Virus( important)

slt,

Télécharge ici :

http://images.malwareremoval.com/random/RSIT.exe

random's system information tool (RSIT) par andom/random et sauvegarde-le sur le Bureau.

Double-clique sur RSIT.exe afin de lancer RSIT.

Clique Continue à l'écran Disclaimer.

Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

Poste le contenu de log.txt (<<qui sera affiché)
ainsi que de info.txt (<<qui sera réduit dans la Barre des Tâches).

NB : Les rapports sont sauvegardés dans le dossier C:\rsit

tien mai c un truc super long j' y comprend rien c grave et deplus il y a que un dossier texte qui s'ouvre
tien c'est ce qui est ecrit "Logfile of random's system information tool 1.05 (written by random/random)
Run by smain at 2009-01-22 20:39:10
Microsoft® Windows Vista™ Édition Familiale Premium
System drive C: has 179 GB (78%) free of 230 GB
Total RAM: 894 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:39:18, on 22/01/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Users\smain\AppData\Local\ukmceag.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\smain\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\smain\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Alwil Software\Avast4\ashAvast.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\smain\Desktop\RSIT.exe
C:\Program Files\trend micro\smain.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BurstWriting module - {18CB1A7B-94CD-4582-8022-ADA16851E44B} - C:\Program Files\BurstWriting\BurstWriting.dll (file missing)
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll (file missing)
O2 - BHO: (no name) - {4C6C4BA2-1646-0F3A-1FAE-B393C162C92E} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] ~"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [RegistryCleanFixMFC] C:\Program Files\RegistryCleanFix2008\RegistryCleaner2008.exe
O4 - HKCU\..\Run: [dmgid.tmp] C:\Windows\system32\dmgid.tmp
O4 - HKCU\..\Run: [dmiyy.tmp] C:\Windows\system32\dmiyy.tmp
O4 - HKCU\..\Run: [dmcoc.tmp] C:\Windows\system32\dmcoc.tmp
O4 - HKCU\..\Run: [dmwnm.tmp] C:\Windows\system32\dmwnm.tmp
O4 - HKCU\..\Run: [dmsyy.tmp] C:\Windows\system32\dmsyy.tmp
O4 - HKCU\..\Run: [dmfsb.tmp] C:\Windows\system32\dmfsb.tmp
O4 - HKCU\..\Run: [dmidf.tmp] C:\Windows\system32\dmidf.tmp
O4 - HKCU\..\Run: [dmsqk.tmp] C:\Windows\system32\dmsqk.tmp
O4 - HKCU\..\Run: [dmlfd.tmp] C:\Windows\system32\dmlfd.tmp
O4 - HKCU\..\Run: [dmlaz.tmp] C:\Windows\system32\dmlaz.tmp
O4 - HKCU\..\Run: [dmxyf.tmp] C:\Windows\system32\dmxyf.tmp
O4 - HKCU\..\Run: [dmsew.tmp] C:\Windows\system32\dmsew.tmp
O4 - HKCU\..\Run: [dmssi.tmp] C:\Windows\system32\dmssi.tmp
O4 - HKCU\..\Run: [dmhzo.tmp] C:\Windows\system32\dmhzo.tmp
O4 - HKCU\..\Run: [dmnpl.tmp] C:\Windows\system32\dmnpl.tmp
O4 - HKCU\..\Run: [dmuyp.tmp] C:\Windows\system32\dmuyp.tmp
O4 - HKCU\..\Run: [dmhxb.tmp] C:\Windows\system32\dmhxb.tmp
O4 - HKCU\..\Run: [dmnpo.tmp] C:\Windows\system32\dmnpo.tmp
O4 - HKCU\..\Run: [dmhmh.tmp] C:\Windows\system32\dmhmh.tmp
O4 - HKCU\..\Run: [dmiys.tmp] C:\Windows\system32\dmiys.tmp
O4 - HKCU\..\Run: [dmnih.tmp] C:\Windows\system32\dmnih.tmp
O4 - HKCU\..\Run: [dmwoa.tmp] C:\Windows\system32\dmwoa.tmp
O4 - HKCU\..\Run: [dmezh.tmp] C:\Windows\system32\dmezh.tmp
O4 - HKCU\..\Run: [dmgfj.tmp] C:\Windows\system32\dmgfj.tmp
O4 - HKCU\..\Run: [dmeri.tmp] C:\Windows\system32\dmeri.tmp
O4 - HKCU\..\Run: [dmsbj.tmp] C:\Windows\system32\dmsbj.tmp
O4 - HKCU\..\Run: [dmtbj.tmp] C:\Windows\system32\dmtbj.tmp
O4 - HKCU\..\Run: [dmeic.tmp] C:\Windows\system32\dmeic.tmp
O4 - HKCU\..\Run: [dmqky.tmp] C:\Windows\system32\dmqky.tmp
O4 - HKCU\..\Run: [dmfxu.tmp] C:\Windows\system32\dmfxu.tmp
O4 - HKCU\..\Run: [dmohg.tmp] C:\Windows\system32\dmohg.tmp
O4 - HKCU\..\Run: [dmdnx.tmp] C:\Windows\system32\dmdnx.tmp
O4 - HKCU\..\Run: [dmlkp.tmp] C:\Windows\system32\dmlkp.tmp
O4 - HKCU\..\Run: [dmezy.tmp] C:\Windows\system32\dmezy.tmp
O4 - HKCU\..\Run: [dmpma.tmp] C:\Windows\system32\dmpma.tmp
O4 - HKCU\..\Run: [dmfem.tmp] C:\Windows\system32\dmfem.tmp
O4 - HKCU\..\Run: [dmvxj.tmp] C:\Windows\system32\dmvxj.tmp
O4 - HKCU\..\Run: [dmwuq.tmp] C:\Windows\system32\dmwuq.tmp
O4 - HKCU\..\Run: [dmlud.tmp] C:\Windows\system32\dmlud.tmp
O4 - HKCU\..\Run: [dmzpk.tmp] C:\Windows\system32\dmzpk.tmp
O4 - HKCU\..\Run: [dmjly.tmp] C:\Windows\system32\dmjly.tmp
O4 - HKCU\..\Run: [dmitk.tmp] C:\Windows\system32\dmitk.tmp
O4 - HKCU\..\Run: [dmdop.tmp] C:\Windows\system32\dmdop.tmp
O4 - HKCU\..\Run: [dmqry.tmp] C:\Windows\system32\dmqry.tmp
O4 - HKCU\..\Run: [dmddd.tmp] C:\Windows\system32\dmddd.tmp
O4 - HKCU\..\Run: [dmrzc.tmp] C:\Windows\system32\dmrzc.tmp
O4 - HKCU\..\Run: [dmalj.tmp] C:\Windows\system32\dmalj.tmp
O4 - HKCU\..\Run: [dmijt.tmp] C:\Windows\system32\dmijt.tmp
O4 - HKCU\..\Run: [dmsob.tmp] C:\Windows\system32\dmsob.tmp
O4 - HKCU\..\Run: [dmkdg.tmp] C:\Windows\system32\dmkdg.tmp
O4 - HKCU\..\Run: [dmpla.tmp] C:\Windows\system32\dmpla.tmp
O4 - HKCU\..\Run: [dmnhu.tmp] C:\Windows\system32\dmnhu.tmp
O4 - HKCU\..\Run: [dmoci.tmp] C:\Windows\system32\dmoci.tmp
O4 - HKCU\..\Run: [dmstm.tmp] C:\Windows\system32\dmstm.tmp
O4 - HKCU\..\Run: [dmufu.tmp] C:\Windows\system32\dmufu.tmp
O4 - HKCU\..\Run: [dmqvp.tmp] C:\Windows\system32\dmqvp.tmp
O4 - HKCU\..\Run: [dmznp.tmp] C:\Windows\system32\dmznp.tmp
O4 - HKCU\..\Run: [dmasb.tmp] C:\Windows\system32\dmasb.tmp
O4 - HKCU\..\Run: [dmfea.tmp] C:\Windows\system32\dmfea.tmp
O4 - HKCU\..\Run: [dmatr.tmp] C:\Windows\system32\dmatr.tmp
O4 - HKCU\..\Run: [dmwgv.tmp] C:\Windows\system32\dmwgv.tmpO4 - HKCU\..\Run: [dmgnw.tmp] C:\Windows\system32\dmgnw.tmp
O4 - HKCU\..\Run: [dmeih.tmp] C:\Windows\system32\dmeih.tmp
O4 - HKCU\..\Run: [dmszm.tmp] C:\Windows\system32\dmszm.tmp
O4 - HKCU\..\Run: [dmnbr.tmp] C:\Windows\system32\dmnbr.tmp
O4 - HKCU\..\Run: [dmqdh.tmp] C:\Windows\system32\dmqdh.tmp
O4 - HKCU\..\Run: [dmscv.tmp] C:\Windows\system32\dmscv.tmp
O4 - HKCU\..\Run: [dmeyc.tmp] C:\Windows\system32\dmeyc.tmp
O4 - HKCU\..\Run: [dmhvo.tmp] C:\Windows\system32\dmhvo.tmp
O4 - HKCU\..\Run: [dmbwd.tmp] C:\Windows\system32\dmbwd.tmp
O4 - HKCU\..\Run: [dmffk.tmp] C:\Windows\system32\dmffk.tmp
O4 - HKCU\..\Run: [dmdwz.tmp] C:\Windows\system32\dmdwz.tmp
O4 - HKCU\..\Run: [dmrpl.tmp] C:\Windows\system32\dmrpl.tmp
O4 - HKCU\..\Run: [dmjee.tmp] C:\Windows\system32\dmjee.tmp
O4 - HKCU\..\Run: [dmlqq.tmp] C:\Windows\system32\dmlqq.tmp
O4 - HKCU\..\Run: [dmqou.tmp] C:\Windows\system32\dmqou.tmp
O4 - HKCU\..\Run: [dmeif.tmp] C:\Windows\system32\dmeif.tmp
O4 - HKCU\..\Run: [dmuoz.tmp] C:\Windows\system32\dmuoz.tmp
O4 - HKCU\..\Run: [dmtov.tmp] C:\Windows\system32\dmtov.tmp
O4 - HKCU\..\Run: [dmaox.tmp] C:\Windows\system32\dmaox.tmp
O4 - HKCU\..\Run: [dmtpp.tmp] C:\Windows\system32\dmtpp.tmp
O4 - HKCU\..\Run: [dmehu.tmp] C:\Windows\system32\dmehu.tmp
O4 - HKCU\..\Run: [dmwei.tmp] C:\Windows\system32\dmwei.tmp
O4 - HKCU\..\Run: [dmcms.tmp] C:\Windows\system32\dmcms.tmp
O4 - HKCU\..\Run: [dmefe.tmp] C:\Windows\system32\dmefe.tmp
O4 - HKCU\..\Run: [dmjjt.tmp] C:\Windows\system32\dmjjt.tmp
O4 - HKCU\..\Run: [dmzev.tmp] C:\Windows\system32\dmzev.tmp
O4 - HKCU\..\Run: [dmevv.tmp] C:\Windows\system32\dmevv.tmp
O4 - HKCU\..\Run: [dmukb.tmp] C:\Windows\system32\dmukb.tmp
O4 - HKCU\..\Run: [dmbkl.tmp] C:\Windows\system32\dmbkl.tmp
O4 - HKCU\..\Run: [dmnbf.tmp] C:\Windows\system32\dmnbf.tmp
O4 - HKCU\..\Run: [dmrgc.tmp] C:\Windows\system32\dmrgc.tmp
O4 - HKCU\..\Run: [dmhag.tmp] C:\Windows\system32\dmhag.tmp
O4 - HKCU\..\Run: [dmkay.tmp] C:\Windows\system32\dmkay.tmp
O4 - HKCU\..\Run: [dmvkn.tmp] C:\Windows\system32\dmvkn.tmp
O4 - HKCU\..\Run: [dmaqd.tmp] C:\Windows\system32\dmaqd.tmp
O4 - HKCU\..\Run: [dmvhf.tmp] C:\Windows\system32\dmvhf.tmp
O4 - HKCU\..\Run: [dmxht.tmp] C:\Windows\system32\dmxht.tmp
O4 - HKCU\..\Run: [dmyew.tmp] C:\Windows\system32\dmyew.tmp
O4 - HKCU\..\Run: [dmgzr.tmp] C:\Windows\system32\dmgzr.tmp
O4 - HKCU\..\Run: [dmmcy.tmp] C:\Windows\system32\dmmcy.tmp
O4 - HKCU\..\Run: [dmztv.tmp] C:\Windows\system32\dmztv.tmp
O4 - HKCU\..\Run: [dmpxx.tmp] C:\Windows\system32\dmpxx.tmp
O4 - HKCU\..\Run: [dmymo.tmp] C:\Windows\system32\dmymo.tmp
O4 - HKCU\..\Run: [dmgxb.tmp] C:\Windows\system32\dmgxb.tmp
O4 - HKCU\..\Run: [dmyup.tmp] C:\Windows\system32\dmyup.tmp
O4 - HKCU\..\Run: [dmdsq.tmp] C:\Windows\system32\dmdsq.tmp
O4 - HKCU\..\Run: [dmypi.tmp] C:\Windows\system32\dmypi.tmp
O4 - HKCU\..\Run: [dmiyv.tmp] C:\Windows\system32\dmiyv.tmp
O4 - HKCU\..\Run: [dmsag.tmp] C:\Windows\system32\dmsag.tmp
O4 - HKCU\..\Run: [dmzmm.tmp] C:\Windows\system32\dmzmm.tmp
O4 - HKCU\..\Run: [dmtuq.tmp] C:\Windows\system32\dmtuq.tmp
O4 - HKCU\..\Run: [dmbpx.tmp] C:\Windows\system32\dmbpx.tmp
O4 - HKCU\..\Run: [dmqpm.tmp] C:\Windows\system32\dmqpm.tmp
O4 - HKCU\..\Run: [dmrwb.tmp] C:\Windows\system32\dmrwb.tmp
O4 - HKCU\..\Run: [dmobg.tmp] C:\Windows\system32\dmobg.tmp
O4 - HKCU\..\Run: [dmchh.tmp] C:\Windows\system32\dmchh.tmp
O4 - HKCU\..\Run: [dmizx.tmp] C:\Windows\system32\dmizx.tmp
O4 - HKCU\..\Run: [dmyhq.tmp] C:\Windows\system32\dmyhq.tmp
O4 - HKCU\..\Run: [dmfna.tmp] C:\Windows\system32\dmfna.tmp
O4 - HKCU\..\Run: [dmloy.tmp] C:\Windows\system32\dmloy.tmp
O4 - HKCU\..\Run: [dmvrg.tmp] C:\Windows\system32\dmvrg.tmp
O4 - HKCU\..\Run: [dmqfn.tmp] C:\Windows\system32\dmqfn.tmp
O4 - HKCU\..\Run: [dmiay.tmp] C:\Windows\system32\dmiay.tmp
O4 - HKCU\..\Run: [dmkpa.tmp] C:\Windows\system32\dmkpa.tmp
O4 - HKCU\..\Run: [dmeci.tmp] C:\Windows\system32\dmeci.tmp
O4 - HKCU\..\Run: [dmvpz.tmp] C:\Windows\system32\dmvpz.tmp
O4 - HKCU\..\Run: [dmjhx.tmp] C:\Windows\system32\dmjhx.tmp
O4 - HKCU\..\Run: [dmitx.tmp] C:\Windows\system32\dmitx.tmp
O4 - HKCU\..\Run: [dmszz.tmp] C:\Windows\system32\dmszz.tmp
O4 - HKCU\..\Run: [dmqzt.tmp] C:\Windows\system32\dmqzt.tmp
O4 - HKCU\..\Run: [dmysd.tmp] C:\Windows\system32\dmysd.tmp
O4 - HKCU\..\Run: [dmmyz.tmp] C:\Windows\system32\dmmyz.tmp
O4 - HKCU\..\Run: [dmuhe.tmp] C:\Windows\system32\dmuhe.tmp
O4 - HKCU\..\Run: [dmgyl.tmp] C:\Windows\system32\dmgyl.tmp
O4 - HKCU\..\Run: [dmdsr.tmp] C:\Windows\system32\dmdsr.tmp
O4 - HKCU\..\Run: [dmmpi.tmp] C:\Windows\system32\dmmpi.tmp
O4 - HKCU\..\Run: [dmzku.tmp] C:\Windows\system32\dmzku.tmp
O4 - HKCU\..\Run: [dmtqq.tmp] C:\Windows\system32\dmtqq.tmp
O4 - HKCU\..\Run: [dmfjc.tmp] C:\Windows\system32\dmfjc.tmp
O4 - HKCU\..\Run: [dmjkj.tmp] C:\Windows\system32\dmjkj.tmp
O4 - HKCU\..\Run: [dmggv.tmp] C:\Windows\system32\dmggv.tmp
O4 - HKCU\..\Run: [dmuth.tmp] C:\Windows\system32\dmuth.tmp
O4 - HKCU\..\Run: [dmyzx.tmp] C:\Windows\system32\dmyzx.tmp
O4 - HKCU\..\Run: [dmtnt.tmp] C:\Windows\system32\dmtnt.tmp
O4 - HKCU\..\Run: [dmhjt.tmp] C:\Windows\system32\dmhjt.tmp
O4 - HKCU\..\Run: [dmfwh.tmp] C:\Windows\system32\dmfwh.tmp
O4 - HKCU\..\Run: [dmmmh.tmp] C:\Windows\system32\dmmmh.tmp
O4 - HKCU\..\Run: [dmaka.tmp] C:\Windows\system32\dmaka.tmp
O4 - HKCU\..\Run: [dmnyi.tmp] C:\Windows\system32\dmnyi.tmp
O4 - HKCU\..\Run: [dmlfe.tmp] C:\Windows\system32\dmlfe.tmp
O4 - HKCU\..\Run: [dmbej.tmp] C:\Windows\system32\dmbej.tmp
O4 - HKCU\..\Run: [dmhzk.tmp] C:\Windows\system32\dmhzk.tmp
O4 - HKCU\..\Run: [dmwzb.tmp] C:\Windows\system32\dmwzb.tmp
O4 - HKCU\..\Run: [dmzho.tmp] C:\Windows\system32\dmzho.tmp
O4 - HKCU\..\Run: [dmjhj.tmp] C:\Windows\system32\dmjhj.tmp
O4 - HKCU\..\Run: [dmvqd.tmp] C:\Windows\system32\dmvqd.tmp
O4 - HKCU\..\Run: [dmwko.tmp] C:\Windows\system32\dmwko.tmp
O4 - HKCU\..\Run: [dmakn.tmp] C:\Windows\system32\dmakn.tmp
O4 - HKCU\..\Run: [dmdfc.tmp] C:\Windows\system32\dmdfc.tmp
O4 - HKCU\..\Run: [dmbrg.tmp] C:\Windows\system32\dmbrg.tmp
O4 - HKCU\..\Run: [dmobt.tmp] C:\Windows\system32\dmobt.tmp
O4 - HKCU\..\Run: [dmhqk.tmp] C:\Windows\system32\dmhqk.tmp
O4 - HKCU\..\Run: [dmwob.tmp] C:\Windows\system32\dmwob.tmp
O4 - HKCU\..\Run: [dmdbb.tmp] C:\Windows\system32\dmdbb.tmp
O4 - HKCU\..\Run: [dmeww.tmp] C:\Windows\system32\dmeww.tmp
O4 - HKCU\..\Run: [dmisr.tmp] C:\Windows\system32\dmisr.tmp
O4 - HKCU\..\Run: [dmjgx.tmp] C:\Windows\system32\dmjgx.tmp
O4 - HKCU\..\Run: [dmlyp.tmp] C:\Windows\system32\dmlyp.tmp
O4 - HKCU\..\Run: [dmecj.tmp] C:\Windows\system32\dmecj.tmp
O4 - HKCU\..\Run: [dmjib.tmp] C:\Windows\system32\dmjib.tmp
O4 - HKCU\..\Run: [dmydf.tmp] C:\Windows\system32\dmydf.tmp
O4 - HKCU\..\Run: [dmdwa.tmp] C:\Windows\system32\dmdwa.tmp
O4 - HKCU\..\Run: [dmuui.tmp] C:\Windows\system32\dmuui.tmp
O4 - HKCU\..\Run: [dmmge.tmp] C:\Windows\system32\dmmge.tmp
O4 - HKCU\..\Run: [dmjcu.tmp] C:\Windows\system32\dmjcu.tmp
O4 - HKCU\..\Run: [dmjab.tmp] C:\Windows\system32\dmjab.tmp
O4 - HKCU\..\Run: [dmzun.tmp] C:\Windows\system32\dmzun.tmp
O4 - HKCU\..\Run: [dmwby.tmp] C:\Windows\system32\dmwby.tmp
O4 - HKCU\..\Run: [dmdwd.tmp] C:\Windows\system32\dmdwd.tmp
O4 - HKCU\..\Run: [dmxtj.tmp] C:\Windows\system32\dmxtj.tmp
O4 - HKCU\..\Run: [dmntw.tmp] C:\Windows\system32\dmntw.tmp
O4 - HKCU\..\Run: [dmhev.tmp] C:\Windows\system32\dmhev.tmp
O4 - HKCU\..\Run: [dmmhj.tmp] C:\Windows\system32\dmmhj.tmp
O4 - HKCU\..\Run: [dmpoj.tmp] C:\Windows\system32\dmpoj.tmp
O4 - HKCU\..\Run: [dmpeo.tmp] C:\Windows\system32\dmpeo.tmp
O4 - HKCU\..\Run: [dmhls.tmp] C:\Windows\system32\dmhls.tmp
O4 - HKCU\..\Run: [dmdbg.tmp] C:\Windows\system32\dmdbg.tmp
O4 - HKCU\..\Run: [dmwfc.tmp] C:\Windows\system32\dmwfc.tmp
O4 - HKCU\..\Run: [dmuru.tmp] C:\Windows\system32\dmuru.tmp
O4 - HKCU\..\Run: [dmjle.tmp] C:\Windows\system32\dmjle.tmp
O4 - HKCU\..\Run: [dmbnn.tmp] C:\Windows\system32\dmbnn.tmp
O4 - HKCU\..\Run: [dmurg.tmp] C:\Windows\system32\dmurg.tmp
O4 - HKCU\..\Run: [dmqpx.tmp] C:\Windows\system32\dmqpx.tmp
O4 - HKCU\..\Run: [dmwsq.tmp] C:\Windows\system32\dmwsq.tmp
O4 - HKCU\..\Run: [dmcqa.tmp] C:\Windows\system32\dmcqa.tmp
O4 - HKCU\..\Run: [dmpai.tmp] C:\Windows\system32\dmpai.tmp
O4 - HKCU\..\Run: [dmpro.tmp] C:\Windows\system32\dmpro.tmp
O4 - HKCU\..\Run: [dmrzo.tmp] C:\Windows\system32\dmrzo.tmp
O4 - HKCU\..\Run: [dmscm.tmp] C:\Windows\system32\dmscm.tmp
O4 - HKCU\..\Run: [dmxxc.tmp] C:\Windows\system32\dmxxc.tmp
O4 - HKCU\..\Run: [dmcys.tmp] C:\Windows\system32\dmcys.tmp
O4 - HKCU\..\Run: [dmrym.tmp] C:\Windows\system32\dmrym.tmp
O4 - HKCU\..\Run: [dmzyz.tmp] C:\Windows\system32\dmzyz.tmp
O4 - HKCU\..\Run: [dmxnv.tmp] C:\Windows\system32\dmxnv.tmp
O4 - HKCU\..\Run: [dmnby.tmp] C:\Windows\system32\dmnby.tmp
O4 - HKCU\..\Run: [dmbpw.tmp] C:\Windows\system32\dmbpw.tmp
O4 - HKCU\..\Run: [dmzcv.tmp] C:\Windows\system32\dmzcv.tmp
O4 - HKCU\..\Run: [dmujv.tmp] C:\Windows\system32\dmujv.tmp
O4 - HKCU\..\Run: [dmqyw.tmp] C:\Windows\system32\dmqyw.tmp
O4 - HKCU\..\Run: [dmlzc.tmp] C:\Windows\system32\dmlzc.tmp
O4 - HKCU\..\Run: [dmaij.tmp] C:\Windows\system32\dmaij.tmp
O4 - HKCU\..\Run: [dmbpf.tmp] C:\Windows\system32\dmbpf.tmp
O4 - HKCU\..\Run: [dmimr.tmp] C:\Windows\system32\dmimr.tmp
O4 - HKCU\..\Run: [dmbkc.tmp] C:\Windows\system32\dmbkc.tmp
O4 - HKCU\..\Run: [dmtub.tmp] C:\Windows\system32\dmtub.tmp
O4 - HKCU\..\Run: [dmzvf.tmp] C:\Windows\system32\dmzvf.tmp
O4 - HKCU\..\Run: [dmurv.tmp] C:\Windows\system32\dmurv.tmp
O4 - HKCU\..\Run: [dmnmt.tmp] C:\Windows\system32\dmnmt.tmp
O4 - HKCU\..\Run: [dmgtc.tmp] C:\Windows\system32\dmgtc.tmp
O4 - HKCU\..\Run: [dmsfp.tmp] C:\Windows\system32\dmsfp.tmp
O4 - HKCU\..\Run: [dmupn.tmp] C:\Windows\system32\dmupn.tmp
O4 - HKCU\..\Run: [dmzbz.tmp] C:\Windows\system32\dmzbz.tmp
O4 - HKCU\..\Run: [dmcot.tmp] C:\Windows\system32\dmcot.tmp
O4 - HKCU\..\Run: [dmmhm.tmp] C:\Windows\system32\dmmhm.tmp
O4 - HKCU\..\Run: [dmetp.tmp] C:\Windows\system32\dmetp.tmp
O4 - HKCU\..\Run: [dmjrn.tmp] C:\Windows\system32\dmjrn.tmp
O4 - HKCU\..\Run: [dmqcc.tmp] C:\Windows\system32\dmqcc.tmp
O4 - HKCU\..\Run: [dmudc.tmp] C:\Windows\system32\dmudc.tmp
O4 - HKCU\..\Run: [dmewk.tmp] C:\Windows\system32\dmewk.tmp
O4 - HKCU\..\Run: [dmuog.tmp] C:\Windows\system32\dmuog.tmp
O4 - HKCU\..\Run: [dmvsn.tmp] C:\Windows\system32\dmvsn.tmp
O4 - HKCU\..\Run: [dmhvu.tmp] C:\Windows\system32\dmhvu.tmp
O4 - HKCU\..\Run: [dmopc.tmp] C:\Windows\system32\dmopc.tmp
O4 - HKCU\..\Run: [dmwxc.tmp] C:\Windows\system32\dmwxc.tmp
O4 - HKCU\..\Run: [dmbup.tmp] C:\Windows\system32\dmbup.tmp
O4 - HKCU\..\Run: [dmolu.tmp] C:\Windows\system32\dmolu.tmp
O4 - HKCU\..\Run: [dmpqr.tmp] C:\Windows\system32\dmpqr.tmp
O4 - HKCU\..\Run: [dmbrs.tmp] C:\Windows\system32\dmbrs.tmp
O4 - HKCU\..\Run: [dmgmz.tmp] C:\Windows\system32\dmgmz.tmp
O4 - HKCU\..\Run: [dmwmf.tmp] C:\Windows\system32\dmwmf.tmp
O4 - HKCU\..\Run: [dmlcf.tmp] C:\Windows\system32\dmlcf.tmp
O4 - HKCU\..\Run: [dmjfy.tmp] C:\Windows\system32\dmjfy.tmp
O4 - HKCU\..\Run: [dmksh.tmp] C:\Windows\system32\dmksh.tmp
O4 - HKCU\..\Run: [dmzva.tmp] C:\Windows\system32\dmzva.tmp
O4 - HKCU\..\Run: [dmkbz.tmp] C:\Windows\system32\dmkbz.tmp
O4 - HKCU\..\Run: [dmruh.tmp] C:\Windows\system32\dmruh.tmp
O4 - HKCU\..\Run: [dmzmq.tmp] C:\Windows\system32\dmzmq.tmp
O4 - HKCU\..\Run: [dmdor.tmp] C:\Windows\system32\dmdor.tmp
O4 - HKCU\..\Run: [dmsyd.tmp] C:\Windows\system32\dmsyd.tmp
O4 - HKCU\..\Run: [dmbrc.tmp] C:\Windows\system32\dmbrc.tmp
O4 - HKCU\..\Run: [dmnvf.tmp] C:\Windows\system32\dmnvf.tmp
O4 - HKCU\..\Run: [dmkdm.tmp] C:\Windows\system32\dmkdm.tmp
O4 - HKCU\..\Run: [dmdrm.tmp] C:\Windows\system32\dmdrm.tmp
O4 - HKCU\..\Run: [dmkby.tmp] C:\Windows\system32\dmkby.tmp
O4 - HKCU\..\Run: [dmvda.tmp] C:\Windows\system32\dmvda.tmp
O4 - HKCU\..\Run: [Antivirus] C:\Program Files\Antivirus2008\Antvrs.exe
O4 - HKCU\..\Run: [dmzti.tmp] C:\Windows\system32\dmzti.tmp
O4 - HKCU\..\Run: [dmrwa.tmp] C:\Windows\system32\dmrwa.tmp
O4 - HKCU\..\Run: [dmqbj.tmp] C:\Windows\system32\dmqbj.tmp
O4 - HKCU\..\Run: [dmnqu.tmp] C:\Windows\system32\dmnqu.tmp
O4 - HKCU\..\Run: [dmzja.tmp] C:\Windows\system32\dmzja.tmp
O4 - HKCU\..\Run: [dmmmx.tmp] C:\Windows\system32\dmmmx.tmp
O4 - HKCU\..\Run: [dmidq.tmp] C:\Windows\system32\dmidq.tmp
O4 - HKCU\..\Run: [dmnwp.tmp] C:\Windows\system32\dmnwp.tmp
O4 - HKCU\..\Run: [gscic] "c:\users\smain\appdata\local\gscic.exe" gscic
O4 - HKCU\..\Run: [ukmceag] "c:\users\smain\appdata\local\ukmceag.exe" ukmceag
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\smain\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D1548A26-B8F6-4E86-AE74-E7062CCC2E2A} (igLoader Content on Demand) - http://www.miniclip.com/igloader/igloader.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{03F0236A-898D-427C-A883-D624C6166736}: NameServer = 85.255.113.149,85.255.112.81
O17 - HKLM\System\CCS\Services\Tcpip\..\{16BED8C1-28BE-4064-8A2A-F8A1DF1EC244}: NameServer = 85.255.113.149,85.255.112.81
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.113.149 85.255.112.81
O17 - HKLM\System\CS1\Services\Tcpip\..\{03F0236A-898D-427C-A883-D624C6166736}: NameServer = 85.255.113.149,85.255.112.81
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.113.149 85.255.112.81
O17 - HKLM\System\CS2\Services\Tcpip\..\{03F0236A-898D-427C-A883-D624C6166736}: NameServer = 85.255.113.149,85.255.112.81
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.113.149 85.255.112.81
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

