premier forum d'habitude je m'en sors seul et là ... ?

[paracelse62]

17:47:37.0737 6080 TDSS rootkit removing tool 2.6.21.0 Nov 24 2011 12:32:44
17:47:37.0978 6080 ============================================================
17:47:37.0978 6080 Current date / time: 2011/11/24 17:47:37.0978
17:47:37.0978 6080 SystemInfo:
17:47:37.0978 6080
17:47:37.0978 6080 OS Version: 6.0.6002 ServicePack: 2.0
17:47:37.0978 6080 Product type: Workstation
17:47:37.0978 6080 ComputerName: SUPERBOSS
17:47:37.0979 6080 UserName: Benoit BERQUIN
17:47:37.0979 6080 Windows directory: C:\Windows
17:47:37.0979 6080 System windows directory: C:\Windows
17:47:37.0979 6080 Processor architecture: Intel x86
17:47:37.0979 6080 Number of processors: 4
17:47:37.0979 6080 Page size: 0x1000
17:47:37.0979 6080 Boot type: Normal boot
17:47:37.0979 6080 ============================================================
17:47:39.0108 6080 Initialize success
17:47:40.0710 6316 ============================================================
17:47:40.0710 6316 Scan started
17:47:40.0710 6316 Mode: Manual;
17:47:40.0710 6316 ============================================================
17:47:43.0417 6316 61883 (585e64bb6dfbc0a2f1f0b554ded012df) C:\Windows\system32\DRIVERS\61883.sys
17:47:43.0436 6316 61883 - ok
17:47:43.0489 6316 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
17:47:43.0493 6316 ACPI - ok
17:47:43.0537 6316 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
17:47:43.0551 6316 adp94xx - ok
17:47:43.0587 6316 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
17:47:43.0598 6316 adpahci - ok
17:47:43.0615 6316 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
17:47:43.0637 6316 adpu160m - ok
17:47:43.0661 6316 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
17:47:43.0681 6316 adpu320 - ok
17:47:43.0797 6316 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
17:47:43.0823 6316 AFD - ok
17:47:43.0855 6316 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
17:47:43.0876 6316 agp440 - ok
17:47:43.0905 6316 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
17:47:43.0925 6316 aic78xx - ok
17:47:43.0959 6316 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
17:47:43.0976 6316 aliide - ok
17:47:43.0994 6316 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
17:47:44.0015 6316 amdagp - ok
17:47:44.0033 6316 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
17:47:44.0052 6316 amdide - ok
17:47:44.0081 6316 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
17:47:44.0108 6316 AmdK7 - ok
17:47:44.0132 6316 AmdK8 (0ca0071da4315b00fc1328ca86b425da) C:\Windows\system32\drivers\amdk8.sys
17:47:44.0141 6316 AmdK8 - ok
17:47:44.0236 6316 AnyDVD (38f5aaefb71100c294bd17190fb3f8d3) C:\Windows\system32\Drivers\AnyDVD.sys
17:47:44.0260 6316 AnyDVD - ok
17:47:44.0315 6316 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
17:47:44.0337 6316 arc - ok
17:47:44.0358 6316 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
17:47:44.0365 6316 arcsas - ok
17:47:44.0465 6316 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
17:47:44.0484 6316 AsyncMac - ok
17:47:44.0533 6316 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
17:47:44.0534 6316 atapi - ok
17:47:44.0598 6316 Avc (f4b56425a00beb32f5fa6603ff7b0ea2) C:\Windows\system32\DRIVERS\avc.sys
17:47:44.0604 6316 Avc - ok
17:47:44.0669 6316 avgio (f1d43170fdd7399ee17ea32d4f868b0c) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
17:47:44.0672 6316 avgio - ok
17:47:44.0715 6316 avgntflt (14fe36d8f2c6a2435275338d061a0b66) C:\Windows\system32\DRIVERS\avgntflt.sys
17:47:44.0736 6316 avgntflt - ok
17:47:44.0767 6316 avipbb (ad9bd66a862116e79cb45bb6be46055f) C:\Windows\system32\DRIVERS\avipbb.sys
17:47:44.0774 6316 avipbb - ok
17:47:44.0819 6316 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
17:47:44.0843 6316 Beep - ok
17:47:44.0901 6316 blbdrive - ok
17:47:45.0186 6316 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
17:47:45.0194 6316 bowser - ok
17:47:45.0221 6316 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
17:47:45.0235 6316 BrFiltLo - ok
17:47:45.0259 6316 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
17:47:45.0263 6316 BrFiltUp - ok
17:47:45.0284 6316 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
17:47:45.0291 6316 Brserid - ok
17:47:45.0307 6316 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
17:47:45.0332 6316 BrSerWdm - ok
17:47:45.0352 6316 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
17:47:45.0368 6316 BrUsbMdm - ok
17:47:45.0393 6316 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
17:47:45.0413 6316 BrUsbSer - ok
17:47:45.0434 6316 BT - ok
17:47:45.0443 6316 Btcsrusb - ok
17:47:45.0493 6316 BthEnum (6d39c954799b63ba866910234cf7d726) C:\Windows\system32\DRIVERS\BthEnum.sys
17:47:45.0497 6316 BthEnum - ok
17:47:45.0505 6316 BtHidBus - ok
17:47:45.0560 6316 BTHMODEM (9a966a8e86d1771911ae34a20d11bff3) C:\Windows\system32\DRIVERS\bthmodem.sys
17:47:45.0588 6316 BTHMODEM - ok
17:47:45.0636 6316 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys
17:47:45.0644 6316 BthPan - ok
17:47:45.0718 6316 BTHPORT (611ff3f2f095c8d4a6d4cfd9dcc09793) C:\Windows\system32\Drivers\BTHport.sys
17:47:45.0735 6316 BTHPORT - ok
17:47:45.0771 6316 BTHUSB (d330803eab2a15caec7f011f1d4cb30e) C:\Windows\system32\Drivers\BTHUSB.sys
17:47:45.0776 6316 BTHUSB - ok
17:47:45.0829 6316 btnetBUs (d3c277a51ef9e2ec972d6221f99c0b6d) C:\Windows\system32\Drivers\btnetBus.sys
17:47:45.0869 6316 btnetBUs - ok
17:47:45.0935 6316 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
17:47:45.0956 6316 cdfs - ok
17:47:46.0029 6316 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
17:47:46.0051 6316 cdrom - ok
17:47:46.0152 6316 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
17:47:46.0177 6316 circlass - ok
17:47:46.0243 6316 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
17:47:46.0245 6316 CLFS - ok
17:47:46.0287 6316 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
17:47:46.0292 6316 cmdide - ok
17:47:46.0313 6316 Compbatt (82b8c91d327cfecf76cb58716f7d4997) C:\Windows\system32\drivers\compbatt.sys
17:47:46.0319 6316 Compbatt - ok
17:47:46.0443 6316 cpuz132 - ok
17:47:46.0462 6316 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
17:47:46.0484 6316 crcdisk - ok
17:47:46.0506 6316 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
17:47:46.0513 6316 Crusoe - ok
17:47:46.0592 6316 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
17:47:46.0612 6316 DfsC - ok
17:47:46.0699 6316 dgderdrv (6216fd7fd227de454238a702b218cec7) C:\Windows\system32\drivers\dgderdrv.sys
17:47:46.0705 6316 dgderdrv - ok
17:47:46.0800 6316 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
17:47:46.0823 6316 disk - ok
17:47:46.0899 6316 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
17:47:46.0921 6316 drmkaud - ok
17:47:46.0989 6316 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
17:47:46.0997 6316 DXGKrnl - ok
17:47:47.0061 6316 e1express (88b16142b40cc080a2d86ae769a30396) C:\Windows\system32\DRIVERS\e1e6032.sys
17:47:47.0089 6316 e1express - ok
17:47:47.0120 6316 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
17:47:47.0141 6316 E1G60 - ok
17:47:47.0227 6316 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
17:47:47.0230 6316 Ecache - ok
17:47:47.0308 6316 ElbyCDIO (aaa8999a169e39fb8b48ae49cd6ac30a) C:\Windows\system32\Drivers\ElbyCDIO.sys
17:47:47.0326 6316 ElbyCDIO - ok
17:47:47.0366 6316 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
17:47:47.0408 6316 elxstor - ok
17:47:47.0482 6316 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
17:47:47.0491 6316 exfat - ok
17:47:47.0546 6316 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
17:47:47.0566 6316 fastfat - ok
17:47:47.0585 6316 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
17:47:47.0600 6316 fdc - ok
17:47:47.0673 6316 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
17:47:47.0680 6316 FileInfo - ok
17:47:47.0731 6316 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
17:47:47.0756 6316 Filetrace - ok
17:47:47.0778 6316 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
17:47:47.0783 6316 flpydisk - ok
17:47:47.0805 6316 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
17:47:47.0830 6316 FltMgr - ok
17:47:48.0064 6316 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\Windows\system32\DRIVERS\fssfltr.sys
17:47:48.0090 6316 fssfltr - ok
17:47:48.0144 6316 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
17:47:48.0148 6316 Fs_Rec - ok
17:47:48.0163 6316 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
17:47:48.0187 6316 gagp30kx - ok
17:47:48.0238 6316 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\Drivers\GEARAspiWDM.sys
17:47:48.0259 6316 GEARAspiWDM - ok
17:47:48.0313 6316 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
17:47:48.0337 6316 HdAudAddService - ok
17:47:48.0395 6316 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
17:47:48.0419 6316 HDAudBus - ok
17:47:48.0461 6316 HidBth (fcb3f4be408f72c1bd81bcaba87fc22f) C:\Windows\system32\DRIVERS\hidbth.sys
17:47:48.0477 6316 HidBth - ok
17:47:48.0501 6316 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
17:47:48.0518 6316 HidIr - ok
17:47:48.0565 6316 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
17:47:48.0569 6316 HidUsb - ok
17:47:48.0655 6316 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
17:47:48.0691 6316 HpCISSs - ok
17:47:48.0754 6316 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
17:47:48.0782 6316 HTTP - ok
17:47:48.0812 6316 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
17:47:48.0829 6316 i2omp - ok
17:47:48.0927 6316 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
17:47:48.0951 6316 i8042prt - ok
17:47:49.0051 6316 iaStor (997e8f5939f2d12cd9f2e6b395724c16) C:\Windows\system32\drivers\iastor.sys
17:47:49.0077 6316 iaStor - ok
17:47:49.0114 6316 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
17:47:49.0124 6316 iaStorV - ok
17:47:49.0171 6316 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
17:47:49.0178 6316 iirsp - ok
17:47:49.0294 6316 IntcAzAudAddService (edc37b918e583a5a813c53d4f5588255) C:\Windows\system32\drivers\RTKVHDA.sys
17:47:49.0343 6316 IntcAzAudAddService - ok
17:47:49.0373 6316 intelide (97469037714070e45194ed318d636401) C:\Windows\system32\DRIVERS\intelide.sys
17:47:49.0377 6316 intelide - ok
17:47:49.0436 6316 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
17:47:49.0437 6316 intelppm - ok
17:47:49.0512 6316 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:47:49.0518 6316 IpFilterDriver - ok
17:47:49.0556 6316 IpInIp - ok
17:47:49.0588 6316 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
17:47:49.0609 6316 IPMIDRV - ok
17:47:49.0658 6316 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
17:47:49.0660 6316 IPNAT - ok
17:47:49.0716 6316 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
17:47:49.0720 6316 IRENUM - ok
17:47:49.0738 6316 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
17:47:49.0762 6316 isapnp - ok
17:47:49.0838 6316 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
17:47:49.0841 6316 iScsiPrt - ok
17:47:49.0892 6316 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
17:47:49.0910 6316 iteatapi - ok
17:47:49.0959 6316 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
17:47:49.0982 6316 iteraid - ok
17:47:49.0990 6316 IvtBtBUs - ok
17:47:50.0037 6316 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
17:47:50.0060 6316 kbdclass - ok
17:47:50.0110 6316 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
17:47:50.0124 6316 kbdhid - ok
17:47:50.0221 6316 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
17:47:50.0361 6316 KSecDD - ok
17:47:50.0390 6316 Lbd - ok
17:47:50.0441 6316 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
17:47:50.0447 6316 lltdio - ok
17:47:50.0492 6316 LMIInfo - ok
17:47:50.0542 6316 lmimirr (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\Windows\system32\DRIVERS\lmimirr.sys
17:47:50.0561 6316 lmimirr - ok
17:47:50.0583 6316 LMIRfsClientNP - ok
17:47:50.0605 6316 LMIRfsDriver (622704763da924c1565344e8c7d6ca4d) C:\Windows\system32\drivers\LMIRfsDriver.sys
17:47:50.0626 6316 LMIRfsDriver - ok
17:47:50.0653 6316 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
17:47:50.0661 6316 LSI_FC - ok
17:47:50.0690 6316 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
17:47:50.0697 6316 LSI_SAS - ok
17:47:50.0718 6316 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
17:47:50.0735 6316 LSI_SCSI - ok
17:47:50.0792 6316 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
17:47:50.0799 6316 luafv - ok
17:47:50.0858 6316 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\Windows\system32\drivers\mbam.sys
17:47:50.0882 6316 MBAMProtector - ok
17:47:50.0918 6316 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
17:47:50.0924 6316 megasas - ok
17:47:50.0979 6316 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
17:47:50.0985 6316 Modem - ok
17:47:51.0022 6316 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
17:47:51.0023 6316 monitor - ok
