demande d analyse

Section d'analyse de rapports et de désinfection : malwares en tous genre et autres indésirables. Demandes de nettoyage uniquement. Prise en charge restreinte : équipe spécialisée.

Modérateur: Modérateurs

Règles du forum :arrow: Les désinfections sont prises en charge par un groupe spécifique, tout le monde ne peut pas intervenir pour désinfecter les machines (règles).
:arrow: Les procédures sont sur-mesure, ne faites pas la même chose chez vous (explications).
:arrow: Un topic par machine, chacun crée le sien. ;)

demande d analyse

Messagepar lohardcore » 18 Fév 2010 17:54

bonjour a tous

j ai un ptit probleme avec firefox

il est devenu gourmand en cpu de 50% a 80%, par moment il fige ton mon systeme

ci-joint le rapport de hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:49:29, on 18/02/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Users\lohardcore\Desktop\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll,avgrsstx.dll
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 3722 bytes

par moment le processus de firefox continu a tourner alors que le soft est eteint
j espere que c est pas trop grave

merci d'avance
lohardcore
 
Messages: 35
Inscription: 25 Juil 2008 21:28

Re: demande d analyse

Messagepar Florinator » 18 Fév 2010 19:37

Bonjour Lohardcore,

Rien sur ce rapport, peut être une des extensions pourries de firefox que tu aurai installé?
On va pousser un peu la recherche, on vérifiera les eventuelles extensions présentes ensuite:

Télécharge ZHPDiag crée par Nicolas Coolman

  • Enregistre le sur ton bureau
  • Double clique sur l'icône
  • Suis les instructions à l'ecran
  • Clique sur Image pour lancer l'analyse
  • Clique sur Image pour copier le rapport
  • Puis colle le dans ta prochaine réponses
  • Le rapport se situe aussi sous C:\Program Files\ZebHelpProcess\ZHPDiag.txt

A++
Le savoir n'est utile que si il est transmis.
Avatar de l’utilisateur
Florinator
Maître Libellulien
Maître Libellulien
 
Messages: 661
Inscription: 28 Déc 2009 16:19

Re: demande d analyse

Messagepar lohardcore » 18 Fév 2010 19:47

salut florinator

je viens de faire une analyse avec ZHPDiag voici le rapport je le met en 2 message puisqu il y a trop de caracteres

Rapport de ZHPDiag v1.24.44 par Nicolas Coolman
Run by lohardcore at 18/02/2010 19:40:43
Web site : http://www.premiumorange.com/zeb-help-p ... pdiag.html
Platform : Windows 7 Ultimate
MSIE: Internet Explorer v8.0.7600.16385
MFIE: Mozilla Firefox (3.6)

Boot mode: Normal (Normal boot)
Total RAM: 2046 MB (70% free)
System drive C: has 52 GB (53%) free of 98 GB

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 52 Go of 98 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 138 Go of 149 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 147 Go of 368 Go)
G:\ CD-ROM drive (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
J:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
K:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
L:\ Hard drive, Flash drive, Thumb drive (Free 194 Go of 466 Go)
M:\ CD-ROM drive (Not Inserted)

---\\ Processus lancés
[MD5.72A7A352072EB6EC4953F9F580463B0D] - C:\PROGRA~1\AVG\AVG9\avgtray.exe
[MD5.8FC43D74CEA55EEFFB501870EDE86E11] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
[MD5.54A47F6B5E09A77E61649109C6A08866] - C:\Windows\System32\svchost.exe
[MD5.C34AB3B34ACC0260EBFEAB2827D99C45] - C:\Program Files\AVG\AVG9\avgemc.exe
[MD5.7E7B5FA964F578ACD655E8BEEAE2A5CA] - C:\Program Files\AVG\AVG9\avgwdsvc.exe
[MD5.E99AB6681D6B0946E102E7FC89854CB2] - C:\Windows\system32\nvvsvc.exe
[MD5.F42309C4191C506B71DB5D1126D26318] - C:\Windows\system32\lsass.exe
[MD5.4C287F9069FEDBD791178876EE9DE536] - C:\Windows\system32\sppsvc.exe
[MD5.7F8C9C766B7EE6B56895B3C1608637B7] - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,

---\\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

---\\ Internet Explorer URLSearchHook (R3)
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

---\\ Applications démarrées automatiquement par le registre (O4)
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\policies\Explorer: [NoDrives] Data=0
O4 - HKCU\..\policies\Explorer: [NoDriveTypeAutoRun] Data=145
O4 - HKCU\..\policies\Explorer: [NoDrives] Data=0

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000005\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll

---\\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab

---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll
O18 - Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll,avgrsstx.dll

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - %Systemroot%\system32\webcheck.dll

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: AVG E-mail Scanner (avg9emc) - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - C:\Windows\system32\nvvsvc.exe
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - C:\Windows\system32\sppsvc.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /HideWMP
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\Windows\system32\regsvr32.exe /s /n /i:/UserInstall C:\Windows\system32\themeui.dll
O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)
O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)
O40 - ASIC: Address Book 7 - {7790769C-0471-11d2-AF11-00C04FA35D02} - (not file)
O40 - ASIC: .NET Framework - {7C028AF8-F614-47B3-82DA-BA94E41B1089} - (not file)
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)
O40 - ASIC: .NET Framework - {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - (not file)
O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)
O40 - ASIC: Macromedia Shockwave Flash - {D27CDB6E-AE6D-11CF-96B8-444553540000} - C:\Windows\system32\Macromed\Flash\Flash10d.ocx
O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: @%systemroot%\system32\drivers\afd.sys,-1000 (AFD) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: archlp (archlp) - C:\WINDOWS\system32\drivers\archlp.sys
O41 - Driver: AVG AVI Loader Driver x86 (AvgLdx86) - C:\Windows\System32\Drivers\avgldx86.sys
O41 - Driver: AVG On-access Scanner Minifilter Driver x86 (AvgMfx86) - C:\Windows\System32\Drivers\avgmfx86.sys
O41 - Driver: AVG Network Redirector (AvgTdiX) - C:\Windows\System32\Drivers\avgtdix.sys
O41 - Driver: (no object) (blbdrive) - C:\WINDOWS\system32\DRIVERS\blbdrive.sys
O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
O41 - Driver: @%systemroot%\system32\cscsvc.dll,-202 (CSC) - C:\WINDOWS\system32\drivers\csc.sys
O41 - Driver: @%systemroot%\system32\drivers\dfsc.sys,-101 (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
O41 - Driver: @%systemroot%\system32\drivers\discache.sys,-102 (discache) - C:\WINDOWS\System32\drivers\discache.sys
O41 - Driver: Pilote BIOS de gestion de systèmes Microsoft (mssmbios) - C:\WINDOWS\system32\DRIVERS\mssmbios.sys
O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
O41 - Driver: @%SystemRoot%\system32\drivers\netbt.sys,-2 (NetBT) - C:\WINDOWS\System32\DRIVERS\netbt.sys
O41 - Driver: @%SystemRoot%\system32\drivers\nsiproxy.sys,-2 (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
O41 - Driver: @%SystemRoot%\System32\drivers\pacer.sys,-101 (Psched) - C:\WINDOWS\system32\DRIVERS\pacer.sys
O41 - Driver: @%systemroot%\system32\wkssvc.dll,-1000 (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
O41 - Driver: @%systemroot%\system32\DRIVERS\RDPCDD.sys,-100 (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
O41 - Driver: @%systemroot%\system32\drivers\RDPENCDD.sys,-101 (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
O41 - Driver: @%systemroot%\system32\drivers\RdpRefMp.sys,-101 (RDPREFMP) - C:\WINDOWS\system32\drivers\rdprefmp.sys
O41 - Driver: Pilote de port série (Serial) - C:\WINDOWS\system32\DRIVERS\serial.sys
O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
O41 - Driver: (no object) (TVicPort64) - C:\Windows\SysWOW64\drivers\TVicPort64.sys
O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
O41 - Driver: Virtual PC Network Filter Driver (vpcnfltr) - C:\WINDOWS\system32\DRIVERS\vpcnfltr.sys
O41 - Driver: @%SystemRoot%\system32\drivers\vpcvmm.sys,-100 (vpcvmm) - C:\WINDOWS\system32\drivers\vpcvmm.sys
O41 - Driver: @%systemroot%\system32\rascfg.dll,-32012 (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys
O41 - Driver: WFP Lightweight Filter (WfpLwf) - C:\WINDOWS\system32\DRIVERS\wfplwf.sys

---\\ Logiciels installés (O42)
O42 - Logiciel: 3DMark Vantage
O42 - Logiciel: 3DMark06
O42 - Logiciel: @BIOS Ver.2.01
O42 - Logiciel: AVG 9.0
O42 - Logiciel: Adobe Flash Player 10 ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin
O42 - Logiciel: Adobe Reader 9.3 - Français
O42 - Logiciel: ArcSoft TotalMedia Theatre 3
O42 - Logiciel: Assistant de connexion Windows Live
O42 - Logiciel: BioShock 2
O42 - Logiciel: CCleaner
O42 - Logiciel: CDex - Open Source Digital Audio CD Extractor
O42 - Logiciel: CPUID CPU-Z 1.53.1
O42 - Logiciel: Call of Duty Modern Warfare 2
O42 - Logiciel: Combined Community Codec Pack 2008-09-21 16:18
O42 - Logiciel: DScaler 5 Mpeg Decoders
O42 - Logiciel: Driver Sweeper 2.1.0
O42 - Logiciel: DriverMax 5
O42 - Logiciel: Futuremark SystemInfo
O42 - Logiciel: Galerie de photos Windows Live
O42 - Logiciel: Game Booster
O42 - Logiciel: HomePlayer 1.5.9
O42 - Logiciel: Installation Windows Live
O42 - Logiciel: Intel(R) Control Center
O42 - Logiciel: Intel(R) Rapid Storage Technology
O42 - Logiciel: Java(TM) 6 Update 18
O42 - Logiciel: Junk Mail filter update
O42 - Logiciel: LG PC Suite
O42 - Logiciel: LG USB Modem Driver
O42 - Logiciel: Logiciel d'archivage WinRAR
O42 - Logiciel: MSI Afterburner 1.5.0
O42 - Logiciel: MSI Kombustor(BETA) v0.8.0
O42 - Logiciel: MSVCRT
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
O42 - Logiciel: Ma-Config.com
O42 - Logiciel: Malwarebytes' Anti-Malware
O42 - Logiciel: Media Browser
O42 - Logiciel: Mega Manager
O42 - Logiciel: MemSet 3.6
O42 - Logiciel: Microsoft Choice Guard
O42 - Logiciel: Microsoft Games for Windows - LIVE
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2)
O42 - Logiciel: Microsoft Office Access MUI (French) 2007
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007
O42 - Logiciel: Microsoft Office Outlook Connector
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007
O42 - Logiciel: Microsoft Office Professional Plus 2007
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007
O42 - Logiciel: Microsoft Office Proof (English) 2007
O42 - Logiciel: Microsoft Office Proof (French) 2007
O42 - Logiciel: Microsoft Office Proof (German) 2007
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007
O42 - Logiciel: Microsoft Office Proofing (French) 2007
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007
O42 - Logiciel: Microsoft Office Word MUI (French) 2007
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
O42 - Logiciel: Mozilla Firefox (3.6)
O42 - Logiciel: NVIDIA Display Control Panel
O42 - Logiciel: NVIDIA Drivers
O42 - Logiciel: NVIDIA PhysX
O42 - Logiciel: OCCT Perestroika 3.1.0
O42 - Logiciel: OpenAL
O42 - Logiciel: Outil de téléchargement Windows Live
O42 - Logiciel: PC Wizard 2010.1.93
O42 - Logiciel: PCMark Vantage
O42 - Logiciel: Razer Copperhead
O42 - Logiciel: Razer Reclusa Config
O42 - Logiciel: ReClock (remove only)
O42 - Logiciel: Realtek Ethernet Controller Driver For Windows 7
O42 - Logiciel: Realtek High Definition Audio Driver
O42 - Logiciel: Refresh Rate Changer v2
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559)
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB973704)
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB973593)
O42 - Logiciel: Security Update for Microsoft Office Outlook 2007 (KB972363)
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB957789)
O42 - Logiciel: Security Update for Microsoft Office Publisher 2007 (KB969693)
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB969613)
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234)
O42 - Logiciel: SpeedFan (remove only)
O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 9
O42 - Logiciel: Spybot - Search & Destroy
O42 - Logiciel: The KMPlayer v2.9.4.1434 FR
O42 - Logiciel: TuneUp Utilities
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642)
O42 - Logiciel: Update for Microsoft Office InfoPath 2007 (KB976416)
O42 - Logiciel: Update for Microsoft Office Word 2007 (KB974561)
O42 - Logiciel: Update for Outlook 2007 Junk Email Filter (kb977719)
O42 - Logiciel: Winamp
O42 - Logiciel: Windows Live Call
O42 - Logiciel: Windows Live Communications Platform
O42 - Logiciel: Windows Live FolderShare
O42 - Logiciel: Windows Live Mail
O42 - Logiciel: Windows Live Messenger
O42 - Logiciel: Windows Live Movie Maker
O42 - Logiciel: Windows Live Writer