aie aie aie cela fait mal un tel rapport!!!

il y a du boulot!

j'espere que tu es dispo car il faut y aller ! tu es détourné en ukraine!
________

smit fraud fix (colle le rapport)

1/ telecharger :

http://siri.urz.free.fr/Fix/SmitfraudFix.php

2/ double clique sur smitfraudfix. puis sélectionne 1 et appuyer sur entrée afin de créer le rapport des infection présentes.

______________

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

- Va dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide.

Télécharge maintenant Navilog1 depuis-ce lien :

http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, Fais un Clic-droit sur le raccourci Navilog1 présent sur ton bureau et choisis "Exécuter

en tant qu'administrateur".

Au menu principal, Fais le choix 1
Laisse toi guider et patiente.
Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche le blocnote va s'ouvrir.
Copie-colle l'intégralité du rapport dans une réponse.
Referme le blocnote
Le rapport fixnavi.txt est en outre sauvegardé dans %systemdrive%.

sa ne veux pas jarive pas (j 'arrive a telecharger smit fraud fix ensuite # Recherche:

* Double cliquer sur SmitfraudFix.exe
* Sélectionner 1 et pressez Entrée dans le menu pour créer un rapport des fichiers responsables de l'infection. Le rapport se trouve à la racine du disque système C:\rapport.txt

mais apré sa me marche plus je sui inquier mon ordi bug

alors fais ceci:

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

- Va dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide.

télécharge combofix (par sUBs) ici : renommé en killfix

http://sd-1.archive-host.com/membres/up/193094576412487685/Killfix.exe

et enregistre le sur le bureau.

déconnecte toi d'internet et ferme toutes tes applications.

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

double-clique sur combofix.exe et suis les instructions

à la fin, il va produire un rapport C:\ComboFix.txt

réactive ton parefeu, ton antivirus, la garde de ton antispyware

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

Tu as un tutoriel complet ici :

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

_______________________

scan avec
MalwareByte's Anti-Malware après mise a jour, en mode normal et vire ce qui est trouvé et colle le rapport

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

__________________________

remets un rapport RSIT

voici le rapport combofix "ComboFix 09-01-19.05 - smain 2009-01-22 21:44:23.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.894.206 [GMT 1:00]
Lancé depuis: c:\users\smain\Desktop\Killfix.exe
AV: avast! antivirus 4.8.1296 [VPS 090122-0] *On-access scanning disabled* (Updated)
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Antivirus2008
c:\program files\BurstWriting
c:\program files\BurstWriting\uninstall.dat
c:\program files\BurstWriting\Uninstall.exe
c:\program files\FBrowserAdvisor
c:\program files\FBrowsingAdvisor
c:\program files\FBrowsingAdvisor\IXPCOMEvents.xpt
c:\program files\FBrowsingAdvisor\Logo.png
c:\program files\FBrowsingAdvisor\main.db
c:\program files\FBrowsingAdvisor\unins000.dat
c:\program files\FBrowsingAdvisor\unins000.exe
c:\program files\FBrowsingAdvisor\XPCOMEvents.dll
c:\program files\FunWebProducts
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\program files\Video Add-on
c:\programdata\Adsl Software Limited
c:\programdata\Adsl Software Limited\WinSpywareProtect\LOG\20080607130102891.log
c:\programdata\Adsl Software Limited\WinSpywareProtect\LOG\20080607162346988.log
c:\programdata\Adsl Software Limited\WinSpywareProtect\LOG\20080607173634430.log
c:\programdata\Adsl Software Limited\WinSpywareProtect\LOG\20080607183920377.log
c:\programdata\Adsl Software Limited\WinSpywareProtect\LOG\20080607214136560.log
c:\programdata\Adsl Software Limited\WinSpywareProtect\LOG\20080608125010637.log
c:\programdata\Adsl Software Limited\WinSpywareProtect\LOG\20080608203654748.log
c:\programdata\Adsl Software Limited\WinSpywareProtect\LOG\20080609114607996.log
c:\programdata\Adsl Software Limited\WinSpywareProtect\LOG\20080609121958158.log
c:\programdata\Microsoft\Windows\Start Menu\Programs\InternetGameBox
c:\programdata\Microsoft\Windows\Start Menu\Programs\InternetGameBox\Conditions générales.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\InternetGameBox\Confidentialité.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\InternetGameBox\InternetGameBox.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\InternetGameBox\Website.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\PlayMP3z
c:\programdata\Microsoft\Windows\Start Menu\Programs\PlayMP3z\Run PlayMP3z.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\Spyware-Secure
c:\programdata\Microsoft\Windows\Start Menu\Programs\Spyware-Secure\Spyware-Secure.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\Spyware-Secure\Website.lnk
c:\users\smain\AppData\Local\gscic.dat
c:\users\smain\AppData\Local\gscic_nav.dat
c:\users\smain\AppData\Local\gscic_navps.dat
c:\users\smain\AppData\Local\gscic_navup.dat
c:\users\smain\AppData\Local\ukmceag.dat
c:\users\smain\AppData\Local\ukmceag.exe
c:\users\smain\AppData\Local\ukmceag_nav.dat
c:\users\smain\AppData\Local\ukmceag_navps.dat
c:\users\smain\AppData\Roaming\Microsoft\Windows\Start Menu\Antivirus2008
c:\users\smain\AppData\Roaming\Microsoft\Windows\Start Menu\Antivirus2008\Antivirus 2008.lnk
c:\users\smain\AppData\Roaming\Microsoft\Windows\Start Menu\Antivirus2008\Uninstall Antivirus.lnk
c:\windows\system32\nvs2.inf

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-12-22 au 2009-01-22 ))))))))))))))))))))))))))))))))))))
.