17:47:51.0070 6316 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
17:47:51.0088 6316 mouclass - ok
17:47:51.0142 6316 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
17:47:51.0148 6316 mouhid - ok
17:47:51.0194 6316 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
17:47:51.0201 6316 MountMgr - ok
17:47:51.0258 6316 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
17:47:51.0280 6316 mpio - ok
17:47:51.0296 6316 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
17:47:51.0314 6316 mpsdrv - ok
17:47:51.0347 6316 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
17:47:51.0370 6316 Mraid35x - ok
17:47:51.0429 6316 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
17:47:51.0449 6316 MRxDAV - ok
17:47:51.0481 6316 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
17:47:51.0510 6316 mrxsmb - ok
17:47:51.0573 6316 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:47:51.0599 6316 mrxsmb10 - ok
17:47:51.0620 6316 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:47:51.0642 6316 mrxsmb20 - ok
17:47:51.0665 6316 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys
17:47:51.0689 6316 msahci - ok
17:47:51.0714 6316 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
17:47:51.0737 6316 msdsm - ok
17:47:51.0863 6316 MSDV (343291a4dfd7c923c3f71f550830ec1c) C:\Windows\system32\DRIVERS\msdv.sys
17:47:51.0891 6316 MSDV - ok
17:47:51.0937 6316 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
17:47:51.0958 6316 Msfs - ok
17:47:52.0048 6316 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
17:47:52.0053 6316 msisadrv - ok
17:47:52.0109 6316 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
17:47:52.0113 6316 MSKSSRV - ok
17:47:52.0166 6316 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
17:47:52.0185 6316 MSPCLOCK - ok
17:47:52.0212 6316 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
17:47:52.0216 6316 MSPQM - ok
17:47:52.0279 6316 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
17:47:52.0301 6316 MsRPC - ok
17:47:52.0328 6316 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
17:47:52.0330 6316 mssmbios - ok
17:47:52.0348 6316 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
17:47:52.0352 6316 MSTEE - ok
17:47:52.0411 6316 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
17:47:52.0446 6316 Mup - ok
17:47:52.0507 6316 NAL (481daa2cba98521a4e40f75518c06330) C:\Windows\system32\Drivers\iqvw32.sys
17:47:52.0527 6316 NAL - ok
17:47:52.0599 6316 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
17:47:52.0623 6316 NativeWifiP - ok
17:47:52.0698 6316 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
17:47:52.0706 6316 NDIS - ok
17:47:52.0766 6316 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
17:47:52.0787 6316 NdisTapi - ok
17:47:52.0846 6316 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
17:47:52.0850 6316 Ndisuio - ok
17:47:52.0912 6316 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
17:47:52.0939 6316 NdisWan - ok
17:47:53.0015 6316 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
17:47:53.0035 6316 NDProxy - ok
17:47:53.0065 6316 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
17:47:53.0071 6316 NetBIOS - ok
17:47:53.0138 6316 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
17:47:53.0151 6316 netbt - ok
17:47:53.0241 6316 netr73 (271ac1312ef1dde187793183abbfa8d0) C:\Windows\system32\DRIVERS\netr73.sys
17:47:53.0258 6316 netr73 - ok
17:47:53.0288 6316 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
17:47:53.0295 6316 nfrd960 - ok
17:47:53.0369 6316 npf (6623e51595c0076755c29c00846c4eb2) C:\Windows\system32\drivers\npf.sys
17:47:53.0389 6316 npf - ok
17:47:53.0450 6316 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
17:47:53.0456 6316 Npfs - ok
17:47:53.0503 6316 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
17:47:53.0507 6316 nsiproxy - ok
17:47:53.0594 6316 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
17:47:53.0621 6316 Ntfs - ok
17:47:53.0640 6316 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
17:47:53.0655 6316 ntrigdigi - ok
17:47:53.0665 6316 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
17:47:53.0675 6316 Null - ok
17:47:53.0965 6316 nvlddmkm (d9099ed7cf688b131c5b0fcdae1a48fa) C:\Windows\system32\DRIVERS\nvlddmkm.sys
17:47:54.0127 6316 nvlddmkm - ok
17:47:54.0222 6316 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
17:47:54.0241 6316 nvraid - ok
17:47:54.0266 6316 nvstor (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys
17:47:54.0290 6316 nvstor - ok
17:47:54.0324 6316 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
17:47:54.0333 6316 nv_agp - ok
17:47:54.0341 6316 NwlnkFlt - ok
17:47:54.0352 6316 NwlnkFwd - ok
17:47:54.0409 6316 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
17:47:54.0410 6316 ohci1394 - ok
17:47:54.0447 6316 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
17:47:54.0469 6316 Parport - ok
17:47:54.0535 6316 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
17:47:54.0560 6316 partmgr - ok
17:47:54.0583 6316 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
17:47:54.0587 6316 Parvdm - ok
17:47:54.0619 6316 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
17:47:54.0631 6316 pci - ok
17:47:54.0672 6316 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys
17:47:54.0676 6316 pciide - ok
17:47:54.0703 6316 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
17:47:54.0725 6316 pcmcia - ok
17:47:54.0802 6316 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
17:47:54.0852 6316 PEAUTH - ok
17:47:54.0953 6316 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
17:47:54.0970 6316 PptpMiniport - ok
17:47:54.0994 6316 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
17:47:55.0020 6316 Processor - ok
17:47:55.0085 6316 Ps2 (390c204ced3785609ab24e9c52054a84) C:\Windows\system32\DRIVERS\PS2.sys
17:47:55.0106 6316 Ps2 - ok
17:47:55.0167 6316 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
17:47:55.0174 6316 PSched - ok
17:47:55.0216 6316 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\Windows\system32\Drivers\PxHelp20.sys
17:47:55.0225 6316 PxHelp20 - ok
17:47:55.0278 6316 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
17:47:55.0299 6316 ql2300 - ok
17:47:55.0322 6316 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
17:47:55.0342 6316 ql40xx - ok
17:47:55.0421 6316 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
17:47:55.0441 6316 QWAVEdrv - ok
17:47:55.0600 6316 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
17:47:55.0604 6316 RasAcd - ok
17:47:55.0666 6316 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
17:47:55.0689 6316 Rasl2tp - ok
17:47:55.0759 6316 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
17:47:55.0777 6316 RasPppoe - ok
17:47:55.0811 6316 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
17:47:55.0818 6316 RasSstp - ok
17:47:55.0875 6316 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
17:47:55.0897 6316 rdbss - ok
17:47:55.0920 6316 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
17:47:55.0924 6316 RDPCDD - ok
17:47:56.0027 6316 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
17:47:56.0067 6316 rdpdr - ok
17:47:56.0078 6316 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
17:47:56.0082 6316 RDPENCDD - ok
17:47:56.0124 6316 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
17:47:56.0155 6316 RDPWD - ok
17:47:56.0224 6316 RFCOMM (6482707f9f4da0ecbab43b2e0398a101) C:\Windows\system32\DRIVERS\rfcomm.sys
17:47:56.0252 6316 RFCOMM - ok
17:47:56.0290 6316 RMCAST (eec7ee5675294b03e88aa868540007c1) C:\Windows\system32\DRIVERS\RMCAST.sys
17:47:56.0309 6316 RMCAST - ok
17:47:56.0360 6316 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
17:47:56.0366 6316 rspndr - ok
17:47:56.0412 6316 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
17:47:56.0413 6316 SASDIFSV - ok
17:47:56.0457 6316 SASENUM (7ce61c25c159f50f9eaf6d77fc83fa35) C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
17:47:56.0472 6316 SASENUM - ok
17:47:56.0505 6316 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
17:47:56.0506 6316 SASKUTIL - ok
17:47:56.0535 6316 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
17:47:56.0553 6316 sbp2port - ok
17:47:56.0589 6316 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
17:47:56.0593 6316 secdrv - ok
17:47:56.0621 6316 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
17:47:56.0626 6316 Serenum - ok
17:47:56.0646 6316 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
17:47:56.0654 6316 Serial - ok
17:47:56.0700 6316 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
17:47:56.0718 6316 sermouse - ok
17:47:56.0749 6316 sffdisk (103b79418da647736ee95645f305f68a) C:\Windows\system32\drivers\sffdisk.sys
17:47:56.0771 6316 sffdisk - ok
17:47:56.0811 6316 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
17:47:56.0833 6316 sffp_mmc - ok
17:47:56.0858 6316 sffp_sd (9cfa05fcfcb7124e69cfc812b72f9614) C:\Windows\system32\drivers\sffp_sd.sys
17:47:56.0878 6316 sffp_sd - ok
17:47:56.0912 6316 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
17:47:56.0916 6316 sfloppy - ok
17:47:56.0953 6316 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys
17:47:56.0981 6316 sisagp - ok
17:47:57.0004 6316 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
17:47:57.0028 6316 SiSRaid2 - ok
17:47:57.0087 6316 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
17:47:57.0094 6316 SiSRaid4 - ok
17:47:57.0168 6316 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
17:47:57.0187 6316 Smb - ok
17:47:57.0244 6316 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
17:47:57.0250 6316 spldr - ok
17:47:57.0313 6316 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
17:47:57.0327 6316 srv - ok
17:47:57.0391 6316 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
17:47:57.0415 6316 srv2 - ok
17:47:57.0436 6316 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
17:47:57.0444 6316 srvnet - ok
17:47:57.0491 6316 ssmdrv (3ad0362cf68de3ac500e981700242cca) C:\Windows\system32\DRIVERS\ssmdrv.sys
17:47:57.0496 6316 ssmdrv - ok
17:47:57.0560 6316 ss_bbus (3f0164fbc0bd1adbd02df9759181451a) C:\Windows\system32\DRIVERS\ss_bbus.sys
17:47:57.0585 6316 ss_bbus - ok
17:47:57.0638 6316 ss_bmdfl (b89d62206034e5fe573c80a24dd55675) C:\Windows\system32\DRIVERS\ss_bmdfl.sys
17:47:57.0643 6316 ss_bmdfl - ok
17:47:57.0668 6316 ss_bmdm (1ed0fcea586fe2a416ee15196e5631dd) C:\Windows\system32\DRIVERS\ss_bmdm.sys
17:47:57.0678 6316 ss_bmdm - ok
17:47:57.0720 6316 ss_bserd (994d2e5378cc337ec7dd73c1e04fcaa4) C:\Windows\system32\DRIVERS\ss_bserd.sys
17:47:57.0730 6316 ss_bserd - ok
17:47:57.0764 6316 StillCam (ef70b3d22b4bffda6ea851ecb063efaa) C:\Windows\system32\DRIVERS\serscan.sys
17:47:57.0769 6316 StillCam - ok
17:47:57.0813 6316 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
17:47:57.0819 6316 swenum - ok
17:47:57.0866 6316 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
17:47:57.0872 6316 Symc8xx - ok
17:47:57.0898 6316 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
17:47:57.0904 6316 Sym_hi - ok
17:47:57.0930 6316 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
17:47:57.0936 6316 Sym_u3 - ok
17:47:58.0017 6316 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys
17:47:58.0055 6316 Tcpip - ok
17:47:58.0076 6316 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys
17:47:58.0083 6316 Tcpip6 - ok
17:47:58.0134 6316 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
17:47:58.0190 6316 tcpipreg - ok
17:47:58.0231 6316 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
17:47:58.0256 6316 TDPIPE - ok
17:47:58.0291 6316 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
17:47:58.0304 6316 TDTCP - ok
17:47:58.0369 6316 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
17:47:58.0376 6316 tdx - ok
17:47:58.0427 6316 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
17:47:58.0434 6316 TermDD - ok
17:47:58.0467 6316 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
17:47:58.0490 6316 tssecsrv - ok
17:47:58.0540 6316 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
17:47:58.0557 6316 tunmp - ok
17:47:58.0621 6316 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
17:47:58.0635 6316 tunnel - ok
17:47:58.0677 6316 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys
17:47:58.0684 6316 uagp35 - ok
17:47:58.0728 6316 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
17:47:58.0740 6316 udfs - ok
17:47:58.0772 6316 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
17:47:58.0794 6316 uliagpkx - ok
17:47:58.0812 6316 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
17:47:58.0822 6316 uliahci - ok
17:47:58.0849 6316 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
17:47:58.0875 6316 UlSata - ok
17:47:58.0896 6316 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
17:47:58.0905 6316 ulsata2 - ok
17:47:58.0955 6316 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
17:47:59.0010 6316 umbus - ok
17:47:59.0062 6316 usbaudio (f6bf998ae33e3fb6c7d27f0560f1173f) C:\Windows\system32\drivers\usbaudio.sys
17:47:59.0082 6316 usbaudio - ok
17:47:59.0133 6316 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
