[Résolu] Savoir si j'ai un virus

melik · le 22 novembre 2011

Gros problème après l'utilisation de ComboFix.

Sur mon pc portable ou je m'en suis servi je n'ai plus accès à aucun navigateur internet quand je veux en lancer un que ce soit mozilla google chorme ou internet explorer une fenetre me dit " tentative d'opération non autorisé sur une clé de registre marqué pour suppression"

En attendant je vous parle grace à mon pc de bureau. J'ai quand même lancé TDSSKiller.

J'ai aussi remarqué que je n'avais plus Avira dans la barre de tache en bas çà gauche.

Je voudrais savoir que faire

Je n'ai accès à plus rien que ce soit les fichiers ou application sur mon disque C: ou D: des que je veux utiliser quelque chose j'ai le même message que pour mes navigateurs je suis vraiment inquiet que faire :-?

Modifié le 22 novembre 2011 par melik

lance_yien · le 22 novembre 2011

Oh lalaaaaaaaaaaaaaaaaaaaaaaaaa!

Arrête complètement ton PC pendant 5mn et redémarre-le. Si le problème persiste essaie le clic-droit => "Exécuter en tant qu'administrateur" pour ouvrir ou lancer tes applications, fichiers et/ou dossiers?

Si cela fonctionne poste les rapports ComboFix et TDSSKiller que je regarde au moins ce qu'ils ont fait.

melik · le 22 novembre 2011

Oufff ça remarche :lol:

Donc voici les deux rapports

ComboFix

ComboFix 11-11-22.01 - Simon 22/11/2011 11:35:00.1.2 - x86

Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3066.1893 [GMT 1:00]

Lancé depuis: c:\users\Simon\Desktop\ComboFix.exe

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\program files\Acer\Acer Bio Protection\PwdFilter.dll

c:\programdata\Roaming

c:\users\Simon\AppData\Local\Minibar

c:\users\Simon\AppData\Local\Minibar\chrome\background.html

c:\users\Simon\AppData\Local\Minibar\chrome\cached_http_request.js

c:\users\Simon\AppData\Local\Minibar\chrome\extension_info.json

c:\users\Simon\AppData\Local\Minibar\chrome\icons\icon128.png

c:\users\Simon\AppData\Local\Minibar\chrome\icons\icon19.png

c:\users\Simon\AppData\Local\Minibar\chrome\icons\icon32.png

c:\users\Simon\AppData\Local\Minibar\chrome\icons\icon48.png

c:\users\Simon\AppData\Local\Minibar\chrome\includes\content.js

c:\users\Simon\AppData\Local\Minibar\chrome\includes\content_kango.js

c:\users\Simon\AppData\Local\Minibar\chrome\includes\content_messaging.js

c:\users\Simon\AppData\Local\Minibar\chrome\includes\content_userscript.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango-ui\button.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango-ui\ui.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\browser.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\console.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\event_listener.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\initialize.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\io.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\jsonstorage.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\kango.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\lang.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\messaging.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\userscript_engine.js

c:\users\Simon\AppData\Local\Minibar\chrome\kango\xhr.js

c:\users\Simon\AppData\Local\Minibar\chrome\main.js

c:\users\Simon\AppData\Local\Minibar\chrome\manifest.json

c:\users\Simon\AppData\Local\Minibar\chrome\popup.html

c:\users\Simon\AppData\Local\Minibar\chrome\popup.js

c:\users\Simon\AppData\Local\Minibar\chrome\tab.html

c:\users\Simon\AppData\Local\Minibar\chrome\tab.js

c:\users\Simon\AppData\Local\Minibar\chrome_installer.js

c:\users\Simon\AppData\Local\Minibar\common.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome.manifest

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\cached_http_request.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\content.xul

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\extension_info.json

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\icons\icon128.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\icons\icon19.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\icons\icon32.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\icons\icon48.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\button.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup_window.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\popup_window.xul

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\bottom-left.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\bottom-middle.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\bottom-right.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\middle-left.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\middle-right.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\style.css

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-bottom.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-left.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-right.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\tail-top.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\top-left.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\top-middle.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\theme\bubble\top-right.png

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango-ui\ui.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\browser.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\console.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\event_listener.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\initialize.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\io.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\jsonstorage.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\kango.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\lang.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\messaging.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\storage.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\uninstall_observer.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\userscript_engine.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\kango\xhr.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\main.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\minibar\actions.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\minibar\cachedxhr.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\minibar\config.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\minibar\config.json

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\minibar\homepage_helper.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\minibar\macros.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\minibar\minibar.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\minibar\search_helper.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\minibar\search_hook.js

c:\users\Simon\AppData\Local\Minibar\firefox\chrome\content\minibar\tabpage_helper.js

c:\users\Simon\AppData\Local\Minibar\firefox\install.rdf

c:\users\Simon\AppData\Local\Minibar\firefox_installer.js

c:\users\Simon\AppData\Local\Minibar\ie_installer.js

c:\users\Simon\AppData\Local\Minibar\install.json

c:\users\Simon\AppData\Local\Minibar\minibar.crx

c:\users\Simon\AppData\Local\Minibar\minibar.xpi

c:\users\Simon\AppData\Local\Minibar\sqlite3.exe

c:\users\Simon\AppData\Local\Minibar\Uninstall.exe

.

((((((((((((((((((((((((((((( Fichiers créés du 2011-10-22 au 2011-11-22 ))))))))))))))))))))))))))))))))))))

.