---\\ Contenu des dossiers Fichiers Communs (O43)
O43 - CFD:Common File Directory ----D- C:\Program Files\2K Games
O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\AGEIA Technologies
O43 - CFD:Common File Directory ----D- C:\Program Files\ArcSoft
O43 - CFD:Common File Directory ----D- C:\Program Files\AVG
O43 - CFD:Common File Directory ----D- C:\Program Files\Call of Duty Modern Warfare 2
O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner
O43 - CFD:Common File Directory ----D- C:\Program Files\CDex
O43 - CFD:Common File Directory ----D- C:\Program Files\Combined Community Codec Pack
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files
O43 - CFD:Common File Directory ----D- C:\Program Files\CPUID
O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools Lite
O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools Toolbar
O43 - CFD:Common File Directory ----D- C:\Program Files\DFX
O43 - CFD:Common File Directory ----D- C:\Program Files\Driver Sweeper
O43 - CFD:Common File Directory ----D- C:\Program Files\DScaler5
O43 - CFD:Common File Directory ----D- C:\Program Files\DVD Maker
O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers communs
O43 - CFD:Common File Directory ----D- C:\Program Files\Futuremark
O43 - CFD:Common File Directory ----D- C:\Program Files\GIGABYTE
O43 - CFD:Common File Directory ----D- C:\Program Files\HomePlayer
O43 - CFD:Common File Directory ----D- C:\Program Files\Innovative Solutions
O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Intel
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
O43 - CFD:Common File Directory ----D- C:\Program Files\IObit
O43 - CFD:Common File Directory ----D- C:\Program Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\LG Electronics
O43 - CFD:Common File Directory ----D- C:\Program Files\LG PC Suite 2
O43 - CFD:Common File Directory ----D- C:\Program Files\ma-config.com
O43 - CFD:Common File Directory ----D- C:\Program Files\Malwarebytes' Anti-Malware
O43 - CFD:Common File Directory ----D- C:\Program Files\MediaBrowser
O43 - CFD:Common File Directory ----D- C:\Program Files\Megaupload
O43 - CFD:Common File Directory ----D- C:\Program Files\MemSet
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games for Windows - LIVE
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office Outlook Connector
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Visual Studio 8
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox 3.6 Beta 3
O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
O43 - CFD:Common File Directory ----D- C:\Program Files\MSI Afterburner
O43 - CFD:Common File Directory ----D- C:\Program Files\MSI Kombustor
O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
O43 - CFD:Common File Directory ----D- C:\Program Files\NeoSmart Technologies
O43 - CFD:Common File Directory ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD:Common File Directory ----D- C:\Program Files\OCCT
O43 - CFD:Common File Directory ----D- C:\Program Files\OpenAL
O43 - CFD:Common File Directory ----D- C:\Program Files\Phyxion.net
O43 - CFD:Common File Directory ----D- C:\Program Files\Razer
O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
O43 - CFD:Common File Directory ----D- C:\Program Files\ReClock
O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
O43 - CFD:Common File Directory ----D- C:\Program Files\RRC
O43 - CFD:Common File Directory ----D- C:\Program Files\SpeedFan
O43 - CFD:Common File Directory ----D- C:\Program Files\Spybot - Search & Destroy
O43 - CFD:Common File Directory --H-D- C:\Program Files\Temp
O43 - CFD:Common File Directory ----D- C:\Program Files\The KMPlayer FR
O43 - CFD:Common File Directory ----D- C:\Program Files\TuneUp Utilities 2010
O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Win7codecs
O43 - CFD:Common File Directory ----D- C:\Program Files\Winamp
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Defender
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mail
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Portable Devices
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Sidebar
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Virtual PC
O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR
O43 - CFD:Common File Directory ----D- C:\Program Files\ZHPDiag
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DFX
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Futuremark Shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Nero
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\PX Storage Engine
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Wise Installation Wizard