17:47:59.0154 6316 usbccgp - ok
17:47:59.0197 6316 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
17:47:59.0207 6316 usbcir - ok
17:47:59.0267 6316 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
17:47:59.0290 6316 usbehci - ok
17:47:59.0344 6316 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
17:47:59.0353 6316 usbhub - ok
17:47:59.0379 6316 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
17:47:59.0395 6316 usbohci - ok
17:47:59.0423 6316 usbprint (b51e52acf758be00ef3a58ea452fe360) C:\Windows\system32\drivers\usbprint.sys
17:47:59.0439 6316 usbprint - ok
17:47:59.0500 6316 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
17:47:59.0506 6316 usbscan - ok
17:47:59.0547 6316 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:47:59.0549 6316 USBSTOR - ok
17:47:59.0597 6316 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
17:47:59.0616 6316 usbuhci - ok
17:47:59.0672 6316 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
17:47:59.0699 6316 usbvideo - ok
17:47:59.0715 6316 VComm - ok
17:47:59.0728 6316 VcommMgr - ok
17:47:59.0759 6316 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
17:47:59.0781 6316 vga - ok
17:47:59.0833 6316 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
17:47:59.0855 6316 VgaSave - ok
17:47:59.0880 6316 VHidMinidrv - ok
17:47:59.0905 6316 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
17:47:59.0912 6316 viaagp - ok
17:47:59.0953 6316 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
17:47:59.0976 6316 ViaC7 - ok
17:47:59.0999 6316 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys
17:48:00.0021 6316 viaide - ok
17:48:00.0077 6316 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
17:48:00.0084 6316 volmgr - ok
17:48:00.0163 6316 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
17:48:00.0184 6316 volmgrx - ok
17:48:00.0233 6316 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
17:48:00.0245 6316 volsnap - ok
17:48:00.0267 6316 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
17:48:00.0290 6316 vsmraid - ok
17:48:00.0319 6316 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
17:48:00.0324 6316 WacomPen - ok
17:48:00.0375 6316 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
17:48:00.0395 6316 Wanarp - ok
17:48:00.0410 6316 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
17:48:00.0412 6316 Wanarpv6 - ok
17:48:00.0437 6316 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
17:48:00.0458 6316 Wd - ok
17:48:00.0520 6316 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
17:48:00.0539 6316 Wdf01000 - ok
17:48:00.0882 6316 WINUSB (676f4b665bdd8053eaa53ac1695b8074) C:\Windows\system32\DRIVERS\WinUSB.SYS
17:48:00.0908 6316 WINUSB - ok
17:48:00.0987 6316 WmiAcpi (701a9f884a294327e9141d73746ee279) C:\Windows\system32\drivers\wmiacpi.sys
17:48:01.0006 6316 WmiAcpi - ok
17:48:01.0067 6316 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
17:48:01.0089 6316 WpdUsb - ok
17:48:01.0137 6316 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
17:48:01.0143 6316 ws2ifsl - ok
17:48:01.0212 6316 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
17:48:01.0234 6316 WUDFRd - ok
17:48:01.0243 6316 zlportio - ok
17:48:01.0286 6316 MBR (0x1B8) (8913823ff508ccf109db74b636c301da) \Device\Harddisk0\DR0
17:48:01.0316 6316 \Device\Harddisk0\DR0 - ok
17:48:01.0334 6316 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
17:48:01.0341 6316 \Device\Harddisk1\DR1 - ok
17:48:01.0355 6316 MBR (0x1B8) (e5fa06aca0d60ba9c870d0ef3d9898c9) \Device\Harddisk3\DR3
17:48:01.0363 6316 \Device\Harddisk3\DR3 - ok
17:48:01.0367 6316 Boot (0x1200) (df1d411b681b9d5744d24f9c13fefcf1) \Device\Harddisk0\DR0\Partition0
17:48:01.0368 6316 \Device\Harddisk0\DR0\Partition0 - ok
17:48:01.0372 6316 Boot (0x1200) (95889cfbea3bac53ef1ae4910cb187f4) \Device\Harddisk0\DR0\Partition1
17:48:01.0373 6316 \Device\Harddisk0\DR0\Partition1 - ok
17:48:01.0377 6316 Boot (0x1200) (3b61d7e680d24fb83850af048db430ca) \Device\Harddisk1\DR1\Partition0
17:48:01.0379 6316 \Device\Harddisk1\DR1\Partition0 - ok
17:48:01.0385 6316 Boot (0x1200) (2a92874a109ced1a8c3492d7c9766faf) \Device\Harddisk3\DR3\Partition0
17:48:01.0386 6316 \Device\Harddisk3\DR3\Partition0 - ok
17:48:01.0387 6316 ============================================================
17:48:01.0387 6316 Scan finished
17:48:01.0387 6316 ============================================================
17:48:01.0397 6416 Detected object count: 0
17:48:01.0397 6416 Actual detected object count: 0
17:48:08.0590 6768 ============================================================
17:48:08.0590 6768 Scan started
17:48:08.0590 6768 Mode: Manual; SigCheck; TDLFS;
17:48:08.0590 6768 ============================================================
17:48:09.0880 6768 61883 (585e64bb6dfbc0a2f1f0b554ded012df) C:\Windows\system32\DRIVERS\61883.sys
17:48:10.0139 6768 61883 - ok
17:48:10.0226 6768 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
17:48:10.0247 6768 ACPI - ok
17:48:10.0291 6768 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
17:48:10.0331 6768 adp94xx - ok
17:48:10.0365 6768 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
17:48:10.0382 6768 adpahci - ok
17:48:10.0402 6768 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
17:48:10.0415 6768 adpu160m - ok
17:48:10.0473 6768 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
17:48:10.0487 6768 adpu320 - ok
17:48:10.0559 6768 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
17:48:10.0600 6768 AFD - ok
17:48:10.0616 6768 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
17:48:10.0629 6768 agp440 - ok
17:48:10.0650 6768 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
17:48:10.0663 6768 aic78xx - ok
17:48:10.0696 6768 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
17:48:10.0709 6768 aliide - ok
17:48:10.0739 6768 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
17:48:10.0752 6768 amdagp - ok
17:48:10.0770 6768 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
17:48:10.0782 6768 amdide - ok
17:48:10.0810 6768 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
17:48:11.0290 6768 AmdK7 - ok
17:48:11.0309 6768 AmdK8 (0ca0071da4315b00fc1328ca86b425da) C:\Windows\system32\drivers\amdk8.sys
17:48:11.0386 6768 AmdK8 - ok
17:48:11.0528 6768 AnyDVD (38f5aaefb71100c294bd17190fb3f8d3) C:\Windows\system32\Drivers\AnyDVD.sys
17:48:11.0581 6768 AnyDVD - ok
17:48:11.0633 6768 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
17:48:11.0645 6768 arc - ok
17:48:11.0675 6768 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
17:48:11.0688 6768 arcsas - ok
17:48:11.0750 6768 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
17:48:11.0810 6768 AsyncMac - ok
17:48:11.0859 6768 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
17:48:11.0873 6768 atapi - ok
17:48:11.0932 6768 Avc (f4b56425a00beb32f5fa6603ff7b0ea2) C:\Windows\system32\DRIVERS\avc.sys
17:48:11.0976 6768 Avc - ok
17:48:12.0061 6768 avgio (f1d43170fdd7399ee17ea32d4f868b0c) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
17:48:12.0072 6768 avgio - ok
17:48:12.0115 6768 avgntflt (14fe36d8f2c6a2435275338d061a0b66) C:\Windows\system32\DRIVERS\avgntflt.sys
17:48:12.0125 6768 avgntflt - ok
17:48:12.0142 6768 avipbb (ad9bd66a862116e79cb45bb6be46055f) C:\Windows\system32\DRIVERS\avipbb.sys
17:48:12.0153 6768 avipbb - ok
17:48:12.0186 6768 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
17:48:12.0241 6768 Beep - ok
17:48:12.0253 6768 blbdrive - ok
17:48:12.0346 6768 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
17:48:12.0393 6768 bowser - ok
17:48:12.0431 6768 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
17:48:12.0528 6768 BrFiltLo - ok
17:48:12.0551 6768 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
17:48:12.0607 6768 BrFiltUp - ok
17:48:12.0626 6768 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
17:48:12.0705 6768 Brserid - ok
17:48:12.0724 6768 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
17:48:12.0786 6768 BrSerWdm - ok
17:48:12.0802 6768 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
17:48:12.0869 6768 BrUsbMdm - ok
17:48:12.0885 6768 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
17:48:12.0947 6768 BrUsbSer - ok
17:48:12.0975 6768 BT - ok
17:48:13.0010 6768 Btcsrusb - ok
17:48:13.0084 6768 BthEnum (6d39c954799b63ba866910234cf7d726) C:\Windows\system32\DRIVERS\BthEnum.sys
17:48:13.0129 6768 BthEnum - ok
17:48:13.0137 6768 BtHidBus - ok
17:48:13.0176 6768 BTHMODEM (9a966a8e86d1771911ae34a20d11bff3) C:\Windows\system32\DRIVERS\bthmodem.sys
17:48:13.0221 6768 BTHMODEM - ok
17:48:13.0277 6768 BthPan (5904efa25f829bf84ea6fb045134a1d8) C:\Windows\system32\DRIVERS\bthpan.sys
17:48:13.0327 6768 BthPan - ok
17:48:13.0401 6768 BTHPORT (611ff3f2f095c8d4a6d4cfd9dcc09793) C:\Windows\system32\Drivers\BTHport.sys
17:48:13.0445 6768 BTHPORT - ok
17:48:13.0470 6768 BTHUSB (d330803eab2a15caec7f011f1d4cb30e) C:\Windows\system32\Drivers\BTHUSB.sys
17:48:13.0497 6768 BTHUSB - ok
17:48:13.0545 6768 btnetBUs (d3c277a51ef9e2ec972d6221f99c0b6d) C:\Windows\system32\Drivers\btnetBus.sys
17:48:13.0555 6768 btnetBUs - ok
17:48:13.0617 6768 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
17:48:13.0663 6768 cdfs - ok
17:48:13.0703 6768 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
17:48:13.0748 6768 cdrom - ok
17:48:13.0793 6768 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
17:48:13.0848 6768 circlass - ok
17:48:13.0879 6768 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
17:48:13.0899 6768 CLFS - ok
17:48:13.0952 6768 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
17:48:13.0965 6768 cmdide - ok
17:48:13.0987 6768 Compbatt (82b8c91d327cfecf76cb58716f7d4997) C:\Windows\system32\drivers\compbatt.sys
17:48:14.0000 6768 Compbatt - ok
17:48:14.0126 6768 cpuz132 - ok
17:48:14.0145 6768 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
17:48:14.0157 6768 crcdisk - ok
17:48:14.0180 6768 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
17:48:14.0285 6768 Crusoe - ok
17:48:14.0365 6768 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
17:48:14.0421 6768 DfsC - ok
17:48:14.0555 6768 dgderdrv (6216fd7fd227de454238a702b218cec7) C:\Windows\system32\drivers\dgderdrv.sys
17:48:14.0566 6768 dgderdrv - ok
17:48:14.0657 6768 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
17:48:14.0672 6768 disk - ok
17:48:14.0719 6768 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
17:48:14.0765 6768 drmkaud - ok
17:48:14.0836 6768 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
17:48:14.0870 6768 DXGKrnl - ok
17:48:14.0984 6768 e1express (88b16142b40cc080a2d86ae769a30396) C:\Windows\system32\DRIVERS\e1e6032.sys
17:48:14.0998 6768 e1express - ok
17:48:15.0026 6768 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
17:48:15.0147 6768 E1G60 - ok
17:48:15.0224 6768 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
17:48:15.0240 6768 Ecache - ok
17:48:15.0330 6768 ElbyCDIO (aaa8999a169e39fb8b48ae49cd6ac30a) C:\Windows\system32\Drivers\ElbyCDIO.sys
17:48:15.0342 6768 ElbyCDIO - ok
17:48:15.0380 6768 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
17:48:15.0398 6768 elxstor - ok
17:48:15.0455 6768 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
17:48:15.0508 6768 exfat - ok
17:48:15.0585 6768 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
17:48:15.0623 6768 fastfat - ok
17:48:15.0649 6768 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
17:48:15.0714 6768 fdc - ok
17:48:15.0761 6768 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
17:48:15.0775 6768 FileInfo - ok
17:48:15.0828 6768 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
17:48:15.0875 6768 Filetrace - ok
17:48:15.0892 6768 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
17:48:15.0955 6768 flpydisk - ok
17:48:15.0977 6768 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
17:48:15.0994 6768 FltMgr - ok
17:48:16.0044 6768 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\Windows\system32\DRIVERS\fssfltr.sys
17:48:16.0057 6768 fssfltr - ok
17:48:16.0100 6768 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
17:48:16.0138 6768 Fs_Rec - ok
17:48:16.0152 6768 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
17:48:16.0165 6768 gagp30kx - ok
17:48:16.0211 6768 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\Drivers\GEARAspiWDM.sys
17:48:16.0220 6768 GEARAspiWDM - ok
17:48:16.0360 6768 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
17:48:16.0432 6768 HdAudAddService - ok
17:48:16.0500 6768 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
17:48:16.0547 6768 HDAudBus - ok
17:48:16.0591 6768 HidBth (fcb3f4be408f72c1bd81bcaba87fc22f) C:\Windows\system32\DRIVERS\hidbth.sys
17:48:16.0633 6768 HidBth - ok
17:48:16.0656 6768 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
17:48:16.0716 6768 HidIr - ok
17:48:16.0770 6768 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
17:48:16.0801 6768 HidUsb - ok
17:48:16.0868 6768 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
17:48:16.0880 6768 HpCISSs - ok
17:48:16.0934 6768 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys

[paracelse62]

17:48:16.0985 6768 HTTP - ok
17:48:17.0000 6768 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
17:48:17.0012 6768 i2omp - ok
17:48:17.0066 6768 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
17:48:17.0099 6768 i8042prt - ok
17:48:17.0140 6768 iaStor (997e8f5939f2d12cd9f2e6b395724c16) C:\Windows\system32\drivers\iastor.sys
17:48:17.0156 6768 iaStor - ok
17:48:17.0186 6768 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
17:48:17.0202 6768 iaStorV - ok
17:48:17.0235 6768 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
17:48:17.0247 6768 iirsp - ok
17:48:17.0357 6768 IntcAzAudAddService (edc37b918e583a5a813c53d4f5588255) C:\Windows\system32\drivers\RTKVHDA.sys
17:48:17.0417 6768 IntcAzAudAddService - ok
17:48:17.0478 6768 intelide (97469037714070e45194ed318d636401) C:\Windows\system32\DRIVERS\intelide.sys
17:48:17.0490 6768 intelide - ok
17:48:17.0541 6768 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
17:48:17.0588 6768 intelppm - ok
17:48:17.0650 6768 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:48:17.0683 6768 IpFilterDriver - ok
17:48:17.0694 6768 IpInIp - ok
17:48:17.0726 6768 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
17:48:17.0797 6768 IPMIDRV - ok
17:48:17.0854 6768 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
17:48:17.0929 6768 IPNAT - ok
17:48:17.0979 6768 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
17:48:18.0020 6768 IRENUM - ok
17:48:18.0083 6768 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
17:48:18.0097 6768 isapnp - ok
17:48:18.0153 6768 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
17:48:18.0170 6768 iScsiPrt - ok
17:48:18.0255 6768 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
17:48:18.0267 6768 iteatapi - ok
17:48:18.0288 6768 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
17:48:18.0300 6768 iteraid - ok
17:48:18.0309 6768 IvtBtBUs - ok
17:48:18.0349 6768 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
17:48:18.0378 6768 kbdclass - ok
17:48:18.0431 6768 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
17:48:18.0462 6768 kbdhid - ok
17:48:18.0533 6768 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
17:48:18.0588 6768 KSecDD - ok
17:48:18.0621 6768 Lbd - ok
17:48:18.0687 6768 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
17:48:18.0744 6768 lltdio - ok
17:48:18.0813 6768 LMIInfo - ok
17:48:18.0862 6768 lmimirr (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\Windows\system32\DRIVERS\lmimirr.sys
17:48:18.0875 6768 lmimirr - ok
17:48:18.0884 6768 LMIRfsClientNP - ok
17:48:18.0926 6768 LMIRfsDriver (622704763da924c1565344e8c7d6ca4d) C:\Windows\system32\drivers\LMIRfsDriver.sys
17:48:18.0936 6768 LMIRfsDriver - ok
17:48:19.0081 6768 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
17:48:19.0094 6768 LSI_FC - ok
17:48:19.0119 6768 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
17:48:19.0133 6768 LSI_SAS - ok
17:48:19.0155 6768 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
17:48:19.0168 6768 LSI_SCSI - ok
17:48:19.0220 6768 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
17:48:19.0270 6768 luafv - ok
17:48:19.0328 6768 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\Windows\system32\drivers\mbam.sys
17:48:19.0342 6768 MBAMProtector - ok
17:48:19.0372 6768 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
17:48:19.0384 6768 megasas - ok
17:48:19.0441 6768 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
17:48:19.0491 6768 Modem - ok
17:48:19.0517 6768 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
17:48:19.0549 6768 monitor - ok
17:48:19.0598 6768 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
17:48:19.0655 6768 mouclass - ok
17:48:19.0728 6768 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
17:48:19.0777 6768 mouhid - ok
17:48:19.0863 6768 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
17:48:19.0877 6768 MountMgr - ok
17:48:19.0902 6768 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
17:48:19.0915 6768 mpio - ok
17:48:19.0949 6768 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
17:48:19.0986 6768 mpsdrv - ok
17:48:20.0016 6768 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
17:48:20.0028 6768 Mraid35x - ok
17:48:20.0082 6768 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
17:48:20.0183 6768 MRxDAV - ok
17:48:20.0216 6768 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
17:48:20.0283 6768 mrxsmb - ok
17:48:20.0342 6768 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:48:20.0378 6768 mrxsmb10 - ok
17:48:20.0397 6768 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:48:20.0423 6768 mrxsmb20 - ok
17:48:20.0442 6768 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys
17:48:20.0454 6768 msahci - ok
17:48:20.0474 6768 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
17:48:20.0488 6768 msdsm - ok
17:48:20.0540 6768 MSDV (343291a4dfd7c923c3f71f550830ec1c) C:\Windows\system32\DRIVERS\msdv.sys
17:48:20.0573 6768 MSDV - ok
17:48:20.0647 6768 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
17:48:20.0691 6768 Msfs - ok
17:48:20.0759 6768 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
17:48:20.0771 6768 msisadrv - ok
17:48:20.0795 6768 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
17:48:20.0833 6768 MSKSSRV - ok
17:48:20.0851 6768 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
17:48:20.0918 6768 MSPCLOCK - ok
17:48:20.0939 6768 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
17:48:20.0996 6768 MSPQM - ok
17:48:21.0048 6768 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
17:48:21.0065 6768 MsRPC - ok
17:48:21.0080 6768 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
17:48:21.0094 6768 mssmbios - ok
17:48:21.0117 6768 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
17:48:21.0160 6768 MSTEE - ok
17:48:21.0221 6768 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
17:48:21.0237 6768 Mup - ok
17:48:21.0301 6768 NAL (481daa2cba98521a4e40f75518c06330) C:\Windows\system32\Drivers\iqvw32.sys
17:48:21.0310 6768 NAL - ok
17:48:21.0401 6768 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
17:48:21.0453 6768 NativeWifiP - ok
17:48:21.0649 6768 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
17:48:21.0674 6768 NDIS - ok
17:48:21.0767 6768 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
17:48:21.0801 6768 NdisTapi - ok
17:48:21.0863 6768 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
17:48:21.0931 6768 Ndisuio - ok
17:48:21.0988 6768 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
17:48:22.0026 6768 NdisWan - ok
17:48:22.0074 6768 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
17:48:22.0107 6768 NDProxy - ok
17:48:22.0133 6768 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
17:48:22.0164 6768 NetBIOS - ok
17:48:22.0229 6768 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
17:48:22.0279 6768 netbt - ok
17:48:22.0349 6768 netr73 (271ac1312ef1dde187793183abbfa8d0) C:\Windows\system32\DRIVERS\netr73.sys
17:48:22.0421 6768 netr73 - ok
17:48:22.0455 6768 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
17:48:22.0468 6768 nfrd960 - ok
17:48:22.0544 6768 npf (6623e51595c0076755c29c00846c4eb2) C:\Windows\system32\drivers\npf.sys
17:48:22.0580 6768 npf - ok
17:48:22.0642 6768 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
17:48:22.0703 6768 Npfs - ok
17:48:22.0753 6768 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
17:48:22.0797 6768 nsiproxy - ok
17:48:22.0885 6768 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
17:48:22.0924 6768 Ntfs - ok
17:48:22.0964 6768 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
17:48:23.0034 6768 ntrigdigi - ok
17:48:23.0051 6768 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
17:48:23.0092 6768 Null - ok
17:48:23.0521 6768 nvlddmkm (d9099ed7cf688b131c5b0fcdae1a48fa) C:\Windows\system32\DRIVERS\nvlddmkm.sys
17:48:23.0900 6768 nvlddmkm - ok
17:48:24.0011 6768 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
17:48:24.0024 6768 nvraid - ok
17:48:24.0046 6768 nvstor (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys
17:48:24.0058 6768 nvstor - ok
17:48:24.0105 6768 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
17:48:24.0118 6768 nv_agp - ok
17:48:24.0144 6768 NwlnkFlt - ok
17:48:24.0155 6768 NwlnkFwd - ok
17:48:24.0205 6768 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
17:48:24.0242 6768 ohci1394 - ok
17:48:24.0277 6768 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
17:48:24.0332 6768 Parport - ok
17:48:24.0406 6768 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
17:48:24.0421 6768 partmgr - ok
17:48:24.0454 6768 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
17:48:24.0514 6768 Parvdm - ok
17:48:24.0542 6768 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
17:48:24.0559 6768 pci - ok
17:48:24.0601 6768 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys
17:48:24.0616 6768 pciide - ok
17:48:24.0641 6768 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
17:48:24.0656 6768 pcmcia - ok17:48:24.0698 6768 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
17:48:24.0828 6768 PEAUTH - ok
17:48:24.0916 6768 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
17:48:24.0956 6768 PptpMiniport - ok
17:48:24.0982 6768 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
17:48:25.0059 6768 Processor - ok
17:48:25.0122 6768 Ps2 (390c204ced3785609ab24e9c52054a84) C:\Windows\system32\DRIVERS\PS2.sys
17:48:25.0166 6768 Ps2 - ok
17:48:25.0229 6768 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
17:48:25.0265 6768 PSched - ok
17:48:25.0312 6768 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\Windows\system32\Drivers\PxHelp20.sys
17:48:25.0323 6768 PxHelp20 - ok
17:48:25.0357 6768 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
17:48:25.0390 6768 ql2300 - ok
17:48:25.0409 6768 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
17:48:25.0423 6768 ql40xx - ok
17:48:25.0483 6768 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
17:48:25.0524 6768 QWAVEdrv - ok
17:48:25.0555 6768 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
17:48:25.0608 6768 RasAcd - ok
17:48:25.0662 6768 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
17:48:25.0694 6768 Rasl2tp - ok
17:48:25.0780 6768 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
17:48:25.0805 6768 RasPppoe - ok
17:48:25.0840 6768 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
17:48:25.0887 6768 RasSstp - ok
17:48:25.0945 6768 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
17:48:25.0973 6768 rdbss - ok
17:48:25.0990 6768 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
17:48:26.0043 6768 RDPCDD - ok