2009-01-22 20:29 . 2009-01-22 20:29 <REP> d-------- C:\rsit
2009-01-22 20:29 . 2009-01-22 20:43 <REP> d-------- c:\program files\trend micro
2009-01-22 18:41 . 2008-11-26 18:17 51,792 --a------ c:\windows\System32\drivers\aswMonFlt.sys
2009-01-21 14:39 . 2009-01-21 14:38 410,984 --a------ c:\windows\System32\deploytk.dll
2009-01-15 09:58 . 2009-01-15 09:59 <REP> d-------- c:\program files\DivX
2009-01-09 18:06 . 2009-01-09 18:06 <REP> d-------- c:\program files\BitDownload
2009-01-08 14:25 . 2009-01-22 17:50 <REP> d-------- c:\program files\eMule
2009-01-08 14:18 . 2009-01-08 14:18 <REP> d-------- c:\users\smain\AppData\Roaming\.wyzo
2009-01-08 14:16 . 2009-01-08 14:29 <REP> d-------- c:\program files\Wyzo
2008-12-28 15:46 . 2008-12-28 15:46 <REP> d-------- c:\program files\AliveMedia
2008-12-28 11:28 . 2005-07-07 15:25 81,728 --a------ c:\windows\System32\drivers\k750mgmt.sys
2008-12-28 11:14 . 2005-07-07 15:25 79,488 --a------ c:\windows\System32\drivers\k750obex.sys
2008-12-28 11:06 . 2005-07-07 15:25 89,872 --a------ c:\windows\System32\drivers\k750mdm.sys
2008-12-28 11:06 . 2005-07-07 15:26 6,576 --a------ c:\windows\System32\drivers\k750mdfl.sys
2008-12-28 11:06 . 2005-07-07 15:26 6,144 --a------ c:\windows\System32\drivers\k750cmnt.sys
2008-12-28 11:06 . 2005-07-07 15:26 6,144 --a------ c:\windows\System32\drivers\k750cm.sys
2008-12-28 10:59 . 2005-07-07 15:26 55,216 --a------ c:\windows\System32\drivers\k750bus.sys
2008-12-28 10:59 . 2005-07-07 15:25 5,744 --a------ c:\windows\System32\drivers\k750whnt.sys
2008-12-28 10:59 . 2005-07-07 15:25 5,744 --a------ c:\windows\System32\drivers\k750wh.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-22 20:44 1,048,576 --sha-w c:\users\Invité\NTUSER.DAT
2009-01-22 20:44 1,048,576 --sha-w c:\users\Invité\NTUSER.DAT
2009-01-22 18:55 --------- d-----w c:\program files\BitDefender
2009-01-22 18:52 81,984 ----a-w c:\windows\System32\bdod.bin
2009-01-21 20:44 --------- d-----w c:\programdata\Google Updater
2009-01-21 13:37 --------- d-----w c:\program files\Java
2009-01-20 09:04 --------- d-----w c:\users\smain\AppData\Roaming\LimeWire
2009-01-17 17:26 --------- d-----w c:\users\smain\AppData\Roaming\Image Zone Express
2009-01-07 18:34 --------- d-----w c:\program files\Google
2009-01-05 08:23 --------- d-----w c:\users\smain\AppData\Roaming\Printer Info Cache
2009-01-05 08:19 1,826 ----a-w c:\users\smain\AppData\Roaming\wklnhst.dat
2008-12-19 20:50 --------- d-----w c:\program files\Alwil Software
2008-12-19 20:31 --------- d-----w c:\programdata\Symantec
2008-12-19 20:31 --------- d-----w c:\program files\Common Files\Symantec Shared
2008-12-19 20:27 --------- d-----w c:\program files\Symantec
2008-12-14 09:19 --------- d-----w c:\users\smain\AppData\Roaming\EoRezo
2008-12-13 18:03 --------- d-----w c:\program files\MyXOFT
2008-11-06 16:35 200,704 ----a-w c:\windows\System32\ssldivx.dll
2008-11-06 16:35 1,044,480 ----a-w c:\windows\System32\libdivx.dll
2008-10-25 08:09 319,456 ----a-w c:\windows\DIFxAPI.dll
2008-09-23 14:09 174 --sha-w c:\program files\desktop.ini
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-10 1232896]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
"SweetIM"="c:\program files\Macrogaming\SweetIM\SweetIM.exe" [2008-01-02 103712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2006-09-28 65536]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"OsdMaestro"="c:\program files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [2007-02-15 118784]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-21 136600]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2008-05-22 526880]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-22 13539872]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-22 92704]
"SweetIM"="c:\program files\Macrogaming\SweetIM\SweetIM.exe" [2008-01-02 103712]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"RtHDVCpl"="RtHDVCpl.exe" [2008-01-15 c:\windows\RtHDVCpl.exe]

c:\users\smain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Outil de notification Live Search.lnk - c:\users\smain\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe [2008-12-17 143360]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-01-02 210520]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{79C5137B-380B-440C-AB13-622A67C4244B}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{1A031041-9B75-4114-9530-AB750E1DE079}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{F95C86DF-DA7E-46E0-B2D0-864264E5FEF1}"= UDP:c:\program files\LimeWire\LimeWire.exe:LimeWire
"{C6A02AA9-32CA-47B9-BFAF-BE3EB5E0FAF2}"= TCP:c:\program files\LimeWire\LimeWire.exe:LimeWire
"{A863B3C8-6AD7-435F-9334-F999BB5B038E}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{436357C2-DACC-4A0D-8EB1-B61E72F5D484}"= UDP:c:\program files\LimeWire\1\LimeWire.exe:LimeWire
"{1CB89129-AB0E-4156-8F74-A4FE18722BFA}"= TCP:c:\program files\LimeWire\1\LimeWire.exe:LimeWire
"{0FD76A26-44B5-4B02-951F-041C83D1D098}"= c:\program files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
"TCP Query User{1CE9DC36-3F67-4C66-A1CA-BE11DA24EE4E}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{380A859C-25E6-4BD7-BFBC-8739423ACCD9}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"TCP Query User{440D0908-4FFD-4BD3-9177-4D5B0EF58779}c:\\program files\\wyzo\\wyzo.exe"= UDP:c:\program files\wyzo\wyzo.exe:Wyzo
"UDP Query User{BA90C1AA-C43F-4103-961D-C7577375E0B1}c:\\program files\\wyzo\\wyzo.exe"= TCP:c:\program files\wyzo\wyzo.exe:Wyzo
"TCP Query User{FB263579-4060-491D-B76E-91F09710AD46}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule
"UDP Query User{8427D476-6D9B-41BC-AA39-EB9E9FDAA34C}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\Program Files\\PPMate\\ppmate.exe"= c:\program files\PPMate\ppmate.exe:*:Enabled:PPMate
"c:\\Program Files\\PPMate\\ppmnet.exe"= c:\program files\PPMate\ppmnet.exe:*:Enabled:PPMate

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [2009-01-22 111184]
R3 netr73;USB Wireless 802.11 b/g Adaptor Driver for Vista;c:\windows\System32\drivers\netr73.sys [2007-08-31 464384]
R4 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [2009-01-22 20560]
R4 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [2009-01-22 51792]
S3 s916bus;Sony Ericsson Device 916 driver (WDM);c:\windows\System32\drivers\s916bus.sys [2008-05-13 83496]
S3 s916mdfl;Sony Ericsson Device 916 USB WMC Modem Filter;c:\windows\System32\drivers\s916mdfl.sys [2008-05-15 15016]
S3 s916mdm;Sony Ericsson Device 916 USB WMC Modem Driver;c:\windows\System32\drivers\s916mdm.sys [2008-05-15 109992]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{41ab1c85-eb6c-11dc-a7db-001bfcc4fe2d}]
\shell\Auto\command - wscript "esta ig.vbs"
\shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript "esta ig.vbs"
.
Contenu du dossier 'Tâches planifiées'

2009-01-21 c:\windows\Tasks\User_Feed_Synchronization-{0E95EAE8-BC25-4F30-9F05-B0D3A2CC3007}.job
- c:\windows\system32\msfeedssync.exe [2006-11-02 10:45]

2009-01-22 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20]
.
- - - - ORPHELINS SUPPRIMES - - - -