2011-11-22 10:50 . 2011-11-22 10:50 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0328370F-BDC3-4967-A98E-C1F5D788D993}\offreg.dll

2011-11-22 10:48 . 2011-11-22 10:52 -------- d-----w- c:\users\Simon\AppData\Local\temp

2011-11-22 10:48 . 2011-11-22 10:48 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-11-22 08:40 . 2011-11-22 08:40 -------- d-----w- C:\_OTL

2011-11-22 08:36 . 2011-10-07 03:48 6668624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0328370F-BDC3-4967-A98E-C1F5D788D993}\mpengine.dll

2011-11-22 08:31 . 2011-11-22 08:31 -------- d-----w- c:\program files\Common Files\Java

2011-11-22 08:30 . 2011-10-03 04:06 476904 ----a-w- c:\program files\Mozilla Firefox\Plugins\npdeployJava1.dll

2011-11-21 19:52 . 2011-11-21 19:52 512 ----a-w- C:\PhysicalMBR.bin

2011-11-21 19:43 . 2011-11-21 19:43 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-11-21 13:53 . 2011-11-21 13:53 0 ----a-w- C:\PhysicalDisk0_MBR.bin

2011-11-21 13:49 . 2011-11-21 16:04 -------- d-----w- C:\ZHP

2011-11-21 13:47 . 2011-11-21 16:02 -------- d-----w- c:\program files\ZHPDiag

2011-11-21 09:10 . 2011-11-21 09:10 -------- d-----w- c:\users\Simon\AppData\Roaming\Team K17

2011-11-09 08:42 . 2011-10-17 11:41 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat

2011-11-09 08:42 . 2011-09-30 15:57 707584 ----a-w- c:\program files\Common Files\System\wab32.dll

2011-11-09 08:37 . 2011-09-20 21:02 905088 ----a-w- c:\windows\system32\drivers\tcpip.sys

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-10-03 04:06 . 2011-08-07 12:21 472808 ----a-w- c:\windows\system32\deployJava1.dll

2011-09-23 16:03 . 2011-09-23 16:02 21840 ----atw- c:\windows\system32\SIntfNT.dll

2011-09-23 16:03 . 2011-09-23 16:02 17212 ----atw- c:\windows\system32\SIntf32.dll

2011-09-23 16:03 . 2011-09-23 16:02 12067 ----atw- c:\windows\system32\SIntf16.dll

2011-09-23 16:00 . 2011-09-23 16:00 2829 ----a-w- c:\windows\DIIUnin.pif

2011-09-23 16:00 . 2011-09-23 16:00 102400 ----a-w- c:\windows\DIIUnin.exe

2011-09-06 13:30 . 2011-10-13 18:41 2043392 ----a-w- c:\windows\system32\win32k.sys

2011-09-01 02:35 . 2011-10-14 08:27 1798144 ----a-w- c:\windows\system32\jscript9.dll

2011-09-01 02:28 . 2011-10-14 08:27 1126912 ----a-w- c:\windows\system32\wininet.dll

2011-09-01 02:22 . 2011-10-14 08:27 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2011-08-30 19:31 . 2010-12-05 19:52 66616 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2011-08-30 19:31 . 2010-12-05 19:52 138192 ----a-w- c:\windows\system32\drivers\avipbb.sys

2011-08-25 16:15 . 2011-10-13 18:37 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll

2011-08-25 16:14 . 2011-10-13 18:37 563712 ----a-w- c:\windows\system32\oleaut32.dll

2011-08-25 16:14 . 2011-10-13 18:37 238080 ----a-w- c:\windows\system32\oleacc.dll

2011-08-25 13:31 . 2011-10-13 18:37 4096 ----a-w- c:\windows\system32\oleaccrc.dll

2011-06-16 04:38 . 2011-07-06 11:45 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2008-03-04 21:38 121392 ----a-w- c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="RtHDVCpl.exe" [2008-04-28 6111232]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-18 1033512]

"eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-03-07 544768]

"BkupTray"="c:\program files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-06 34040]

"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-04-15 178712]

"WarReg_PopUp"="c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]

"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-07-02 821768]

"ZPdtWzdVitaKey MC3000"="c:\program files\Acer\Acer Bio Protection\PdtWzd.exe" [2010-12-05 3607040]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-08-17 281768]

"Skytel"="Skytel.exe" [2007-11-20 1826816]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-01-21 13543968]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2011-01-21 92704]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AWinNotifyVitaKey MC3000]

2010-12-05 17:39 2972160 ----a-w- c:\program files\Acer\Acer Bio Protection\WinNotify.dll

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Notification Packages REG_MULTI_SZ scecli c:\program files\Acer\Acer Bio Protection\PwdFilter

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcadeDeluxeAgent]

2008-05-12 21:10 147456 ------w- c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]

2008-05-12 21:11 167936 ------w- c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eDataSecurity Loader]

2008-03-04 21:38 526896 ----a-w- c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ePower_DMC]

2008-04-23 13:58 397312 ----a-w- c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie]

2008-05-12 16:28 167936 ------w- c:\program files\Acer Arcade Deluxe\PlayMovie\PMVService.exe

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-01-02 136176]

R3 A310;AVerMedia A310 DVB-T;c:\windows\system32\DRIVERS\AVerA310USB.sys [2008-04-15 25856]

R3 BDASwCap;AVerMedia A310 BDA DVBT Capture Device;c:\windows\system32\drivers\AVerA310Cap.sys [2008-04-15 42880]

R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-01-02 136176]

R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2011-01-09 310640]

R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

S0 AlfaFF;AlfaFF File System mini-filter;c:\windows\system32\Drivers\AlfaFF.sys [2010-12-05 43184]

S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\PlayMovie\000.fcl [2008-05-09 61424]

S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-04-28 136360]

S2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]

S2 CLHNService;CLHNService;c:\program files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [2008-01-16 81504]

S2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-03-21 24576]

S2 IGBASVC;iGroupTec Service;c:\program files\Acer\Acer Bio Protection\BASVC.exe [2010-12-05 3471360]

S2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-06 50424]

S2 NTIPPKernel;NTIPPKernel;c:\program files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [2008-01-16 122368]

S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-04 131072]

S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2008-03-28 210432]

S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2008-04-21 81296]

S3 NETw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-11-17 3668480]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2008-04-21 43552]

S3 winbondcir;Winbond IR Transceiver;c:\windows\system32\DRIVERS\winbondcir.sys [2007-03-28 43008]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.google.fr/

mStart Page = hxxp://fr.fr.acer.yahoo.com

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Simon\AppData\Roaming\Mozilla\Firefox\Profiles\x886vc8v.default\

.

- - - - ORPHELINS SUPPRIMES - - - -

.