17:48:26.0064 6768 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
17:48:26.0128 6768 rdpdr - ok
17:48:26.0137 6768 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
17:48:26.0192 6768 RDPENCDD - ok
17:48:26.0219 6768 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
17:48:26.0258 6768 RDPWD - ok
17:48:26.0303 6768 RFCOMM (6482707f9f4da0ecbab43b2e0398a101) C:\Windows\system32\DRIVERS\rfcomm.sys
17:48:26.0352 6768 RFCOMM - ok
17:48:26.0377 6768 RMCAST (eec7ee5675294b03e88aa868540007c1) C:\Windows\system32\DRIVERS\RMCAST.sys
17:48:26.0417 6768 RMCAST - ok
17:48:26.0472 6768 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
17:48:26.0516 6768 rspndr - ok
17:48:26.0566 6768 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
17:48:26.0576 6768 SASDIFSV - ok
17:48:26.0619 6768 SASENUM (7ce61c25c159f50f9eaf6d77fc83fa35) C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
17:48:26.0628 6768 SASENUM - ok
17:48:26.0758 6768 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
17:48:26.0769 6768 SASKUTIL - ok
17:48:26.0995 6768 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
17:48:27.0008 6768 sbp2port - ok
17:48:27.0057 6768 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
17:48:27.0119 6768 secdrv - ok
17:48:27.0165 6768 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
17:48:27.0235 6768 Serenum - ok
17:48:27.0322 6768 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
17:48:27.0408 6768 Serial - ok
17:48:27.0450 6768 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
17:48:27.0492 6768 sermouse - ok
17:48:27.0517 6768 sffdisk (103b79418da647736ee95645f305f68a) C:\Windows\system32\drivers\sffdisk.sys
17:48:27.0579 6768 sffdisk - ok
17:48:27.0604 6768 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
17:48:27.0670 6768 sffp_mmc - ok
17:48:27.0709 6768 sffp_sd (9cfa05fcfcb7124e69cfc812b72f9614) C:\Windows\system32\drivers\sffp_sd.sys
17:48:27.0768 6768 sffp_sd - ok
17:48:27.0787 6768 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
17:48:27.0841 6768 sfloppy - ok
17:48:27.0911 6768 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys
17:48:27.0923 6768 sisagp - ok
17:48:27.0954 6768 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
17:48:27.0967 6768 SiSRaid2 - ok
17:48:27.0995 6768 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
17:48:28.0008 6768 SiSRaid4 - ok
17:48:28.0076 6768 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
17:48:28.0101 6768 Smb - ok
17:48:28.0153 6768 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
17:48:28.0166 6768 spldr - ok
17:48:28.0238 6768 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
17:48:28.0297 6768 srv - ok
17:48:28.0391 6768 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
17:48:28.0450 6768 srv2 - ok
17:48:28.0510 6768 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
17:48:28.0562 6768 srvnet - ok
17:48:28.0631 6768 ssmdrv (3ad0362cf68de3ac500e981700242cca) C:\Windows\system32\DRIVERS\ssmdrv.sys
17:48:28.0641 6768 ssmdrv - ok
17:48:28.0700 6768 ss_bbus (3f0164fbc0bd1adbd02df9759181451a) C:\Windows\system32\DRIVERS\ss_bbus.sys
17:48:28.0712 6768 ss_bbus - ok
17:48:28.0770 6768 ss_bmdfl (b89d62206034e5fe573c80a24dd55675) C:\Windows\system32\DRIVERS\ss_bmdfl.sys
17:48:28.0780 6768 ss_bmdfl - ok
17:48:28.0817 6768 ss_bmdm (1ed0fcea586fe2a416ee15196e5631dd) C:\Windows\system32\DRIVERS\ss_bmdm.sys
17:48:28.0828 6768 ss_bmdm - ok
17:48:28.0902 6768 ss_bserd (994d2e5378cc337ec7dd73c1e04fcaa4) C:\Windows\system32\DRIVERS\ss_bserd.sys
17:48:28.0913 6768 ss_bserd - ok
17:48:28.0979 6768 StillCam (ef70b3d22b4bffda6ea851ecb063efaa) C:\Windows\system32\DRIVERS\serscan.sys
17:48:29.0009 6768 StillCam - ok
17:48:29.0037 6768 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
17:48:29.0050 6768 swenum - ok
17:48:29.0089 6768 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
17:48:29.0102 6768 Symc8xx - ok
17:48:29.0163 6768 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
17:48:29.0175 6768 Sym_hi - ok
17:48:29.0204 6768 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
17:48:29.0216 6768 Sym_u3 - ok
17:48:29.0373 6768 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys
17:48:29.0408 6768 Tcpip - ok
17:48:29.0567 6768 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys
17:48:29.0602 6768 Tcpip6 - ok
17:48:29.0731 6768 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
17:48:29.0788 6768 tcpipreg - ok
17:48:29.0828 6768 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
17:48:29.0873 6768 TDPIPE - ok
17:48:29.0896 6768 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
17:48:29.0960 6768 TDTCP - ok
17:48:30.0015 6768 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
17:48:30.0054 6768 tdx - ok
17:48:30.0098 6768 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
17:48:30.0114 6768 TermDD - ok
17:48:30.0155 6768 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
17:48:30.0224 6768 tssecsrv - ok
17:48:30.0269 6768 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
17:48:30.0308 6768 tunmp - ok
17:48:30.0359 6768 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
17:48:30.0392 6768 tunnel - ok
17:48:30.0431 6768 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys
17:48:30.0444 6768 uagp35 - ok
17:48:30.0466 6768 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
17:48:30.0493 6768 udfs - ok
17:48:30.0526 6768 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
17:48:30.0540 6768 uliagpkx - ok
17:48:30.0566 6768 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
17:48:30.0582 6768 uliahci - ok
17:48:30.0603 6768 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
17:48:30.0617 6768 UlSata - ok
17:48:30.0634 6768 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
17:48:30.0648 6768 ulsata2 - ok
17:48:30.0701 6768 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
17:48:30.0743 6768 umbus - ok
17:48:30.0783 6768 usbaudio (f6bf998ae33e3fb6c7d27f0560f1173f) C:\Windows\system32\drivers\usbaudio.sys
17:48:30.0849 6768 usbaudio - ok
17:48:30.0895 6768 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
17:48:30.0932 6768 usbccgp - ok
17:48:30.0960 6768 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
17:48:31.0013 6768 usbcir - ok
17:48:31.0079 6768 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
17:48:31.0105 6768 usbehci - ok
17:48:31.0158 6768 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
17:48:31.0185 6768 usbhub - ok
17:48:31.0208 6768 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
17:48:31.0277 6768 usbohci - ok
17:48:31.0293 6768 usbprint (b51e52acf758be00ef3a58ea452fe360) C:\Windows\system32\drivers\usbprint.sys
17:48:31.0347 6768 usbprint - ok
17:48:31.0412 6768 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
17:48:31.0457 6768 usbscan - ok
17:48:31.0500 6768 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:48:31.0525 6768 USBSTOR - ok
17:48:31.0575 6768 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
17:48:31.0615 6768 usbuhci - ok
17:48:31.0675 6768 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
17:48:31.0708 6768 usbvideo - ok
17:48:31.0721 6768 VComm - ok
17:48:31.0732 6768 VcommMgr - ok
17:48:31.0762 6768 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
17:48:31.0816 6768 vga - ok
17:48:31.0840 6768 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
17:48:31.0872 6768 VgaSave - ok
17:48:31.0898 6768 VHidMinidrv - ok
17:48:31.0925 6768 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
17:48:31.0938 6768 viaagp - ok
17:48:31.0964 6768 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
17:48:32.0035 6768 ViaC7 - ok
17:48:32.0060 6768 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys
17:48:32.0072 6768 viaide - ok
17:48:32.0122 6768 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
17:48:32.0135 6768 volmgr - ok
17:48:32.0200 6768 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
17:48:32.0219 6768 volmgrx - ok
17:48:32.0277 6768 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
17:48:32.0295 6768 volsnap - ok
17:48:32.0319 6768 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
17:48:32.0333 6768 vsmraid - ok
17:48:32.0363 6768 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
17:48:32.0424 6768 WacomPen - ok
17:48:32.0477 6768 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
17:48:32.0510 6768 Wanarp - ok
17:48:32.0529 6768 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
17:48:32.0555 6768 Wanarpv6 - ok
17:48:32.0590 6768 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
17:48:32.0602 6768 Wd - ok
17:48:32.0656 6768 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
17:48:32.0680 6768 Wdf01000 - ok
17:48:32.0777 6768 WINUSB (676f4b665bdd8053eaa53ac1695b8074) C:\Windows\system32\DRIVERS\WinUSB.SYS
17:48:32.0801 6768 WINUSB - ok
17:48:32.0840 6768 WmiAcpi (701a9f884a294327e9141d73746ee279) C:\Windows\system32\drivers\wmiacpi.sys
17:48:32.0894 6768 WmiAcpi - ok
17:48:32.0970 6768 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
17:48:33.0000 6768 WpdUsb - ok
17:48:33.0091 6768 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
17:48:33.0133 6768 ws2ifsl - ok
17:48:33.0198 6768 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
17:48:33.0250 6768 WUDFRd - ok
17:48:33.0260 6768 zlportio - ok
17:48:33.0306 6768 MBR (0x1B8) (8913823ff508ccf109db74b636c301da) \Device\Harddisk0\DR0
17:48:33.0387 6768 \Device\Harddisk0\DR0 - ok
17:48:33.0391 6768 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk1\DR1
17:48:33.0548 6768 \Device\Harddisk1\DR1 - ok
17:48:33.0562 6768 MBR (0x1B8) (e5fa06aca0d60ba9c870d0ef3d9898c9) \Device\Harddisk3\DR3
17:48:33.0739 6768 \Device\Harddisk3\DR3 - ok
17:48:33.0743 6768 Boot (0x1200) (df1d411b681b9d5744d24f9c13fefcf1) \Device\Harddisk0\DR0\Partition0
17:48:33.0744 6768 \Device\Harddisk0\DR0\Partition0 - ok
17:48:33.0747 6768 Boot (0x1200) (95889cfbea3bac53ef1ae4910cb187f4) \Device\Harddisk0\DR0\Partition1
17:48:33.0748 6768 \Device\Harddisk0\DR0\Partition1 - ok
17:48:33.0752 6768 Boot (0x1200) (3b61d7e680d24fb83850af048db430ca) \Device\Harddisk1\DR1\Partition0
17:48:33.0754 6768 \Device\Harddisk1\DR1\Partition0 - ok
17:48:33.0761 6768 Boot (0x1200) (2a92874a109ced1a8c3492d7c9766faf) \Device\Harddisk3\DR3\Partition0
17:48:33.0762 6768 \Device\Harddisk3\DR3\Partition0 - ok
17:48:33.0763 6768 ============================================================
17:48:33.0763 6768 Scan finished
17:48:33.0763 6768 ============================================================
17:48:33.0772 6844 Detected object count: 0
17:48:33.0772 6844 Actual detected object count: 0
17:50:26.0001 3228 Deinitialize success