WebBrowser-{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file)
HKCU-Run-MsnMsgr - ~c:\program files\MSN Messenger\MsnMsgr.Exe
HKCU-Run-RegistryCleanFixMFC - c:\program files\RegistryCleanFix2008\RegistryCleaner2008.exe
HKCU-Run-dmgid.tmp - c:\windows\system32\dmgid.tmp
HKCU-Run-dmiyy.tmp - c:\windows\system32\dmiyy.tmp
HKCU-Run-dmcoc.tmp - c:\windows\system32\dmcoc.tmp
HKCU-Run-dmwnm.tmp - c:\windows\system32\dmwnm.tmp
HKCU-Run-dmsyy.tmp - c:\windows\system32\dmsyy.tmp
HKCU-Run-dmfsb.tmp - c:\windows\system32\dmfsb.tmp
HKCU-Run-dmidf.tmp - c:\windows\system32\dmidf.tmp
HKCU-Run-dmsqk.tmp - c:\windows\system32\dmsqk.tmp
HKCU-Run-dmlfd.tmp - c:\windows\system32\dmlfd.tmp
HKCU-Run-dmlaz.tmp - c:\windows\system32\dmlaz.tmp
HKCU-Run-dmxyf.tmp - c:\windows\system32\dmxyf.tmp
HKCU-Run-dmsew.tmp - c:\windows\system32\dmsew.tmp
HKCU-Run-dmssi.tmp - c:\windows\system32\dmssi.tmp
HKCU-Run-dmhzo.tmp - c:\windows\system32\dmhzo.tmp
HKCU-Run-dmnpl.tmp - c:\windows\system32\dmnpl.tmp
HKCU-Run-dmuyp.tmp - c:\windows\system32\dmuyp.tmp
HKCU-Run-dmhxb.tmp - c:\windows\system32\dmhxb.tmp
HKCU-Run-dmnpo.tmp - c:\windows\system32\dmnpo.tmp
HKCU-Run-dmhmh.tmp - c:\windows\system32\dmhmh.tmp
HKCU-Run-dmiys.tmp - c:\windows\system32\dmiys.tmp
HKCU-Run-dmnih.tmp - c:\windows\system32\dmnih.tmp
HKCU-Run-dmwoa.tmp - c:\windows\system32\dmwoa.tmp
HKCU-Run-dmezh.tmp - c:\windows\system32\dmezh.tmp
HKCU-Run-dmgfj.tmp - c:\windows\system32\dmgfj.tmp
HKCU-Run-dmeri.tmp - c:\windows\system32\dmeri.tmp
HKCU-Run-dmsbj.tmp - c:\windows\system32\dmsbj.tmp
HKCU-Run-dmtbj.tmp - c:\windows\system32\dmtbj.tmp
HKCU-Run-dmeic.tmp - c:\windows\system32\dmeic.tmp
HKCU-Run-dmqky.tmp - c:\windows\system32\dmqky.tmp
HKCU-Run-dmfxu.tmp - c:\windows\system32\dmfxu.tmp
HKCU-Run-dmohg.tmp - c:\windows\system32\dmohg.tmp
HKCU-Run-dmdnx.tmp - c:\windows\system32\dmdnx.tmp
HKCU-Run-dmlkp.tmp - c:\windows\system32\dmlkp.tmp
HKCU-Run-dmezy.tmp - c:\windows\system32\dmezy.tmp
HKCU-Run-dmpma.tmp - c:\windows\system32\dmpma.tmp
HKCU-Run-dmfem.tmp - c:\windows\system32\dmfem.tmp
HKCU-Run-dmvxj.tmp - c:\windows\system32\dmvxj.tmp
HKCU-Run-dmwuq.tmp - c:\windows\system32\dmwuq.tmp
HKCU-Run-dmlud.tmp - c:\windows\system32\dmlud.tmp
HKCU-Run-dmzpk.tmp - c:\windows\system32\dmzpk.tmp
HKCU-Run-dmjly.tmp - c:\windows\system32\dmjly.tmp
HKCU-Run-dmitk.tmp - c:\windows\system32\dmitk.tmp
HKCU-Run-dmdop.tmp - c:\windows\system32\dmdop.tmp
HKCU-Run-dmqry.tmp - c:\windows\system32\dmqry.tmp
HKCU-Run-dmddd.tmp - c:\windows\system32\dmddd.tmp
HKCU-Run-dmrzc.tmp - c:\windows\system32\dmrzc.tmp
HKCU-Run-dmalj.tmp - c:\windows\system32\dmalj.tmp
HKCU-Run-dmijt.tmp - c:\windows\system32\dmijt.tmp
HKCU-Run-dmsob.tmp - c:\windows\system32\dmsob.tmp
HKCU-Run-dmkdg.tmp - c:\windows\system32\dmkdg.tmp
HKCU-Run-dmpla.tmp - c:\windows\system32\dmpla.tmp
HKCU-Run-dmnhu.tmp - c:\windows\system32\dmnhu.tmp
HKCU-Run-dmoci.tmp - c:\windows\system32\dmoci.tmp
HKCU-Run-dmstm.tmp - c:\windows\system32\dmstm.tmp
HKCU-Run-dmufu.tmp - c:\windows\system32\dmufu.tmp
HKCU-Run-dmqvp.tmp - c:\windows\system32\dmqvp.tmp
HKCU-Run-dmznp.tmp - c:\windows\system32\dmznp.tmp
HKCU-Run-dmasb.tmp - c:\windows\system32\dmasb.tmp
HKCU-Run-dmfea.tmp - c:\windows\system32\dmfea.tmp
HKCU-Run-dmatr.tmp - c:\windows\system32\dmatr.tmp
HKCU-Run-dmwgv.tmp - c:\windows\system32\dmwgv.tmp
HKCU-Run-dmgnw.tmp - c:\windows\system32\dmgnw.tmp
HKCU-Run-dmeih.tmp - c:\windows\system32\dmeih.tmp
HKCU-Run-dmszm.tmp - c:\windows\system32\dmszm.tmp
HKCU-Run-dmnbr.tmp - c:\windows\system32\dmnbr.tmp
HKCU-Run-dmqdh.tmp - c:\windows\system32\dmqdh.tmp
HKCU-Run-dmscv.tmp - c:\windows\system32\dmscv.tmp
HKCU-Run-dmeyc.tmp - c:\windows\system32\dmeyc.tmp
HKCU-Run-dmhvo.tmp - c:\windows\system32\dmhvo.tmp
HKCU-Run-dmbwd.tmp - c:\windows\system32\dmbwd.tmp
HKCU-Run-dmffk.tmp - c:\windows\system32\dmffk.tmp
HKCU-Run-dmdwz.tmp - c:\windows\system32\dmdwz.tmp
HKCU-Run-dmrpl.tmp - c:\windows\system32\dmrpl.tmp
HKCU-Run-dmjee.tmp - c:\windows\system32\dmjee.tmp
HKCU-Run-dmlqq.tmp - c:\windows\system32\dmlqq.tmp
HKCU-Run-dmqou.tmp - c:\windows\system32\dmqou.tmp
HKCU-Run-dmeif.tmp - c:\windows\system32\dmeif.tmp
HKCU-Run-dmuoz.tmp - c:\windows\system32\dmuoz.tmp
HKCU-Run-dmtov.tmp - c:\windows\system32\dmtov.tmp
HKCU-Run-dmaox.tmp - c:\windows\system32\dmaox.tmp
HKCU-Run-dmtpp.tmp - c:\windows\system32\dmtpp.tmp
HKCU-Run-dmehu.tmp - c:\windows\system32\dmehu.tmp
HKCU-Run-dmwei.tmp - c:\windows\system32\dmwei.tmp
HKCU-Run-dmcms.tmp - c:\windows\system32\dmcms.tmp
HKCU-Run-dmefe.tmp - c:\windows\system32\dmefe.tmp
HKCU-Run-dmjjt.tmp - c:\windows\system32\dmjjt.tmp
HKCU-Run-dmzev.tmp - c:\windows\system32\dmzev.tmp
HKCU-Run-dmevv.tmp - c:\windows\system32\dmevv.tmp
HKCU-Run-dmukb.tmp - c:\windows\system32\dmukb.tmp
HKCU-Run-dmbkl.tmp - c:\windows\system32\dmbkl.tmp
HKCU-Run-dmnbf.tmp - c:\windows\system32\dmnbf.tmp
HKCU-Run-dmrgc.tmp - c:\windows\system32\dmrgc.tmp
HKCU-Run-dmhag.tmp - c:\windows\system32\dmhag.tmp
HKCU-Run-dmkay.tmp - c:\windows\system32\dmkay.tmp
HKCU-Run-dmvkn.tmp - c:\windows\system32\dmvkn.tmp
HKCU-Run-dmaqd.tmp - c:\windows\system32\dmaqd.tmp
HKCU-Run-dmvhf.tmp - c:\windows\system32\dmvhf.tmp
HKCU-Run-dmxht.tmp - c:\windows\system32\dmxht.tmp
HKCU-Run-dmyew.tmp - c:\windows\system32\dmyew.tmp
HKCU-Run-dmgzr.tmp - c:\windows\system32\dmgzr.tmp
HKCU-Run-dmmcy.tmp - c:\windows\system32\dmmcy.tmp
HKCU-Run-dmztv.tmp - c:\windows\system32\dmztv.tmp
HKCU-Run-dmpxx.tmp - c:\windows\system32\dmpxx.tmp
HKCU-Run-dmymo.tmp - c:\windows\system32\dmymo.tmp
HKCU-Run-dmgxb.tmp - c:\windows\system32\dmgxb.tmp
HKCU-Run-dmyup.tmp - c:\windows\system32\dmyup.tmp
HKCU-Run-dmdsq.tmp - c:\windows\system32\dmdsq.tmp
HKCU-Run-dmypi.tmp - c:\windows\system32\dmypi.tmp
HKCU-Run-dmiyv.tmp - c:\windows\system32\dmiyv.tmp
HKCU-Run-dmsag.tmp - c:\windows\system32\dmsag.tmp
HKCU-Run-dmzmm.tmp - c:\windows\system32\dmzmm.tmp
HKCU-Run-dmtuq.tmp - c:\windows\system32\dmtuq.tmp
HKCU-Run-dmbpx.tmp - c:\windows\system32\dmbpx.tmp
HKCU-Run-dmqpm.tmp - c:\windows\system32\dmqpm.tmp
HKCU-Run-dmrwb.tmp - c:\windows\system32\dmrwb.tmp
HKCU-Run-dmobg.tmp - c:\windows\system32\dmobg.tmp
HKCU-Run-dmchh.tmp - c:\windows\system32\dmchh.tmp
HKCU-Run-dmizx.tmp - c:\windows\system32\dmizx.tmp
HKCU-Run-dmyhq.tmp - c:\windows\system32\dmyhq.tmp
HKCU-Run-dmfna.tmp - c:\windows\system32\dmfna.tmp
HKCU-Run-dmloy.tmp - c:\windows\system32\dmloy.tmp
HKCU-Run-dmvrg.tmp - c:\windows\system32\dmvrg.tmp
HKCU-Run-dmqfn.tmp - c:\windows\system32\dmqfn.tmp
HKCU-Run-dmiay.tmp - c:\windows\system32\dmiay.tmp
HKCU-Run-dmkpa.tmp - c:\windows\system32\dmkpa.tmp
HKCU-Run-dmeci.tmp - c:\windows\system32\dmeci.tmp
HKCU-Run-dmvpz.tmp - c:\windows\system32\dmvpz.tmp
HKCU-Run-dmjhx.tmp - c:\windows\system32\dmjhx.tmp
HKCU-Run-dmitx.tmp - c:\windows\system32\dmitx.tmp
HKCU-Run-dmszz.tmp - c:\windows\system32\dmszz.tmp
HKCU-Run-dmqzt.tmp - c:\windows\system32\dmqzt.tmp
HKCU-Run-dmysd.tmp - c:\windows\system32\dmysd.tmp
HKCU-Run-dmmyz.tmp - c:\windows\system32\dmmyz.tmp
HKCU-Run-dmuhe.tmp - c:\windows\system32\dmuhe.tmp
HKCU-Run-dmgyl.tmp - c:\windows\system32\dmgyl.tmp
HKCU-Run-dmdsr.tmp - c:\windows\system32\dmdsr.tmp
HKCU-Run-dmmpi.tmp - c:\windows\system32\dmmpi.tmp
HKCU-Run-dmzku.tmp - c:\windows\system32\dmzku.tmp
HKCU-Run-dmtqq.tmp - c:\windows\system32\dmtqq.tmp
HKCU-Run-dmfjc.tmp - c:\windows\system32\dmfjc.tmp
HKCU-Run-dmjkj.tmp - c:\windows\system32\dmjkj.tmp
HKCU-Run-dmggv.tmp - c:\windows\system32\dmggv.tmp
HKCU-Run-dmuth.tmp - c:\windows\system32\dmuth.tmp
HKCU-Run-dmyzx.tmp - c:\windows\system32\dmyzx.tmp
HKCU-Run-dmtnt.tmp - c:\windows\system32\dmtnt.tmp
HKCU-Run-dmhjt.tmp - c:\windows\system32\dmhjt.tmp
HKCU-Run-dmfwh.tmp - c:\windows\system32\dmfwh.tmp
HKCU-Run-dmmmh.tmp - c:\windows\system32\dmmmh.tmp
HKCU-Run-dmaka.tmp - c:\windows\system32\dmaka.tmp
HKCU-Run-dmnyi.tmp - c:\windows\system32\dmnyi.tmp
HKCU-Run-dmlfe.tmp - c:\windows\system32\dmlfe.tmp
HKCU-Run-dmbej.tmp - c:\windows\system32\dmbej.tmp
HKCU-Run-dmhzk.tmp - c:\windows\system32\dmhzk.tmp
HKCU-Run-dmwzb.tmp - c:\windows\system32\dmwzb.tmp
HKCU-Run-dmzho.tmp - c:\windows\system32\dmzho.tmp
HKCU-Run-dmjhj.tmp - c:\windows\system32\dmjhj.tmp
HKCU-Run-dmvqd.tmp - c:\windows\system32\dmvqd.tmp
HKCU-Run-dmwko.tmp - c:\windows\system32\dmwko.tmp
HKCU-Run-dmakn.tmp - c:\windows\system32\dmakn.tmp
HKCU-Run-dmdfc.tmp - c:\windows\system32\dmdfc.tmp
HKCU-Run-dmbrg.tmp - c:\windows\system32\dmbrg.tmp
HKCU-Run-dmobt.tmp - c:\windows\system32\dmobt.tmp
HKCU-Run-dmhqk.tmp - c:\windows\system32\dmhqk.tmp
HKCU-Run-dmwob.tmp - c:\windows\system32\dmwob.tmp
HKCU-Run-dmdbb.tmp - c:\windows\system32\dmdbb.tmp
HKCU-Run-dmeww.tmp - c:\windows\system32\dmeww.tmp
HKCU-Run-dmisr.tmp - c:\windows\system32\dmisr.tmp
HKCU-Run-dmjgx.tmp - c:\windows\system32\dmjgx.tmp
HKCU-Run-dmlyp.tmp - c:\windows\system32\dmlyp.tmp
HKCU-Run-dmecj.tmp - c:\windows\system32\dmecj.tmp
HKCU-Run-dmjib.tmp - c:\windows\system32\dmjib.tmp
HKCU-Run-dmydf.tmp - c:\windows\system32\dmydf.tmp
HKCU-Run-dmdwa.tmp - c:\windows\system32\dmdwa.tmp
HKCU-Run-dmuui.tmp - c:\windows\system32\dmuui.tmp
HKCU-Run-dmmge.tmp - c:\windows\system32\dmmge.tmp
HKCU-Run-dmjcu.tmp - c:\windows\system32\dmjcu.tmp
HKCU-Run-dmjab.tmp - c:\windows\system32\dmjab.tmp
HKCU-Run-dmzun.tmp - c:\windows\system32\dmzun.tmp
HKCU-Run-dmwby.tmp - c:\windows\system32\dmwby.tmp
HKCU-Run-dmdwd.tmp - c:\windows\system32\dmdwd.tmp
HKCU-Run-dmxtj.tmp - c:\windows\system32\dmxtj.tmp
HKCU-Run-dmntw.tmp - c:\windows\system32\dmntw.tmp
HKCU-Run-dmhev.tmp - c:\windows\system32\dmhev.tmp
HKCU-Run-dmmhj.tmp - c:\windows\system32\dmmhj.tmp
HKCU-Run-dmpoj.tmp - c:\windows\system32\dmpoj.tmp
HKCU-Run-dmpeo.tmp - c:\windows\system32\dmpeo.tmp
HKCU-Run-dmhls.tmp - c:\windows\system32\dmhls.tmp
HKCU-Run-dmdbg.tmp - c:\windows\system32\dmdbg.tmp
HKCU-Run-dmwfc.tmp - c:\windows\system32\dmwfc.tmp
HKCU-Run-dmuru.tmp - c:\windows\system32\dmuru.tmp
HKCU-Run-dmjle.tmp - c:\windows\system32\dmjle.tmp
HKCU-Run-dmbnn.tmp - c:\windows\system32\dmbnn.tmp
HKCU-Run-dmurg.tmp - c:\windows\system32\dmurg.tmp
HKCU-Run-dmqpx.tmp - c:\windows\system32\dmqpx.tmp
HKCU-Run-dmwsq.tmp - c:\windows\system32\dmwsq.tmp
HKCU-Run-dmcqa.tmp - c:\windows\system32\dmcqa.tmp
HKCU-Run-dmpai.tmp - c:\windows\system32\dmpai.tmp
HKCU-Run-dmpro.tmp - c:\windows\system32\dmpro.tmp
HKCU-Run-dmrzo.tmp - c:\windows\system32\dmrzo.tmp
HKCU-Run-dmscm.tmp - c:\windows\system32\dmscm.tmp
HKCU-Run-dmxxc.tmp - c:\windows\system32\dmxxc.tmp
HKCU-Run-dmcys.tmp - c:\windows\system32\dmcys.tmp
HKCU-Run-dmrym.tmp - c:\windows\system32\dmrym.tmp
HKCU-Run-dmzyz.tmp - c:\windows\system32\dmzyz.tmp
HKCU-Run-dmxnv.tmp - c:\windows\system32\dmxnv.tmp
HKCU-Run-dmnby.tmp - c:\windows\system32\dmnby.tmp
HKCU-Run-dmbpw.tmp - c:\windows\system32\dmbpw.tmp
HKCU-Run-dmzcv.tmp - c:\windows\system32\dmzcv.tmp
HKCU-Run-dmujv.tmp - c:\windows\system32\dmujv.tmp
HKCU-Run-dmqyw.tmp - c:\windows\system32\dmqyw.tmp
HKCU-Run-dmlzc.tmp - c:\windows\system32\dmlzc.tmp
HKCU-Run-dmaij.tmp - c:\windows\system32\dmaij.tmp
HKCU-Run-dmbpf.tmp - c:\windows\system32\dmbpf.tmp
HKCU-Run-dmimr.tmp - c:\windows\system32\dmimr.tmp
HKCU-Run-dmbkc.tmp - c:\windows\system32\dmbkc.tmp
HKCU-Run-dmtub.tmp - c:\windows\system32\dmtub.tmp
HKCU-Run-dmzvf.tmp - c:\windows\system32\dmzvf.tmp
HKCU-Run-dmurv.tmp - c:\windows\system32\dmurv.tmp
HKCU-Run-dmnmt.tmp - c:\windows\system32\dmnmt.tmp
HKCU-Run-dmgtc.tmp - c:\windows\system32\dmgtc.tmp
HKCU-Run-dmsfp.tmp - c:\windows\system32\dmsfp.tmp
HKCU-Run-dmupn.tmp - c:\windows\system32\dmupn.tmp
HKCU-Run-dmzbz.tmp - c:\windows\system32\dmzbz.tmp
HKCU-Run-dmcot.tmp - c:\windows\system32\dmcot.tmp
HKCU-Run-dmmhm.tmp - c:\windows\system32\dmmhm.tmp
HKCU-Run-dmetp.tmp - c:\windows\system32\dmetp.tmp
HKCU-Run-dmjrn.tmp - c:\windows\system32\dmjrn.tmp
HKCU-Run-dmqcc.tmp - c:\windows\system32\dmqcc.tmp
HKCU-Run-dmudc.tmp - c:\windows\system32\dmudc.tmp
HKCU-Run-dmewk.tmp - c:\windows\system32\dmewk.tmp
HKCU-Run-dmuog.tmp - c:\windows\system32\dmuog.tmp
HKCU-Run-dmvsn.tmp - c:\windows\system32\dmvsn.tmp
HKCU-Run-dmhvu.tmp - c:\windows\system32\dmhvu.tmp
HKCU-Run-dmopc.tmp - c:\windows\system32\dmopc.tmp
HKCU-Run-dmwxc.tmp - c:\windows\system32\dmwxc.tmp
HKCU-Run-dmbup.tmp - c:\windows\system32\dmbup.tmp
HKCU-Run-dmolu.tmp - c:\windows\system32\dmolu.tmp
HKCU-Run-dmpqr.tmp - c:\windows\system32\dmpqr.tmp
HKCU-Run-dmbrs.tmp - c:\windows\system32\dmbrs.tmp
HKCU-Run-dmgmz.tmp - c:\windows\system32\dmgmz.tmp
HKCU-Run-dmwmf.tmp - c:\windows\system32\dmwmf.tmp
HKCU-Run-dmlcf.tmp - c:\windows\system32\dmlcf.tmp
HKCU-Run-dmjfy.tmp - c:\windows\system32\dmjfy.tmp
HKCU-Run-dmksh.tmp - c:\windows\system32\dmksh.tmp
HKCU-Run-dmzva.tmp - c:\windows\system32\dmzva.tmp
HKCU-Run-dmkbz.tmp - c:\windows\system32\dmkbz.tmp
HKCU-Run-dmruh.tmp - c:\windows\system32\dmruh.tmp
HKCU-Run-dmzmq.tmp - c:\windows\system32\dmzmq.tmp
HKCU-Run-dmdor.tmp - c:\windows\system32\dmdor.tmp
HKCU-Run-dmsyd.tmp - c:\windows\system32\dmsyd.tmp
HKCU-Run-dmbrc.tmp - c:\windows\system32\dmbrc.tmp
HKCU-Run-dmnvf.tmp - c:\windows\system32\dmnvf.tmp
HKCU-Run-dmkdm.tmp - c:\windows\system32\dmkdm.tmp
HKCU-Run-dmdrm.tmp - c:\windows\system32\dmdrm.tmp
HKCU-Run-dmkby.tmp - c:\windows\system32\dmkby.tmp
HKCU-Run-dmvda.tmp - c:\windows\system32\dmvda.tmp
HKCU-Run-dmzti.tmp - c:\windows\system32\dmzti.tmp
HKCU-Run-dmrwa.tmp - c:\windows\system32\dmrwa.tmp
HKCU-Run-dmqbj.tmp - c:\windows\system32\dmqbj.tmp
HKCU-Run-dmnqu.tmp - c:\windows\system32\dmnqu.tmp
HKCU-Run-dmzja.tmp - c:\windows\system32\dmzja.tmp
HKCU-Run-dmmmx.tmp - c:\windows\system32\dmmmx.tmp
HKCU-Run-dmidq.tmp - c:\windows\system32\dmidq.tmp
HKCU-Run-dmnwp.tmp - c:\windows\system32\dmnwp.tmp
HKCU-Run-gscic - c:\users\smain\appdata\local\gscic.exe
HKCU-Run-ukmceag - c:\users\smain\appdata\local\ukmceag.exe
HKLM-Run-EoEngine - (no file)

.
------- Examen supplémentaire -------
.
mStart Page = hxxp://home.sweetim.com
uSearchURL,(Default) = hxxp://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\smain\AppData\Roaming\Mozilla\Firefox\Profiles\1kvkmdks.default\
FF - prefs.js: browser.search.selectedEngine - Live Search
FF - prefs.js: browser.startup.homepage - hxxp://fr.msn.com/
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?mkt=fr-FR&FORM=MIMWA2&q=
FF - plugin: c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-22 21:53:45
Windows 6.0.6000 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2009-01-22 21:55:51
ComboFix-quarantined-files.txt 2009-01-22 20:55:47

Avant-CF: 189 417 684 992 octets libres
Après-CF: 190,202,462,208 octets libres

482 --- E O F --- 2008-09-22 17:17:37

scan avec
MalwareByte's Anti-Malware après mise a jour, en mode normal et vire ce qui est trouvé et colle le rapport

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

__________________________

remets un rapport RSIT

et

tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

je suis entrai de scané avec
MalwareByte's Anti-Malware mais cela prend longtemps ( 3heures ) c'est normale

oui c'est normal

sinon fais un scan rapide

a plus

voici Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1654
Windows 6.0.6000

23/01/2009 13:17:05
mbam-log-2009-01-23 (13-17-05).txt

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|)
Eléments examinés: 133566
Temps écoulé: 3 hour(s), 59 minute(s), 35 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 18
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 4

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3aa42713-5c1e-48e2-b432-d8bf420dd31d} (Rogue.Antivirus2008) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWay) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\fbrowsingadvisor_is1 (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\BitDownload (Trojan.Lop) -> Quarantined and deleted successfully.
C:\Users\smain\AppData\Roaming\Antivirus (Rogue.Antivirus2008) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\regxpcom.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\regxpcom.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Qoobox\Quarantine\C\Program Files\FBrowsingAdvisor\XPCOMEvents.dll.vir (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\BitDownload Setup Components (Trojan.Lop) -> Quarantined and deleted successfully.

remets un rapport RSIT

et

tu télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)

dsl mai cquoi un rapport rsit tu ne peut pas le faire avc ce que je tai envoyer

rsit c'est ce qui est expliqué en 1

donc je dois refaire un dianostique c 'est sa non. Deplus tu me dit télécharge Lop S&D.exe sur ton Bureau et de faire sa * Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
mais jarive jusqu' a la deuxieme etoile ( le scan démare pas )

remets alors juste un rapport RSIT

tien voila Logfile of random's system information tool 1.05 (written by random/random)
Run by smain at 2009-01-24 17:50:55
Microsoft® Windows Vista™ Édition Familiale Premium
System drive C: has 179 GB (78%) free of 230 GB
Total RAM: 894 MB (23% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:51:04, on 24/01/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16764)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Users\smain\AppData\Local\gfrzkd.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\System32\mobsync.exe
C:\Users\smain\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Windows\System32\rundll32.exe
C:\Users\smain\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\hp\kbd\kbd.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\smain\Desktop\RSIT.exe
C:\Program Files\trend micro\smain.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fr/0SEFRFR/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [gfrzkd] "c:\users\smain\appdata\local\gfrzkd.exe" gfrzkd
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\smain\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D1548A26-B8F6-4E86-AE74-E7062CCC2E2A} (igLoader Content on Demand) - http://www.miniclip.com/igloader/igloader.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

analyse ce fihcier sur virus total et dis si infecté : https://www.virustotal.com/gui/

C:\Program Files\MSN Messenger\msnmsgr.exe

______________

télécharge OTMoveIt

http://oldtimer.geekstogo.com/OTMoveIt3.exe

(de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

:files
c:\users\smain\appdata\local\gfrzkd.exe
:reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{41ab1c85-eb6c-11dc-a7db-001bfcc4fe2d}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"gfrzkd"=-

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

________________________

Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :
http://sd-1.archive-host.com/membres/up/16506160323759868/AD­-R.exe

/!\ Déconnectes toi et fermes toutes applications en cours

● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
● Double clique sur l'icône Ad-removersituée sur ton bureau
● Au menu principal choisi l'option "A"
● Postes le rapport qui apparait à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

se n 'est pas marqué si c'est infecté mais voici se que sa ma mis " Information additionnelle
File size: 5674352 bytes
MD5...: a7efc7ea7ef6fb022a8a95813edcbe5d
SHA1..: 3a61f9696cc34fd4863f07c9aa70e54621bb4c77
SHA256: 98247c844f9d9c165787f830e5c8850046565d3775833334987dad7377843005
SHA512: 5ec5bcb26e0921d1aa20cfef9384a08c91ae36a28b6ba2afd28a6b01ece40dd6
e5ad39a51a1deabc3c35a6878be06a5e21f7dce5dae14f25db91b07bc25c4ef5
ssdeep: 49152:+nRgOM5CKhm4W1nf5IWbDmGdq0HSHnBY2lWtoK/r3uoWfKrPR5Z4a+v3Xk
9SEBoz:+nRNMBO1f1bilESicQTr2KzR8apVCD
PEiD..: -
TrID..: File type identification
Win32 Executable Generic (68.0%)
Generic Win/DOS Executable (15.9%)
DOS Executable Generic (15.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x5708ed
timedatestamp.....: 0x45b12d6a (Fri Jan 19 20:43:22 2007)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x4b1029 0x4b1200 6.32 8d3146f757440806d5803f1d0d94b2b7
.data 0x4b3000 0x88824 0x87e00 5.05 08b16b3222aaf04e0a2d978fd1d8fa4c
.rsrc 0x53c000 0x2db10 0x2dc00 4.88 ee608aaa6b1f77f4951050802ea41f10