MSConfigStartUp-msnmsgr - c:\program files\Windows Live\Messenger\msnmsgr.exe

AddRemove-AVerMedia A310 (MiniCard, DVB-T) - c:\program files\AVerMedia\AVerMedia A310 (MiniCard

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2011-11-22 11:52

Windows 6.0.6002 Service Pack 2 NTFS

.

Recherche de processus cachés ...

.

Recherche d'éléments en démarrage automatique cachés ...

.

Recherche de fichiers cachés ...

.

Scan terminé avec succès

Fichiers cachés: 0

.

**************************************************************************

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]

"ImagePath"="\??\c:\program files\Acer Arcade Deluxe\PlayMovie\000.fcl"

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

.

[HKEY_USERS\S-1-5-21-1407215401-3916836144-435495257-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]

"??"=hex:cd,e5,60,bf,db,8e,fd,ed,22,2f,85,0b,25,d2,8b,35,6a,84,2e,df,37,d6,5e,

8c,22,26,62,54,d5,a6,79,f5,9e,7b,97,5d,6e,9f,90,2e,6e,de,c4,39,96,f5,08,ae,\

"??"=hex:f5,56,e5,57,13,58,0f,83,d0,a0,fb,b5,93,8b,dd,65

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

"MSCurrentCountry"=dword:000000b5

.

--------------------- DLLs chargées dans les processus actifs ---------------------

.

- - - - - - - > 'Explorer.exe'(2936)

c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

c:\program files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll

.

------------------------ Autres processus actifs ------------------------

.

c:\windows\system32\nvvsvc.exe

c:\windows\system32\WLANExt.exe

c:\windows\system32\rundll32.exe

c:\program files\Acer\Acer Bio Protection\CompPtcVUI.exe

c:\windows\system32\agrsmsvc.exe

c:\program files\Avira\AntiVir Desktop\avguard.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

c:\program files\Avira\AntiVir Desktop\avshadow.exe

c:\program files\Intel\WiFi\bin\EvtEng.exe

c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

c:\program files\Common Files\LightScribe\LSSrvc.exe

c:\acer\Mobility Center\MobilityService.exe

c:\program files\Common Files\Intel\WirelessCommon\RegSrvc.exe

c:\program files\Cyberlink\Shared files\RichVideo.exe

c:\windows\system32\wbem\unsecapp.exe

c:\windows\system32\conime.exe

c:\\?\c:\windows\system32\wbem\WMIADAP.EXE

c:\windows\servicing\TrustedInstaller.exe

.

**************************************************************************

.

Heure de fin: 2011-11-22 11:58:39 - La machine a redémarré

ComboFix-quarantined-files.txt 2011-11-22 10:58

.

Avant-CF: 89 395 752 960 octets libres

Après-CF: 89 078 857 728 octets libres

.

- - End Of File - - 1B6DEE36293E05BE6ABC7194773E4E89

TDSS

15:42:42.0850 4872 TDSS rootkit removing tool 2.6.20.0 Nov 22 2011 12:05:55

15:42:43.0458 4872 ============================================================

15:42:43.0458 4872 Current date / time: 2011/11/22 15:42:43.0458

15:42:43.0458 4872 SystemInfo:

15:42:43.0458 4872

15:42:43.0458 4872 OS Version: 6.0.6002 ServicePack: 2.0

15:42:43.0458 4872 Product type: Workstation

15:42:43.0458 4872 ComputerName: PC-DE-SIMON

15:42:43.0458 4872 UserName: Simon

15:42:43.0458 4872 Windows directory: C:\Windows

15:42:43.0458 4872 System windows directory: C:\Windows

15:42:43.0458 4872 Processor architecture: Intel x86

15:42:43.0458 4872 Number of processors: 2

15:42:43.0458 4872 Page size: 0x1000

15:42:43.0458 4872 Boot type: Normal boot

15:42:43.0458 4872 ============================================================

15:42:44.0176 4872 Initialize success

15:42:45.0455 4816 ============================================================

15:42:45.0455 4816 Scan started

15:42:45.0455 4816 Mode: Manual;

15:42:45.0455 4816 ============================================================

15:42:45.0923 4816 A310 (02e1c46c34f2d2843533c4f223867930) C:\Windows\system32\DRIVERS\AVerA310USB.sys

15:42:45.0939 4816 A310 - ok

15:42:46.0079 4816 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys

15:42:46.0079 4816 ACPI - ok

15:42:46.0282 4816 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys

15:42:46.0313 4816 adp94xx - ok

15:42:46.0453 4816 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys

15:42:46.0500 4816 adpahci - ok

15:42:46.0672 4816 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys

15:42:46.0687 4816 adpu160m - ok

15:42:46.0859 4816 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys

15:42:46.0890 4816 adpu320 - ok

15:42:47.0015 4816 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys

15:42:47.0109 4816 AFD - ok

15:42:47.0296 4816 AgereSoftModem (38325c6aa8eae011897d61ce48ec6435) C:\Windows\system32\DRIVERS\AGRSM.sys

15:42:47.0311 4816 AgereSoftModem - ok

15:42:47.0530 4816 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys

15:42:47.0530 4816 agp440 - ok

15:42:47.0670 4816 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys

15:42:47.0670 4816 aic78xx - ok

15:42:47.0842 4816 AlfaFF (8d59617a9c3dbf4650aa44f4e9215744) C:\Windows\system32\Drivers\AlfaFF.sys

15:42:47.0842 4816 AlfaFF - ok

15:42:47.0982 4816 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys

15:42:47.0982 4816 aliide - ok

15:42:48.0076 4816 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys

15:42:48.0091 4816 amdagp - ok

15:42:48.0138 4816 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys

15:42:48.0138 4816 amdide - ok

15:42:48.0169 4816 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys

15:42:48.0169 4816 AmdK7 - ok

15:42:48.0201 4816 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys

15:42:48.0247 4816 AmdK8 - ok

15:42:48.0419 4816 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys

15:42:48.0435 4816 arc - ok

15:42:48.0497 4816 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys

15:42:48.0513 4816 arcsas - ok

15:42:48.0544 4816 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys

15:42:48.0559 4816 AsyncMac - ok

15:42:48.0591 4816 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys

15:42:48.0591 4816 atapi - ok

15:42:48.0637 4816 ATSWPDRV (5e19f7b730c6a32e83174e2d6fee4389) C:\Windows\system32\DRIVERS\ATSwpDrv.sys