[paracelse62]

c'est carrément loufoque il ne le fait plus au démarrage mais il le fait après toujours le même tr/vundo.BY.550 mais dans des Dll différentes! je vous envoies le rapport otl de suite
Remarque : Lors de la correction otl a planté je vous joins en premier le rapport reçu à l'ouverture de la session suivante.


Files\Folders moved on Reboot...
File move failed. C:\Windows\S4E99D174.tmp scheduled to be moved on reboot.

Registry entries deleted on Reboot...

nom du fichier 11242011_175821

[paracelse62]

rapport OTL :
OTL logfile created on: 24/11/2011 18:32:13 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Benoit BERQUIN\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,00 Gb Total Physical Memory | 1,50 Gb Available Physical Memory | 50,00% Memory free
6,23 Gb Paging File | 4,53 Gb Available in Paging File | 72,75% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 457,67 Gb Total Space | 30,53 Gb Free Space | 6,67% Space Free | Partition Type: NTFS
Drive D: | 8,09 Gb Total Space | 1,01 Gb Free Space | 12,52% Space Free | Partition Type: NTFS
Drive G: | 243,70 Mb Total Space | 213,27 Mb Free Space | 87,51% Space Free | Partition Type: FAT
Drive M: | 465,75 Gb Total Space | 67,80 Gb Free Space | 14,56% Space Free | Partition Type: NTFS

Computer Name: SUPERBOSS | User Name: Benoit BERQUIN | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/11/24 17:33:14 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
PRC - [2011/11/20 15:22:00 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Benoit BERQUIN\Desktop\OTL.exe
PRC - [2011/11/11 23:05:14 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011/09/29 08:19:26 | 000,020,880 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2011/08/31 17:00:48 | 000,449,608 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2011/08/31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011/05/25 21:07:14 | 024,176,560 | ---- | M] (Dropbox, Inc.) -- C:\Users\Benoit BERQUIN\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2011/02/18 15:30:32 | 007,233,952 | ---- | M] () -- C:\Program Files\Samsung\AllShare\AllShareDMS\WiselinkPro.exe
PRC - [2011/02/18 15:30:26 | 000,428,088 | ---- | M] () -- C:\Program Files\Samsung\AllShare\AllShareDMS\http_ss_win_pro.exe
PRC - [2010/07/04 20:51:26 | 000,017,408 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe
PRC - [2010/06/21 13:34:10 | 000,306,480 | ---- | M] (eInstruction Corporation) -- C:\Program Files\eInstruction\Device Manager\Launch.exe
PRC - [2009/08/25 14:13:07 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2009/07/26 20:17:17 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/03/02 12:08:11 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2008/10/10 19:24:46 | 000,726,336 | ---- | M] (SFR) -- C:\Program Files\SFR\Media Center\MediaCenter.exe
PRC - [2008/09/08 20:18:36 | 002,641,920 | ---- | M] (pdfforge http://www.pdfforge.org/) -- C:\Program Files\PDFCreator\PDFCreator.exe
PRC - [2008/01/15 10:26:18 | 004,874,240 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007/10/12 08:34:56 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe
PRC - [2007/09/05 07:59:02 | 000,024,635 | ---- | M] (Apache Software Foundation) -- C:\Program Files\SFR\Media Center\httpd\httpd.exe
PRC - [2006/09/03 09:32:28 | 000,208,896 | ---- | M] () -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe


========== Modules (No Company Name) ==========

MOD - [2011/11/24 18:29:05 | 000,020,480 | ---- | M] () -- C:\Users\Benoit BERQUIN\AppData\Local\Temp\abt18436\BTCheckMS.dll
MOD - [2011/11/24 18:28:24 | 000,115,137 | ---- | M] () -- C:\Users\Benoit BERQUIN\AppData\Local\Temp\ae201572-4813-4010-9ed2-ee29ddec066a\CliSecureRT.dll
MOD - [2011/11/11 23:05:13 | 001,989,592 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011/10/27 11:58:16 | 001,218,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\ab1a41d184118635218d38da3f4bcae8\System.Management.ni.dll
MOD - [2011/10/27 11:56:08 | 000,762,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\dabeb21f09f88576c2cce838280c7f44\System.Runtime.Remoting.ni.dll
MOD - [2011/10/27 11:55:55 | 001,782,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\2b0b477db8f5a19d6365b93106b26651\System.Xaml.ni.dll
MOD - [2011/10/27 11:39:54 | 018,019,328 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\401a9dbeaad6b6ca70c90ae4fbd2e0b8\PresentationFramework.ni.dll
MOD - [2011/10/27 11:39:42 | 013,138,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\fa45e7d581b80c34cb0d5518491c7387\System.Windows.Forms.ni.dll
MOD - [2011/10/27 11:39:29 | 011,470,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b540398c49e7c32ab58666de7f09f645\PresentationCore.ni.dll
MOD - [2011/10/27 11:39:18 | 001,652,736 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\fd0f015bc4324d8b9716ae38083a4e4d\System.Drawing.ni.dll
MOD - [2011/10/27 11:39:16 | 007,069,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\90223e809b1ff291a7f65509702e2fa1\System.Core.ni.dll
MOD - [2011/10/27 11:39:13 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\a48e483c6b13da563725d72ec518a0bb\System.Xml.ni.dll
MOD - [2011/10/27 11:39:13 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\af091a68303117ca2166aa13bcbfbbd0\PresentationFramework.Aero.ni.dll
MOD - [2011/10/27 11:39:08 | 003,881,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\c0afb5fbfbc7a8d670b430672c5fd578\WindowsBase.ni.dll
MOD - [2011/10/27 11:39:01 | 009,086,976 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\69adb8f9940fa1330f6f1b706e3dc31e\System.ni.dll
MOD - [2011/10/27 11:38:48 | 014,409,216 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\2b1af7649e57195b4b85bbf4c5cb7c90\mscorlib.ni.dll
MOD - [2011/09/29 08:19:26 | 000,020,880 | ---- | M] () -- C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MOD - [2010/07/04 22:32:38 | 000,010,752 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll
MOD - [2010/07/04 22:32:36 | 000,004,608 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerHook.dll
MOD - [2010/07/04 20:51:26 | 000,017,408 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe
MOD - [2010/06/21 13:34:10 | 000,095,744 | ---- | M] () -- C:\Program Files\eInstruction\Device Manager\NativeSupport.dll
MOD - [2010/06/21 13:33:06 | 000,057,344 | ---- | M] () -- C:\Program Files\eInstruction\Device Manager\jspWin.dll
MOD - [2007/11/28 17:59:42 | 003,702,784 | ---- | M] () -- C:\Program Files\PDFCreator\GS8.61\gs8.61\Bin\gsdll32.dll
MOD - [2007/09/20 18:34:58 | 000,129,024 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (uvnc_service)
SRV - [2011/11/24 17:33:14 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2011/08/31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011/02/18 15:30:32 | 007,233,952 | ---- | M] () [Auto | Running] -- C:\Program Files\Samsung\AllShare\AllShareDMS\WiselinkPro.exe -- (SamsungAllShare)
SRV - [2011/02/18 15:30:22 | 000,022,464 | ---- | M] (Samsung Electronics) [Auto | Stopped] -- C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe -- (SimpleSlideShowServer)
SRV - [2010/06/24 14:00:14 | 000,233,472 | ---- | M] (Teruten) [Auto | Stopped] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2010/01/15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/08/25 14:13:07 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009/07/26 20:17:17 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2008/01/19 08:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/10/12 08:34:56 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccessU)
SRV - [2007/05/31 15:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007/05/31 15:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2006/09/11 15:02:44 | 000,544,256 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe -- (Remote UI Service) Intel(R)
SRV - [2006/09/11 15:01:04 | 000,167,936 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe -- (MCLServiceATL) Intel(R)
SRV - [2006/09/11 14:56:32 | 000,075,264 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe -- (ISSM) Intel(R)
SRV - [2006/09/11 14:56:20 | 000,188,416 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\CCU\AlertService.exe -- (AlertService) Intel(R)
SRV - [2006/09/03 09:32:28 | 000,208,896 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe -- (DQLWinService)
SRV - [2006/08/31 22:47:56 | 000,026,624 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe -- (M1 Server) Intel(R) Viiv(TM)
SRV - [2006/05/10 08:13:52 | 000,029,696 | R--- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe -- (IntelDHSvcConf)


========== Driver Services (SafeList) ==========

DRV - [2011/08/31 17:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011/08/09 21:44:11 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2011/08/09 21:44:10 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2011/04/27 13:19:28 | 000,020,032 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2010/04/27 03:25:16 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2010/04/27 03:25:16 | 000,100,224 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bserd.sys -- (ss_bserd)
DRV - [2010/04/27 03:25:16 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2010/04/27 03:25:16 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2010/02/25 13:51:17 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2009/12/11 21:37:43 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/07/26 20:17:18 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/06/26 21:01:00 | 009,777,376 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009/04/11 05:45:24 | 000,113,664 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rmcast.sys -- (RMCAST)
DRV - [2009/04/11 05:42:52 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB)
DRV - [2009/03/30 09:32:47 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2009/02/13 11:34:33 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/02/08 12:12:50 | 000,034,064 | ---- | M] (CACE Technologies) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (npf)
DRV - [2009/01/22 16:06:34 | 000,030,816 | ---- | M] (Intel Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\iqvw32.sys -- (NAL)
DRV - [2008/12/07 12:44:54 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btnetBus.sys -- (btnetBUs)
DRV - [2008/05/28 11:33:14 | 000,083,288 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2008/03/07 12:39:50 | 000,045,848 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2008/02/26 08:17:30 | 000,493,568 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netr73.sys -- (netr73)
DRV - [2008/01/15 00:56:30 | 000,218,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel(R)
DRV - [2007/11/30 16:23:02 | 000,097,216 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2005/12/12 18:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 00 DF A9 3B 96 A4 CC 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.laposte.net/"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.652: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.652: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@yahoo.com/BrowserPlus,version=2.6.0: C:\Users\Benoit BERQUIN\AppData\Local\Yahoo!\BrowserPlus\2.6.0\Plugins\npybrowserplus_2.6.0.dll (Yahoo! Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/06/19 20:13:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/11/11 23:05:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/09/14 15:25:43 | 000,000,000 | ---D | M]

[2008/08/27 21:18:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benoit BERQUIN\AppData\Roaming\mozilla\Extensions
[2011/11/24 17:58:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Benoit BERQUIN\AppData\Roaming\mozilla\Firefox\Profiles\1r61jjw5.default\extensions
[2011/03/07 17:57:40 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Benoit BERQUIN\AppData\Roaming\mozilla\Firefox\Profiles\1r61jjw5.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/11/10 21:49:18 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Benoit BERQUIN\AppData\Roaming\mozilla\Firefox\Profiles\1r61jjw5.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/12/12 13:39:08 | 000,000,000 | ---D | M] (British English Dictionary) -- C:\Users\Benoit BERQUIN\AppData\Roaming\mozilla\Firefox\Profiles\1r61jjw5.default\extensions\en-GB@dictionaries.addons.mozilla.org
[2010/08/30 20:09:50 | 000,001,819 | ---- | M] () -- C:\Users\Benoit BERQUIN\AppData\Roaming\Mozilla\Firefox\Profiles\1r61jjw5.default\searchplugins\bing.xml
[2011/11/24 17:58:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/10/27 23:09:03 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
() (No name found) -- C:\USERS\BENOIT BERQUIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1R61JJW5.DEFAULT\EXTENSIONS\{398E77B8-2304-11DC-8314-0800200C9A66}.XPI
() (No name found) -- C:\USERS\BENOIT BERQUIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1R61JJW5.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\USERS\BENOIT BERQUIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1R61JJW5.DEFAULT\EXTENSIONS\{D40F5E7B-D2CF-4856-B441-CC613EEFFBE3}.XPI
[2011/11/11 23:05:14 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/10/03 04:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/01/01 09:00:00 | 000,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2010/01/01 09:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2010/01/01 09:00:00 | 000,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2010/01/01 09:00:00 | 000,001,154 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2010/01/01 09:00:00 | 000,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2010/01/01 09:00:00 | 000,000,956 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml

========== Chrome ==========

CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\11.0.696.65\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U24 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\11.0.696.65\pdf.dll
CHR - plugin: Chrome NaCl (Disabled) = C:\Program Files\Google\Chrome\Application\11.0.696.65\ppGoogleNaClPluginChrome.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Program Files\Google\Chrome\Application\11.0.696.65\gears.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.53\npGoogleUpdate3.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: BrowserPlus (from Yahoo!) v2.6.0 (Enabled) = C:\Users\Benoit BERQUIN\AppData\Local\Yahoo!\BrowserPlus\2.6.0\Plugins\npybrowserplus_2.6.0.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Benoit BERQUIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.3_0\