( 28 imports )
> MSVCR80.dll: __3@YAXPAX@Z, ___V@YAXPAX@Z, memcpy_s, _CxxThrowException, memmove_s, wcschr, rand, _wcsdup, ceil, _wtol, memmove, free, isxdigit, isalpha, isdigit, realloc, atol, _difftime64, _wcsupr_s, floor, _callnewh, _amsg_exit, __getmainargs, _cexit, _exit, _XcptFilter, _ismbblead, _acmdln, _initterm, _initterm_e, _configthreadlocale, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, _encode_pointer, __set_app_type, _terminate@@YAXXZ, _except_handler4_common, _unlock, __dllonexit, _lock, _onexit, _decode_pointer, _invoke_watson, _controlfp_s, __type_info_dtor_internal_method@type_info@@QAEXXZ, _crt_debugger_hook, tolower, wcspbrk, _wgetenv, wcstol, wcsncpy_s, strtoul, _mbsrchr, _mbsupr_s, _ismbcspace, _mbsinc, _wfullpath, _gmtime64_s, _aligned_malloc, _aligned_free, _scwprintf, wcsncmp, towupper, srand, atoi, _mbschr, _stricmp, _wcsrev, wcsftime, isspace, _purecall, malloc, __CxxFrameHandler3, memset, memchr, _wcsicmp, wcsrchr, _wcslwr_s, calloc, _recalloc, _resetstkoflw, memcpy, _mktime64, _localtime64_s, _time64, wcsstr, _beginthreadex, _vscwprintf, _strnicmp, wprintf, vswprintf_s, _mbscmp, wcsspn, strtol, _wcstoui64, wcscpy_s, _strnicoll, _strrev, strncmp, _mbspbrk, _localtime64, wcstoul, __RTDynamicCast, qsort, _mbscspn, _mbsspn, _wcsncoll, iswdigit, iswalpha, _set_purecall_handler, _wcsnicmp, exit, _vsnwprintf, qsort_s, _mbsstr, fopen, fprintf, fclose, _vsnprintf, strstr, strrchr, _wcsnicoll, _wtoi, _strlwr, vsprintf_s, _vscprintf, _mbsicmp, swprintf_s, iswspace, strchr, _ltoa, wcscspn, _mbslwr_s
> ADVAPI32.dll: CryptAcquireContextW, ConvertStringSecurityDescriptorToSecurityDescriptorW, TraceEvent, RegCloseKey, CryptGenRandom, RegEnumKeyExW, RegCreateKeyExW, RegOpenKeyExW, RegDeleteValueW, CryptDecrypt, CryptEncrypt, CryptDeriveKey, CryptDestroyKey, OpenSCManagerW, OpenServiceW, CloseServiceHandle, QueryServiceStatusEx, CryptGetHashParam, CryptHashData, RegQueryValueExW, CryptCreateHash, CryptDestroyHash, CryptReleaseContext, ImpersonateSelf, RegSetValueExW, GetTraceEnableFlags, GetTraceEnableLevel, OpenThreadToken, OpenProcessToken, InitializeSecurityDescriptor, GetLengthSid, InitializeAcl, AddAccessAllowedAce, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, FreeSid, CheckTokenMembership, MakeAbsoluteSD, SetSecurityDescriptorDacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, IsValidSecurityDescriptor, CryptImportKey, CryptSetHashParam, RegEnumKeyA, RegEnumValueA, RegQueryInfoKeyW, RegDeleteValueA, RegQueryValueExA, RegSetValueExA, RegCreateKeyExA, RegOpenKeyExA, AccessCheck, RevertToSelf, RegDeleteKeyA, AllocateAndInitializeSid
> KERNEL32.dll: VirtualAlloc, VirtualFree, IsProcessorFeaturePresent, GetThreadLocale, GetLocaleInfoA, HeapSize, HeapDestroy, AddAtomW, SetThreadPriority, CreateToolhelp32Snapshot, Process32First, Process32Next, lstrcpynA, GetLocaleInfoW, GetACP, GetSystemDefaultLCID, FormatMessageA, GetVolumeInformationW, FileTimeToLocalFileTime, GetVersionExW, SetErrorMode, GetUserDefaultLCID, CreateMutexA, OpenEventA, GetProcessTimes, GetSystemInfo, GetWindowsDirectoryW, GetUserDefaultUILanguage, QueryDepthSList, InterlockedFlushSList, InitializeSListHead, InterlockedPushEntrySList, InterlockedPopEntrySList, GetTempFileNameW, GetCurrentThread, QueueUserWorkItem, CompareStringA, GetSystemTimeAsFileTime, SetFileTime, FindFirstFileA, MoveFileExA, GetFullPathNameW, GetTimeZoneInformation, lstrcpyW, WaitForMultipleObjects, GetOverlappedResult, CancelIo, ReadDirectoryChangesW, SetEndOfFile, RemoveDirectoryW, SystemTimeToTzSpecificLocalTime, GetFileAttributesExW, FindFirstFileExW, FindNextFileW, FreeResource, FindAtomW, InterlockedCompareExchange, SystemTimeToFileTime, FindFirstFileW, FindClose, TerminateProcess, SetFilePointer, SetProcessWorkingSetSize, SetCurrentDirectoryW, GetModuleFileNameA, GetDiskFreeSpaceExW, CompareStringW, OpenFileMappingW, MapViewOfFileEx, LoadLibraryExW, CopyFileW, CreateFileMappingW, CreateMutexW, DuplicateHandle, GetCurrentProcessId, ReleaseMutex, GetVersionExA, CreateEventA, GetCommandLineA, GetModuleHandleA, GlobalMemoryStatus, ExitProcess, CreateFileMappingA, OpenFileMappingA, MapViewOfFile, UnmapViewOfFile, ExpandEnvironmentStringsA, DeleteFileA, GetSystemDirectoryW, LoadLibraryW, ExpandEnvironmentStringsW, GetStartupInfoA, lstrcmpiA, lstrcmpA, ReadFile, RtlMoveMemory, MoveFileW, MoveFileExW, GetProcAddress, GetSystemTime, FileTimeToSystemTime, GetDateFormatW, GetTimeFormatW, GetLocalTime, FreeLibrary, GetTempPathW, GlobalFree, TlsGetValue, GetSystemDirectoryA, LoadLibraryA, GetModuleFileNameW, lstrlenA, Sleep, CreateThread, GetModuleHandleW, LocalAlloc, ResumeThread, GetExitCodeThread, TerminateThread, SetEvent, ResetEvent, CreateEventW, CreateProcessW, WaitForSingleObject, GetExitCodeProcess, CompareFileTime, SetThreadExecutionState, InterlockedDecrement, InterlockedIncrement, HeapReAlloc, HeapAlloc, GetProcessHeap, HeapFree, CreateDirectoryW, SetLastError, GetCurrentProcess, FlushInstructionCache, RaiseException, GetTickCount, GetFileAttributesW, SetFileAttributesW, DeleteFileW, GetShortPathNameW, GlobalAlloc, GlobalLock, GlobalSize, GlobalUnlock, lstrcmpW, lstrcpynW, lstrcmpiW, lstrlenW, MulDiv, GetFileSize, InterlockedExchange, WideCharToMultiByte, FlushFileBuffers, WriteFile, CreateFileW, FormatMessageW, MultiByteToWideChar, CloseHandle, GetLastError, LocalFree, GetCurrentThreadId, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, GetStringTypeExA, IsDBCSLeadByteEx, lstrcatA, lstrcpyA, SetCurrentDirectoryA, GetCurrentDirectoryA, GetPrivateProfileIntA, GetDriveTypeW, GetLogicalDriveStringsW, IsWow64Process, QueryPerformanceCounter, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, OpenMutexW, DebugBreak, LoadLibraryExA, VirtualQuery, VirtualProtect, GetThreadContext, SetThreadContext, SuspendThread, GetCurrentDirectoryW
> GDI32.dll: GetDIBits, SetBitmapBits, SetPixel, EnumFontFamiliesExW, CreateRectRgn, OffsetViewportOrgEx, SetDIBColorTable, SetLayout, GetRgnBox, SetStretchBltMode, CreateDIBSection, PatBlt, CreatePen, MoveToEx, LineTo, CreateFontIndirectW, ExtTextOutW, GetPixel, SetBkColor, GetTextMetricsW, LPtoDP, SetMapMode, SetViewportOrgEx, CreateDCW, CreateMetaFileW, SaveDC, SetWindowOrgEx, SetWindowExtEx, RestoreDC, CloseMetaFile, DeleteMetaFile, CreateRectRgnIndirect, CreateRoundRectRgn, GetStockObject, GetObjectW, CreateCompatibleBitmap, GetClipRgn, CreateCompatibleDC, DeleteDC, SelectObject, GetDIBColorTable, GetDeviceCaps, CreateSolidBrush, DeleteObject, SetBkMode, SetTextColor, SelectClipRgn, ExtSelectClipRgn, StretchBlt, BitBlt
> USER32.dll: GetScrollInfo, GetDlgCtrlID, GetDlgItemTextW, IsWindowEnabled, MapDialogRect, DrawFocusRect, CreateDialogParamW, GetNextDlgTabItem, SendMessageA, SetActiveWindow, RedrawWindow, SetDlgItemTextW, SetProcessDefaultLayout, ModifyMenuW, GetLastActivePopup, GetClassNameA, SetCursorPos, InsertMenuW, GetAsyncKeyState, TrackPopupMenu, GetClassInfoExA, RegisterClassW, RegisterWindowMessageA, GetDoubleClickTime, SetMenuDefaultItem, MoveWindow, LoadImageW, CheckDlgButton, EnableWindow, CheckRadioButton, GetMessageW, SetRectEmpty, GetProcessDefaultLayout, GetClassNameW, GetWindow, GetDlgItem, FindWindowA, MessageBoxW, PostQuitMessage, AdjustWindowRectEx, GetMenuStringW, AppendMenuW, FindWindowW, FindWindowExW, DrawAnimatedRects, CreateWindowExW, RegisterClassExW, UnionRect, CallWindowProcW, GetClassInfoExW, GetWindowLongW, BeginPaint, EndPaint, IntersectRect, SetWindowRgn, IsMenu, IsZoomed, SetMenu, MessageBeep, GetMenu, CheckMenuItem, SetWindowPlacement, SetMenuItemInfoW, IsIconic, CheckMenuRadioItem, IsWindowVisible, LoadIconA, SetWindowTextW, GetWindowPlacement, LoadCursorA, FlashWindow, GetForegroundWindow, UpdateWindow, GetKeyState, ClientToScreen, GetSystemMetrics, GetSysColor, GetClientRect, EqualRect, GetWindowTextLengthW, GetWindowTextW, SetWindowPos, GetWindowRect, SetForegroundWindow, IsWindow, MapWindowPoints, CopyRect, LoadMenuA, TrackPopupMenuEx, GetDesktopWindow, SetCapture, ReleaseCapture, SetWindowsHookExW, UnhookWindowsHookEx, PostThreadMessageW, CallNextHookEx, PeekMessageW, MsgWaitForMultipleObjects, TranslateMessage, DispatchMessageW, PostMessageW, CreateMenu, DestroyMenu, CreatePopupMenu, DeleteMenu, GetMenuItemCount, SendMessageW, SystemParametersInfoW, RemoveMenu, GetSubMenu, GetMenuItemInfoW, InsertMenuItemW, GetActiveWindow, DialogBoxParamW, IsDlgButtonChecked, LoadIconW, SendDlgItemMessageW, SetWindowLongW, EndDialog, LoadCursorW, SetCursor, GetCursorPos, DestroyWindow, InvalidateRect, GetParent, GetFocus, IsChild, SetFocus, DrawTextW, FrameRect, FillRect, GetSysColorBrush, DrawIconEx, DestroyIcon, EnableMenuItem, OffsetRect, InflateRect, SetRect, GetDC, ReleaseDC, ShowWindow, SetTimer, SetParent, DefWindowProcW, KillTimer, GetCapture, GetTopWindow, MessageBoxIndirectW, EnumChildWindows, UnregisterClassA, CharNextA, CharLowerA, CharNextW, CharLowerW, GetKeyboardLayoutList, MonitorFromRect, RegisterClipboardFormatW, GetMenuItemID, GetMenuState, ScreenToClient, SetDlgItemInt, GetDlgItemInt, IsRectEmpty, GetWindowRgn, AdjustWindowRect, MonitorFromWindow, GetMonitorInfoW, GetIconInfo, GetWindowThreadProcessId, IsDialogMessageW, CharLowerBuffW, CharPrevW, LoadStringA, LoadStringW, IsClipboardFormatAvailable, RegisterWindowMessageW, EnumWindows, EnumThreadWindows, RegisterClassExA, CreateWindowExA, GetWindowDC, PtInRect, DestroyAcceleratorTable, UnregisterClassW
> WSOCK32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> SHELL32.dll: -, -, ShellExecuteExW, -, -, SHGetDesktopFolder, -, SHChangeNotify, SHCreateDirectoryExW, ExtractIconExW, SHBrowseForFolderW, SHGetPathFromIDListW, -, SHGetFolderPathAndSubDirW, -, Shell_NotifyIconW, Shell_NotifyIconA, SHAppBarMessage, ShellExecuteExA, ShellExecuteW, -, SHGetFileInfoW, SHFileOperationW, SHGetFolderPathW, ShellExecuteA, SHGetMalloc, DragQueryFileW
> ole32.dll: CreateOleAdviseHolder, OleRegGetMiscStatus, OleRegGetUserType, CreateDataAdviseHolder, OleRegEnumVerbs, WriteClassStm, OleSaveToStream, CoSuspendClassObjects, ReleaseStgMedium, OleFlushClipboard, StringFromCLSID, CLSIDFromString, CoInitializeEx, CoGetInterfaceAndReleaseStream, CoMarshalInterThreadInterfaceInStream, CoAllowSetForegroundWindow, CoCreateGuid, StgCreateDocfileOnILockBytes, CreateILockBytesOnHGlobal, OleSetClipboard, CoFreeUnusedLibraries, CoSetProxyBlanket, CLSIDFromProgID, CoFileTimeNow, CoCreateFreeThreadedMarshaler, CoFreeLibrary, CoLoadLibrary, StgOpenStorageOnILockBytes, CoTaskMemAlloc, OleLockRunning, StringFromGUID2, OleRun, CoRevokeClassObject, OleInitialize, OleUninitialize, CoInitializeSecurity, CoRegisterClassObject, CoInitialize, CoUninitialize, CreateStreamOnHGlobal, GetHGlobalFromStream, CoCreateInstance, OleLoadFromStream, CoTaskMemFree
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> SHLWAPI.dll: PathStripToRootW, SHCreateStreamOnFileEx, PathFindFileNameW, PathAppendA, PathFindExtensionW, SHCopyKeyA, SHStrDupW, UrlGetPartW, PathUnquoteSpacesW, PathStripPathW, PathCommonPrefixW, PathCanonicalizeW, SHCreateStreamOnFileW, PathRelativePathToW, PathIsDirectoryW, StrCmpNIW, PathFileExistsW, PathRemoveFileSpecW, PathAppendW
> MSIMG32.dll: AlphaBlend, TransparentBlt
> gdiplus.dll: GdipGetImageHeight, GdipGetImageRawFormat, GdipGetImagePixelFormat, GdipGetImagePaletteSize, GdipGetImagePalette, GdipImageGetFrameDimensionsList, GdipImageGetFrameCount, GdipImageSelectActiveFrame, GdipGetPropertyItemSize, GdipGetPropertyItem, GdipCreateBitmapFromStream, GdipCreateBitmapFromStreamICM, GdipBitmapLockBits, GdipBitmapUnlockBits, GdiplusShutdown, GdipFree, GdipAlloc, GdipDisposeImage, GdipSaveImageToStream, GdipCreateBitmapFromScan0, GdipCreateBitmapFromHBITMAP, GdipGetImageEncodersSize, GdipGetImageEncoders, GdiplusStartup, GdipCloneImage, GdipSaveImageToFile, GdipGetImageWidth