15:42:48.0637 4816 ATSWPDRV - ok

15:42:48.0840 4816 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\Windows\system32\DRIVERS\avgntflt.sys

15:42:48.0871 4816 avgntflt - ok

15:42:48.0949 4816 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\Windows\system32\DRIVERS\avipbb.sys

15:42:48.0965 4816 avipbb - ok

15:42:49.0090 4816 b57nd60x (7d0f2bfa273831124fa08526af48af18) C:\Windows\system32\DRIVERS\b57nd60x.sys

15:42:49.0090 4816 b57nd60x - ok

15:42:49.0261 4816 BDASwCap (9347a2ddee501c242a8e21990279d688) C:\Windows\system32\drivers\AVerA310Cap.sys

15:42:49.0261 4816 BDASwCap - ok

15:42:49.0308 4816 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys

15:42:49.0355 4816 Beep - ok

15:42:49.0402 4816 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys

15:42:49.0433 4816 blbdrive - ok

15:42:49.0495 4816 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys

15:42:49.0511 4816 bowser - ok

15:42:49.0558 4816 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys

15:42:49.0558 4816 BrFiltLo - ok

15:42:49.0589 4816 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys

15:42:49.0605 4816 BrFiltUp - ok

15:42:49.0636 4816 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys

15:42:49.0651 4816 Brserid - ok

15:42:49.0683 4816 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys

15:42:49.0683 4816 BrSerWdm - ok

15:42:49.0729 4816 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys

15:42:49.0729 4816 BrUsbMdm - ok

15:42:49.0761 4816 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys

15:42:49.0761 4816 BrUsbSer - ok

15:42:49.0823 4816 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys

15:42:49.0839 4816 BTHMODEM - ok

15:42:50.0010 4816 catchme - ok

15:42:50.0151 4816 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys

15:42:50.0151 4816 cdfs - ok

15:42:50.0260 4816 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys

15:42:50.0275 4816 cdrom - ok

15:42:50.0307 4816 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\DRIVERS\circlass.sys

15:42:50.0307 4816 circlass - ok

15:42:50.0541 4816 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys

15:42:50.0587 4816 CLFS - ok

15:42:50.0759 4816 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys

15:42:50.0759 4816 CmBatt - ok

15:42:50.0837 4816 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys

15:42:50.0837 4816 cmdide - ok

15:42:50.0868 4816 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys

15:42:50.0884 4816 Compbatt - ok

15:42:50.0946 4816 cpuidlep (3a1dc7c08ae1af450ffd753a0fd82f9d) C:\Windows\system32\drivers\cpuidlep.sys

15:42:50.0962 4816 cpuidlep - ok

15:42:50.0977 4816 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys

15:42:50.0993 4816 crcdisk - ok

15:42:51.0040 4816 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys

15:42:51.0040 4816 Crusoe - ok

15:42:51.0133 4816 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys

15:42:51.0149 4816 DfsC - ok

15:42:51.0243 4816 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys

15:42:51.0258 4816 disk - ok

15:42:51.0321 4816 DKbFltr (73baf270d24fe726b9cd7f80bb17a23d) C:\Windows\system32\DRIVERS\DKbFltr.sys

15:42:51.0321 4816 DKbFltr - ok

15:42:51.0570 4816 driverhardwarev2 (a694d8db6d360a3bbb0bd1517f1c1aee) C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys

15:42:51.0570 4816 driverhardwarev2 - ok

15:42:51.0757 4816 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys

15:42:51.0773 4816 drmkaud - ok

15:42:51.0898 4816 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys

15:42:51.0913 4816 DXGKrnl - ok

15:42:51.0960 4816 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys

15:42:51.0960 4816 E1G60 - ok

15:42:52.0038 4816 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys

15:42:52.0069 4816 Ecache - ok

15:42:52.0147 4816 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys

15:42:52.0210 4816 elxstor - ok

15:42:52.0288 4816 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys

15:42:52.0303 4816 ErrDev - ok

15:42:52.0413 4816 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys

15:42:52.0428 4816 exfat - ok

15:42:52.0475 4816 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys

15:42:52.0475 4816 fastfat - ok

15:42:52.0506 4816 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys

15:42:52.0506 4816 fdc - ok

15:42:52.0584 4816 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys

15:42:52.0584 4816 FileInfo - ok

15:42:52.0615 4816 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys

15:42:52.0615 4816 Filetrace - ok

15:42:52.0647 4816 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys

15:42:52.0662 4816 flpydisk - ok

15:42:52.0709 4816 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys

15:42:52.0725 4816 FltMgr - ok

15:42:52.0771 4816 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys

15:42:52.0787 4816 Fs_Rec - ok

15:42:52.0818 4816 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys

15:42:52.0818 4816 gagp30kx - ok

15:42:52.0865 4816 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

15:42:52.0896 4816 GEARAspiWDM - ok

15:42:52.0990 4816 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys

15:42:53.0021 4816 HdAudAddService - ok

15:42:53.0115 4816 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys

15:42:53.0115 4816 HDAudBus - ok

15:42:53.0177 4816 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys

15:42:53.0177 4816 HidBth - ok

15:42:53.0224 4816 HidIr (d8df3722d5e961baa1292aa2f12827e2) C:\Windows\system32\DRIVERS\hidir.sys

15:42:53.0239 4816 HidIr - ok

15:42:53.0349 4816 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys

15:42:53.0380 4816 HidUsb - ok

15:42:53.0411 4816 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys

15:42:53.0411 4816 HpCISSs - ok

15:42:53.0473 4816 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys

15:42:53.0583 4816 HTTP - ok

15:42:53.0614 4816 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys

15:42:53.0614 4816 i2omp - ok

15:42:53.0661 4816 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys

15:42:53.0676 4816 i8042prt - ok

15:42:53.0723 4816 iaStor (db0cc620b27a928d968c1a1e9cd9cb87) C:\Windows\system32\DRIVERS\iaStor.sys