O1 HOSTS File: ([2006/09/18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Aide pour le lien d'Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O3 - HKLM\..\Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe ()
O4 - HKCU..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKCU..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKCU..\Run: [Neuf Media Center] C:\Program Files\SFR\Media Center\MediaCenter.exe (SFR)
O4 - HKLM..\RunOnce: [Launcher] C:\Windows\SMINST\Launcher.exe (soft thinks)
O4 - HKCU..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/5.0_(Windows;_U;_Windows_NT_6.0;_fr;_rv:1.9.1.7)_Gecko/20091221_Firefox/3.5.7_(.NET_CLR_3.5.30729)_FBSMTWB" -"http://pbskids.org/caillou_french/games/dresscaillou/index.html" File not found
O4 - Startup: C:\Users\Benoit BERQUIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Benoit BERQUIN\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Benoit BERQUIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O8 - Extra context menu item: Télécharger avec Mipony - C:\Program Files\MiPony\Browser\IEContext.htm ()
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll ()
O9 - Extra 'Tools' menuitem : Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .csm - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .csml - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .cub - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .cube - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .dx - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .emb - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .embl - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .gau - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .jdx - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .mol - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .mop - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .pdb - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .rxn - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .scr - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .skc - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .spt - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .tgf - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O12 - Plugin for: .xyz - C:\Program Files\Internet Explorer\PLUGINS\npchime.dll (MDL Information Systems, Inc (Elsevier MDL))
O13 - gopher Prefix: missing
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://a1540.g.akamai.net/7/1540/52/200 ... plugin.cab (QuickTime Object)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shoc ... tor/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CFA543A3-B428-4FEB-85BC-B39FF003487B}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F269576C-6660-4226-B035-4C4BC807206D}: DhcpNameServer = 192.168.1.1
O20 - AppInit_DLLs: (sysprf.dll) -C:\Windows\System32\sysprf.dll (Malwarebytes Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: C:\Users\Benoit BERQUIN\Pictures\2010_07_28\IMG_4918.JPG
O24 - Desktop BackupWallPaper: C:\Users\Benoit BERQUIN\Pictures\2010_07_28\IMG_4918.JPG
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/06/27 17:50:58 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{3f758e10-aa97-11df-854d-001bfcc41d10}\Shell\Shell00\Command - "" = F:\Start.exe
O33 - MountPoints2\{ec4ba948-6127-11dc-8955-001bfcc41d10}\Shell\AutoRun\command - "" = L:\Delivery\DeliveryReader.exe
O33 - MountPoints2\{ec4ba94b-6127-11dc-8955-001bfcc41d10}\Shell - "" = AutoRun
O33 - MountPoints2\{ec4ba94b-6127-11dc-8955-001bfcc41d10}\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O33 - MountPoints2\K\Shell - "" = AutoRun
O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/11/24 17:58:21 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/11/24 17:18:21 | 001,566,512 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Benoit BERQUIN\Desktop\TDSSKiller.exe
[2011/11/24 17:00:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2011/11/24 16:52:29 | 000,459,264 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\sysprf.dll
[2011/11/20 15:28:45 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011/11/20 15:26:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2011/11/20 15:26:56 | 000,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2011/11/20 15:21:58 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Benoit BERQUIN\Desktop\OTL.exe
[2011/11/20 14:50:07 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011/11/20 14:50:07 | 000,000,000 | ---D | C] -- C:\rsit
[2011/11/19 17:33:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Multi Virus Cleaner 2011
[2011/11/19 17:19:07 | 000,000,000 | ---D | C] -- C:\Users\Benoit BERQUIN\AppData\Roaming\PC Cleaners
[2011/11/19 17:19:01 | 005,359,888 | ---- | C] (PC Cleaners) -- C:\Windows\uninst.exe
[2011/11/19 17:18:57 | 000,000,000 | ---D | C] -- C:\ProgramData\PC1Data
[2011/11/19 15:54:35 | 000,000,000 | ---D | C] -- C:\VundoFix Backups
[2011/11/19 11:57:01 | 000,000,000 | ---D | C] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Malwarebytes
[2011/11/19 11:56:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/11/19 11:56:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/11/19 11:56:51 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011/11/19 11:56:51 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/11/13 15:12:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\FEB5AE06E59209DD765AAADF8E7B6660
[2011/10/27 11:41:58 | 000,000,000 | ---D | C] -- C:\Users\Benoit BERQUIN\{a352e744-845d-4576-946d-ab47b1323ecf}
[2007/12/27 11:09:06 | 000,250,544 | ---- | C] (KeyWorks Software) -- C:\Program Files\Common Files\keyhelp.ocx
[39 C:\Users\Benoit BERQUIN\AppData\Roaming\*.tmp files -> C:\Users\Benoit BERQUIN\AppData\Roaming\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/11/24 18:30:57 | 000,032,726 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011/11/24 18:30:55 | 000,032,726 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011/11/24 18:29:13 | 000,001,139 | ---- | M] () -- C:\Users\Benoit BERQUIN\.eInstructionDeviceManagerPreferences.xml
[2011/11/24 18:29:07 | 000,000,049 | ---- | M] () -- C:\Users\Benoit BERQUIN\DeviceManagerState.properties
[2011/11/24 18:25:18 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/11/24 18:24:47 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/11/24 18:24:47 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/11/24 18:24:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/11/24 18:23:19 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2011/11/24 17:53:00 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/11/24 17:21:31 | 000,000,864 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/11/24 17:18:21 | 001,566,512 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Benoit BERQUIN\Desktop\TDSSKiller.exe
[2011/11/24 17:00:36 | 000,002,035 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2011/11/24 16:52:29 | 000,459,264 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\sysprf.dll
[2011/11/21 21:57:00 | 000,000,512 | ---- | M] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2011/11/21 20:10:58 | 000,098,816 | ---- | M] () -- C:\Users\Benoit BERQUIN\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/11/21 19:09:56 | 000,459,264 | ---- | M] () -- C:\Windows\System32\applib10.dll
[2011/11/20 15:44:04 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2011/11/20 15:27:00 | 000,000,875 | ---- | M] () -- C:\Users\Benoit BERQUIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2011/11/20 15:26:57 | 000,000,695 | ---- | M] () -- C:\Users\Benoit BERQUIN\Desktop\NTREGOPT.lnk
[2011/11/20 15:26:57 | 000,000,676 | ---- | M] () -- C:\Users\Benoit BERQUIN\Desktop\ERUNT.lnk
[2011/11/20 15:22:00 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Benoit BERQUIN\Desktop\OTL.exe
[2011/11/19 16:44:09 | 005,359,888 | ---- | M] (PC Cleaners) -- C:\Windows\uninst.exe
[2011/11/19 11:56:56 | 000,000,868 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/11/19 11:38:32 | 000,000,396 | ---- | M] () -- C:\Users\Benoit BERQUIN\Documents\cc_20111119_113826.reg
[2011/11/19 11:38:04 | 000,109,538 | ---- | M] () -- C:\Users\Benoit BERQUIN\Documents\cc_20111119_113743.reg
[2011/11/11 14:44:27 | 000,001,466 | ---- | M] () -- C:\Users\Benoit BERQUIN\.recently-used.xbel
[2011/11/05 11:12:59 | 000,305,218 | ---- | M] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112582.jpg
[2011/11/05 11:12:58 | 000,333,447 | ---- | M] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112581.jpg
[2011/11/05 11:12:55 | 000,331,024 | ---- | M] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112551.jpg
[2011/11/05 11:12:55 | 000,321,584 | ---- | M] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112552.jpg
[2011/11/05 11:12:55 | 000,303,359 | ---- | M] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112553.jpg
[2011/11/05 11:12:46 | 000,331,024 | ---- | M] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112461.jpg
[2011/11/05 11:12:46 | 000,321,584 | ---- | M] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112462.jpg
[2011/11/05 11:12:46 | 000,303,359 | ---- | M] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112463.jpg
[2011/11/02 09:24:02 | 000,725,536 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2011/11/02 09:24:02 | 000,637,106 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/11/02 09:24:02 | 000,147,284 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2011/11/02 09:24:02 | 000,120,610 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/10/26 13:42:37 | 000,000,361 | ---- | M] () -- C:\Windows\Flash.ini
[39 C:\Users\Benoit BERQUIN\AppData\Roaming\*.tmp files -> C:\Users\Benoit BERQUIN\AppData\Roaming\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/11/24 17:21:31 | 000,000,864 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/11/24 17:00:36 | 000,002,035 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2011/11/21 19:09:56 | 000,459,264 | ---- | C] () -- C:\Windows\System32\applib10.dll
[2011/11/20 15:44:04 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2011/11/20 15:27:00 | 000,000,875 | ---- | C] () -- C:\Users\Benoit BERQUIN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2011/11/20 15:26:57 | 000,000,695 | ---- | C] () -- C:\Users\Benoit BERQUIN\Desktop\NTREGOPT.lnk
[2011/11/20 15:26:57 | 000,000,676 | ---- | C] () -- C:\Users\Benoit BERQUIN\Desktop\ERUNT.lnk
[2011/11/19 11:56:56 | 000,000,868 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/11/19 11:38:29 | 000,000,396 | ---- | C] () -- C:\Users\Benoit BERQUIN\Documents\cc_20111119_113826.reg
[2011/11/19 11:37:49 | 000,109,538 | ---- | C] () -- C:\Users\Benoit BERQUIN\Documents\cc_20111119_113743.reg
[2011/11/11 14:44:27 | 000,001,466 | ---- | C] () -- C:\Users\Benoit BERQUIN\.recently-used.xbel
[2011/11/05 11:12:59 | 000,305,218 | ---- | C] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112582.jpg
[2011/11/05 11:12:58 | 000,333,447 | ---- | C] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112581.jpg
[2011/11/05 11:12:55 | 000,331,024 | ---- | C] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112551.jpg
[2011/11/05 11:12:55 | 000,321,584 | ---- | C] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112552.jpg
[2011/11/05 11:12:55 | 000,303,359 | ---- | C] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112553.jpg
[2011/11/05 11:12:46 | 000,331,024 | ---- | C] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112461.jpg
[2011/11/05 11:12:46 | 000,321,584 | ---- | C] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112462.jpg
[2011/11/05 11:12:46 | 000,303,359 | ---- | C] () -- C:\Users\Benoit BERQUIN\Documents\Capt-1112463.jpg
[2011/05/21 12:29:10 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2011/04/27 13:19:32 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011/04/27 13:19:30 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2011/04/27 13:19:30 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2011/04/27 13:19:30 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2011/04/27 13:19:30 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2010/10/06 13:56:40 | 000,344,160 | ---- | C] () -- C:\Windows\System32\RASWIN.EXE
[2010/10/05 09:38:58 | 000,000,548 | ---- | C] () -- C:\Program Files\Common Files\eInstruction.ini
[2010/09/04 16:44:09 | 000,006,600 | ---- | C] () -- C:\Windows\hpomdl18.dat
[2010/08/23 11:28:06 | 000,000,291 | ---- | C] () -- C:\Windows\DeVisu.ini
[2010/02/21 22:50:01 | 000,000,127 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010/01/21 13:22:44 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2010/01/17 17:53:01 | 000,000,361 | ---- | C] () -- C:\Windows\Flash.ini
[2009/12/24 09:13:09 | 000,032,726 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009/12/23 09:03:58 | 000,032,726 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009/10/06 08:16:00 | 000,819,200 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2009/09/17 13:19:56 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009/09/17 13:19:55 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/09/16 18:58:36 | 000,171,780 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2009/08/31 13:45:43 | 000,000,102 | ---- | C] () -- C:\Users\Benoit BERQUIN\AppData\Local\fusioncache.dat
[2009/05/25 19:22:27 | 000,169,648 | ---- | C] () -- C:\Windows\hpqins00.dat
[2009/02/15 13:35:07 | 000,000,290 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009/02/08 12:12:50 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
[2009/01/30 19:56:31 | 000,000,048 | ---- | C] () -- C:\Windows\wininit.ini
[2009/01/18 18:58:47 | 000,000,043 | ---- | C] () -- C:\Windows\System32\calibration.dat
[2009/01/15 18:57:22 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2009/01/01 13:31:00 | 000,000,000 | ---- | C] () -- C:\Windows\plclient.INI
[2008/12/29 12:37:36 | 000,004,761 | ---- | C] () -- C:\Windows\cdplayer.ini
[2008/12/07 12:44:54 | 000,030,088 | ---- | C] () -- C:\Windows\System32\drivers\btnetBus.sys
[2008/11/29 20:04:08 | 000,004,096 | -H-- | C] () -- C:\Users\Benoit BERQUIN\AppData\Local\keyfile3.drm
[2008/09/18 20:01:25 | 000,000,240 | ---- | C] () -- C:\Users\Benoit BERQUIN\AppData\Roaming\Solve Elec 2.1 Prefs
[2008/09/09 07:21:13 | 000,145,689 | ---- | C] () -- C:\Windows\hpoins18.dat.temp
[2008/09/09 07:21:13 | 000,006,600 | ---- | C] () -- C:\Windows\hpomdl18.dat.temp
[2008/08/19 07:30:45 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/07/20 18:26:34 | 000,618,496 | ---- | C] () -- C:\Windows\System32\stlpmt45.dll
[2008/07/20 18:26:33 | 000,204,800 | ---- | C] () -- C:\Windows\System32\LPNG.DLL
[2008/06/01 08:27:08 | 000,159,991 | ---- | C] () -- C:\Windows\Sqirlz Morph Uninstaller.exe
[2008/05/18 19:52:56 | 000,001,024 | ---- | C] () -- C:\Users\Benoit BERQUIN\AppData\Roaming\WavCodec.wff
[2008/04/14 08:55:46 | 000,105,220 | ---- | C] () -- C:\Windows\hpqins16.dat
[2008/02/05 12:37:59 | 000,028,672 | ---- | C] () -- C:\Windows\System32\drivers\spc1300c.sys
[2007/12/28 11:39:28 | 000,000,000 | ---- | C] () -- C:\Windows\OpPrintServer.INI
[2007/12/02 16:24:37 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib
[2007/12/02 16:03:41 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2007/08/30 18:15:29 | 000,000,000 | ---- | C] () -- C:\Windows\Videodeluxe.INI
[2007/08/30 18:00:54 | 000,006,423 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2007/08/30 07:45:34 | 000,003,654 | ---- | C] () -- C:\Windows\System32\drivers\Sonyhcp.dll
[2007/08/27 08:56:53 | 000,098,816 | ---- | C] () -- C:\Users\Benoit BERQUIN\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/08/25 20:54:35 | 000,000,305 | ---- | C] () -- C:\ProgramData\addr_file.html
[2007/08/25 20:01:22 | 000,145,689 | ---- | C] () -- C:\Windows\hpoins18.dat
[2007/06/28 03:12:59 | 000,725,536 | ---- | C] () -- C:\Windows\System32\perfh00C.dat
[2007/06/28 03:12:59 | 000,340,236 | ---- | C] () -- C:\Windows\System32\perfi00C.dat
[2007/06/28 03:12:59 | 000,147,284 | ---- | C] () -- C:\Windows\System32\perfc00C.dat
[2007/06/28 03:12:59 | 000,037,390 | ---- | C] () -- C:\Windows\System32\perfd00C.dat
[2007/06/27 17:43:22 | 000,111,416 | ---- | C] () -- C:\Windows\hpqins13.dat
[2007/06/27 17:28:44 | 000,061,440 | ---- | C] () -- C:\Windows\System32\OsdRemove.exe
[2007/06/27 17:25:49 | 000,327,680 | ---- | C] () -- C:\Windows\System32\pythoncom24.dll
[2007/06/27 17:25:49 | 000,102,400 | ---- | C] () -- C:\Windows\System32\pywintypes24.dll
[2007/03/06 09:47:24 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2007/01/12 06:07:48 | 000,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll
[2007/01/12 06:07:48 | 000,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/11/02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 13:47:37 | 000,463,568 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 11:33:01 | 000,637,106 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 11:33:01 | 000,120,610 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006/06/23 09:09:34 | 000,019,968 | R--- | C] () -- C:\Windows\System32\cpuinf32.dll
[2003/12/09 14:09:26 | 000,036,864 | ---- | C] () -- C:\Windows\System32\Nmea.dll
[2003/11/27 14:50:26 | 000,139,264 | ---- | C] () -- C:\Windows\System32\ConversApi.dll
[2003/10/03 10:18:40 | 000,049,152 | ---- | C] () -- C:\Windows\System32\OgcDrvSilva.dll
[2003/10/03 10:18:32 | 000,057,344 | ---- | C] () -- C:\Windows\System32\OgcDrvSena.dll
[2003/10/03 10:18:26 | 000,061,440 | ---- | C] () -- C:\Windows\System32\OgcDrvMlr.dll
[2003/10/03 10:18:18 | 000,065,536 | ---- | C] () -- C:\Windows\System32\OgcDrvMagellan.dll
[2003/10/03 10:18:12 | 000,086,016 | ---- | C] () -- C:\Windows\System32\OgcDrvGarmin.dll
[2003/10/03 07:13:40 | 000,036,864 | ---- | C] () -- C:\Windows\System32\Ogc.dll
[2002/11/25 14:11:22 | 000,688,128 | ---- | C] () -- C:\Windows\System32\BCGCB474.dll
[2002/01/13 16:12:02 | 000,188,416 | ---- | C] () -- C:\Windows\System32\CP30FW.DLL
[2001/12/19 08:07:50 | 000,040,960 | ---- | C] () -- C:\Windows\System32\BCGCBResFRA.dll