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.F2349155135D6A684440BAA3057DD26E] - 18/02/2010 - 17:30:13 --HA- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
O44 - LFC:[MD5.F2349155135D6A684440BAA3057DD26E] - 18/02/2010 - 17:30:13 --HA- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
O44 - LFC:[MD5.24D59D7712F0101415804F976D06495D] - 18/02/2010 - 17:29:18 ---A- C:\Windows\System32\PerfStringBackup.INI
O44 - LFC:[MD5.82FFAC3FFC063CCA1497F8A536D9AC8E] - 18/02/2010 - 17:29:18 ---A- C:\Windows\System32\perfc009.dat
O44 - LFC:[MD5.017B24126B7677946ADA5F4D6207B97F] - 18/02/2010 - 17:29:18 ---A- C:\Windows\System32\perfc00C.dat
O44 - LFC:[MD5.BECA0A018B631A812DAAD8B9FBB431CE] - 18/02/2010 - 17:29:18 ---A- C:\Windows\System32\perfh009.dat
O44 - LFC:[MD5.C61693D00A3E381C42329B9DCD0BAA0D] - 18/02/2010 - 17:29:18 ---A- C:\Windows\System32\perfh00C.dat
O44 - LFC:[MD5.00000000000000000000000000000000] - 18/02/2010 - 17:28:09 ---A- C:\Windows\WindowsUpdate.log
O44 - LFC:[MD5.FE558BC6D9ACCCAA651CC4FAA8EE42D9] - 18/02/2010 - 17:25:05 ---A- C:\Windows\setupact.log
O44 - LFC:[MD5.7D028921BA924B47F3744336B84E654A] - 18/02/2010 - 17:25:04 -S-A- C:\Windows\bootstat.dat
O44 - LFC:[MD5.0D06F7FD895EE1364F810B972DF6BD4B] - 17/02/2010 - 21:08:22 ---A- C:\Windows\PFRO.log
O44 - LFC:[MD5.2ED229730D45E277C6CFA85A146DA97C] - 17/02/2010 - 20:59:04 ---A- C:\Windows\ntbtlog.txt
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 11/02/2010 - 23:00:09 ---A- C:\Windows\setuperr.log
O44 - LFC:[MD5.9D8923234F2FD5A07C998C8048F65CAE] - 11/02/2010 - 22:05:28 ---A- C:\ComboFix.txt
O44 - LFC:[MD5.11794BB2350A9C83C699F27949CA9AA6] - 11/02/2010 - 21:08:15 ---A- C:\Windows\System32\avgrep.txt
O44 - LFC:[MD5.024D44C3329A011713EEDEA1704A6B39] - 08/02/2010 - 06:46:22 ---A- C:\Windows\System32\RTSndMgr.cpl
O44 - LFC:[MD5.D81476A803BB8D55F8D9D39D51A3252E] - 08/02/2010 - 06:46:16 ---A- C:\Windows\System32\RtkCoInst.dll
O44 - LFC:[MD5.7BC1102B18FDFF2BCDF04761D6947743] - 08/02/2010 - 06:46:16 ---A- C:\Windows\System32\RtkPgExt.dll
O44 - LFC:[MD5.7839089DBCFA96958AE9E35165B8DDDA] - 08/02/2010 - 06:46:10 ---A- C:\Windows\System32\RtkAPO.dll
O44 - LFC:[MD5.1C2B0E3CCE10CA185B8ECF7B74C3876A] - 08/02/2010 - 06:46:10 ---A- C:\Windows\System32\RtkApoApi.dll
O44 - LFC:[MD5.B68A9BAD1B7C1453EF063C09EBD95C2E] - 08/02/2010 - 06:17:58 ---A- C:\Windows\System32\drivers\RTKVHDA.sys
O44 - LFC:[MD5.5C230948DD6652228F88CA7AE6CB276C] - 06/02/2010 - 08:34:33 ---A- C:\Windows\gdrv.sys
O44 - LFC:[MD5.6EA1554F7B3C3916C69E64801C28DA82] - 05/02/2010 - 19:21:49 ---A- C:\Windows\d3dx.dat
O44 - LFC:[MD5.FF795B328DB418641D071586420D869A] - 05/02/2010 - 09:47:58 ---A- C:\Windows\System32\FNTCACHE.DAT
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 04/02/2010 - 21:24:40 RSHA- C:\IO.SYS
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 04/02/2010 - 21:24:40 RSHA- C:\MSDOS.SYS
O44 - LFC:[MD5.EAB287E3724CED398BEB059018012C5E] - 04/02/2010 - 21:19:02 ---A- C:\Windows\GSetup.ini
O44 - LFC:[MD5.C811E70C8804CFFF719038250A43B464] - 04/02/2010 - 10:01:14 ---A- C:\Windows\System32\X3DAudio1_7.dll
O44 - LFC:[MD5.E4CE2AF32F501A7F7DDDD908704A0EE6] - 04/02/2010 - 10:01:14 ---A- C:\Windows\System32\XAPOFX1_4.dll
O44 - LFC:[MD5.4976243BD70FAE3D1D24E49739AB2710] - 04/02/2010 - 10:01:14 ---A- C:\Windows\System32\XAudio2_6.dll
O44 - LFC:[MD5.F81C4678A55FFEE585AC75825FAF5582] - 04/02/2010 - 10:01:14 ---A- C:\Windows\System32\xactengine3_6.dll
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 02/02/2010 - 07:18:28 ---A- C:\Tech_Vista.log
O44 - LFC:[MD5.E474202772C45CF949C51AEE72241A48] - 01/02/2010 - 20:26:20 ---A- C:\Windows\System32\MRT.exe
O44 - LFC:[MD5.F0126DEE14446B26DCC5D8F35342981D] - 01/02/2010 - 04:14:54 ---A- C:\Windows\RtlExUpd.dll
O44 - LFC:[MD5.5D21398DF4D0F91EC804CB319C340AB1] - 30/01/2010 - 17:14:36 ---A- C:\Windows\CDPlayer.ini
O44 - LFC:[MD5.59F1080EF324BDD5A63975AB721247B3] - 27/01/2010 - 20:12:21 ---A- C:\Windows\MegaManager.INI
O44 - LFC:[MD5.31A2E7E943ADECBA50510D9A479F3437] - 25/01/2010 - 23:38:24 ---A- C:\Windows\System32\AERTACap.dll
O44 - LFC:[MD5.938A7847F080737CF55B994A46E0E828] - 25/01/2010 - 07:12:06 ---A- C:\Windows\System32\FMAPO.dll
O44 - LFC:[MD5.E0BBCEC12A1DE6E25C612AD205B719B4] - 23/01/2010 - 13:10:47 ---A- C:\Windows\System32\deploytk.dll
O44 - LFC:[MD5.AD3A2226B72F6E161425254276670117] - 23/01/2010 - 13:10:47 ---A- C:\Windows\System32\java.exe
O44 - LFC:[MD5.B427962BDB196D132AF50F6C7B78380D] - 23/01/2010 - 13:10:47 ---A- C:\Windows\System32\javaw.exe
O44 - LFC:[MD5.C8824405C4E358A2FE4D97C83101079A] - 23/01/2010 - 13:10:47 ---A- C:\Windows\System32\javaws.exe
O44 - LFC:[MD5.E93A7ACBA75A023E5B283075FE999DD5] - 23/01/2010 - 10:37:58 ---A- C:\Windows\NAVIGMA.INI
O44 - LFC:[MD5.E492B721EF2A10048582E160869183D9] - 23/01/2010 - 08:24:11 ---A- C:\Windows\System32\lgAxconfig.ini
O44 - LFC:[MD5.62EC42D65868E0E5084CD74CF556EBB8] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\OpenCL.dll
O44 - LFC:[MD5.BE744D34EF0534E14DA2033B7154F46B] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\drivers\nvBridge.kmd
O44 - LFC:[MD5.D0EE2715D78246267AC0ED483A475682] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\drivers\nvlddmkm.sys
O44 - LFC:[MD5.DB78E77FD86E8855208D3CF3C8E6F38D] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvapi.dll
O44 - LFC:[MD5.79EBB51539BF26B20FEC38478D81CF0A] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvcod.dll
O44 - LFC:[MD5.79EBB51539BF26B20FEC38478D81CF0A] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvcod190.dll
O44 - LFC:[MD5.981AB8032A92BA51E419EBD95368B6AD] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvcompiler.dll
O44 - LFC:[MD5.ADFF500C069F4A4837CB86E3E2868B46] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvcuda.dll
O44 - LFC:[MD5.567AFED2FB45292D33AF26440BDF2328] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvcuvenc.dll
O44 - LFC:[MD5.6D131C96BB5769ADFE7AD41E7185BD43] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvcuvid.dll
O44 - LFC:[MD5.81EEBFB24F595CE1644A611DD33DD690] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvd3dum.dll
O44 - LFC:[MD5.436107D6D2BC52C4037F1B764A5F69F0] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvdecodemft.dll
O44 - LFC:[MD5.7343A6743875C83B86DA56145146C99D] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvencodemft.dll
O44 - LFC:[MD5.FA97B8007B19217E28B4D709FD7CBF40] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvinfo.pb
O44 - LFC:[MD5.45CC58D1639A34A01D37C348912CBAA3] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvoglv32.dll
O44 - LFC:[MD5.F2B76759AC8C78F8B9374BF95029DDAA] - 22/01/2010 - 10:50:59 ---A- C:\Windows\System32\nvwgf2um.dll
O44 - LFC:[MD5.DFFB02749499DF945EBCC3387F913524] - 22/01/2010 - 04:10:30 ---A- C:\Windows\System32\NvApps.xml
O44 - LFC:[MD5.53EE875015436E3A1860F37089F6A018] - 22/01/2010 - 04:10:30 ---A- C:\Windows\System32\NvwsApps.xml
O44 - LFC:[MD5.4F5556438E5F6BD578A59FEADC8C8DFE] - 22/01/2010 - 04:10:00 ---A- C:\Windows\System32\nvcpl.dll
O44 - LFC:[MD5.BC2253A7E33E149E00E57AFDE0F701A9] - 22/01/2010 - 04:10:00 ---A- C:\Windows\System32\nvmctray.dll
O44 - LFC:[MD5.536576697AF57D102EF2E0D03E69DD2B] - 22/01/2010 - 04:10:00 ---A- C:\Windows\System32\nvshext.dll
O44 - LFC:[MD5.AEBD5ABC4EBCD6111193FD38DC693C4E] - 22/01/2010 - 04:10:00 ---A- C:\Windows\System32\nvsvc.dll
O44 - LFC:[MD5.72F5BDE21344A5231D9E09693DC81268] - 22/01/2010 - 04:10:00 ---A- C:\Windows\System32\nvsvcr.dll
O44 - LFC:[MD5.E99AB6681D6B0946E102E7FC89854CB2] - 22/01/2010 - 04:10:00 ---A- C:\Windows\System32\nvvsvc.exe
O44 - LFC:[MD5.720D938888367CC6E01CCAFA94FF8D85] - 19/01/2010 - 00:29:31 ---A- C:\Windows\System32\secproc_isv.dll
O44 - LFC:[MD5.05FDFDEECA9033162E8B70C1FADD9DEB] - 19/01/2010 - 00:29:31 ---A- C:\Windows\System32\secproc_ssp.dll
O44 - LFC:[MD5.2DA7629FFCC16F65D6CCF968362CD80B] - 19/01/2010 - 00:29:31 ---A- C:\Windows\System32\secproc_ssp_isv.dll
O44 - LFC:[MD5.29F52745B29555B8ED7BC7FBD8032086] - 19/01/2010 - 00:29:30 ---A- C:\Windows\System32\secproc.dll
O44 - LFC:[MD5.77EE5FD84A8A2548A2670D5845BC97DF] - 19/01/2010 - 00:28:33 ---A- C:\Windows\System32\RMActivate_isv.exe
O44 - LFC:[MD5.F463E3C7925A8C16DFC502C9C59AF6EA] - 19/01/2010 - 00:28:33 ---A- C:\Windows\System32\RMActivate_ssp_isv.exe
O44 - LFC:[MD5.596F545E1E65E7647E3F306F32B16499] - 19/01/2010 - 00:28:30 ---A- C:\Windows\System32\RMActivate.exe
O44 - LFC:[MD5.F50814F3FE0B75A786DEE08FD27D8AC1] - 19/01/2010 - 00:28:30 ---A- C:\Windows\System32\RMActivate_ssp.exe

---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Minimal\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS1\Network\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Minimal\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\vgasave.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CS2\Network\volmgrx.sys

---\\ Trojan Driver Search Data (TDSD) (O52)
O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv"
O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm"
O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll"
O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv"
O52 - TDSD:HKLM\...\Drivers32\"vidc.uyvy"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.yuy2"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.yvyu"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.iyuv"="iyuv_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.i420"="iyuv_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.yvu9"="tsbyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm"
O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.XVID"="xvidvfw.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.FFDS"="C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.ac3filter"="ac3filter.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.avis"="ff_acm.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.siren"="sirenacm.dll"
O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv"
O52 - TDSD:HKLM\...\drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec"
O52 - TDSD:HKLM\...\drivers.desc\"wdmaud.drv"="Realtek High Definition Audio"
O52 - TDSD:HKLM\...\drivers.desc\"ff_vfw.dll"="ffdshow video encoder"
O52 - TDSD:HKLM\...\drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec"
O52 - TDSD:HKLM\...\drivers.desc\"ac3filter.acm"="AC3Filter ACM codec"
O52 - TDSD:HKLM\...\drivers.desc\"ff_acm.acm"="ffdshow ACM codec"
O52 - TDSD:HKLM\...\drivers.desc\"C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll"="ffdshow Video Codec"
O52 - TDSD:HKLM\...\drivers.desc\"sirenacm.dll"="Messenger Audio Codec"

---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - "SecurityProviders"=credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - "SecurityProviders"=credssp.dll
lohardcore
 
Messages: 35
Inscription: 25 Juil 2008 21:28

Re: demande d analyse

Messagepar lohardcore » 18 Fév 2010 19:48

2eme partie

---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0
O55 - MWPS:[HKLM\...\Policies\System] - "DisableRegistryTools"=0

---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKCU\...\Policies\Explorer] - "NoDrives"=0
O56 - MWPE:[HKLM\...\Policies\Explorer] - "NoDrives"=0

