tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )
-------------------------------------------------------------------------------------------------
[HKLM\Software\Freeze.com]
O43 - CFD: 22/03/2012 - 11:54:09 - [0,002] ----D C:\Users\gerarg\AppData\Roaming\pdfforge
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}]
C:\Users\gerarg\AppData\Roaming\pdfforge
[HKCU\Software\AppDataLow\Software\Freecorder]
[HKLM\Software\Freecorder]
O43 - CFD: 17/03/2012 - 23:11:13 - [10,258] ----D C:\Program Files (x86)\Freecorder
O43 - CFD: 17/03/2012 - 23:11:13 - [10,258] ----D C:\Program Files (x86)\Freecorder
C:\Program Files (x86)\Freecorder
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freecorder
C:\Users\gerarg\AppData\LocalLow\Freecorder
FirewallRAZ
Emptytemp
--------------------------------------------------------------------------------------------
Puis lance ZHPFix depuis le raccourci du bureau. Sous Vista :Clic droit sur l'icône ZHPFix.exe
« Exécuter en tant qu'administrateur »
.
* Une fois l'outil ZHPFix ouvert, clique sur le bouton [ H ] ( "coller les lignes Helper" ) .
*Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.
*Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,
-> laisse travailler l'outil et ne touche à rien ...
-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !
Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...
( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt )
A+
Utilisation de l'outil ZHPFix :
* Copie tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )
-------------------------------------------------------------------------------------------------
[HKLM\Software\Freeze.com]
O43 - CFD: 22/03/2012 - 11:54:09 - [0,002] ----D C:\Users\gerarg\AppData\Roaming\pdfforge
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}]
C:\Users\gerarg\AppData\Roaming\pdfforge
[HKCU\Software\AppDataLow\Software\Freecorder]
[HKLM\Software\Freecorder]
O43 - CFD: 17/03/2012 - 23:11:13 - [10,258] ----D C:\Program Files (x86)\Freecorder
O43 - CFD: 17/03/2012 - 23:11:13 - [10,258] ----D C:\Program Files (x86)\Freecorder
C:\Program Files (x86)\Freecorder
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freecorder
C:\Users\gerarg\AppData\LocalLow\Freecorder
FirewallRAZ
Emptytemp
--------------------------------------------------------------------------------------------
Puis lance ZHPFix depuis le raccourci du bureau. Sous Vista :Clic droit sur l'icône ZHPFix.exe
« Exécuter en tant qu'administrateur »
.
* Une fois l'outil ZHPFix ouvert, clique sur le bouton [ H ] ( "coller les lignes Helper" ) .
*Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.
*Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,
-> laisse travailler l'outil et ne touche à rien ...
-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !
Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...
( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt )
A+
voici le nouveau rapport
Rapport de ZHPFix 1.12.3372 par Nicolas Coolman, Update du 22/11/2011
Fichier d'export Registre :
Run by gerarg at 14/04/2012 17:01:30
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
========== Clé(s) du Registre ==========
ABSENT Key: HKLM\Software\Freeze.com
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
SUPPRIME Key: HKCU\Software\AppDataLow\Software\Freecorder
ABSENT Key: HKLM\Software\Freecorder
========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :
SUPPRIME FirewallRaz (Domain) : NetPres-In-TCP-NoScope
SUPPRIME FirewallRaz (Domain) : NetPres-Out-TCP-NoScope
SUPPRIME FirewallRaz (None) : NetPres-WSD-In-UDP
SUPPRIME FirewallRaz (None) : NetPres-WSD-Out-UDP
SUPPRIME FirewallRaz (Public) : NetPres-In-TCP
SUPPRIME FirewallRaz (Public) : NetPres-Out-TCP
SUPPRIME FirewallRaz (None) : {B0F403A8-EAB0-4DD8-BAA0-AEB4BF4FDD73}
SUPPRIME FirewallRaz (Public) : {F5483342-D860-4DFB-A190-63E0166DEE1C}
SUPPRIME FirewallRaz (Public) : {BF01E13D-ED0D-4F9D-BE6C-CC0C7C836F40}
SUPPRIME FirewallRaz (Domain) : {8F1A79D4-BA30-483C-AC05-3C93993A1E75}
SUPPRIME FirewallRaz (Domain) : {20B00F73-FE95-43EF-8CD6-3EEBED7E2BAF}
========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\gerarg\AppData\Roaming\pdfforge
SUPPRIME Reboot Folder**: C:\Program Files (x86)\Freecorder
SUPPRIME Folder: c:\programdata\microsoft\windows\start menu\programs\freecorder
SUPPRIME Folder: c:\users\gerarg\appdata\locallow\freecorder
SUPPRIME Temporaires Windows: : 74
========== Fichier(s) ==========
ABSENT Folder/File: c:\users\gerarg\appdata\roaming\pdfforge
SUPPRIME Temporaires Windows: : 16
========== Récapitulatif ==========
5 : Clé(s) du Registre
13 : Valeur(s) du Registre
5 : Dossier(s)
2 : Fichier(s)
End of clean in 00mn 03s
========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 14/04/2012 17:01:30 [2168]
Rapport de ZHPFix 1.12.3372 par Nicolas Coolman, Update du 22/11/2011
Fichier d'export Registre :
Run by gerarg at 14/04/2012 17:01:30
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
========== Clé(s) du Registre ==========
ABSENT Key: HKLM\Software\Freeze.com
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
SUPPRIME Key: HKCU\Software\AppDataLow\Software\Freecorder
ABSENT Key: HKLM\Software\Freecorder
========== Valeur(s) du Registre ==========
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :
SUPPRIME FirewallRaz (Domain) : NetPres-In-TCP-NoScope
SUPPRIME FirewallRaz (Domain) : NetPres-Out-TCP-NoScope
SUPPRIME FirewallRaz (None) : NetPres-WSD-In-UDP
SUPPRIME FirewallRaz (None) : NetPres-WSD-Out-UDP
SUPPRIME FirewallRaz (Public) : NetPres-In-TCP
SUPPRIME FirewallRaz (Public) : NetPres-Out-TCP
SUPPRIME FirewallRaz (None) : {B0F403A8-EAB0-4DD8-BAA0-AEB4BF4FDD73}
SUPPRIME FirewallRaz (Public) : {F5483342-D860-4DFB-A190-63E0166DEE1C}
SUPPRIME FirewallRaz (Public) : {BF01E13D-ED0D-4F9D-BE6C-CC0C7C836F40}
SUPPRIME FirewallRaz (Domain) : {8F1A79D4-BA30-483C-AC05-3C93993A1E75}
SUPPRIME FirewallRaz (Domain) : {20B00F73-FE95-43EF-8CD6-3EEBED7E2BAF}
========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\gerarg\AppData\Roaming\pdfforge
SUPPRIME Reboot Folder**: C:\Program Files (x86)\Freecorder
SUPPRIME Folder: c:\programdata\microsoft\windows\start menu\programs\freecorder
SUPPRIME Folder: c:\users\gerarg\appdata\locallow\freecorder
SUPPRIME Temporaires Windows: : 74
========== Fichier(s) ==========
ABSENT Folder/File: c:\users\gerarg\appdata\roaming\pdfforge
SUPPRIME Temporaires Windows: : 16
========== Récapitulatif ==========
5 : Clé(s) du Registre
13 : Valeur(s) du Registre
5 : Dossier(s)
2 : Fichier(s)
End of clean in 00mn 03s
========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 14/04/2012 17:01:30 [2168]