========== LOP Check ==========

[2010/04/05 10:37:11 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\2020 Fusion
[2009/05/24 08:30:53 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Advanced Chemistry Development
[2010/12/08 14:42:50 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Delivery
[2011/11/24 18:28:22 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Dropbox
[2008/01/02 21:38:32 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\eMule
[2011/08/28 11:11:01 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\eTeks
[2009/09/06 17:32:09 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\GTCO CalComp
[2011/11/11 14:44:27 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\gtk-2.0
[2008/08/28 13:39:13 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Généatique2009
[2010/09/03 16:28:59 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Image Zone Express
[2008/03/08 11:42:33 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Inkscape
[2009/10/20 09:40:25 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\IObit
[2011/08/28 10:39:15 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\LiveCAD3
[2011/10/27 08:43:57 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Mipony
[2010/12/27 16:21:50 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\MP-Manager
[2010/12/27 14:53:38 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\MPMAN
[2007/09/01 08:59:57 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\muvee Technologies
[2010/01/21 12:40:04 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\NCH Swift Sound
[2007/12/23 10:06:40 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Nvu
[2009/02/11 16:23:41 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\OpenOffice.org
[2009/09/16 20:26:27 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Overlook
[2011/11/19 17:19:07 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\PC Cleaners
[2007/09/16 13:46:56 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Printer Info Cache
[2007/08/30 19:21:17 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Publish Providers
[2011/05/25 19:42:00 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Samsung
[2009/01/01 13:30:51 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\ScanSoft
[2011/11/24 17:54:00 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Shareaza
[2008/05/27 15:10:35 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\Sony
[2009/05/03 20:17:24 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\TeamViewer
[2007/11/07 17:07:23 | 000,000,000 | ---D | M] -- C:\Users\Benoit BERQUIN\AppData\Roaming\WinBatch
[2011/11/21 21:57:00 | 000,000,512 | ---- | M] () -- C:\Windows\Tasks\Ad-Aware Update (Weekly).job
[2011/11/24 18:23:20 | 000,032,562 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 76 bytes -> C:\Users\Benoit BERQUIN\Documents\sansbonus.dmsd:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\Benoit BERQUIN\Documents\cléophée.dmsd:Roxio EMC Stream
@Alternate Data Stream - 16 bytes -> C:\Users\Benoit BERQUIN\Downloads:Shareaza.GUID
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:1CD23587
@Alternate Data Stream - 103 bytes -> C:\ProgramData\TEMP:DFC5A2B2

< End of report >

[paracelse62]

Encore merci beaucoup pour le temps passé sur mon problème j'espère que vous en viendrez à bout. Merci

[nickW]

Bonsoir,


Peux-tu envoyer un des rapports d'Avira Antivir montrant des DLLs infectées par tr/vundo.BY.550?


Comment s'est manifesté le "plantage" de OTL?
(message d'erreur ...)


Que contient le dossier C:\VundoFix Backups?


As-tu désinstallé PC Cleaners?


A suivre,

[paracelse62]

bonjour,
les messages de antivir :
le 26/11/2011 à 9:22:11
Dans le fichier 'C:\Windows\System32\applib10.dll'
un virus ou un programme indésirable 'TR/Vundo.BY.550' [trojan] a été détecté.
Action exécutée : Refuser l'accès


le 24/11/201, 18:35:11
Dans le fichier 'C:\Windows\System32\applib10.dll'
un virus ou un programme indésirable 'TR/Vundo.BY.550' [trojan] a été détecté.
Action exécutée : Refuser l'accès

même message dans la soirée à 10 reprises de 18h35 à 22h15 (que cette Dll infectée.)

AVANT LE NETOYAGE GRACE A TA PROCEDURE,

le 21/11/2011 de 14h37 à 21h36

Dans le fichier 'C:\Windows\System32\applib10.dll'
un virus ou un programme indésirable 'TR/Vundo.BY.550' [trojan] a été détecté.
Action exécutée : Refuser l'accès
26fois !!

Dans le fichier 'C:\Windows\System32\srvcap.dll'
un virus ou un programme indésirable 'TR/Vundo.BY.550' [trojan] a été détecté.
Action exécutée : Refuser l'accès

Dans le fichier 'C:\Windows\System32\printcpl.dll'
un virus ou un programme indésirable 'TR/Vundo.BY.550' [trojan] a été détecté.
Action exécutée : Supprimer le fichier
3

Dans le fichier 'C:\Windows\System32\printnet40.dll'
un virus ou un programme indésirable 'TR/Vundo.BY.550' [trojan] a été détecté.
Action exécutée : Refuser l'accès
2

Dans le fichier 'C:\Windows\System32\aacext.dll'
un virus ou un programme indésirable 'TR/Vundo.BY.550' [trojan] a été détecté.
Action exécutée : Refuser l'accès
+ de 120 fois (je me suis arrêté de compter)

[paracelse62]

le plantage de otl s'est traduit par un message en pop up
"le programme otl a cessé de fonctionner correctement veuillez cliquer sur ok pour éteindre le programme"
je clique sur ok je me retrouve devant un bureau vide je relance la machine via ctrl+alt+suppr fermer la session puis éteindre l'ordinateur.

pour pc cleaner :
en regardant le panneau de config j'ai bien desinstallé pccleaner mais il me reste un cleaner "cleanup" de l'éditeur elguevel software.

merci encore de suivre ce dossier avec autant d'attention. Il y a eut un progrès je ne suis pas stoppé toutes les 30 secondes par un message d'antivir mais il reste ce Vundo qui m'enquiquine au plus haut point!
peut il recoloniser plusieurs Dll???
Merci encore .

[paracelse62]

enfin le dossier Vundofix backups est vide.

[nickW]

Bonsoir,

Nouveaux nettoyages:


Étape 1: Pas de processus de contrôle en temps réel
Désactiver le module résident de l'antivirus et celui de l'antispyware.
Avira Antivir: voir viewtopic.php?f=70&t=27097
SUPERAntiSpyware: voir viewtopic.php?f=70&t=27096


Étape 2: OTL (de OldTimer), correction

Faire un clic droit sur OTL.exe puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.

L'écran principal de OTL s'affiche:


Sélectionner toutes les lignes ci-dessous comprises entre les deux lignes ------- (qu'il ne faut pas sélectionner), puis appuyer simultanément sur les touches Ctrl et C
Note importante: ne pas oublier de sélectionner le caractère "deux points" en début de première ligne.

-----------------------------------------------------

:otl
O20 - AppInit_DLLs: (sysprf.dll) -C:\Windows\System32\sysprf.dll (Malwarebytes Corporation)

:Files
C:\Windows\system32\aacext.dll
C:\Windows\System32\sysprf.dll
C:\Windows\System32\applib10.dll

:Commands
[emptytemp]



-----------------------------------------------------

Note: Les lignes de la zone Code ci-dessus ont été créées exclusivement pour CET utilisateur: paracelse62.
Si vous n'êtes pas CET utilisateur, il ne faut pas les utiliser: elles pourraient endommager votre système.

Retourner dans la fenêtre de OTL, faire un clic droit dans la zone blanche sous "Personnalisation" et choisir Coller (les lignes sélectionnées ci-dessus doivent apparaître dans la zone "Personnalisation").

Fermer toutes les fenêtres de programme ouvertes autres que OTL (navigateur, traitement de texte, etc...): un redémarrage du PC va se produire.

Cliquer sur le bouton Correction:

Note: Lorsque le redémarrage est demandé, cliquer sur Ok

Lorsque l'outil a terminé son travail, il y a affichage dans une petite fenêtre du message "Correction terminée! Cliquez sur Ok pour afficher le rapport.". Cliquer sur Ok puis fermer OTL.


Étape 3: Processus de contrôle en temps réel
Important: Réactiver le module résident de l'antivirus et celui de l'antispyware.


Étape 4: OTL (de OldTimer), analyse rapide
Fermer toutes les fenêtres de programme ouvertes.

Faire un clic droit sur OTL.exe puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.

L'écran principal de OTL s'affiche:


Cliquer sur le bouton Analyse rapide:



Laisser l'outil travailler sans l'interrompre.
Lorsque l'outil a terminé, il y a ouverture d'une fenêtre du Bloc-notes contenant un rapport (log).
Fermer le Bloc-notes.
Fermer la fenêtre de OTL.


Étape 5: Résultats
Envoyer en réponse:
*- le rapport de correction de OTL (contenu du fichier %SystemDrive%\_OTL\MovedFiles\********_******.log - les *** sont des chiffres représentant la date [moisjourannée] et l'heure)
[%SystemDrive% représente la partition sur laquelle est installé le système, généralement C:]

Envoyer ensuite en réponse dans un message distinct (à cause de la longueur du fichier):
*- le rapport principal de OTL (contenu du fichier OTL.Txt situé sur le Bureau).
Le rapport envoyé sur le forum doit se terminer par une ligne contenant <End of report>. Si ce n'est pas le cas, il est incomplet, et doit alors être découpé en plusieurs messages.

Note importante: Pour l'envoi de ta(tes) réponse(s), il ne faut pas créer un nouveau sujet, mais cliquer sur le bouton "Répondre"
pour continuer dans ce fil de discussion.

A suivre,