---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.FBCE2F43185104AE8BF4D32571B19203] - 14/07/2009 - 00:51:21 ---A- C:\Windows\system32\drivers\1394bus.sys
O58 - SDL:[MD5.6D2ACA41739BFE8CB86EE8E85F29697D] - 14/07/2009 - 00:52:00 ---A- C:\Windows\system32\drivers\1394ohci.sys
O58 - SDL:[MD5.F0E07D144C8685B8774BC32FC8DA4DF0] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\acpi.sys
O58 - SDL:[MD5.98D81CA942D19F7D9153B095162AC013] - 14/07/2009 - 00:16:36 ---A- C:\Windows\system32\drivers\acpipmi.sys
O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\adp94xx.sys
O58 - SDL:[MD5.0C676BC278D5B59FF5ABD57BBE9123F2] - 14/07/2009 - 02:26:17 ---A- C:\Windows\system32\drivers\adpahci.sys
O58 - SDL:[MD5.7C7B5EE4B7B822EC85321FE23A27DB33] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\adpu320.sys
O58 - SDL:[MD5.DDC040FDB01EF1712A6B13E52AFB104C] - 14/07/2009 - 00:12:38 ---A- C:\Windows\system32\drivers\afd.sys
O58 - SDL:[MD5.57EC4AEF73660166074D8F7F31C0D4FD] - 14/07/2009 - 00:55:00 ---A- C:\Windows\system32\drivers\agilevpn.sys
O58 - SDL:[MD5.0D40BCF52EA90FC7DF2AEAB6503DEA44] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\aliide.sys
O58 - SDL:[MD5.3C6600A0696E90A463771C7422E23AB5] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\AMDAGP.SYS
O58 - SDL:[MD5.CD5914170297126B6266860198D1D4F0] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\amdide.sys
O58 - SDL:[MD5.00DDA200D71BAC534BF56A9DB5DFD666] - 14/07/2009 - 00:11:04 ---A- C:\Windows\system32\drivers\amdk8.sys
O58 - SDL:[MD5.3CBF30F5370FDA40DD3E87DF38EA53B6] - 14/07/2009 - 00:11:04 ---A- C:\Windows\system32\drivers\amdppm.sys
O58 - SDL:[MD5.2101A86C25C154F8314B24EF49D7FBC2] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\amdsata.sys
O58 - SDL:[MD5.EA43AF0C423FF267355F74E7A53BDABA] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\amdsbs.sys
O58 - SDL:[MD5.B81C2B5616F6420A9941EA093A92B150] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\amdxata.sys
O58 - SDL:[MD5.FEB834C02CE1E84B6A38F953CA067706] - 14/07/2009 - 00:36:52 ---A- C:\Windows\system32\drivers\appid.sys
O58 - SDL:[MD5.2932004F49677BD84DBC72EDB754FFB3] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\arc.sys
O58 - SDL:[MD5.DC80B26D4A398E71775F682A5AB88127] - 13/08/2009 - 11:45:56 ---A- C:\Windows\system32\drivers\ArcHlp.sys
O58 - SDL:[MD5.5D6F36C46FD283AE1B57BD2E9FEB0BC7] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\arcsas.sys
O58 - SDL:[MD5.ADD2ADE1C2B285AB8378D2DAAF991481] - 14/07/2009 - 00:54:46 ---A- C:\Windows\system32\drivers\asyncmac.sys
O58 - SDL:[MD5.338C86357871C167A96AB976519BF59E] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\atapi.sys
O58 - SDL:[MD5.BCA15585EFDDE7EBA8568BDFB75983A3] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\ataport.sys
O58 - SDL:[MD5.5DFF0BDE81E35D725C15F01BAEA7740C] - 09/01/2010 - 16:44:01 ---A- C:\Windows\system32\drivers\avgldx86.sys
O58 - SDL:[MD5.DB5FC10B2FA4A46A6D9D88A7AB509184] - 09/01/2010 - 16:44:00 ---A- C:\Windows\system32\drivers\avgmfx86.sys
O58 - SDL:[MD5.DC60431576173F3824CEDC5828F606C9] - 09/01/2010 - 16:44:04 ---A- C:\Windows\system32\drivers\avgrkx86.sys
O58 - SDL:[MD5.4F859C6E204B1205DEB79BD514E29244] - 09/01/2010 - 16:44:03 ---A- C:\Windows\system32\drivers\avgtdix.sys
O58 - SDL:[MD5.BD8869EB9CDE6BBE4508D869929869EE] - 13/07/2009 - 23:02:49 ---A- C:\Windows\system32\drivers\b57nd60x.sys
O58 - SDL:[MD5.2B8EE031FD700AB942EBE60665440E83] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\battc.sys
O58 - SDL:[MD5.505506526A9D467307B3C393DEDAF858] - 14/07/2009 - 00:45:01 ---A- C:\Windows\system32\drivers\beep.sys
O58 - SDL:[MD5.2287078ED48FCFC477B05B20CF38F36F] - 14/07/2009 - 00:23:04 ---A- C:\Windows\system32\drivers\blbdrive.sys
O58 - SDL:[MD5.FCAFAEF6798D7B51FF029F99A9898961] - 14/07/2009 - 00:14:22 ---A- C:\Windows\system32\drivers\bowser.sys
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 13/07/2009 - 23:53:28 ---A- C:\Windows\system32\drivers\BrFiltLo.sys
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 13/07/2009 - 23:53:28 ---A- C:\Windows\system32\drivers\BrFiltUp.sys
O58 - SDL:[MD5.77361D72A04F18809D0EFB6CCEB74D4B] - 14/07/2009 - 01:41:26 ---A- C:\Windows\system32\drivers\bridge.sys
O58 - SDL:[MD5.845B8CE732E67F3B4133164868C666EA] - 14/07/2009 - 01:57:25 ---A- C:\Windows\system32\drivers\BrSerId.sys
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 13/07/2009 - 23:53:32 ---A- C:\Windows\system32\drivers\BrSerWdm.sys
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 13/07/2009 - 23:53:33 ---A- C:\Windows\system32\drivers\BrUsbMdm.sys
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 13/07/2009 - 23:53:33 ---A- C:\Windows\system32\drivers\BrUsbSer.sys
O58 - SDL:[MD5.ED3DF7C56CE0084EB2034432FC56565A] - 14/07/2009 - 00:51:34 ---A- C:\Windows\system32\drivers\bthmodem.sys
O58 - SDL:[MD5.1A231ABEC60FD316EC54C66715543CEC] - 13/07/2009 - 23:02:48 ---A- C:\Windows\system32\drivers\bxvbdx.sys
O58 - SDL:[MD5.77EA11B065E0A8AB902D78145CA51E10] - 14/07/2009 - 00:11:15 ---A- C:\Windows\system32\drivers\cdfs.sys
O58 - SDL:[MD5.BA6E70AA0E6091BC39DE29477D866A77] - 14/07/2009 - 00:11:26 ---A- C:\Windows\system32\drivers\cdrom.sys
O58 - SDL:[MD5.3FE3FE94A34DF6FB06E6418D0F6A0060] - 14/07/2009 - 00:51:17 ---A- C:\Windows\system32\drivers\circlass.sys
O58 - SDL:[MD5.A6388A5ABF92C7927C085DB0A958125F] - 14/07/2009 - 02:26:15 ---A- C:\Windows\system32\drivers\Classpnp.sys
O58 - SDL:[MD5.DEA805815E587DAD1DD2C502220B5616] - 14/07/2009 - 00:19:18 ---A- C:\Windows\system32\drivers\CmBatt.sys
O58 - SDL:[MD5.C537B1DB64D495B9B4717B4D6D9EDBF2] - 14/07/2009 - 02:26:21 ---A- C:\Windows\system32\drivers\cmdide.sys
O58 - SDL:[MD5.1B675691ED940766149C93E8F4488D68] - 14/07/2009 - 02:17:54 ---A- C:\Windows\system32\drivers\cng.sys
O58 - SDL:[MD5.A6023D3823C37043986713F118A89BEE] - 14/07/2009 - 02:26:21 ---A- C:\Windows\system32\drivers\compbatt.sys
O58 - SDL:[MD5.F1724BA27E97D627F808FB0BA77A28A6] - 14/07/2009 - 00:45:26 ---A- C:\Windows\system32\drivers\CompositeBus.sys
O58 - SDL:[MD5.53C90851262D0217F2B0CBEC66160949] - 10/11/2009 - 15:50:08 ---A- C:\Windows\system32\drivers\copperhd.sys
O58 - SDL:[MD5.097A0A4899B759A4F032BD464963B4BE] - 27/03/2009 - 01:16:28 ---A- C:\Windows\system32\drivers\cpuz132_x32.sys
O58 - SDL:[MD5.B7EFEF22FF426EC4158A177CB3B558D3] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\crashdmp.sys
O58 - SDL:[MD5.2C4EBCFC84A9B44F209DFF6C6E6C61D1] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\crcdisk.sys
O58 - SDL:[MD5.27C9490BDD0AE48911AB8CF1932591ED] - 14/07/2009 - 00:15:13 ---A- C:\Windows\system32\drivers\csc.sys
O58 - SDL:[MD5.8E09E52EE2E3CEB199EF3DD99CF9E3FB] - 14/07/2009 - 00:14:17 ---A- C:\Windows\system32\drivers\dfsc.sys
O58 - SDL:[MD5.1A050B0274BFB3890703D490F330C0DA] - 14/07/2009 - 00:24:05 ---A- C:\Windows\system32\drivers\discache.sys
O58 - SDL:[MD5.565003F326F99802E68CA78F2A68E9FF] - 14/07/2009 - 02:20:27 ---A- C:\Windows\system32\drivers\disk.sys
O58 - SDL:[MD5.9E9C3566083E3A152D4D5C5311A852AB] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\Diskdump.sys
O58 - SDL:[MD5.8B30250D573A8F6B4BD23195160D8707] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\djsvs.sys
O58 - SDL:[MD5.27F9288AF019E6DACA281EDE51FF5928] - 14/07/2009 - 01:41:37 ---A- C:\Windows\system32\drivers\drmk.sys
O58 - SDL:[MD5.B918E7C5F9BF77202F89E1A9539F2EB4] - 14/07/2009 - 00:50:57 ---A- C:\Windows\system32\drivers\drmkaud.sys
O58 - SDL:[MD5.5428227D4730EBDFC842E9FB593F8C8A] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\Dumpata.sys
O58 - SDL:[MD5.62A63EF2F3053B461CB327E4D69AAA74] - 14/07/2009 - 02:17:54 ---A- C:\Windows\system32\drivers\dumpfve.sys
O58 - SDL:[MD5.5FCD3320AAE71506B43F9E12E4E72172] - 14/07/2009 - 00:25:26 ---A- C:\Windows\system32\drivers\dxapi.sys
O58 - SDL:[MD5.1B6242B20CB56F85A158E67F09EE84FE] - 14/07/2009 - 00:25:25 ---A- C:\Windows\system32\drivers\dxg.sys
O58 - SDL:[MD5.8B6C3464D7FAC176500061DBFFF42AD4] - 02/10/2009 - 05:06:59 ---A- C:\Windows\system32\drivers\dxgkrnl.sys
O58 - SDL:[MD5.F9BA894F72F78A5B74EECD97394F97E0] - 14/07/2009 - 00:25:35 ---A- C:\Windows\system32\drivers\dxgmms1.sys
O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\elxstor.sys
O58 - SDL:[MD5.16EBD8BF1D5090923694CC972C7CE1B4] - 17/09/2008 - 14:14:00 R--A- C:\Windows\system32\drivers\Entech.sys
O58 - SDL:[MD5.8FC3208352DD3912C94367A206AB3F11] - 14/07/2009 - 00:19:19 ---A- C:\Windows\system32\drivers\errdev.sys
O58 - SDL:[MD5.024E1B5CAC09731E4D868E64DBFB4AB0] - 13/07/2009 - 23:02:48 ---A- C:\Windows\system32\drivers\evbdx.sys
O58 - SDL:[MD5.2DC9108D74081149CC8B651D3A26207F] - 14/07/2009 - 00:14:03 ---A- C:\Windows\system32\drivers\exfat.sys
O58 - SDL:[MD5.7E0AB74553476622FB6AE36F73D97D35] - 14/07/2009 - 00:14:02 ---A- C:\Windows\system32\drivers\fastfat.sys
O58 - SDL:[MD5.E817A017F82DF2A1F8CFDBDA29388B29] - 14/07/2009 - 00:45:45 ---A- C:\Windows\system32\drivers\fdc.sys
O58 - SDL:[MD5.6CF00369C97F3CF563BE99BE983D13D8] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\fileinfo.sys
O58 - SDL:[MD5.42C51DC94C91DA21CB9196EB64C45DB9] - 14/07/2009 - 00:15:29 ---A- C:\Windows\system32\drivers\filetrace.sys
O58 - SDL:[MD5.87907AA70CB3C56600F1C2FB8841579B] - 14/07/2009 - 00:45:45 ---A- C:\Windows\system32\drivers\flpydisk.sys
O58 - SDL:[MD5.7520EC808E0C35E0EE6F841294316653] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\fltMgr.sys
O58 - SDL:[MD5.1A16B57943853E598CFF37FE2B8CBF1D] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\fsdepends.sys
O58 - SDL:[MD5.A574B4360E438977038AAE4BF60D79A2] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\fs_rec.sys
