Plusieurs saletées sur mon ordi Aide Svp

Question

Bonjour à tous , 
Je suis de niveau très débutante en ce qui concerne les virus , wrom etc. 
J'ai fais plusieurs scan dans mon ordi et j'ai trouvé bcp de problèmes . J'utilise avast comme anti virus . 
Voila ma première question serait que dois-je faire avec ce qui est dans la zone de quarantaine ? J'ai des adware-gen , spyware-gen , trojan , Irc bot .... etc au moins une 20 aine de différentes . J'ai fais des scan avec spybot s&D , Ad-aware , et avast . Je crois qu'avec Ad-aware sa se supprime automatiquement mais pas avec avast car je les ait mis en quarantaine ... Que faire svp ? 
Si c'est utile je peux écrire un par un le nom des virus dans la zone de quarantaine de avast ! 
Merci d'avance !

ghost-vistasuk · Answer

Les objets mis en quarantaine sont pas nuisibles

Je te conseil de scanner avec ce logiciel

Remove It Pro
https://www.incodesolutions.com/

il va tout suprimer

=)

Mika_23 · Answer

salut ghost-vistasuk,
Merci pour ta réponse Rapide ! Mais j'ai une question , avant de faire le scan avec ce programme (Remove It Pro ) , est ce que je dois restaurer les fichier qui sont dans ma zone de quarantaine pour que Remove It Pro  les trouvent ou il va les trouver même si ils sont dans la zone de quarantaine ? 
Merci !

ghost-vistasuk · Answer

non laisse les la ils va les suprimer pareil :)

Mika_23 · Answer

ok merci j'essaie et puis-je te faire un copier coller du rapport si il y en a un ?

ghost-vistasuk · Answer

ok pas de problème

Mika_23 · Answer

Rebonjour

Alors voila ce que ça m'a donner avec un scan rapide 

21:09:39: Dossier infecté (Win32.Alcra.F) C:\WINDOWS\system32\cmd.com
21:09:39: Dossier infecté (Win32.Alcra.F) C:\WINDOWS\system32\ping.com
21:09:39: Dossier infecté (Win32.Alcra.F) C:\WINDOWS\system32	asklist.com
21:09:39: Dossier infecté (Win32.Alcra.F) C:\WINDOWS\system32	racert.com
21:09:39: Dossier infecté (Sys32.smdat32m) C:\WINDOWS\smdat32m.sys
21:09:39: Annuaire infectéC:\Program Files\Need2Find
21:21:39: Dossier infecté (Sys32.Need2Find) C:\Program Files\Need2Find\bar\1.bin\N2FFXTBR.JAR
21:21:39: Dossier infecté (Sys32.Need2Find) C:\Program Files\Need2Find\bar\1.bin\N2NTSTBR.JAR
21:21:39: Dossier infecté (Sys32.Need2Find) C:\Program Files\Need2Find\bar\1.bin\PARTNER.DAT
21:21:39: Dossier infecté (Sys32.Need2Find) C:\Program Files\Need2Find\bar\Cache\files.ini
21:09:39: Annuaire infectéC:\Program Files\outlook
21:21:39: Dossier infecté (Win32.Alcra.F) C:\Program Files\outlook\p.zip
21:09:39: Annuaire infectéC:\Program Files\winupdates
21:21:39: Dossier infecté (Sys32.winupdates) C:\Program Files\winupdates\a.zip
21:09:39: 8Les dossiers dangereux ont été trouvés sur votre ordinateur.
Cliquez sur le bouton de "Fix" pour fixer des tâches choisies.

Est-ce que ''FIX'' veut dire suprimer ? C'est sur ce piton que je dois appuyer ? Merci de m'aider :)

ghost-vistasuk · Answer

ouais Fix va suprimer les fichiers ou dossiers infectés

Frou · Answer

tiens lis cette dobe d'antivirus
http://assiste.forum.free.fr/viewtopic.php?p=106604#106604

ghost-vistasuk · Answer

Frou l'a tu déja essayé au moin cette antivirus ?
moi je l'utilise tous les jours et il va très bien!