15:42:53.0739 4816 iaStor - ok

15:42:53.0785 4816 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys

15:42:53.0848 4816 iaStorV - ok

15:42:53.0895 4816 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys

15:42:53.0895 4816 iirsp - ok

15:42:53.0941 4816 int15 (4d8d5b1c895ea0f2a721b98a7ce198f1) C:\Windows\system32\drivers\int15.sys

15:42:53.0941 4816 int15 - ok

15:42:54.0066 4816 IntcAzAudAddService (3cfa12fefea751dae7b8133a6ef3c0d9) C:\Windows\system32\drivers\RTKVHDA.sys

15:42:54.0113 4816 IntcAzAudAddService - ok

15:42:54.0175 4816 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys

15:42:54.0175 4816 intelide - ok

15:42:54.0207 4816 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys

15:42:54.0207 4816 intelppm - ok

15:42:54.0253 4816 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys

15:42:54.0269 4816 IpFilterDriver - ok

15:42:54.0285 4816 IpInIp - ok

15:42:54.0316 4816 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys

15:42:54.0331 4816 IPMIDRV - ok

15:42:54.0363 4816 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys

15:42:54.0378 4816 IPNAT - ok

15:42:54.0409 4816 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys

15:42:54.0409 4816 IRENUM - ok

15:42:54.0441 4816 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys

15:42:54.0441 4816 isapnp - ok

15:42:54.0519 4816 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys

15:42:54.0519 4816 iScsiPrt - ok

15:42:54.0565 4816 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys

15:42:54.0565 4816 iteatapi - ok

15:42:54.0628 4816 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys

15:42:54.0628 4816 iteraid - ok

15:42:54.0690 4816 JMCR (858c550ebbd243826a2193262c1b54a3) C:\Windows\system32\DRIVERS\jmcr.sys

15:42:54.0737 4816 JMCR - ok

15:42:54.0784 4816 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys

15:42:54.0784 4816 kbdclass - ok

15:42:54.0815 4816 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys

15:42:54.0831 4816 kbdhid - ok

15:42:54.0893 4816 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys

15:42:54.0940 4816 KSecDD - ok

15:42:54.0987 4816 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys

15:42:54.0987 4816 lltdio - ok

15:42:55.0096 4816 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys

15:42:55.0111 4816 LSI_FC - ok

15:42:55.0143 4816 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys

15:42:55.0158 4816 LSI_SAS - ok

15:42:55.0299 4816 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys

15:42:55.0299 4816 LSI_SCSI - ok

15:42:55.0345 4816 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys

15:42:55.0345 4816 luafv - ok

15:42:55.0408 4816 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys

15:42:55.0408 4816 megasas - ok

15:42:55.0455 4816 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys

15:42:55.0486 4816 MegaSR - ok

15:42:55.0533 4816 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys

15:42:55.0533 4816 Modem - ok

15:42:55.0579 4816 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys

15:42:55.0579 4816 monitor - ok

15:42:55.0626 4816 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys

15:42:55.0642 4816 mouclass - ok

15:42:55.0657 4816 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys

15:42:55.0673 4816 mouhid - ok

15:42:55.0689 4816 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys

15:42:55.0704 4816 MountMgr - ok

15:42:55.0767 4816 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys

15:42:55.0767 4816 mpio - ok

15:42:55.0829 4816 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys

15:42:55.0845 4816 mpsdrv - ok

15:42:55.0891 4816 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys

15:42:55.0891 4816 Mraid35x - ok

15:42:55.0923 4816 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys

15:42:55.0954 4816 MRxDAV - ok

15:42:55.0985 4816 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys

15:42:56.0001 4816 mrxsmb - ok

15:42:56.0079 4816 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys

15:42:56.0141 4816 mrxsmb10 - ok

15:42:56.0188 4816 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys

15:42:56.0188 4816 mrxsmb20 - ok

15:42:56.0235 4816 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys

15:42:56.0250 4816 msahci - ok

15:42:56.0281 4816 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys

15:42:56.0281 4816 msdsm - ok

15:42:56.0344 4816 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys

15:42:56.0344 4816 Msfs - ok

15:42:56.0375 4816 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys

15:42:56.0391 4816 msisadrv - ok

15:42:56.0453 4816 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys

15:42:56.0453 4816 MSKSSRV - ok

15:42:56.0484 4816 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys

15:42:56.0500 4816 MSPCLOCK - ok

15:42:56.0531 4816 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys

15:42:56.0547 4816 MSPQM - ok

15:42:56.0593 4816 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys

15:42:56.0625 4816 MsRPC - ok

15:42:56.0656 4816 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys

15:42:56.0656 4816 mssmbios - ok

15:42:56.0703 4816 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys

15:42:56.0703 4816 MSTEE - ok

15:42:56.0734 4816 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys

15:42:56.0734 4816 Mup - ok

15:42:56.0796 4816 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys

15:42:56.0812 4816 NativeWifiP - ok

15:42:56.0890 4816 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys

15:42:56.0905 4816 NDIS - ok

15:42:56.0921 4816 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys

15:42:56.0921 4816 NdisTapi - ok

15:42:56.0968 4816 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys

15:42:56.0968 4816 Ndisuio - ok

15:42:56.0999 4816 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys

15:42:57.0015 4816 NdisWan - ok

15:42:57.0046 4816 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys

15:42:57.0077 4816 NDProxy - ok

15:42:57.0093 4816 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys

15:42:57.0093 4816 NetBIOS - ok

15:42:57.0155 4816 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys

15:42:57.0171 4816 netbt - ok

15:42:57.0342 4816 NETw5v32 (8de67bd902095a13329fd82c85a1fa09) C:\Windows\system32\DRIVERS\NETw5v32.sys