O58 - SDL:[MD5.5592F5DBA26282D24D2B080EB438A4D7] - 14/07/2009 - 02:17:54 ---A- C:\Windows\system32\drivers\fvevol.sys
O58 - SDL:[MD5.5A50439AAC7BB7763237A88F0F3A337F] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\FWPKCLNT.SYS
O58 - SDL:[MD5.65EE0C7A58B65E74AE05637418153938] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\GAGP30KX.SYS
O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 13/07/2009 - 23:54:14 ---A- C:\Windows\system32\drivers\hcw85cir.sys
O58 - SDL:[MD5.717A2207FD6F13AD3E664C7D5A43C7BF] - 14/07/2009 - 00:50:56 ---A- C:\Windows\system32\drivers\hdaudbus.sys
O58 - SDL:[MD5.3530CAD25DEBA7DC7DE8BB51632CBC5F] - 14/07/2009 - 00:51:47 ---A- C:\Windows\system32\drivers\HdAudio.sys
O58 - SDL:[MD5.1D58A7F3E11A9731D0EAAAA8405ACC36] - 14/07/2009 - 00:19:21 ---A- C:\Windows\system32\drivers\hidbatt.sys
O58 - SDL:[MD5.89448F40E6DF260C206A193A4683BA78] - 14/07/2009 - 00:51:33 ---A- C:\Windows\system32\drivers\hidbth.sys
O58 - SDL:[MD5.B682E1CC0FDC7AC04B71D1FA9A07EF21] - 14/07/2009 - 00:51:01 ---A- C:\Windows\system32\drivers\hidclass.sys
O58 - SDL:[MD5.CF50B4CF4A4F229B9F3C08351F99CA5E] - 14/07/2009 - 00:51:05 ---A- C:\Windows\system32\drivers\hidir.sys
O58 - SDL:[MD5.6C26122F1931D4D7810240F32DDCE890] - 14/07/2009 - 00:51:00 ---A- C:\Windows\system32\drivers\hidparse.sys
O58 - SDL:[MD5.25072FB35AC90B25F9E4E3BACF774102] - 14/07/2009 - 00:51:04 ---A- C:\Windows\system32\drivers\hidusb.sys
O58 - SDL:[MD5.295FDC419039090EB8B49FFDBB374549] - 14/07/2009 - 02:20:28 ---A- C:\Windows\system32\drivers\HpSAMD.sys
O58 - SDL:[MD5.6FC9CDA0B608DFDA41E42D2E9C7D7874] - 19/02/2008 - 09:09:10 ---A- C:\Windows\system32\drivers\HS3dSensor1394.sys
O58 - SDL:[MD5.C531C7FD9E8B62021112787C4E2C5A5A] - 14/07/2009 - 00:12:59 ---A- C:\Windows\system32\drivers\http.sys
O58 - SDL:[MD5.8305F33CDE89AD6C7A0763ED0B5A8D42] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\hwpolicy.sys
O58 - SDL:[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - 14/07/2009 - 00:11:24 ---A- C:\Windows\system32\drivers\i8042prt.sys
O58 - SDL:[MD5.D5EDB998656E6ECF1A17C78DAB019A3C] - 02/10/2009 - 12:40:50 ---A- C:\Windows\system32\drivers\iaStor.sys
O58 - SDL:[MD5.934AF4D7C5F457B9F0743F4299B77B67] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\iaStorV.sys
O58 - SDL:[MD5.4173FF5708F3236CF25195FECD742915] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\iirsp.sys
O58 - SDL:[MD5.A0F12F2C9BA6C72F3987CE780E77C130] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\intelide.sys
O58 - SDL:[MD5.3B514D27BFC4ACCB4037BC6685F766E0] - 14/07/2009 - 00:11:04 ---A- C:\Windows\system32\drivers\intelppm.sys
O58 - SDL:[MD5.709D1761D3B19A932FF0238EA6D50200] - 14/07/2009 - 00:54:29 ---A- C:\Windows\system32\drivers\ipfltdrv.sys
O58 - SDL:[MD5.E4454B6C37D7FFD5649611F6496308A7] - 14/07/2009 - 00:30:59 ---A- C:\Windows\system32\drivers\IPMIDrv.sys
O58 - SDL:[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - 14/07/2009 - 00:54:29 ---A- C:\Windows\system32\drivers\ipnat.sys
O58 - SDL:[MD5.9F7E491FB0BA0F9E370163834FC1FE31] - 14/07/2009 - 00:53:32 ---A- C:\Windows\system32\drivers\irda.sys
O58 - SDL:[MD5.42996CFF20A3084A56017B7902307E9F] - 14/07/2009 - 00:53:27 ---A- C:\Windows\system32\drivers\irenum.sys
O58 - SDL:[MD5.1F32BB6B38F62F7DF1A7AB7292638A35] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\isapnp.sys
O58 - SDL:[MD5.ADEF52CA1AEAE82B50DF86B56413107E] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\kbdclass.sys
O58 - SDL:[MD5.3D9F0EBF350EDCFD6498057301455964] - 14/07/2009 - 00:45:09 ---A- C:\Windows\system32\drivers\kbdhid.sys
O58 - SDL:[MD5.F762EDD3ACCA095F5AF4D719F3B8AE3D] - 14/07/2009 - 00:45:15 ---A- C:\Windows\system32\drivers\ks.sys
O58 - SDL:[MD5.E36A061EC11B373826905B21BE10948F] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\ksecdd.sys
O58 - SDL:[MD5.26C046977E85B95036453D7B88BA1820] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\ksecpkg.sys
O58 - SDL:[MD5.ADB68AA60EF991CE2E217223FA20B4FF] - 21/08/2009 - 02:08:00 ---A- C:\Windows\system32\drivers\lgusbbus.sys
O58 - SDL:[MD5.D4A6201DD361F019E44483645B490E4E] - 21/08/2009 - 02:08:00 ---A- C:\Windows\system32\drivers\lgusbdiag.sys
O58 - SDL:[MD5.A2B99411E10287F327A9820D260E7FE4] - 21/08/2009 - 02:08:00 ---A- C:\Windows\system32\drivers\lgusbmodem.sys
O58 - SDL:[MD5.F7611EC07349979DA9B0AE1F18CCC7A6] - 14/07/2009 - 00:53:19 ---A- C:\Windows\system32\drivers\lltdio.sys
O58 - SDL:[MD5.EB119A53CCF2ACC000AC71B065B78FEF] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\lsi_fc.sys
O58 - SDL:[MD5.8ADE1C877256A22E49B75D1CC9161F9C] - 14/07/2009 - 02:20:37 ---A- C:\Windows\system32\drivers\lsi_sas.sys
O58 - SDL:[MD5.DC9DC3D3DAA0E276FD2EC262E38B11E9] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\lsi_sas2.sys
O58 - SDL:[MD5.0A036C7D7CAB643A7F07135AC47E0524] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\lsi_scsi.sys
O58 - SDL:[MD5.6703E366CC18D3B6E534F5CF7DF39CEE] - 14/07/2009 - 00:15:45 ---A- C:\Windows\system32\drivers\luafv.sys
O58 - SDL:[MD5.654A3F014903DC62CAF5E037F3D316D2] - 07/01/2010 - 16:07:04 ---A- C:\Windows\system32\drivers\mbam.sys
O58 - SDL:[MD5.C0D40BEAA6DFC05602FC8F484696F7F5] - 07/01/2010 - 16:07:14 ---A- C:\Windows\system32\drivers\mbamswissarmy.sys
O58 - SDL:[MD5.EF08D2EBE3EABBA43CC57EEE001027B6] - 14/07/2009 - 00:45:57 ---A- C:\Windows\system32\drivers\mcd.sys
O58 - SDL:[MD5.0FFF5B045293002AB38EB1FD1FC2FB74] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\megasas.sys
O58 - SDL:[MD5.DCBAB2920C75F390CAF1D29F675D03D6] - 14/07/2009 - 02:20:36 ---A- C:\Windows\system32\drivers\MegaSR.sys
O58 - SDL:[MD5.F001861E5700EE84E2D4E52C712F4964] - 14/07/2009 - 00:55:24 ---A- C:\Windows\system32\drivers\modem.sys
O58 - SDL:[MD5.79D10964DE86B292320E9DFE02282A23] - 14/07/2009 - 00:25:59 ---A- C:\Windows\system32\drivers\monitor.sys
O58 - SDL:[MD5.FB18CC1D4C2E716B6B903B0AC0CC0609] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\mouclass.sys
O58 - SDL:[MD5.2C388D2CD01C9042596CF3C8F3C7B24D] - 14/07/2009 - 00:45:08 ---A- C:\Windows\system32\drivers\mouhid.sys
O58 - SDL:[MD5.921C18727C5920D6C0300736646931C2] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\mountmgr.sys
O58 - SDL:[MD5.2AF5997438C55FB79D33D015C30E1974] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\mpio.sys
O58 - SDL:[MD5.AD2723A7B53DD1AACAE6AD8C0BFBF4D0] - 14/07/2009 - 00:52:53 ---A- C:\Windows\system32\drivers\mpsdrv.sys
O58 - SDL:[MD5.B1BE47008D20E43DA3ADC37C24CDB89D] - 14/07/2009 - 00:14:26 ---A- C:\Windows\system32\drivers\mrxdav.sys
O58 - SDL:[MD5.9E5DD4EF01AED723ABF5342EF23FF012] - 08/01/2010 - 04:17:36 ---A- C:\Windows\system32\drivers\mrxsmb.sys
O58 - SDL:[MD5.6532ACBF612A8D340EF9E25E4FEF21EE] - 08/01/2010 - 04:18:02 ---A- C:\Windows\system32\drivers\mrxsmb10.sys
O58 - SDL:[MD5.24D76ABE5DCAD22F19D105F76FDF0CE1] - 14/07/2009 - 00:14:31 ---A- C:\Windows\system32\drivers\mrxsmb20.sys
O58 - SDL:[MD5.4326D168944123F38DD3B2D9C37A0B12] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\msahci.sys
O58 - SDL:[MD5.455029C7174A2DBB03DBA8A0D8BDDD9A] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\msdsm.sys
O58 - SDL:[MD5.DAEFB28E3AF5A76ABCC2C3078C07327F] - 14/07/2009 - 00:11:26 ---A- C:\Windows\system32\drivers\msfs.sys
O58 - SDL:[MD5.3E1E5767043C5AF9367F0056295E9F84] - 14/07/2009 - 00:51:08 ---A- C:\Windows\system32\drivers\mshidkmdf.sys
O58 - SDL:[MD5.0A4E5757AE09FA9622E3158CC1AEF114] - 14/07/2009 - 02:20:43 ---A- C:\Windows\system32\drivers\msisadrv.sys
O58 - SDL:[MD5.ED46C223AE46C6866AB77CDC41C404B7] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\msiscsi.sys
O58 - SDL:[MD5.8C0860D6366AAFFB6C5BB9DF9448E631] - 14/07/2009 - 00:45:08 ---A- C:\Windows\system32\drivers\mskssrv.sys
O58 - SDL:[MD5.3EA8B949F963562CEDBB549EAC0C11CE] - 14/07/2009 - 00:45:08 ---A- C:\Windows\system32\drivers\mspclock.sys
O58 - SDL:[MD5.F456E973590D663B1073E9C463B40932] - 14/07/2009 - 00:45:07 ---A- C:\Windows\system32\drivers\mspqm.sys
O58 - SDL:[MD5.0E008FC4819D238C51D7C93E7B41E560] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\msrpc.sys
O58 - SDL:[MD5.FC6B9FF600CC585EA38B12589BD4E246] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\mssmbios.sys
O58 - SDL:[MD5.B42C6B921F61A6E55159B8BE6CD54A36] - 14/07/2009 - 00:45:08 ---A- C:\Windows\system32\drivers\mstee.sys
O58 - SDL:[MD5.33599130F44E1F34631CEA241DE8AC84] - 14/07/2009 - 00:46:55 ---A- C:\Windows\system32\drivers\MTConfig.sys
O58 - SDL:[MD5.159FAD02F64E6381758C990F753BCC80] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\mup.sys
O58 - SDL:[MD5.23759D175A0A9BAAF04D05047BC135A8] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\ndis.sys
O58 - SDL:[MD5.0E1787AA6C9191D3D319E8BAFE86F80C] - 14/07/2009 - 00:52:44 ---A- C:\Windows\system32\drivers\ndiscap.sys
O58 - SDL:[MD5.E4A8AEC125A2E43A9E32AFEEA7C9C888] - 14/07/2009 - 00:54:24 ---A- C:\Windows\system32\drivers\ndistapi.sys
O58 - SDL:[MD5.B30AE7F2B6D7E343B0DF32E6C08FCE75] - 14/07/2009 - 00:53:51 ---A- C:\Windows\system32\drivers\ndisuio.sys
O58 - SDL:[MD5.267C415EADCBE53C9CA873DEE39CF3A4] - 14/07/2009 - 00:54:35 ---A- C:\Windows\system32\drivers\ndiswan.sys
O58 - SDL:[MD5.AF7E7C63DCEF3F8772726F86039D6EB4] - 14/07/2009 - 00:54:27 ---A- C:\Windows\system32\drivers\ndproxy.sys
O58 - SDL:[MD5.80B275B1CE3B0E79909DB7B39AF74D51] - 14/07/2009 - 00:53:54 ---A- C:\Windows\system32\drivers\netbios.sys
O58 - SDL:[MD5.DD52A733BF4CA5AF84562A5E2F963B91] - 14/07/2009 - 00:12:21 ---A- C:\Windows\system32\drivers\netbt.sys
O58 - SDL:[MD5.E87FE6DAF5A1B0845A0E376F4269F75B] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\netio.sys