> MSNCore.dll: _CSAddFile@@YGJIPB_W0IK@Z, _RMPruneResourceSet@@YG_NKPB_W@Z, _FrameTitleProp@DialogHost@@2PAUPropertyInfo@DirectUI@@A, _Class@DialogHost@@2PAUIClassInfo@DirectUI@@A, _CreateGraphic@Value@DirectUI@@SGPAV12@PAUHBITMAP__@@EI_N1I1@Z, _FontSizeProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _LPARAMProp@CmdButton@@2PAUPropertyInfo@DirectUI@@A, _Open@CPerfMonitor@@QAEXXZ, _Close@CPerfMonitor@@QAEXXZ, GetHRESULTString, _Create@VerticalFlowLayout@DirectUI@@SGJHIIIPAPAVLayout@2@@Z, _CSGetElementInnerText@@YGJPAUIXMLDOMNode@@PB_WAAVCComBSTR@ATL@@@Z, _m_pMsgFilter@CMsgFilterHolder@@1PAVCMsgFilter@@A, _CSConfigGetDownloadState@@YG_AW4tagCONFIGSERVERCLIENT_DOWNLOAD_STATE@@PA_N@Z, _CSConfigNotify@@YGXJ@Z, _CSConfigDownload@@YGJPB_W000IK_NPADIW4tagCONFIGSERVERCLIENT_EVENT_TYPE@@00@Z, _CSGetAttributeValue@@YGJPAUIXMLDOMNode@@PB_WAAVCComBSTR@ATL@@@Z, _CSAdd@@YGJIPB_W00IK_NW4tagCONFIGSERVERCLIENT_EVENT_TYPE@@00@Z, _CSRemove@@YGJI@Z, _CSReset@@YGXXZ, _CSConfigReleaseXML@@YGXXZ, _CSSelectNode@@YGJIPB_WPAPAUIXMLDOMNode@@@Z, _CSLoadFromFile@@YGJPB_WPAPAUIXMLDOMNode@@@Z, _CSConfigIsInfoReady@@YG_NXZ, _CSSelectNode@@YGJPAUIXMLDOMNode@@PB_WPAPAU1@@Z, _CSConfigSelectNode@@YGJPB_WPAPAUIXMLDOMNode@@@Z, _CSConfigGetAttributeValue@@YGJPB_W0AAK@Z, _CSConfigGetElementInnerText@@YGJPAUIXMLDOMNode@@PB_WAAV_$CStringT@_WV_$StrTraitATL@_WV_$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z, _CSConfigGetElementInnerText@@YGJPB_WAAV_$CStringT@_WV_$StrTraitATL@_WV_$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z, _GetPageInc@ScrollBar@DirectUI@@IAEHXZ, _LineProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _MinimumProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _MaximumProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _Create@NativeHWNDHost@DirectUI@@SGJPB_W0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@IPAPAV12@@Z, _WM_PRIVATE_UPDATEFRAME@CFramelessHost@@2IB, MapGadgetPoints, SetGadgetOrder, _Initialize@ScrollViewer@DirectUI@@QAEJXZ, _OnListenedPropertyChanged@ScrollViewer@DirectUI@@UAEXPAVElement@2@PAUPropertyInfo@2@HPAVValue@2@2@Z, _CreateScrollBars@ScrollViewer@DirectUI@@MAEJXZ, _Add@ScrollViewer@DirectUI@@UAEJPAPAVElement@2@I@Z, _OnEvent@ScrollViewer@DirectUI@@UAEXPAUEvent@2@@Z, _OnInput@ScrollViewer@DirectUI@@UAEXPAUInputEvent@2@@Z, _OnPropertyChanged@ScrollViewer@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnPropertyChanging@ScrollViewer@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z, _Class@Combobox@DirectUI@@2PAUIClassInfo@2@A, _Class@ScrollViewer@DirectUI@@2PAUIClassInfo@2@A, _Class@Viewer@DirectUI@@2PAUIClassInfo@2@A, _Class@Thumb@DirectUI@@2PAUIClassInfo@2@A, _Class@RepeatButton@DirectUI@@2PAUIClassInfo@2@A, InitGadgetComponent, _Register@HWNDContainer@@SGJXZ, _Register@PNGGraphic@@SGJXZ, _Register@CmdButton@@SGJXZ, _Register@Clipper@@SGJXZ, _Register@CExpando@@SGJXZ, _Register@ClipperH@@SGJXZ, _Register@CExpandoH@@SGJXZ, _Register@DialogHost@@SGJXZ, UninitGadgetComponent, _Enter@Edit@DirectUI@@2PAEA, _StateChange@Checkbox@DirectUI@@2PAEA, _FindFirstDescendentByClass@DirectUI@@YGPAVElement@1@PAV21@PAUIClassInfo@1@@Z, _StateProp@Checkbox@DirectUI@@2PAUPropertyInfo@2@A, _IsIMEActive@WLEditT@@IAE_NXZ, _RemoveEllipsis@WLEditT@@IAEXXZ, _ForceDSChanged@WLEditT@@IAEXXZ, SetGadgetMessageFilter, _AnimationProp@Element@DirectUI@@2PAUPropertyInfo@2@A, GetGadget, _OnDragEnterEvent@CDropTargetGadgetAdaptor@@2PAEA, _FontFaceProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _FontWeightProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _FontStyleProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _GetTextServices@CRichEditAccessible@@IAE_AV_$CComPtr@VITextServices@@@ATL@@XZ, _EmbededOleToText@CRichEditAccessible@@IAEXAAV_$CStringT@_WV_$StrTraitATL@_WV_$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@U_charrange@@@Z, _Initialize@CRichEditAccessible@@QAEXPAVElement@DirectUI@@@Z, _PinBottomEnabledProp@WLEditT@@2PAUPropertyInfo@DirectUI@@A, _SetReadOnly@WLEditT@@QAEJH@Z, _SetPinBottom@WLEditT@@QAEJ_N@Z, _GetPinBottomEnabled@WLEditT@@QBE_NXZ, _ShowEndProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _ContextSensitiveHelp@DuiAccessible@DirectUI@@UAGJH@Z, _GetWindow@DuiAccessible@DirectUI@@UAGJPAPAUHWND__@@@Z, _Clone@DuiAccessible@DirectUI@@UAGJPAPAUIEnumVARIANT@@@Z, _Reset@DuiAccessible@DirectUI@@UAGJXZ, _Skip@DuiAccessible@DirectUI@@UAGJK@Z, _Next@DuiAccessible@DirectUI@@UAGJKPAUtagVARIANT@@PAK@Z, _Disconnect@CRichEditAccessible@@UAEJXZ, _put_accValue@CRichEditAccessible@@UAGJUtagVARIANT@@PA_W@Z, _put_accName@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PA_W@Z, _accDoDefaultAction@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@@Z, _accHitTest@DuiAccessible@DirectUI@@UAGJJJPAUtagVARIANT@@@Z, _accNavigate@DuiAccessible@DirectUI@@UAGJJUtagVARIANT@@PAU3@@Z, _accLocation@DuiAccessible@DirectUI@@UAGJPAJ000UtagVARIANT@@@Z, _accSelect@DuiAccessible@DirectUI@@UAGJJUtagVARIANT@@@Z, _get_accDefaultAction@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accSelection@DuiAccessible@DirectUI@@UAGJPAUtagVARIANT@@@Z, _get_accFocus@DuiAccessible@DirectUI@@UAGJPAUtagVARIANT@@@Z, _get_accKeyboardShortcut@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accHelpTopic@DuiAccessible@DirectUI@@UAGJPAPA_WUtagVARIANT@@PAJ@Z, _get_accHelp@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accState@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAU3@@Z, _get_accRole@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAU3@@Z, _get_accDescription@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accValue@CRichEditAccessible@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accName@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accChild@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPAUIDispatch@@@Z, _get_accChildCount@DuiAccessible@DirectUI@@UAGJPAJ@Z, _get_accParent@DuiAccessible@DirectUI@@UAGJPAPAUIDispatch@@@Z, _Invoke@DuiAccessible@DirectUI@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z, _GetIDsOfNames@DuiAccessible@DirectUI@@UAGJABU_GUID@@PAPA_WIKPAJ@Z, _GetTypeInfo@DuiAccessible@DirectUI@@UAGJIKPAPAUITypeInfo@@@Z, _GetTypeInfoCount@DuiAccessible@DirectUI@@UAGJPAI@Z, _Release@DuiAccessible@DirectUI@@UAGKXZ, _AddRef@DuiAccessible@DirectUI@@UAGKXZ, _QueryInterface@DuiAccessible@DirectUI@@UAGJABU_GUID@@PAPAX@Z, __1DuiAccessible@DirectUI@@UAE@XZ, _Initialize@Selector@DirectUI@@QAEJXZ, _Create@Selector@DirectUI@@SGJPAPAVElement@2@@Z, _SelectionChange@Selector@DirectUI@@2PAEA, _MessageCallbackHelper@CDropTargetGadgetAdaptor@@SGIPAVElement@DirectUI@@PAUIDropTarget@@PAUtagGMSG@@AAV_$CRefCountedPtr2@VCDropTargetGadgetAdaptor@@@@@Z, _GetClassInfoW@CmdButton@@UAEPAUIClassInfo@DirectUI@@XZ, _BringWindowToTop@NativeHWNDHost@DirectUI@@QAEXXZ, _pvValueListNull@Value@DirectUI@@2PAV12@A, _CreateVariant@Value@DirectUI@@SGPAV12@PAUtagVARIANT@@@Z, _RMFindModuleForResource@@YGPAUHINSTANCE__@@PB_W0K0@Z, _RMLoadBitmap@@YGPAUHBITMAP__@@PB_WK0@Z, _DataTransformProp@Element@DirectUI@@2PAUPropertyInfo@2@A, __SetValue@Element@DirectUI@@IAEJPBUPropertyInfo@2@HPAVValue@2@_N2@Z, _KillTimer@DuiElementTimerHandler@@QAEXIK@Z, _SetTimer@DuiElementTimerHandler@@QAEIIIK@Z, __1DuiElementTimerHandler@@UAE@XZ, __0DuiElementTimerHandler@@QAE@XZ, _pvUnknownNull@Value@DirectUI@@2PAV12@A, _Help@HWNDElement@DirectUI@@2PAEA, _DestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ, _CreateImageValue@CRMDUIParser@@UAEPAVValue@DirectUI@@PB_W@Z, _CreateStringValue@CRMDUIParser@@UAEPAVValue@DirectUI@@PB_WI@Z, _SetDataTransform@Element@DirectUI@@QAEJPAUIUnknown@@@Z, _Create@FillLayout@DirectUI@@SGJPAPAVLayout@2@@Z, _Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NI1@Z, ForwardGadgetMessage, _WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z, _GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z, _RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z, _RMLoadImage@@YGPAXPB_WIHHIK0@Z, _RMLoadResourceStream@@YGPAUIStream@@PB_W0_NPAKK0@Z, _GetContentSize@WLEditT@@QAE_AUtagSIZE@@XZ, _ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z, _UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z, _OnDestroy@HWNDElement@DirectUI@@UAEXXZ, _OnKeyFocusMoved@HWNDElement@DirectUI@@UAEXPAVElement@2@0@Z, _OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z, _OnPropertyChanged@HWNDElement@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z, _OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z, _Destroy@NativeHWNDHost@DirectUI@@UAEXXZ, _GetScreenCenterPoint@CDUIDialog@@SG_AUtagPOINT@@PAUHWND__@@@Z, _Class@HWNDElement@DirectUI@@2PAUIClassInfo@2@A, _SyncMaxVisibleLines@WLEditT@@QAEJXZ, _RMFindModule@@YGPAUHINSTANCE__@@KPB_W@Z, _Class@Element@DirectUI@@2PAUIClassInfo@2@A, _FindDescendent@Element@DirectUI@@QAEPAV12@G@Z, _StrToID@DirectUI@@YGGPB_W@Z, _EndDefer@Element@DirectUI@@SGXXZ, _ShowElement@@YGJPAVElement@DirectUI@@H@Z, _StartDefer@Element@DirectUI@@SGXXZ, _GetElement@NativeHWNDHost@DirectUI@@QAEPAVElement@2@XZ, __1CRMDirectStringResource@@UAE@XZ, __BCRMDirectStringResource@@QBEPB_WXZ, __1CRMSystemMetricString@@UAE@XZ, __BCRMSystemMetricString@@QAEPB_WXZ, _Length@CRMSystemMetricString@@QAEKXZ, __0CRMSystemMetricString@@QAE@ABVCRMDirectStringResource@@@Z, _IsSystemMetric@CRMDirectStringResource@@QBE_NXZ, _Length@CRMDirectStringResource@@QBEIXZ, __0CRMDirectStringResource@@QAE@IKPB_W@Z, __1CRMCompoundStringResource@@UAE@XZ, _BuildString@CRMCompoundStringResource@@UBE_NPA_WI@Z, _Length@CRMCompoundStringResource@@QBEIXZ, __0CRMCompoundStringResource@@QAE@IKPB_W@Z, _GetInstance@CConfigServerClientEvents@@SGPAV1@XZ, _g_fIsRTL@UxgUtil@@3HA, __0CDUIDialog@@QAE@XZ, _Destroy@CDUIDialog@@MAEXXZ, _OnMessage@CDUIDialog@@MAEJIIJAAJ@Z, _SetDefaultFocus@NativeHWNDHost@DirectUI@@MAEXXZ, _OnDefaultFrameColorChanged@CFramelessHost@@MAEXXZ, _OnUpdateFrame@CFramelessHost@@MAEX_N@Z, _OnLoadHiddenState@CDUIDialog@@MAE_NXZ, _OnSaveHiddenState@CDUIDialog@@MAEX_N@Z, _OnCreateRegion@CDUIDialog@@MAEPAUHRGN__@@HHHH@Z, _ExitDialog@CDUIDialog@@MAEXH@Z, _OnPostCreateDialog@CDUIDialog@@MAEXPAVElement@DirectUI@@@Z, _OnSize@CDUIDialog@@MAE_NIJAAJ@Z, _OnCreate@CDUIDialog@@MAE_NIJAAJ@Z, _OnDestroy@CDUIDialog@@MAE_NIJAAJ@Z, _OnNCDestroy@CDUIDialog@@MAE_NIJAAJ@Z, _OnActivate@CDUIDialog@@MAE_NIJAAJ@Z, _OnSysCommand@CDUIDialog@@MAE_NIJAAJ@Z, _OnClose@CDUIDialog@@MAE_NIJAAJ@Z, _OnShowWindow@CDUIDialog@@MAE_NIJAAJ@Z, _ShowDialog@CDUIDialog@@MAEJPAUHWND__@@PAUtagPOINT@@@Z, _FilterMessage@CDUIDialog@@MAEHPAUtagMSG@@@Z, __1CDUIDialog@@UAE@XZ, _GetColor@CCustomColor@@CGKW4EUIType@@@Z, __1CMsgFilter@@QAE@XZ, __ZeroRelease@Value@DirectUI@@AAEXXZ, _Count@CPerfMonitor@@QAEHH@Z, _Elapsed@CPerfMonitor@@QAENH@Z, _End@CPerfMonitor@@QAENH@Z, _Start@CPerfMonitor@@QAENH@Z, _g_LogonPerfMonitor@@3VCLogonPerfMonitor@@A, _ParentProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _DesiredSizeProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _GetValue@Element@DirectUI@@QBEPAVValue@2@PBUPropertyInfo@2@H@Z, _EnabledProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _SetValue@Element@DirectUI@@QAEJPBUPropertyInfo@2@HPAVValue@2@@Z, _PaddingProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateRect@Value@DirectUI@@SGPAV12@HHHH@Z, _CreateInt@Value@DirectUI@@SGPAV12@H@Z, _CSConfigGetAttributeValue@@YGJPB_W0AAV_$CStringT@_WV_$StrTraitATL@_WV_$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z, _QueryInterface@CPerfMonitor@@UAGJABU_GUID@@PAPAX@Z, DUserMessageHook, MsnCoreUnInitProcess, MsnCoreUnInitThread, MsnCoreInitThread, MsnCoreInitProcess, GetMessageExW, _FilterMessage@CMsgFilterHolder@@SGHPAUtagMSG@@@Z, _LayoutPosProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _SelectedProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateBool@Value@DirectUI@@SGPAV12@_N@Z, InvalidateGadget, GetGadgetRect, _GetRootHWND@HWNDElement@DirectUI@@SGPAUHWND__@@PAVElement@2@@Z, _RMLoadColorRef@@YGKPB_WKK0@Z, _BackgroundProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateColor@Value@DirectUI@@SGPAV12@KEE@Z, _GetHWND@NativeHWNDHost@DirectUI@@QAEPAUHWND__@@XZ, _WidthProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _HeightProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ChildrenProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ExtentProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _KeyFocusedProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _IDProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _VisibleProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _Destroy@Element@DirectUI@@QAEJ_N@Z, _ContentProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateString@Value@DirectUI@@SGPAV12@PB_WPAUHINSTANCE__@@I@Z, _ActiveProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ClassProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateAtom@Value@DirectUI@@SGPAV12@PB_W@Z, _AccessibleProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _AccRoleProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _AccNameProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _AccDescProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _WindowActiveProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _DropFocusProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _g_dwElSlot@DirectUI@@3KA, _PressedProp@Button@DirectUI@@2PAUPropertyInfo@2@A, _AggressiveUpdateProp@HWNDHost@DirectUI@@2PAUPropertyInfo@2@A, _PositionProp@Progress@DirectUI@@2PAUPropertyInfo@2@A, _Attach@CRMDUIParser@@QAEJPAVElement@DirectUI@@@Z, _Add@Element@DirectUI@@QAEJPAV12@@Z, _DestroyAll@Element@DirectUI@@QAEJXZ, _LoadAndCreateElement@CRMDUIParser@@QAEJIPB_WPAPAVElement@DirectUI@@PAV23@K0@Z, __0CRMDUIParser@@QAE@XZ, _RMLoadString@@YGIIPA_WIKPB_W@Z, _OnInitDialog@CDUIDialog@@MAE_NIJAAJ@Z, _OnCommand@CDUIDialog@@MAE_NIJAAJ@Z, _ShowWindow@NativeHWNDHost@DirectUI@@QAEXH@Z, _KillTimer@SyncTimerHandler@@QAEXIK@Z, _SetRichEditStyle@WLEditT@@QAEJH@Z, _GetRichEditStyle@WLEditT@@QBEHXZ, _Class@CExpandoH@@2PAUIClassInfo@DirectUI@@A, _Class@Constrainer@DirectUI@@2PAUIClassInfo@2@A, _Class@Progress@DirectUI@@2PAUIClassInfo@2@A, _Initialize@NativeHWNDHost@DirectUI@@QAEJPB_W0PAUHWND__@@PAUHICON__@@HHHHHHHPAUHINSTANCE__@@I@Z, _RemoveLocalValue@Element@DirectUI@@QAEJPBUPropertyInfo@2@@Z, _ForceCaretRefresh@WLEditT@@QAEJXZ, _SyncRect@WLEditT@@QAEJUtagSIZE@@@Z, GetGadgetFocus, _ShowElement@@YGJPAVElement@DirectUI@@PB_WH@Z, SetGadgetRootInfo, _Class@CmdButton@@2PAUIClassInfo@DirectUI@@A, SetElementContentFromImageResource, __1CFramelessHost@@UAE@XZ, __1SyncTimerHandler@@UAE@XZ, _AdjustElementSize@@YGJPAVElement@DirectUI@@PAUtagSIZE@@K@Z, _IsChildElement@@YGHPAVElement@DirectUI@@0@Z, _ElementFromGadget@DirectUI@@YGPAVElement@1@PAUHGADGET__@@@Z, FindGadgetFromPoint, _m_crDefaultFrameColor@CFramelessHost@@1KA, SetElementPropertyFromImageResource, _IconProp@Button@DirectUI@@2PAUPropertyInfo@2@A, _Remove@Element@DirectUI@@QAEJPAV12@@Z, _SelectElement@@YGJPAVElement@DirectUI@@PB_WH@Z, _SetDefaultFocusID@NativeHWNDHost@DirectUI@@QAEXPB_W@Z, _SetTimer@SyncTimerHandler@@QAEIIIK@Z, ___7CMsgFilter@@6B@, __0CFramelessHost@@QAE@XZ, _SetFramelessCaption@CFramelessHost@@QAE_NQB_W@Z, _SetActiveWindow@CMsgFilter@@IAEXXZ, _RMLoadStringBSTR@@YGPA_WIKPB_W@Z, _RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