15:42:57.0514 4816 NETw5v32 - ok

15:42:57.0857 4816 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys

15:42:57.0857 4816 nfrd960 - ok

15:42:58.0044 4816 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys

15:42:58.0044 4816 Npfs - ok

15:42:58.0091 4816 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys

15:42:58.0091 4816 nsiproxy - ok

15:42:58.0153 4816 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys

15:42:58.0231 4816 Ntfs - ok

15:42:58.0278 4816 NTIDrvr (2757d2ba59aee155209e24942ab127c9) C:\Windows\system32\DRIVERS\NTIDrvr.sys

15:42:58.0294 4816 NTIDrvr - ok

15:42:58.0543 4816 NTIPPKernel (547bfa3591c70674b0bfc99354ab78b3) C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys

15:42:58.0559 4816 NTIPPKernel - ok

15:42:58.0762 4816 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys

15:42:58.0777 4816 ntrigdigi - ok

15:42:58.0824 4816 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys

15:42:58.0840 4816 Null - ok

15:42:58.0887 4816 NVHDA (f972dc046c374a9e02f2dfbe74ebb203) C:\Windows\system32\drivers\nvhda32v.sys

15:42:58.0902 4816 NVHDA - ok

15:42:59.0199 4816 nvlddmkm (cb0d6f8f65b8766ff2aaaa78881fd9f8) C:\Windows\system32\DRIVERS\nvlddmkm.sys

15:42:59.0417 4816 nvlddmkm - ok

15:42:59.0854 4816 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys

15:42:59.0869 4816 nvraid - ok

15:43:00.0072 4816 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys

15:43:00.0088 4816 nvstor - ok

15:43:00.0166 4816 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys

15:43:00.0181 4816 nv_agp - ok

15:43:00.0197 4816 NwlnkFlt - ok

15:43:00.0213 4816 NwlnkFwd - ok

15:43:00.0275 4816 ohci1394 (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\drivers\ohci1394.sys

15:43:00.0275 4816 ohci1394 - ok

15:43:00.0337 4816 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys

15:43:00.0337 4816 Parport - ok

15:43:00.0384 4816 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys

15:43:00.0400 4816 partmgr - ok

15:43:00.0415 4816 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys

15:43:00.0415 4816 Parvdm - ok

15:43:00.0462 4816 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys

15:43:00.0462 4816 pci - ok

15:43:00.0493 4816 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys

15:43:00.0509 4816 pciide - ok

15:43:00.0540 4816 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys

15:43:00.0556 4816 pcmcia - ok

15:43:00.0618 4816 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys

15:43:00.0696 4816 PEAUTH - ok

15:43:00.0790 4816 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys

15:43:00.0790 4816 PptpMiniport - ok

15:43:00.0852 4816 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys

15:43:00.0868 4816 Processor - ok

15:43:00.0915 4816 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys

15:43:00.0915 4816 PSched - ok

15:43:00.0961 4816 PSDFilter (ab94285ff6c6bc5433407d8d182a4bb4) C:\Windows\system32\DRIVERS\psdfilter.sys

15:43:00.0961 4816 PSDFilter - ok

15:43:00.0993 4816 PSDNServ (2aaf9a5d7a63d26bfaea853c5f2292bc) C:\Windows\system32\DRIVERS\PSDNServ.sys

15:43:01.0008 4816 PSDNServ - ok

15:43:01.0039 4816 psdvdisk (0eb8cec99855beae5b0d02c2302619ef) C:\Windows\system32\DRIVERS\PSDVdisk.sys

15:43:01.0055 4816 psdvdisk - ok

15:43:01.0117 4816 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys

15:43:01.0195 4816 ql2300 - ok

15:43:01.0227 4816 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys

15:43:01.0242 4816 ql40xx - ok

15:43:01.0289 4816 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys

15:43:01.0305 4816 QWAVEdrv - ok

15:43:01.0320 4816 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys

15:43:01.0336 4816 RasAcd - ok

15:43:01.0367 4816 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys

15:43:01.0383 4816 Rasl2tp - ok

15:43:01.0429 4816 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys

15:43:01.0429 4816 RasPppoe - ok

15:43:01.0461 4816 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys

15:43:01.0476 4816 RasSstp - ok

15:43:01.0523 4816 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys

15:43:01.0554 4816 rdbss - ok

15:43:01.0585 4816 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys

15:43:01.0601 4816 RDPCDD - ok

15:43:01.0648 4816 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys

15:43:01.0648 4816 rdpdr - ok

15:43:01.0663 4816 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys

15:43:01.0679 4816 RDPENCDD - ok

15:43:01.0726 4816 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys

15:43:01.0741 4816 RDPWD - ok

15:43:01.0851 4816 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys

15:43:01.0866 4816 rspndr - ok

15:43:01.0913 4816 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys

15:43:01.0929 4816 sbp2port - ok

15:43:02.0007 4816 sdbus (126ea89bcc413ee45e3004fb0764888f) C:\Windows\system32\DRIVERS\sdbus.sys