O58 - SDL:[MD5.1D85C4B390B0EE09C7A46B91EFB2C097] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\nfrd960.sys
O58 - SDL:[MD5.1DB262A9F8C087E8153D89BEF3D2235F] - 14/07/2009 - 00:11:32 ---A- C:\Windows\system32\drivers\npfs.sys
O58 - SDL:[MD5.E9A0A4D07E53D8FEA2BB8387A3293C58] - 14/07/2009 - 00:12:08 ---A- C:\Windows\system32\drivers\nsiproxy.sys
O58 - SDL:[MD5.3795DCD21F740EE799FB7223234215AF] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\ntfs.sys
O58 - SDL:[MD5.F9756A98D69098DCA8945D62858A812C] - 14/07/2009 - 00:11:12 ---A- C:\Windows\system32\drivers\null.sys
O58 - SDL:[MD5.D0EE2715D78246267AC0ED483A475682] - 22/01/2010 - 10:50:59 ---A- C:\Windows\system32\drivers\nvlddmkm.sys
O58 - SDL:[MD5.3F3D04B1D08D43C16EA7963954EC768D] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\nvraid.sys
O58 - SDL:[MD5.C99F251A5DE63C6F129CF71933ACED0F] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\nvstor.sys
O58 - SDL:[MD5.5A0983915F02BAE73267CC2A041F717D] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\NV_AGP.SYS
O58 - SDL:[MD5.26384429FCD85D83746F63E798AB1480] - 14/07/2009 - 00:52:03 ---A- C:\Windows\system32\drivers\nwifi.sys
O58 - SDL:[MD5.08A70A1F2CDDE9BB49B885CB817A66EB] - 14/07/2009 - 00:51:29 ---A- C:\Windows\system32\drivers\ohci1394.sys
O58 - SDL:[MD5.6270CCAE2A86DE6D146529FE55B3246A] - 14/07/2009 - 00:53:58 ---A- C:\Windows\system32\drivers\pacer.sys
O58 - SDL:[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - 14/07/2009 - 00:45:35 ---A- C:\Windows\system32\drivers\parport.sys
O58 - SDL:[MD5.FF4218952B51DE44FE910953A3E686B9] - 14/07/2009 - 02:20:44 ---A- C:\Windows\system32\drivers\partmgr.sys
O58 - SDL:[MD5.EB0A59F29C19B86479D36B35983DAADC] - 14/07/2009 - 00:45:29 ---A- C:\Windows\system32\drivers\parvdm.sys
O58 - SDL:[MD5.C858CB77C577780ECC456A892E7E7D0F] - 14/07/2009 - 02:20:45 ---A- C:\Windows\system32\drivers\pci.sys
O58 - SDL:[MD5.AFE86F419014DB4E5593F69FFE26CE0A] - 14/07/2009 - 02:20:45 ---A- C:\Windows\system32\drivers\pciide.sys
O58 - SDL:[MD5.EDE040D666FF81BF1978D0F19F799E7A] - 14/07/2009 - 02:19:03 ---A- C:\Windows\system32\drivers\pciidex.sys
O58 - SDL:[MD5.F396431B31693E71E8A80687EF523506] - 14/07/2009 - 02:19:03 ---A- C:\Windows\system32\drivers\pcmcia.sys
O58 - SDL:[MD5.250F6B43D2B613172035C6747AEEB19F] - 14/07/2009 - 02:19:04 ---A- C:\Windows\system32\drivers\pcw.sys
O58 - SDL:[MD5.9E0104BA49F4E6973749A02BF41344ED] - 14/07/2009 - 01:41:15 ---A- C:\Windows\system32\drivers\PEAuth.sys
O58 - SDL:[MD5.D72708C9F49500C13D7D067E169B7715] - 14/07/2009 - 00:51:02 ---A- C:\Windows\system32\drivers\portcls.sys
O58 - SDL:[MD5.85B1E3A0C7585BC4AAE6899EC6FCF011] - 14/07/2009 - 00:11:04 ---A- C:\Windows\system32\drivers\processr.sys
O58 - SDL:[MD5.AB95ECF1F6659A60DDC166D8315B0751] - 14/07/2009 - 02:19:04 ---A- C:\Windows\system32\drivers\ql2300.sys
O58 - SDL:[MD5.B4DD51DD25182244B86737DC51AF2270] - 14/07/2009 - 02:19:04 ---A- C:\Windows\system32\drivers\ql40xx.sys
O58 - SDL:[MD5.584078CA1B95CA72DF2A27C336F9719D] - 14/07/2009 - 00:54:13 ---A- C:\Windows\system32\drivers\qwavedrv.sys
O58 - SDL:[MD5.30A81B53C766D0133BB86D234E5556AB] - 14/07/2009 - 00:54:40 ---A- C:\Windows\system32\drivers\rasacd.sys
O58 - SDL:[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - 14/07/2009 - 00:54:34 ---A- C:\Windows\system32\drivers\rasl2tp.sys
O58 - SDL:[MD5.0FE8B15916307A6AC12BFB6A63E45507] - 14/07/2009 - 00:54:53 ---A- C:\Windows\system32\drivers\raspppoe.sys
O58 - SDL:[MD5.631E3E205AD6D86F2AED6A4A8E69F2DB] - 14/07/2009 - 00:54:48 ---A- C:\Windows\system32\drivers\raspptp.sys
O58 - SDL:[MD5.44101F495A83EA6401D886E7FD70096B] - 14/07/2009 - 00:54:58 ---A- C:\Windows\system32\drivers\rassstp.sys
O58 - SDL:[MD5.835D7E81BF517A3B72384BDCC85E1CE6] - 14/07/2009 - 00:14:29 ---A- C:\Windows\system32\drivers\rdbss.sys
O58 - SDL:[MD5.0D8F05481CB76E70E1DA06EE9F0DA9DF] - 14/07/2009 - 01:02:41 ---A- C:\Windows\system32\drivers\rdpbus.sys
O58 - SDL:[MD5.1E016846895B15A99F9A176A05029075] - 14/07/2009 - 01:01:40 ---A- C:\Windows\system32\drivers\RDPCDD.sys
O58 - SDL:[MD5.C5FF95883FFEF704D50C40D21CFB3AB5] - 14/07/2009 - 01:02:58 ---A- C:\Windows\system32\drivers\rdpdr.sys
O58 - SDL:[MD5.5A53CA1598DD4156D44196D200C94B8A] - 14/07/2009 - 01:01:39 ---A- C:\Windows\system32\drivers\RDPENCDD.sys
O58 - SDL:[MD5.44B0A53CD4F27D50ED461DAE0C0B4E1F] - 14/07/2009 - 01:01:41 ---A- C:\Windows\system32\drivers\RDPREFMP.sys
O58 - SDL:[MD5.801371BA9782282892D00AADB08EE367] - 14/07/2009 - 01:01:55 ---A- C:\Windows\system32\drivers\rdpwd.sys
O58 - SDL:[MD5.4EA225BF1CF05E158853F30A99CA29A7] - 14/07/2009 - 02:19:04 ---A- C:\Windows\system32\drivers\rdyboost.sys
O58 - SDL:[MD5.B23E90B210C8B4A2C1DD306E691D980E] - 04/01/2010 - 16:49:58 ---A- C:\Windows\system32\drivers\RecFltr.sys
O58 - SDL:[MD5.B4090006A82EEB608C358AB5D37DE85A] - 14/07/2009 - 00:53:40 ---A- C:\Windows\system32\drivers\rmcast.sys
O58 - SDL:[MD5.7400CFAB5CF36F2294E80B3F3BDA3EBC] - 14/07/2009 - 00:54:09 ---A- C:\Windows\system32\drivers\RNDISMP.sys
O58 - SDL:[MD5.564297827D213F52C7A3A2FF749568CA] - 14/07/2009 - 00:55:21 ---A- C:\Windows\system32\drivers\rootmdm.sys
O58 - SDL:[MD5.032B0D36AD92B582D869879F5AF5B928] - 14/07/2009 - 00:53:20 ---A- C:\Windows\system32\drivers\rspndr.sys
O58 - SDL:[MD5.D4762797E31D3005A8956EE666A9613A] - 09/01/2010 - 17:24:49 ---A- C:\Windows\system32\drivers\Rt86win7.sys
O58 - SDL:[MD5.B68A9BAD1B7C1453EF063C09EBD95C2E] - 08/02/2010 - 06:17:58 ---A- C:\Windows\system32\drivers\RTKVHDA.sys
O58 - SDL:[MD5.34EE0C44B724E3E4CE2EFF29126DE5B5] - 14/07/2009 - 02:19:04 ---A- C:\Windows\system32\drivers\sbp2port.sys
O58 - SDL:[MD5.A95C54B2AC3CC9C73FCDF9E51A1D6B51] - 14/07/2009 - 00:33:50 ---A- C:\Windows\system32\drivers\scfilter.sys
O58 - SDL:[MD5.F9882099E58ECF8B0E1C7AFA5D2CC56D] - 14/07/2009 - 02:19:04 ---A- C:\Windows\system32\drivers\scsiport.sys
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 13/07/2009 - 21:50:20 ---A- C:\Windows\system32\drivers\secdrv.sys
O58 - SDL:[MD5.9AD8B8B515E3DF6ACD4212EF465DE2D1] - 14/07/2009 - 00:45:28 ---A- C:\Windows\system32\drivers\serenum.sys
O58 - SDL:[MD5.5FB7FCEA0490D821F26F39CC5EA3D1E2] - 14/07/2009 - 00:45:33 ---A- C:\Windows\system32\drivers\serial.sys
O58 - SDL:[MD5.79BFFB520327FF916A582DFEA17AA813] - 14/07/2009 - 00:45:08 ---A- C:\Windows\system32\drivers\sermouse.sys
O58 - SDL:[MD5.9F976E1EB233DF46FCE808D9DEA3EB9C] - 14/07/2009 - 00:45:52 ---A- C:\Windows\system32\drivers\sffdisk.sys
O58 - SDL:[MD5.932A68EE27833CFD57C1639D375F2731] - 14/07/2009 - 00:45:52 ---A- C:\Windows\system32\drivers\sffp_mmc.sys
O58 - SDL:[MD5.4F1E5B0FE7C8050668DBFADE8999AEFB] - 14/07/2009 - 00:45:52 ---A- C:\Windows\system32\drivers\sffp_sd.sys
O58 - SDL:[MD5.DB96666CC8312EBC45032F30B007A547] - 14/07/2009 - 00:45:52 ---A- C:\Windows\system32\drivers\sfloppy.sys
O58 - SDL:[MD5.2565CAC0DC9FE0371BDCE60832582B2E] - 14/07/2009 - 02:19:03 ---A- C:\Windows\system32\drivers\SISAGP.SYS
O58 - SDL:[MD5.A9F0486851BECB6DDA1D89D381E71055] - 14/07/2009 - 02:19:04 ---A- C:\Windows\system32\drivers\sisraid2.sys
O58 - SDL:[MD5.3727097B55738E2F554972C3BE5BC1AA] - 14/07/2009 - 02:19:04 ---A- C:\Windows\system32\drivers\sisraid4.sys
O58 - SDL:[MD5.3E21C083B8A01CB70BA1F09303010FCE] - 14/07/2009 - 00:53:41 ---A- C:\Windows\system32\drivers\smb.sys
O58 - SDL:[MD5.2E467E6CA8E0A140C08011844C0D3936] - 14/07/2009 - 00:45:28 ---A- C:\Windows\system32\drivers\smclib.sys
O58 - SDL:[MD5.95CF1AE7527FB70F7816563CBC09D942] - 14/07/2009 - 02:19:03 ---A- C:\Windows\system32\drivers\spldr.sys
O58 - SDL:[MD5.D16D818E9930A6E5B4F6476DD0998D1A] - 13/07/2009 - 21:34:43 ---A- C:\Windows\system32\drivers\spsys.sys
O58 - SDL:[MD5.00000000000000000000000000000000] - 10/01/2010 - 03:17:41 ---A- C:\Windows\system32\drivers\sptd.sys
O58 - SDL:[MD5.50A83CA406C808BD35AC9141A0C7618F] - 08/12/2009 - 09:05:40 ---A- C:\Windows\system32\drivers\srv.sys
O58 - SDL:[MD5.DCE7E10FEAABD4CAE95948B3DE5340BB] - 14/07/2009 - 00:14:55 ---A- C:\Windows\system32\drivers\srv2.sys
O58 - SDL:[MD5.BD1433A32792FD0DC450479094FC435A] - 08/12/2009 - 09:05:09 ---A- C:\Windows\system32\drivers\srvnet.sys
O58 - SDL:[MD5.DB32D325C192B801DF274BFD12A7E72B] - 14/07/2009 - 02:19:04 ---A- C:\Windows\system32\drivers\stexstor.sys
O58 - SDL:[MD5.55DCA8693ED545FD7F2F93776E294AE2] - 14/07/2009 - 02:19:04 ---A- C:\Windows\system32\drivers\storport.sys
O58 - SDL:[MD5.D5751969DC3E4B88BF482AC8EC9FE019] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\storvsc.sys
O58 - SDL:[MD5.45B44FC9E5AC0DB02B19D515EE809DE5] - 14/07/2009 - 00:50:57 ---A- C:\Windows\system32\drivers\stream.sys
O58 - SDL:[MD5.E58C78A848ADD9610A4DB6D214AF5224] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\swenum.sys
O58 - SDL:[MD5.949C35BF4AE6C110A924AB5E2175DDA7] - 14/07/2009 - 00:45:53 ---A- C:\Windows\system32\drivers\tape.sys
O58 - SDL:[MD5.2CC3D75488ABD3EC628BBB9A4FC84EFC] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\tcpip.sys
O58 - SDL:[MD5.E64444523ADD154F86567C469BC0B17F] - 14/07/2009 - 00:54:14 ---A- C:\Windows\system32\drivers\tcpipreg.sys
O58 - SDL:[MD5.52639C994FE3CD975BFE7428B939B320] - 14/07/2009 - 00:12:12 ---A- C:\Windows\system32\drivers\tdi.sys
O58 - SDL:[MD5.1875C1490D99E70E449E3AFAE9FCBADF] - 14/07/2009 - 01:01:37 ---A- C:\Windows\system32\drivers\tdpipe.sys
O58 - SDL:[MD5.7551E91EA999EE9A8E9C331D5A9C31F3] - 14/07/2009 - 01:01:37 ---A- C:\Windows\system32\drivers\tdtcp.sys
O58 - SDL:[MD5.CB39E896A2A83702D1737BFD402B3542] - 14/07/2009 - 00:12:11 ---A- C:\Windows\system32\drivers\tdx.sys