z, _OnMessage@CFramelessHost@@UAEJIIJAAJ@Z, RevokeDropTarget, _OnSysChange@CCustomColor@@SGXXZ, _Insert@Element@DirectUI@@QAEJPAV12@I@Z, _AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z, _Initialize@CFramelessHost@@QAEJXZ, _Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z, BuildDropTarget, _Create@HWNDContainer@@SGJPAVNativeHWNDHost@DirectUI@@PAUIDropTarget@@PAPAVElement@3@@Z, _TooltipProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _RMIsResourceAvailable@@YG_NPB_W0K0@Z, _SetDefaultFrameColor@CFramelessHost@@SGKK@Z, __0_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@QAE@XZ, _OnListenerAttach@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAEXPAVElement@2@@Z, _OnListenedPropertyChanging@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAE_NPAVElement@2@PAUPropertyInfo@2@HPAVValue@2@2@Z, _OnListenedPropertyChanged@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAEXPAVElement@2@PAUPropertyInfo@2@HPAVValue@2@2@Z, _OnListenedInput@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAEXPAVElement@2@PAUInputEvent@2@@Z, _OnListenedEvent@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAEXPAVElement@2@PAUEvent@2@@Z, _OnListenedWindowMessage@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAE_NPAVElement@2@PAUHWND__@@IIJPAJ@Z, __1_$ListenedElementPtr@VElement@DirectUI@@@DirectUI@@QAE@XZ, __B_$ListenedElementPtr@VElement@DirectUI@@@DirectUI@@QBEPAVElement@1@XZ, __4_$ListenedElementPtr@VElement@DirectUI@@@DirectUI@@QAEPBVElement@1@PAV21@@Z, __0_$ListenedElementPtr@VElement@DirectUI@@@DirectUI@@QAE@PAVElement@1@@Z, _UpdateFrame@CFramelessHost@@IAEXXZ, _IsDescendent@Element@DirectUI@@QAE_NPAV12@@Z, _PerformFramelessHitTest@CFramelessHost@@IAEJUtagPOINT@@PAPAVElement@DirectUI@@@Z, _RMUpdateResourceSet@@YG_NPB_WK00@Z, _RMTerminate@@YGXXZ, _RMInitialize@@YGXXZ, _Class@Checkbox@DirectUI@@2PAUIClassInfo@2@A, _CheckedProp@Checkbox@DirectUI@@2PAUPropertyInfo@2@A, _UpdateStateProp@Checkbox@DirectUI@@IAEJH@Z, _FirstStart@CPerfMonitor@@QAENH@Z, _ElementMinimizeMemoryUsage@DirectUI@@YGXXZ, _EventEnd@CPerfMonitor@@UAGXH@Z, _EventStart@CPerfMonitor@@UAGXH@Z, _Init@CCustomColor@@SGJXZ, _DirectionProp@Element@DirectUI@@2PAUPropertyInfo@2@A, __0CmdButton@@QAE@XZ, _OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnGroupChanged@Element@DirectUI@@UAEXH_N@Z, _OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z, _OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z, _OnDestroy@Element@DirectUI@@UAEXXZ, _OnEvent@CmdButton@@UAEXPAUEvent@DirectUI@@@Z, _Paint@CmdButton@@UAEXPAUHDC__@@PAUHBITMAP__@@PAUtagDIBSECTION@@PBUtagRECT@@3PAU5@4@Z, _GetContentSize@Element@DirectUI@@UAE_AUtagSIZE@@HHPAVSurface@2@@Z, _Add@Element@DirectUI@@UAEJPAPAV12@I@Z, _Insert@Element@DirectUI@@UAEJPAPAV12@II@Z, _Remove@Element@DirectUI@@UAEJPAPAV12@I@Z, _GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z, _EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z, _SetKeyFocus@Element@DirectUI@@UAEXXZ, _MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z, __SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z, __SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE_AUtagSIZE@@HHPAVSurface@2@@Z, _OnHosted@Button@DirectUI@@UAEXPAVElement@2@@Z, _OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z, _GetAccessibleImpl@Button@DirectUI@@UAEJPAPAUIAccessible@@@Z, _DefaultAction@Button@DirectUI@@UAEJXZ, _UpdateCue@Button@DirectUI@@MAEJXZ, __1CmdButton@@UAE@XZ, _g_hHeap@DirectUI@@3PAXA, _AlphaProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _Initialize@PNGGraphic@@QAEJI@Z, _OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z, _Click@Button@DirectUI@@2PAEA, _OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z, UtilDrawBlendRect, _AllocatePropertyIndex@Element@DirectUI@@SGIXZ, _AllocateClassIndex@Element@DirectUI@@SGIXZ, _GetPciMap@Element@DirectUI@@SGPAV_$BTreeLookup@PAUIClassInfo@DirectUI@@@2@XZ, _InvalidateElement@@YGHPAVElement@DirectUI@@@Z, __1CRMResource@@UAE@XZ, __0CRMResource@@QAE@PB_W0K0PAK@Z, _pvBoolTrue@Value@DirectUI@@2PAV12@A, _OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _Paint@Element@DirectUI@@UAEXPAUHDC__@@PAUHBITMAP__@@PAUtagDIBSECTION@@PBUtagRECT@@3PAU6@4@Z, _OnHosted@Element@DirectUI@@MAEXPAV12@@Z, _GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z, _DefaultAction@Element@DirectUI@@UAEJXZ, __1Element@DirectUI@@UAE@XZ, _OnPropertyChanged@Selector@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnInput@Selector@DirectUI@@UAEXPAUInputEvent@2@@Z, _OnKeyFocusMoved@Selector@DirectUI@@UAEXPAVElement@2@0@Z, _OnMouseFocusMoved@Selector@DirectUI@@UAEXPAVElement@2@0@Z, _GetAdjacent@Selector@DirectUI@@UAEPAVElement@2@PAV32@HPBUNavReference@2@K@Z, _Class@Selector@DirectUI@@2PAUIClassInfo@2@A, __1CRMDUIParser@@UAE@XZ, _Initialize@Element@DirectUI@@QAEJI@Z, _pvBoolFalse@Value@DirectUI@@2PAV12@A, _pvIntZero@Value@DirectUI@@2PAV12@A, _DoModal@CDUIDialog@@QAEHGPB_WPAUHWND__@@PAUtagPOINT@@0_N0@Z, _SelectionProp@Selector@DirectUI@@2PAUPropertyInfo@2@A, _CreateElementRef@Value@DirectUI@@SGPAV12@PAVElement@2@@Z, _Class@Button@DirectUI@@2PAUIClassInfo@2@A, _CmdIdProp@CmdButton@@2PAUPropertyInfo@DirectUI@@A, _FindDialogElement@CDUIDialog@@IAEPAVElement@DirectUI@@PB_W@Z, _RMLoadStringA@@YGIIPADIKPB_W@Z, _CmdIDProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _TextProp@Button@DirectUI@@2PAUPropertyInfo@2@A, _Class@TabControl@DirectUI@@2PAUIClassInfo@2@A, _Class@TabButton@DirectUI@@2PAUIClassInfo@2@A, _SetDataContext@Element@DirectUI@@QAEJPAUIUnknown@@@Z, _RMLoadInt@@YGHIHKPB_W@Z, __1NativeHWNDHost@DirectUI@@UAE@XZ, __0NativeHWNDHost@DirectUI@@QAE@XZ, _SetFocusOnChild@TabControl@DirectUI@@QAEJPAVElement@2@_N@Z, _GetTabButtons@TabControl@DirectUI@@QAEPAV_$DynamicArray@PAVElement@DirectUI@@@2@XZ, _GetTabPages@TabControl@DirectUI@@QAEPAV_$DynamicArray@PAVElement@DirectUI@@@2@XZ, _AsyncSelectionChange@TabControl@DirectUI@@2PAEA, _SetBinding@Element@DirectUI@@QAEJPAUPropertyInfo@2@PAVBinding@2@@Z, _TagProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _BorderColorProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ForegroundProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ColorizeProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateColorize@Value@DirectUI@@SGPAV12@K@Z, _Class@TabPage@DirectUI@@2PAUIClassInfo@2@A, _AccValueProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _Initialize@Button@DirectUI@@QAEJI@Z, _pvUnset@Value@DirectUI@@2PAV12@A, _RMLoadIcon@@YGPAUHICON__@@PB_WK0@Z, _ShortcutProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _MaximumProp@Progress@DirectUI@@2PAUPropertyInfo@2@A, _MinimumProp@Progress@DirectUI@@2PAUPropertyInfo@2@A, _DoModeless@CDUIDialog@@QAEJGPB_WPAUHWND__@@PAUtagPOINT@@0_N330@Z, _FireEvent@Element@DirectUI@@QAEXPAUEvent@2@_N@Z, _IdResProp@PNGGraphic@@2PAUPropertyInfo@DirectUI@@A, _Class@PNGGraphic@@2PAUIClassInfo@DirectUI@@A, __1PNGGraphic@@UAE@XZ, _OnInput@Button@DirectUI@@UAEXPAUInputEvent@2@@Z, __0PNGGraphic@@QAE@XZ, _OnPropertyChanged@Button@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnPropertyChanged@PNGGraphic@@UAEXPAUPropertyInfo@DirectUI@@HPAVValue@3@1@Z, _PostEvent@Element@DirectUI@@QAEXPAUEvent@2@@Z, GetGadgetStyle, _KeyboardNavigate@Element@DirectUI@@2PAEA, _DUI2Win32Message@CDUI2WindowMsg@@IAEJPAUInputEvent@DirectUI@@PAV_$DynamicArray@UCWinMsg@CDUI2WindowMsg@@@3@@Z, _OnPropertyChanged@HWNDHost@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnInput@HWNDHost@DirectUI@@UAEXPAUInputEvent@2@@Z, _OnDestroy@HWNDHost@DirectUI@@UAEXXZ, _Paint@HWNDHost@DirectUI@@UAEXPAUHDC__@@PAUHBITMAP__@@PAUtagDIBSECTION@@PBUtagRECT@@3PAU6@4@Z, _MessageCallback@HWNDHost@DirectUI@@UAEIPAUtagGMSG@@@Z, _OnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z, _OnUnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z, _GetAccessibleImpl@HWNDHost@DirectUI@@UAEJPAPAUIAccessible@@@Z, _OnNotify@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z, _OnMessage@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z, _OnAdjustWindowSize@HWNDHost@DirectUI@@UAEHHHI@Z, _CreateHWND@HWNDHost@DirectUI@@MAEPAUHWND__@@PAU3@@Z, _SyncFont@HWNDHost@DirectUI@@MAEXXZ, _Class@HWNDHost@DirectUI@@2PAUIClassInfo@2@A, _Initialize@HWNDHost@DirectUI@@QAEJII@Z, _pvStringNull@Value@DirectUI@@2PAV12@A, _TransferImageToPNG@PNGGraphic@@QAEJAAVCMSGRImage@ATL@@@Z, _HideWindow@NativeHWNDHost@DirectUI@@QAEXXZ, _NotifyAccessibilityEvent@DirectUI@@YGXKPAVElement@1@@Z, _OnMessage@NativeHWNDHost@DirectUI@@UAEJIIJAAJ@Z, _SetActiveWindow@CMsgFilterHolder@@SGXPAVCMsgFilter@@@Z, _LayoutProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateLayout@Value@DirectUI@@SGPAV12@PAVLayout@2@@Z, _ContentAlignProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _IsDefaultProp@Button@DirectUI@@2PAUPropertyInfo@2@A, SetElementContentFromIconResource, _Create@FlowLayout@DirectUI@@SGJHIIIPAPAVLayout@2@@Z, _OnPropertyChanged@CmdButton@@UAEXPAUPropertyInfo@DirectUI@@HPAVValue@3@1@Z, _OnInput@CmdButton@@UAEXPAUInputEvent@DirectUI@@@Z, _Init@NavReference@DirectUI@@QAEXPAVElement@2@PAUtagRECT@@@Z, _KeyWithinProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _MouseWithinProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _AccStateProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ButtonStyleProp@CmdButton@@2PAUPropertyInfo@DirectUI@@A, _IsEqual@Value@DirectUI@@QAE_NPAV12@@Z, GetGadgetAnimation, _pvAtomZero@Value@DirectUI@@2PAV12@A, __0WLEditT@@QAE@XZ, _OnPropertyChanged@WLEditT@@UAEXPAUPropertyInfo@DirectUI@@HPAVValue@3@1@Z, _OnInput@WLEditT@@UAEXPAUInputEvent@DirectUI@@@Z, _OnKeyFocusMoved@WLEditT@@UAEXPAVElement@DirectUI@@0@Z, _OnEvent@WLEditT@@UAEXPAUEvent@DirectUI@@@Z, _Paint@WLEditT@@UAEXPAUHDC__@@PAUHBITMAP__@@PAUtagDIBSECTION@@PBUtagRECT@@3PAU5@4@Z, _GetContentSize@WLEditT@@UAE_AUtagSIZE@@HHPAVSurface@DirectUI@@@Z, _MessageCallback@WLEditT@@UAEIPAUtagGMSG@@@Z, __SelfLayoutDoLayout@WLEditT@@MAEXHH@Z, __SelfLayoutUpdateDesiredSize@WLEditT@@MAE_AUtagSIZE@@HHPAVSurface@DirectUI@@@Z, _OnHosted@WLEditT@@MAEXPAVElement@DirectUI@@@Z, _GetAccessibleImpl@WLEditT@@UAEJPAPAUIAccessible@@@Z, _Initialize@WLEditT@@UAEJI@Z, _AdjustInvalidationRect@WLEditT@@UAEXPAUtagRECT@@@Z, _OnPhysicalExtentChanged@WLEditT@@UAEXUtagSIZE@@@Z, _OnDragEnter@WLEditT@@UAEJPAUIDataObject@@@Z, _GetEditTextString@WLEditT@@UAEHAAV_$CStringT@_WV_$StrTraitATL@_WV_$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_N1@Z, _OnVirtualExtentChanged@WLEditT@@MAEXUtagSIZE@@@Z, _SyncText@WLEditT@@MAEJPB_W@Z, _CreateTextHost@WLEditT@@MAEJXZ, _OnTimer@WLEditT@@UAEXIKK@Z, _GetTimerHwndElement@WLEditT@@UAEPAVHWNDElement@DirectUI@@XZ, _SendMessageW@WLEditT@@UAEJIIJAAJ@Z, _PostMessageW@WLEditT@@UAEJIIJAAJ@Z, _SetFocus@WLEditT@@UAEJXZ, _IsFocused@WLEditT@@UAEHXZ, _SetCursor@WLEditT@@UAEJPAUHICON__@@@Z, _GetScrollInfo@WLEditT@@UAEJHPAUtagSCROLLINFO@@@Z, _ClientToScreen@WLEditT@@UAEJPAUtagPOINT@@@Z, _ScreenToClient@WLEditT@@UAEJPAUtagPOINT@@@Z, _InvalidateRect@WLEditT@@UAEJPAUtagRECT@@H@Z, _GetClientRect@WLEditT@@UAEJPAUtagRECT@@@Z, _GetWindowRect@WLEditT@@UAEJPAUtagRECT@@@Z, _ImmGetContext@WLEditT@@UAEPAUHIMC__@@XZ, _ImmReleaseContext@WLEditT@@UAEXPAUHIMC__@@@Z, _GetDC@WLEditT@@UAEPAUHDC__@@XZ, _ReleaseDC@WLEditT@@UAEHPAUHDC__@@@Z, _OnMessage@WLEditT@@UAEJIIJAAJ@Z, _OnInitContextMenu@WLEditT@@UAEJPAUHMENU__@@@Z, __1WLEditT@@UAE@XZ, _Class@WLEditT@@2PAUIClassInfo@DirectUI@@A, _GetFirstLineHeight@WLEditT@@QBEHXZ, _GetLabel@WLEditT@@QBEGXZ, _SetYScrollable@WLEditT@@QAEJ_N@Z, _SetXScrollable@WLEditT@@QAEJ_N@Z, _Initialize@WLEditT@@QAEJIH@Z, _VerticalProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _OnPropertyChanging@ScrollBar@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnPropertyChanged@ScrollBar@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnEvent@ScrollBar@DirectUI@@UAEXPAUEvent@2@@Z, __SelfLayoutDoLayout@ScrollBar@DirectUI@@UAEXHH@Z, __SelfLayoutUpdateDesiredSize@ScrollBar@DirectUI@@UAE_AUtagSIZE@@HHPAVSurface@2@@Z, _CreateButtons@ScrollBar@DirectUI@@MAEJXZ, _SetButtonsTag@ScrollBar@DirectUI@@MAEX_N@Z, _Class@ScrollBar@DirectUI@@2PAUIClassInfo@2@A, _Initialize@ScrollBar@DirectUI@@QAEJ_N@Z, _GetTopHWNDParent@DirectUI@@YGPAUHWND__@@PAU2@H@Z, _PositionProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _m_fPaintingFrozen@CMsgFilterHolder@@1HA, _CursorProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateCursor@Value@DirectUI@@SGPAV12@PAUHICON__@@@Z, _CapturedProp@Button@DirectUI@@2PAUPropertyInfo@2@A, _MapElementPoint@Element@DirectUI@@QAEXPAV12@PBUtagPOINT@@PAU3@@Z, _Drag@Thumb@DirectUI@@2PAEA, _MarginProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _SizeInLayoutProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _GetImmediateChild@Element@DirectUI@@QAEPAV12@PAV12@@Z, __UpdateDesiredSize@Element@DirectUI@@QAE_AUtagSIZE@@HHPAVSurface@2@@Z, __UpdateLayoutSize@Element@DirectUI@@QAEXHH@Z, __UpdateLayoutPosition@Element@DirectUI@@QAEXHH@Z, _RMLoadMenu@@YGPAUHMENU__@@PB_WK0@Z, _Context@Button@DirectUI@@2PAEA, _BorderThicknessProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ProcessForEllipsis@WLEditT@@IAEJPAUHDC__@@AAUtagSIZE@@@Z
> WS2_32.dll: WSCEnumProtocols, WSCGetProviderPath, getnameinfo, WSAIoctl, WSACloseEvent, getaddrinfo, freeaddrinfo, WSACreateEvent
> COMCTL32.dll: ImageList_Remove, ImageList_DrawEx, ImageList_ReplaceIcon, -, -, InitCommonControlsEx, ImageList_Destroy, ImageList_AddMasked, -, ImageList_Create, -, ImageList_GetIcon, ImageList_Draw, ImageList_Add