15:43:02.0022 4816 sdbus - ok

15:43:02.0053 4816 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys

15:43:02.0069 4816 secdrv - ok

15:43:02.0100 4816 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys

15:43:02.0116 4816 Serenum - ok

15:43:02.0147 4816 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys

15:43:02.0163 4816 Serial - ok

15:43:02.0194 4816 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys

15:43:02.0209 4816 sermouse - ok

15:43:02.0256 4816 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys

15:43:02.0256 4816 sffdisk - ok

15:43:02.0287 4816 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys

15:43:02.0303 4816 sffp_mmc - ok

15:43:02.0319 4816 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys

15:43:02.0334 4816 sffp_sd - ok

15:43:02.0365 4816 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys

15:43:02.0365 4816 sfloppy - ok

15:43:02.0412 4816 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys

15:43:02.0428 4816 sisagp - ok

15:43:02.0443 4816 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys

15:43:02.0459 4816 SiSRaid2 - ok

15:43:02.0475 4816 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys

15:43:02.0490 4816 SiSRaid4 - ok

15:43:02.0537 4816 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys

15:43:02.0553 4816 Smb - ok

15:43:02.0599 4816 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys

15:43:02.0615 4816 spldr - ok

15:43:02.0709 4816 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys

15:43:02.0724 4816 srv - ok

15:43:02.0755 4816 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys

15:43:02.0771 4816 srv2 - ok

15:43:02.0802 4816 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys

15:43:02.0818 4816 srvnet - ok

15:43:02.0849 4816 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys

15:43:02.0865 4816 ssmdrv - ok

15:43:02.0911 4816 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys

15:43:02.0927 4816 swenum - ok

15:43:02.0958 4816 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys

15:43:02.0974 4816 Symc8xx - ok

15:43:03.0005 4816 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys

15:43:03.0005 4816 Sym_hi - ok

15:43:03.0036 4816 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys

15:43:03.0052 4816 Sym_u3 - ok

15:43:03.0083 4816 SynTP (bf7aa84d5af0faa0978c840e63b17dbf) C:\Windows\system32\DRIVERS\SynTP.sys

15:43:03.0099 4816 SynTP - ok

15:43:03.0192 4816 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys

15:43:03.0239 4816 Tcpip - ok

15:43:03.0270 4816 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys

15:43:03.0286 4816 Tcpip6 - ok

15:43:03.0333 4816 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys

15:43:03.0348 4816 tcpipreg - ok

15:43:03.0379 4816 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys

15:43:03.0395 4816 TDPIPE - ok

15:43:03.0411 4816 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys

15:43:03.0426 4816 TDTCP - ok

15:43:03.0457 4816 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys

15:43:03.0473 4816 tdx - ok

15:43:03.0520 4816 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys

15:43:03.0535 4816 TermDD - ok

15:43:03.0629 4816 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys

15:43:03.0629 4816 tssecsrv - ok

15:43:03.0660 4816 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys

15:43:03.0676 4816 tunmp - ok

15:43:03.0691 4816 tunnel (119b8184e106baedc83fce5ddf3950da) C:\Windows\system32\DRIVERS\tunnel.sys

15:43:03.0691 4816 tunnel - ok

15:43:03.0723 4816 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys

15:43:03.0738 4816 uagp35 - ok

15:43:03.0785 4816 UBHelper (f763e070843ee2803de1395002b42938) C:\Windows\system32\drivers\UBHelper.sys

15:43:03.0801 4816 UBHelper - ok

15:43:03.0863 4816 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys

15:43:03.0894 4816 udfs - ok

15:43:03.0941 4816 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys

15:43:03.0957 4816 uliagpkx - ok

15:43:03.0988 4816 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys

15:43:04.0019 4816 uliahci - ok

15:43:04.0050 4816 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys

15:43:04.0066 4816 UlSata - ok

15:43:04.0097 4816 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys

15:43:04.0113 4816 ulsata2 - ok

15:43:04.0128 4816 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys

15:43:04.0159 4816 umbus - ok

15:43:04.0222 4816 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys

15:43:04.0222 4816 usbccgp - ok

15:43:04.0378 4816 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys

15:43:04.0393 4816 usbcir - ok

15:43:04.0549 4816 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys

15:43:04.0549 4816 usbehci - ok

15:43:04.0752 4816 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys

15:43:04.0768 4816 usbhub - ok

15:43:05.0033 4816 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys

15:43:05.0033 4816 usbohci - ok

15:43:05.0158 4816 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys

15:43:05.0173 4816 usbprint - ok

15:43:05.0220 4816 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys

15:43:05.0220 4816 usbscan - ok

15:43:05.0267 4816 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS

15:43:05.0283 4816 USBSTOR - ok

15:43:05.0329 4816 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys

15:43:05.0329 4816 usbuhci - ok

15:43:05.0407 4816 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys

15:43:05.0423 4816 usbvideo - ok

15:43:05.0454 4816 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys

15:43:05.0470 4816 vga - ok

15:43:05.0501 4816 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys

15:43:05.0517 4816 VgaSave - ok

15:43:05.0548 4816 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys

15:43:05.0563 4816 viaagp - ok

15:43:05.0595 4816 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys

15:43:05.0610 4816 ViaC7 - ok

15:43:05.0626 4816 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys

15:43:05.0641 4816 viaide - ok

15:43:05.0673 4816 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys

15:43:05.0688 4816 volmgr - ok

15:43:05.0735 4816 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys

15:43:05.0766 4816 volmgrx - ok

15:43:05.0813 4816 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys

15:43:05.0829 4816 volsnap - ok

15:43:05.0875 4816 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys

15:43:05.0891 4816 vsmraid - ok

15:43:05.0922 4816 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys

15:43:05.0938 4816 WacomPen - ok

15:43:05.0953 4816 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys

15:43:05.0969 4816 Wanarp - ok

15:43:06.0000 4816 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys

15:43:06.0000 4816 Wanarpv6 - ok

15:43:06.0047 4816 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys

15:43:06.0063 4816 Wd - ok

15:43:06.0109 4816 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys

15:43:06.0141 4816 Wdf01000 - ok

15:43:06.0219 4816 winbondcir (3fa87d56769838aac82fafc3e78fc732) C:\Windows\system32\DRIVERS\winbondcir.sys

15:43:06.0234 4816 winbondcir - ok

15:43:06.0328 4816 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys

15:43:06.0328 4816 WmiAcpi - ok

15:43:06.0468 4816 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys

15:43:06.0484 4816 WpdUsb - ok

15:43:06.0687 4816 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys

15:43:06.0702 4816 ws2ifsl - ok

15:43:06.0905 4816 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys

15:43:06.0921 4816 WUDFRd - ok

15:43:07.0014 4816 xusb21 (a640c90b007762939507c28a021be3b3) C:\Windows\system32\DRIVERS\xusb21.sys