O58 - SDL:[MD5.C36F41EE20E6999DBF4B0425963268A5] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\termdd.sys
O58 - SDL:[MD5.98AE6FA07D12CB4EC5CF4A9BFA5F4242] - 14/07/2009 - 01:01:51 ---A- C:\Windows\system32\drivers\tssecsrv.sys
O58 - SDL:[MD5.3E461D890A97F9D4C168F5FDA36E1D00] - 14/07/2009 - 00:54:03 ---A- C:\Windows\system32\drivers\tunnel.sys
O58 - SDL:[MD5.97DD70FECA64FB4F63DE7BB7E66A80B1] - 30/03/2005 - 10:12:38 ---A- C:\Windows\system32\drivers\TVicPort.sys
O58 - SDL:[MD5.A65643ED30A30E46317C0B25818BC9B7] - 12/03/2007 - 16:35:10 ---A- C:\Windows\system32\drivers\TVicPort64.sys
O58 - SDL:[MD5.750FBCB269F4D7DD2E420C56B795DB6D] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\UAGP35.SYS
O58 - SDL:[MD5.09CC3E16F8E5EE7168E01CF8FCBE061A] - 14/07/2009 - 00:14:09 ---A- C:\Windows\system32\drivers\udfs.sys
O58 - SDL:[MD5.44E8048ACE47BEFBFDC2E9BE4CBC8880] - 14/07/2009 - 02:19:11 ---A- C:\Windows\system32\drivers\ULIAGPKX.SYS
O58 - SDL:[MD5.049B3A50B3D646BAEEEE9EEC9B0668DC] - 14/07/2009 - 00:51:39 ---A- C:\Windows\system32\drivers\umbus.sys
O58 - SDL:[MD5.7550AD0C6998BA1CB4843E920EE0FEAC] - 14/07/2009 - 00:51:35 ---A- C:\Windows\system32\drivers\umpass.sys
O58 - SDL:[MD5.A94718539A08B214D5B8517F087A026E] - 29/04/2005 - 15:18:00 ---A- C:\Windows\system32\drivers\umss.sys
O58 - SDL:[MD5.B71DA871254D96D0349639D03E4C1CC1] - 14/07/2009 - 00:54:16 ---A- C:\Windows\system32\drivers\usb8023.sys
O58 - SDL:[MD5.47D88F155EB4E4BE60EBD76AC8D17DB7] - 14/07/2009 - 00:51:15 ---A- C:\Windows\system32\drivers\USBCAMD.sys
O58 - SDL:[MD5.2190F65EC7E9AE7A301E01E4261ACEF8] - 14/07/2009 - 00:51:16 ---A- C:\Windows\system32\drivers\USBCAMD2.sys
O58 - SDL:[MD5.8455C4ED038EFD09E99327F9D2D48FFA] - 14/07/2009 - 00:51:31 ---A- C:\Windows\system32\drivers\usbccgp.sys
O58 - SDL:[MD5.04EC7CEC62EC3B6D9354EEE93327FC82] - 14/07/2009 - 00:51:18 ---A- C:\Windows\system32\drivers\usbcir.sys
O58 - SDL:[MD5.18E71EA0E063037A5C3C8272A5262B7C] - 14/07/2009 - 00:51:05 ---A- C:\Windows\system32\drivers\usbd.sys
O58 - SDL:[MD5.1C333BFD60F2FED2C7AD5DAF533CB742] - 14/07/2009 - 00:51:14 ---A- C:\Windows\system32\drivers\usbehci.sys
O58 - SDL:[MD5.EE6EF93CCFA94FAE8C6AB298273D8AE2] - 14/07/2009 - 00:52:09 ---A- C:\Windows\system32\drivers\usbhub.sys
O58 - SDL:[MD5.1C768107AC5BD510686C8F0E4DA30C48] - 22/12/2005 - 03:23:26 ---A- C:\Windows\system32\drivers\Usbicp.sys
O58 - SDL:[MD5.A6FB7957EA7AFB1165991E54CE934B74] - 14/07/2009 - 00:51:14 ---A- C:\Windows\system32\drivers\usbohci.sys
O58 - SDL:[MD5.F6D1C957C5BF4F274AAD1DA7059916E4] - 14/07/2009 - 00:51:15 ---A- C:\Windows\system32\drivers\usbport.sys
O58 - SDL:[MD5.797D862FE0875E75C7CC4C1AD7B30252] - 14/07/2009 - 01:17:06 ---A- C:\Windows\system32\drivers\usbprint.sys
O58 - SDL:[MD5.FB9F340ECACDAEB939372CC543E72C6D] - 14/07/2009 - 01:14:30 ---A- C:\Windows\system32\drivers\usbrpm.sys
O58 - SDL:[MD5.D8889D56E0D27E57ED4591837FE71D27] - 14/07/2009 - 00:51:19 ---A- C:\Windows\system32\drivers\USBSTOR.SYS
O58 - SDL:[MD5.78780C3EBCE17405B1CCD07A3A8A7D72] - 14/07/2009 - 00:51:10 ---A- C:\Windows\system32\drivers\usbuhci.sys
O58 - SDL:[MD5.A059C4C3EDB09E07D21A8E5C0AABD3CB] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\vdrvroot.sys
O58 - SDL:[MD5.8E38096AD5C8570A6F1570A61E251561] - 14/07/2009 - 00:25:51 ---A- C:\Windows\system32\drivers\vga.sys
O58 - SDL:[MD5.17C408214EA61696CEC9C66E388B14F3] - 14/07/2009 - 00:25:49 ---A- C:\Windows\system32\drivers\vgapnp.sys
O58 - SDL:[MD5.3BE6E1F3A4F1AFEC8CEE0D7883F93583] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\vhdmp.sys
O58 - SDL:[MD5.C829317A37B4BEA8F39735D4B076E923] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\VIAAGP.SYS
O58 - SDL:[MD5.E02F079A6AA107F06B16549C6E5C7B74] - 14/07/2009 - 00:11:04 ---A- C:\Windows\system32\drivers\viac7.sys
O58 - SDL:[MD5.E43574F6A56A0EE11809B48C09E4FD3C] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\viaide.sys
O58 - SDL:[MD5.15C126D1B55814B9E5CAB10A9C1F4C67] - 14/07/2009 - 00:25:51 ---A- C:\Windows\system32\drivers\videoprt.sys
O58 - SDL:[MD5.379B349F65F453D2A6E75EA6B7448E49] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\vmbus.sys
O58 - SDL:[MD5.EC2BBAB4B84D0738C6C83D2234DC36FE] - 14/07/2009 - 00:28:45 ---A- C:\Windows\system32\drivers\VMBusHID.sys
O58 - SDL:[MD5.5423D8437051E89DD34749F242C98648] - 14/07/2009 - 00:28:47 ---A- C:\Windows\system32\drivers\vms3cap.sys
O58 - SDL:[MD5.957E346CA948668F2496A6CCF6FF82CC] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\vmstorfl.sys
O58 - SDL:[MD5.384E5A2AA49934295171E499F86BA6F3] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\volmgr.sys
O58 - SDL:[MD5.B5BB72067DDDDBBFB04B2F89FF8C3C87] - 14/07/2009 - 02:19:11 ---A- C:\Windows\system32\drivers\volmgrx.sys
O58 - SDL:[MD5.58DF9D2481A56EDDE167E51B334D44FD] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\volsnap.sys
O58 - SDL:[MD5.63EF70B7BFB875436D5983E3C77F0681] - 31/07/2009 - 15:53:35 ---A- C:\Windows\system32\drivers\vpchbus.sys
O58 - SDL:[MD5.2559494DC74877AFCE97C6F75E4B7020] - 31/07/2009 - 15:53:35 ---A- C:\Windows\system32\drivers\vpcnfltr.sys
O58 - SDL:[MD5.AC0ADAD2AD5A166100CF59FB9A7880B7] - 31/07/2009 - 15:53:35 ---A- C:\Windows\system32\drivers\vpcusb.sys
O58 - SDL:[MD5.7A806CC4416FE9B1B9C091E31BC638BC] - 31/07/2009 - 15:53:35 ---A- C:\Windows\system32\drivers\vpcvmm.sys
O58 - SDL:[MD5.9DFA0CC2F8855A04816729651175B631] - 14/07/2009 - 02:19:11 ---A- C:\Windows\system32\drivers\vsmraid.sys
O58 - SDL:[MD5.90567B1E658001E79D7C8BBD3DDE5AA6] - 14/07/2009 - 00:52:02 ---A- C:\Windows\system32\drivers\vwifibus.sys
O58 - SDL:[MD5.7090D3436EEB4E7DA3373090A23448F7] - 14/07/2009 - 00:52:04 ---A- C:\Windows\system32\drivers\vwififlt.sys
O58 - SDL:[MD5.A3F04CBEA6C2A10E6CB01F8B47611882] - 14/07/2009 - 00:52:10 ---A- C:\Windows\system32\drivers\vwifimp.sys
O58 - SDL:[MD5.DE3721E89C653AA281428C8A69745D90] - 14/07/2009 - 00:46:53 ---A- C:\Windows\system32\drivers\wacompen.sys
O58 - SDL:[MD5.692A712062146E96D28BA0B7D75DE31B] - 14/07/2009 - 00:55:02 ---A- C:\Windows\system32\drivers\wanarp.sys
O58 - SDL:[MD5.CB45A417C8EF7BA6BAC67EDCDDED8700] - 14/07/2009 - 00:24:11 ---A- C:\Windows\system32\drivers\watchdog.sys
O58 - SDL:[MD5.1112A9BADACB47B7C0BB0392E3158DFF] - 14/07/2009 - 02:19:11 ---A- C:\Windows\system32\drivers\wd.sys
O58 - SDL:[MD5.9950E3D0F08141C7E89E64456AE7DC73] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\Wdf01000.sys
O58 - SDL:[MD5.FE7A7675C26FE936226641EF32AE9BB5] - 14/07/2009 - 02:19:11 ---A- C:\Windows\system32\drivers\WdfLdr.sys
O58 - SDL:[MD5.8B9A943F3B53861F2BFAF6C186168F79] - 14/07/2009 - 00:53:51 ---A- C:\Windows\system32\drivers\wfplwf.sys
O58 - SDL:[MD5.5CF95B35E59E2A38023836FFF31BE64C] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\wimmount.sys
O58 - SDL:[MD5.D41F4EA6727415013405C7FFDD250DD8] - 14/07/2009 - 02:20:52 ---A- C:\Windows\system32\drivers\winhv.sys
O58 - SDL:[MD5.0217679B8FCA58714C3BF2726D2CA84E] - 14/07/2009 - 00:19:17 ---A- C:\Windows\system32\drivers\wmiacpi.sys
O58 - SDL:[MD5.9A5B1059FE015DB5269FBB25ACBF841D] - 14/07/2009 - 02:19:10 ---A- C:\Windows\system32\drivers\wmilib.sys
O58 - SDL:[MD5.6DB3276587B853BF886B69528FDB048C] - 14/07/2009 - 00:55:02 ---A- C:\Windows\system32\drivers\ws2ifsl.sys
O58 - SDL:[MD5.6F9B6C0C93232CFF47D0F72D6DB1D21E] - 14/07/2009 - 00:50:17 ---A- C:\Windows\system32\drivers\WUDFPf.sys
O58 - SDL:[MD5.F91FF1E51FCA30B3C3981DB7D5924252] - 14/07/2009 - 00:50:45 ---A- C:\Windows\system32\drivers\WUDFRd.sys
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 13/07/2009 - 22:40:41 ---A- C:\Windows\system32\ANSI.SYS
O58 - SDL:[MD5.635181E0E9BBF16871BF5380D71DB02D] - 14/07/2009 - 02:26:21 ---A- C:\Windows\system32\clfs.sys
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 13/07/2009 - 22:40:44 ---A- C:\Windows\system32\country.sys
O58 - SDL:[MD5.77EBF3E9386DAA51551AF429052D88D0] - 03/04/1996 - 20:33:26 ---A- C:\Windows\system32\giveio.sys
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 13/07/2009 - 22:40:40 ---A- C:\Windows\system32\HIMEM.SYS
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 13/07/2009 - 22:40:43 ---A- C:\Windows\system32\KEY01.SYS
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 13/07/2009 - 22:40:43 ---A- C:\Windows\system32\KEYBOARD.SYS
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 13/07/2009 - 22:40:23 ---A- C:\Windows\system32\NTDOS.SYS
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 13/07/2009 - 22:40:31 ---A- C:\Windows\system32\NTDOS404.SYS
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 13/07/2009 - 22:40:35 ---A- C:\Windows\system32\NTDOS411.SYS
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 13/07/2009 - 22:40:39 ---A- C:\Windows\system32\NTDOS412.SYS
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 13/07/2009 - 22:40:27 ---A- C:\Windows\system32\NTDOS804.SYS
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 13/07/2009 - 22:40:11 ---A- C:\Windows\system32\NTIO.SYS
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 13/07/2009 - 22:40:15 ---A- C:\Windows\system32\NTIO404.SYS
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 13/07/2009 - 22:40:17 ---A- C:\Windows\system32\NTIO411.SYS
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 13/07/2009 - 22:40:19 ---A- C:\Windows\system32\NTIO412.SYS
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 13/07/2009 - 22:40:13 ---A- C:\Windows\system32\NTIO804.SYS
O58 - SDL:[MD5.5D6401DB90EC81B71F8E2C5C8F0FEF23] - 24/09/2006 - 14:28:46 ---A- C:\Windows\system32\speedfan.sys
O58 - SDL:[MD5.34999766FBCAB11BA5C4D26CE0378903] - 14/07/2009 - 00:26:52 ---A- C:\Windows\system32\win32k.sys