> CRYPT32.dll: CertVerifyCertificateChainPolicy, CryptVerifyMessageSignature, CertCreateCertificateChainEngine, CertGetCertificateChain, CertFreeCertificateChain, CertFreeCertificateChainEngine, CryptFormatObject, CryptHashPublicKeyInfo, CryptMsgOpenToDecode, CryptMsgUpdate, CryptMsgGetParam, CertFindAttribute, CryptMsgClose, CryptDecodeObjectEx, CertGetNameStringW, CertFreeCertificateContext
> VERSION.dll: GetFileVersionInfoSizeW, GetFileVersionInfoA, VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeA, VerQueryValueA
> WINMM.dll: waveInGetNumDevs, waveOutGetNumDevs
> IMM32.dll: ImmGetContext, ImmGetCompositionStringW, ImmSetConversionStatus, ImmGetConversionStatus, ImmAssociateContext, ImmReleaseContext
> WININET.dll: InternetSetOptionW, GetUrlCacheEntryInfoW, InternetQueryOptionW, InternetInitializeAutoProxyDll
> iphlpapi.dll: GetAdaptersInfo, GetIpAddrTable, GetIfEntry, NotifyRouteChange
> MSACM32.dll: acmStreamOpen, acmStreamClose, acmStreamUnprepareHeader, acmStreamConvert, acmStreamPrepareHeader, acmFormatSuggest, acmMetrics, acmStreamSize
> RPCRT4.dll: UuidFromStringA
> msidcrl40.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> ContactsUX.dll: _QueryStatus@CABPopupMenu@@UAGJPBU_GUID@@KPAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z, __1CABPopupMenu@@MAE@XZ, _GetResource@CABPopupMenu@@MAEIXZ, _OnTimer@CABPopupMenu@@MAEXXZ, _GetParentGroup@CABPopupMenu@@MAEJPAPAUIGroup@@@Z, _IsReadOnlyGrouping@CABPopupMenu@@MAEJPA_N_N@Z, _ShowPopup@CABPopupMenu@@UAEJPAUtagPOINT@@PAVElement@DirectUI@@@Z, _SetDuiElement@CABPopupMenu@@UAEJPAVElement@DirectUI@@@Z, _SetReferencedEmail@CABPopupMenu@@UAEJPB_W@Z, _SetReferencedObject@CABPopupMenu@@UAEJPAUIStoreObject@@@Z, _Exec@CABPopupMenu@@UAGJPBU_GUID@@KKPAUtagVARIANT@@1@Z, __0CABPopupMenu@@IAE@XZ, _GetDataContextAs@CABPopupMenu@@IAEJABU_GUID@@PAPAX@Z, _IsCommandSupportedByExec@CABPopupMenu@@MAE_NKU_GUID@@@Z, _GetElementSealId@CListItemElement@@IAEKXZ, _OnEvent@CContactElement@@UAEXPAUEvent@DirectUI@@@Z, _ChangeInlineEditState@CListItemElement@@IAEX_N@Z, _GetData@CContactElement@@IAEJPAPAUCONTACT@@@Z, _OnInput@CContactElement@@UAEXPAUInputEvent@DirectUI@@@Z, _Class@CListItemElement@@2PAUIClassInfo@DirectUI@@A, _GetDataContextAs@CListItemElement@@IAEJABU_GUID@@PAPAX@Z, __1CContactElement@@UAE@XZ, _QueryStatus@CListItemElement@@UAGJPBU_GUID@@KPAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z, _IsEditInlineCmd@CContactElement@@MAE_NK@Z, _EnsurePopupMenuObject@CListItemElement@@MAEJXZ, _ShouldShowContextMenu@CContactElement@@MAE_NXZ, _OnDoubleClick@CContactElement@@MAE_NXZ, _ExecuteDefaultAction@CListItemElement@@UAE_NXZ, _DefaultAction@CListItemElement@@UAEJXZ, _Insert@CABListItemArray@@QAEHPAUIStoreObject@@K@Z, _g_wzDream15@CDonationManager@@2PA_WA, _g_wzDream14@CDonationManager@@2PA_WA, _g_wzDream13@CDonationManager@@2PA_WA, _g_wzDream12@CDonationManager@@2PA_WA, _g_wzDream11@CDonationManager@@2PA_WA, _g_wzDream10@CDonationManager@@2PA_WA, _DelayedExec@CABPopupMenu@@UAEJKU_GUID@@@Z, _g_wzDream8@CDonationManager@@2PA_WA, _g_wzDream7@CDonationManager@@2PA_WA, _g_wzDream6@CDonationManager@@2PA_WA, _g_wzDream5@CDonationManager@@2PA_WA, _g_wzDream4@CDonationManager@@2PA_WA, _g_wzDream3@CDonationManager@@2PA_WA, _g_wzDream2@CDonationManager@@2PA_WA, _g_wzDream1@CDonationManager@@2PA_WA, _SetProxyUser@Contacts@@YGXPB_W@Z, _UpdatePolicy@Contacts@@YGJPB_W@Z, _GetSubCollection@Contacts@@YGJW4STOREOBJECTTYPE@@PAUIObjectFilterer@@PAPAUIObjectPoolView@@_N@Z, _DeleteItemFromSeal@Contacts@@YGJK@Z, _CreateSqmAdapter@Contacts@@YGJABW4eSQMSessionType@@PAPAUIUnknown@@@Z, _CanMobileMessage@@YG_NPBUCONTACT@@@Z, _IsContactSomeKindOfBuddy@@YG_NPBUCONTACT@@@Z, _LaunchContactPicker@Contacts@@YGJW4ContactPickerStyle@@PAUHWND__@@PAPAUIContactPickerDialog@@@Z, __0CGroupElement@@QAE@XZ, _OnPropertyChanged@CListItemElement@@UAEXPAUPropertyInfo@DirectUI@@HPAVValue@3@1@Z, __0CContactElement@@QAE@XZ, _OnDrop@CBuddyListElement@@MAE_NPAUQueryDropEvent@@@Z, _GetRootHWNDOfElement@@YGPAUHWND__@@PAVElement@DirectUI@@@Z, _OnQueryDropEffect@CBuddyListElement@@MAEXPAUQueryDropEvent@@@Z, _OnDoubleClick@CGroupElement@@MAE_NXZ, _ShouldShowContextMenu@CGroupElement@@MAE_NXZ, _IsEditInlineCmd@CGroupElement@@MAE_NK@Z, __1CGroupElement@@UAE@XZ, _OnInput@CGroupElement@@UAEXPAUInputEvent@DirectUI@@@Z, _IsReadOnlyGroup@CGroupElement@@QAE_NXZ, _GetData@CGroupElement@@IAEJPAPAUCONTACTGROUP@@@Z, _GetIGroupFromGroupName@Contacts@@YGJPB_WPAPAUIGroup@@@Z, _OnEvent@CGroupElement@@UAEXPAUEvent@DirectUI@@@Z, _IsPublicContactFilesEncryptionEnabled@Contacts@@YGJPA_N@Z, _ConvertPublicContactFiles@Contacts@@YGJ_N@Z, _findCtry@CtryCode@@SGJKPA_WPAI@Z, _LoadCountryFromRegistry@CPhoneRegUtil@@SGKPAUHWND__@@KPBD1@Z, _InitComboBox@CtryCode@@SGJPAUHWND__@@HK@Z, _g_wzDream9@CDonationManager@@2PA_WA, _CreateUIContact@CBaseGrouping@@IAEJIPAPAUIContact@@K@Z, _OnUnHosted@CListItemElement@@UAEXPAVElement@DirectUI@@@Z, _g_wzDream16@CDonationManager@@2PA_WA, _GetSigninUserName@Contacts@@YGXAAVCStr@@@Z, _ABCMDToPhoneType@@YG_AW4SoftphoneContactPhoneType@@K@Z, _SetHost@Contacts@@YGJPAUIBuddyListHost@@@Z, _IsContactWvidBuddy@@YG_NPBUCONTACT@@@Z, _ConvertCodesToMap@CtryCode@@SGXPB_WAAV_$CRBMap@KEV_$CElementTraits@K@ATL@@V_$CElementTraits@E@2@@ATL@@@Z, _GetManager@Contacts@@YGJPAPAUIManager@1@@Z, InitializeSeal, RegisterMsnContactElements, MsnContactUnInitProcess, TerminateSeal, _GetContactCount@Contacts@@YGKPAPAUIObjectPoolView@@@Z, _GetGroupCount@Contacts@@YGKPAPAUIObjectPoolView@@@Z, _GetNumPendingRequests@Contacts@@YGKXZ, _IsAbchFailure@Contacts@@YG_NJ@Z, _GetIContactFromPhoneNumber@Contacts@@YGJPB_WPAPAUIContact@@@Z, _GetIContactFromEmail@Contacts@@YGJPB_WPAPAUIContact@@@Z, _CommitContactProperty@Contacts@@YGJABVCUpdateProperties@@@Z, _Synchronize@Contacts@@YGJW4ESyncTrigger@1@@Z, _SetStorageServer@Contacts@@YGXPBD0@Z, _LaunchContactDeleteDialog@Contacts@@YGJPAUIContact@@PAUHWND__@@@Z, _LaunchContactEditDialog@Contacts@@YGJPAUIContact@@_NPAUHWND__@@PAPAUIContactDialog@@@Z, _LaunchGroupEditDialog@Contacts@@YGJPAUIGroup@@PAUHWND__@@@Z, _LaunchGroupDeleteDialog@Contacts@@YGJKPAUHWND__@@@Z, _SetUseSsl@Contacts@@YGX_N@Z, _EnsureDefaultUiGroups@Contacts@@YGJPAUIStoreTransactionCallback@@PAPAUIUnknown@@@Z, _ReadyHelperObjects@Contacts@@YGXXZ, _LaunchContactEditDialog@Contacts@@YGJPB_WW4EEditDialogFillField@1@PAUHWND__@@_N@Z, _GetMeContact@Contacts@@YGJPAPAUIContact@@@Z, _SetCountingOfSocialNetworkRequests@Contacts@@YGJH@Z, _SetMarket@Contacts@@YGJPB_W@Z, _SetDefaultTransform@Contacts@@YGJPAVElement@DirectUI@@@Z, IsSpaceSet, _IsContactMe@@YG_NPAUIContact@@@Z, _SubscribeToLiveContactProfile@Contacts@@YGJPAUIContact@@@Z, _ViewMap@Contacts@@YGJPAUIContact@@W4EAddressType@@@Z, IsContactProfileSet, IsProfileSet, _ContactHasPhone@@YG_NPAUIContact@@@Z, _QueryContactCommand@@YGJPAUIBuddyListHost@@PAUIContact@@HAA_N2@Z, _IsContactMe@@YG_NPAUCONTACT@@@Z, _GetHost@Contacts@@YGJPAPAUIBuddyListHost@@@Z, _SetPolicyFlags@Contacts@@YGXW4EPolicyFlags@1@@Z, _GetStoreInfoFromDataObject@@YGJPAUIDataObject@@ABU_GUID@@PAPAXPAPAUIStoreObject@@@Z, _GetGroupContacts@Contacts@@YGJKPAPAUIObjectPoolView@@@Z, _SetAuth@Contacts@@YGXPB_W00@Z, _IsSyncOwner@Contacts@@YG_NXZ, _ReadyAbch@Contacts@@YGXXZ, __1CContactElemBase@@UAE@XZ, _OnDestroy@CContactElemBase@@UAEXXZ, _OnEvent@CContactElemBase@@UAEXPAUEvent@DirectUI@@@Z, _UpdateList@CContactElemBase@@MAEJ_N@Z, _ShouldSelectFirstItemInWordWheel@CContactElemBase@@UAE_NXZ, _Setup@CContactElemBase@@MAEJXZ, _CreateViewFilter@CContactElemBase@@MAEJXZ, _EnsureView@CContactElemBase@@MAEJK@Z, _DestroyAndReleaseElements@CContactElemBase@@MAEJXZ, _FindElements@CContactElemBase@@MAEJXZ, _EnsureFilter@CContactElemBase@@MAEJK_N@Z, _CheckForZeroListItems@CContactElemBase@@MAEXXZ, _SetSelectionOnChildren@CContactElemBase@@MAEJPAUIUnknown@@@Z, _SetDataSourceFilter@CContactElemBase@@MAEJXZ, _OnListenedPropertyChanged@CContactElemBase@@UAEXPAVElement@DirectUI@@PAUPropertyInfo@3@HPAVValue@3@2@Z, _GetSelection@CContactElemBase@@UAEJPAPAUIUnknown@@@Z, _SetSelection@CContactElemBase@@UAEJPAUIUnknown@@@Z, _AffectParticipant@CContactElemBase@@UAEJPAUIParticipant@@W4ParticipantModificationOperation@@@Z, _AffectParticipant@CContactElemBase@@UAEJABUPARTICIPANT@@W4ParticipantModificationOperation@@@Z, _GetSelectionChangeCallback@CContactElemBase@@UAEJPAPAUIParticipantSelectionControl@Contacts@@@Z, _SetSelectionChangeCallback@CContactElemBase@@UAEJPAUIParticipantSelectionControl@Contacts@@@Z, _UpdateList@CContactElemBase@@UAEJPAUIABViewFilter@@_N@Z, _GetSelectedObject@CContactElemBase@@UAEJPAPAUIUnknown@@@Z, _GetCmdTarget@CContactElemBase@@UAEJPAPAUIOleCommandTarget@@@Z, _SetWordWheelUpdateEnabled@CContactElemBase@@UAEX_N@Z, _SetFocusOnItem@CContactElemBase@@UAEJJ@Z, _OnTimer@CContactElemBase@@UAEXIKK@Z, _GetTimerHwndElement@CContactElemBase@@UAEPAVHWNDElement@DirectUI@@XZ, _Cleanup@CContactElemBase@@IAEXXZ, _QueryStatus@CContactElemBase@@UAGJPBU_GUID@@KPAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z, _CannotMobileMessage@@YG_NPBUCONTACT@@@Z, _Class@CWordWheelElement@@2PAUIClassInfo@DirectUI@@A, _GroupingProp@CContactElemBase@@2PAUPropertyInfo@DirectUI@@A, _GetSigninCookie@Contacts@@YGKXZ, _GetFilterFromSettings@CContactElemBase@@IAEHXZ, _GetViewFromSettings@CContactElemBase@@IAEHXZ, _OnPropertyChanged@CContactElemBase@@UAEXPAUPropertyInfo@DirectUI@@HPAVValue@3@1@Z, _Class@CContactElemBase@@2PAUIClassInfo@DirectUI@@A, _AddToList@CBaseGrouping@@MAEJKPAUIABDataSource@@AAVCABListItemArray@@@Z, __0CContactElemBase@@QAE@XZ, _Create@CABDataSource@@SGJKPAPAUIABDataSource@@W4ESORTBYCOLUMN@@@Z, _Initialize@CContactElemBase@@QAEJXZ, _AddToList@CPartitionedGrouping@@UAEJKPAUIABDataSource@@AAVCABListItemArray@@@Z, _DetermineZeroContactsState@CContactElemBase@@MAE_AW4EZeroContactsElement@@_N@Z, _IsInOtherGroup@@YG_NPBUCONTACT@@@Z, __0CFilteredGrouping@@QAE@IIP6G_NPBUCONTACT@@@Z111@Z, _IsContactNotSomeBuddy@@YG_NPBUCONTACT@@@Z, __0CWordWheelGrouping@@QAE@I@Z, _IsWordWheelInUse@CContactElemBase@@QAE_NXZ, _SetGroupViewToSettings@CContactElemBase@@IAEXK@Z, _GetGroupViewFromSettings@CContactElemBase@@IAEHXZ, _Register@CContactElemBase@@SGJXZ, _EnsureView@CWordWheelElement@@QAEJW4eWordWheelView@@@Z, _Exec@CContactElemBase@@UAGJPBU_GUID@@KKPAUtagVARIANT@@1@Z, __0CBuddyListElement@@QAE@XZ, _OnInput@CBuddyListElementBase@@UAEXPAUInputEvent@DirectUI@@@Z, _OnDestroy@CBuddyListElementBase@@UAEXXZ, _OnEvent@CBuddyListElementBase@@UAEXPAUEvent@DirectUI@@@Z, _OnHosted@CBuddyListElementBase@@UAEXPAVElement@DirectUI@@@Z, _OnUnHosted@CBuddyListElementBase@@UAEXPAVElement@DirectUI@@@Z, _Initialize@CBuddyListElementBase@@UAEJXZ, _ClearSelection@CBuddyListElementBase@@UAEXXZ, _IsWordWheelUpdateEnabled@CBuddyListElementBase@@UAE_NXZ, _IsWordWheelFilteringEnabled@CBuddyListElement@@UAE_NXZ, _IsContactBuddy@@YG_NPBUCONTACT@@@Z, _SetFocusOnItem@CBuddyListElementBase@@UAEJJ@Z, _CreateItemList@CBuddyListElementBase@@MAEJXZ, _OnVirtualListCreated@CBuddyListElementBase@@MAEJPAVCBuddyVirtualList@@@Z, _OnScrollBarsChanged@CBuddyListElementBase@@MAEXPAVElement@DirectUI@@@Z, _GetHandleInputValue@CBuddyListElementBase@@MAE_AW4EHandleInput@@XZ, _GetSelectionMode@CBuddyListElementBase@@MAE_AW4VirtualListSelectionMode@@XZ, _ExecCommit@CBuddyListElementBase@@MAEJXZ, _ExpandCollapseItem@CBuddyListElementBase@@MAEJPAUIListItem@@_N@Z, _OnPoolViewEvent@CBuddyListElementBase@@UAEXW4EEvent@IObjectPoolViewCallback@@PAUIObjectPoolView@@@Z, _OnBegin@CBuddyListElementBase@@UAEXXZ, _OnInsert@CBuddyListElementBase@@UAEXPAUIStoreObject@@@Z, _OnChange@CBuddyListElementBase@@UAEXPAUIStoreObject@@PAUIObjectChangeDescription@@@Z, _OnDelete@CBuddyListElementBase@@UAEXPAUIStoreObject@@@Z, _OnEnd@CBuddyListElementBase@@UAEXXZ, _GetDataSource@CBuddyListElementBase@@UAEJPAPAUIUnknown@@@Z, _SetDataSource@CBuddyListElementBase@@UAEJPAUIUnknown@@@Z, _GetSelection@CBuddyListElementBase@@UAEJPAPAUIUnknown@@@Z, _SetSelection@CBuddyListElementBase@@UAEJPAUIUnknown@@@Z, _AffectParticipant@CBuddyListElementBase@@UAEJPAUIParticipant@@W4ParticipantModificationOperation@@@Z, _AffectParticipant@CBuddyListElementBase@@UAEJABUPARTICIPANT@@W4ParticipantModificationOperation@@@Z, _GetSelectionChangeCallback@CBuddyListElementBase@@UAEJPAPAUIParticipantSelectionControl@Contacts@@@Z, _SetSelectionChangeCallback@CBuddyListElementBase@@UAEJPAUIParticipantSelectionControl@Contacts@@@Z, _OnTimer@CBuddyListElementBase@@UAEXIKK@Z, _GetTimerHwndElement@CBuddyListElementBase@@UAEPAVHWNDElement@DirectUI@@XZ, __1CBuddyListElement@@UAE@XZ, _OnCanDrop@CBuddyListElement@@MAEXPAUQueryDropEvent@@@Z, _Class@CBuddyListElement@@2PAUIClassInfo@DirectUI@@A, _Register@CBuddyListElement@@SGJXZ, _OnHosted@CListItemElement@@UAEXPAVElement@DirectUI@@@Z
> SETUPAPI.dll: SetupIterateCabinetW
> CRYPTNET.dll: CryptRetrieveObjectByUrlW
> Secur32.dll: FreeContextBuffer, FreeCredentialsHandle, InitSecurityInterfaceW, DeleteSecurityContext

( 0 exports )
CWSandbox info: http://research.sunbelt-software.com/...

sinon sa me met sa aussi "Fichier msnmsgr.exe reçu le 2009.01.24 18:34:26 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE
Résultat: 0/39 (0%)" ( je croi que c pas infecté )

voici pour oTMmoveIt "========== FILES ==========
File/Folder c:\users\smain\appdata\local\gfrzkd.exe not found.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversio­n\explorer\mountpoints2\{41ab1c85-eb6c-11dc-a7db-001bfcc4fe2­d}\\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion­\Run not found.

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01242009_185726"
mais desolé mais je trouve pas le dossier C:\_OTMoveIt\MovedFiles. Alors j'ai copier le resultat