15:43:07.0030 4816 xusb21 - ok

15:43:07.0155 4816 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} (4d840c6af3c020ed3a35efba9025cf4a) C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl

15:43:07.0155 4816 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796} - ok

15:43:07.0186 4816 MBR (0x1B8) (7ba4c7ea1ef33a92f5f01be63edacb6a) \Device\Harddisk0\DR0

15:43:08.0980 4816 \Device\Harddisk0\DR0 - ok

15:43:09.0027 4816 Boot (0x1200) (652dd192a7caf13e954ea2c55ea8f2f1) \Device\Harddisk0\DR0\Partition0

15:43:09.0027 4816 \Device\Harddisk0\DR0\Partition0 - ok

15:43:09.0042 4816 Boot (0x1200) (d5e83d7dbf32bd8a74d3b6f1394eaf35) \Device\Harddisk0\DR0\Partition1

15:43:09.0042 4816 \Device\Harddisk0\DR0\Partition1 - ok

15:43:09.0042 4816 ============================================================

15:43:09.0042 4816 Scan finished

15:43:09.0042 4816 ============================================================

15:43:09.0073 3880 Detected object count: 0

15:43:09.0073 3880 Actual detected object count: 0

lance_yien · le 22 novembre 2011

Oufff ça remarche

En faisant quoi?

Rien côté TDSSKiller mais ComboFix a enlevé pas mal de chose (section "Autres suppressions") et particulièrement la "Minibar"

--

Imprimer ces instructions ou les enregistrer dans un fichier texte sur le Bureau pour les consulter facilement à tout moment.

>>> ComboFix/ Correction: Cliquer sur "Démarrer" => "Exécuter". Saisir Notepad et cliquer sur "OK".

Copier et coller ces lignes:

RegLock::
[HKEY_USERS\S-1-5-21-1407215401-3916836144-435495257-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

Cliquer sur "Fichier" => "Enregistrer". Dans "Nom du fichier", saisir ou coller CFScript.txt, cliquer sur Bureau à gauche puis sur "Enregistrer" en bas à droite.

Fermer toutes les fenêtres et applications ouvertes et désactiver antivirus, pare-feu et antispyware pour éviter qu'ils interfèrent avec ComboFix.

Glisser le fichier CFScript.txt et le déposer sur ComboFix.exe

Ceci a pour effet de lancer ComboFix. Patienter!

A la fin, redémarrer le PC (s'il ne redémarre pas automatiquement) et Copier/coller le contenu du rapport généré dans la prochaine réponse. Il est sauvegardé, automatiquement, à la racine de la partition système (généralement C:\).

>>> Analyse en ligne: Brancher/ allumer tous les médias amovibles disponibles (DD externe, clés USB etc) susceptibles d'avoir été infecté et désactiver antivirus/ pare-feu et antispyware.

Utiliser Internet Explorer pour aller ici, cliquer sur le bouton "Lancer ESET Online Scanner", cocher la case "Oui, j'accepte les conditions d'utilisation." et cliquer sur Start.

Accepter l'installation de l'ActiveX et cocher "Analyser les archives". SANS RIEN CHANGER D'AUTRE, cliquer Démarrer.

Eset téléchargera la base de données et commencera le scan. NE PAS utiliser la machine tant que l'analyse n'est pas finie (peut durer très longtemps).

Quand c'est fini, un rapport "log.txt" sera sauvegardé automatiquement.

Pour ouvrir ce rapport, cliquer sur "Démarrer" => "Exécuter" et saisir (ou copier/coller):

%programfiles%\ESET\ESET Online Scanner\log.txt

Cliquer sur OK et copier/coller le contenu de la fenêtre qui s'ouvre dans la prochaine réponse.

--

Pour désinstaller ESET (plus tard), cliquer sur "Démarrer" => "Exécuter" et saisir (ou copier/coller):

%ProgramFiles%\\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe

Cliquer sur OK et redémarrer la machine.

>>> Rapports demandés à coller directement:

ComboFix.txt
log.txt

Tes appréciations?

melik · le 22 novembre 2011

Ca à remarché après avoir redémarrer mon pc.

Effectivement j'ai pu lire dans le rapport que Minibar revenais souvent j'en ai supposé que ça l'avait supprimé.

Par contre petit soucis je suis sous Vista je n'ai pas "exécuter" quand je clique sur "démarrer" comment faire?

Pardon de ne pas avoir dis que j'avais Vista plus tôt :outch:

lance_yien · le 22 novembre 2011

Ca à remarché après avoir redémarrer mon pc.

Merci pour ceux qui auront le mm problème et qui liront ton sujet :super:

Par contre petit soucis je suis sous Vista je n'ai pas "exécuter" quand je clique sur "démarrer" comment faire?

Je pense et j'espère que c'est la même chose que W7.

clic-droit sur la sphère ("Démarrer") => "Propriété".

Dans l'onglet "Menu Démarrer", cliquer sur "Personnaliser.." et cocher la case "Commande Exécuter".

Cliquer OK dans chaque fenêtre pour la fermer. Essayer!

Pardon de ne pas avoir dis que j'avais Vista plus tôt

Pas de souci, je le sais déjà

melik · le 22 novembre 2011

J'ai encore du redémarrer mon pc après l'utilisation de Combofix pour pouvoir utiliser mes fichiers et dossier je pense qu'il serait bon que vous le signaliez au prochaine personnes que vous aiderez pour qu'ils ne soient pas aussi surpris et inquiets que moi :lol:

Donc voici les rapports demandés

Combofix:

ComboFix 11-11-22.01 - Simon 22/11/2011 18:14:53.1.2 - x86

Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3066.1936 [GMT 1:00]

Lancé depuis: c:\users\Simon\Desktop\ComboFix.exe

Commutateurs utilisés :: c:\users\Simon\Desktop\CFScript.txt

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

((((((((((((((((((((((((((((( Fichiers créés du 2011-10-22 au 2011-11-22 ))))))))))))))))))))))))))))))))))))

.

2011-11-22 17:28 . 2011-11-22 17:28 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{0328370F-BDC3-4967-A98E-C1F5D788D993}\offreg.dll