---\\ Liste des outils de nettoyage (LATC) (O63)
O63 - Logiciel: HijackThis 2.0.2
O63 - Logiciel: ZHPDiag 1.24
lohardcore
 
Messages: 35
Inscription: 25 Juil 2008 21:28

Re: demande d analyse

Messagepar Florinator » 18 Fév 2010 21:04

Re,

Daemon toolbar est peut être responsable de cela.
C'est une toolbar qui s'installe avec Daemon tools lite, cette barre est trés indiscrète sur tes navigations, je la vois cependant dans tes programmes mais pas sur ton navigateur, on va la supprimer dis moi si ça va mieux ensuite:

  • Copie ces lignes ci dessous:

O43 - CFD:Common File Directory ----D- C:\Program Files\DAEMON Tools Toolbar

  • Ouvre ZHPDiag, puis clique sur l'icône Image
    Si l'icône n'est pas présente, relance un scan de ZHPDiag, en fin de scan l'icône apparaitra.
  • Clique successivement sur l'icône Image,pour effacer le rapport qui s'est affiché
  • Clique ensuite sur Image pour coller la sélection
  • Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre
  • Clique sur "OK", ce qui fait apparaître un carré à gauche de chaque ligne.
  • Clique sur "Tous" puis sur "Nettoyer".
    Si on te demande de redémarrer l'ordi pour achever le nettoyage, fais le immmédiatement.
  • Copie/colle le rapport dans ton prochain post.

Remarque:Le rapport se situe aussi sous C:\Program Files\ZebHelpProcess\ZHPFixReport.txt

A++
Le savoir n'est utile que si il est transmis.
Avatar de l’utilisateur
Florinator
Maître Libellulien
Maître Libellulien
 
Messages: 661
Inscription: 28 Déc 2009 16:19

Re: demande d analyse

Messagepar lohardcore » 19 Fév 2010 15:38

salut florinator

merci pour ton aide c est tout bon

mais ce n etait pas le toolbar de deamontool

j ai passé un coup de GMER et il m a trouvé un trojan "bucks.exe" qui se connecter par moment

tout est rentré dans l ordre

merci pour ton attention

et A+
lohardcore
 
Messages: 35
Inscription: 25 Juil 2008 21:28


Retourner vers Désinfections et demandes d'analyse

Qui est en ligne

Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 2 invités
cron