Mika_23 · Answer

J'aurais une autre question :)

J'ai lu sur d'autre post que certain utilisateur demandais à d'autre de faire  Hijackthis  et  de poster le rapport . Si je le fais est-ce que vous pourriez me dire si tout va bien et ce que je dois faire ? Merci !

Frou · Answer

Oui oui un anti-virus que tu trouve nul art sur le net tu lui fé confiance ? lol ..

ghost-vistasuk · Answer

mika oui sans problème :)

Mika_23 · Answer

Ok 
J'ai vraiment aucune idée de ce que sa veut dire ? Je suis bien cureieuse de le savoir ! 
Quelqu'un peut me faire la lecon hijackthis 101 ?
Merci 

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 21:58:05, on 2007-07-22
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon06.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Documents and Settings\Mes documents\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.distributel.net/distributel-portail_fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.distributel.net/distributel-portail_fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.distributel.net/distributel-portail_fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Distributel
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DJ Console] C:\Program Files\Hercules\Audio\Hercules DJ Console\DJConsoleCPL.exe -hide
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [MétéoIMédia] C:\Program Files\MétéoMédia\MétéoIMédia\WeatherEye.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Registration .LNK = C:\Program Files\Ubisoft\Telltale Games\CSI-3 Dimensions of Murder\Registration\RegistrationReminder.exe
O4 - Global Startup: Assistant Internet.lnk = C:\Program Files\NetAssistant\bin\matcli.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://peacepunk.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner371290.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - rundll32.exe (file missing)
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

ghost-vistasuk · Answer

sa semble bien
re-scan avec ton avast pour vérifier

Lyonnais92 · Answer

Bonjour,

entre l'avis d'un P. PINARD, spécialiste réputé de la lutte anti-malware et un inconnu (sympathique mais inconnu), je n'ai pas d'hésitation.

D'autant plus qu'en matière d'antivirus gratuits (y compris on line) le choix ne manque pas.

La déclaration sur le log Hijackthis est aussi rapide.

Il montre l'absence de parefeu et donc l'existence d'un faille de sécurité importante à combler.

Ouvre ce lien http://kerio.probb.fr/Systemesd-exploitation-c1/Logiciels-et-tutoriels-gratuits-tries-par-categorie-f6/Tutoriel-pour-Kerio-4-version-gratuite-t201.htm et utilise le tuto pour télécharger et configurer kerio.

Il donne aussi une ligne  bizarre :
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - rundll32.exe (file missing)
(ne pas se fier au file missing, tous ceux qui intervienent ici doivent savoir que cette indication sur une ligne 023 n'est pas fiable ; sans compter qu'un ordi sans rundll32.exe aura de sérieux problèmes de fonctionnement).

Pour éclaircir, recherche (clic droit démarrer, rechercher, sur le poste de travail) sur rundll32.exe
et poste le résultat de ta recherche dans ta réponse.

Fais les points 1 à 3 de ce lien : virus methode preliminaire de desinfection version fr
et poste les rapports demandés dans ta réponse.
Bonne suite.

Mika_23 · Answer

Salut Lyonnais92

Merci pour ta réponse elle est bien . Alors voila j'ai fais mes devoirs. Voici le résultat de ma recherche pour rundll32 :



RUNDLL32.EXE-28ED15AD.pf
RUNDLL32.EXE-451FC2C0.pf
RUNDLL32.EXE-2138A4AF.pf
RUNDLL32.EXE-4489B61B.pf

Et je suis également en train de scanner mon ordi avec Bitdefender . Je posterais le rapport ici quand ce sera terminer. Merci de m'expliquer qu'est ce que c'est que rundll ? 
Merci encore

Lyonnais92 · Answer

Re,

je préfère ne pas en dire trop sur ce qu'est rundll32, je dirais assez vite des bêtises.

Je me limiterai à dire que c'est un programme qui permet de lancer d'autres programmes (des dll dynamics library data). Sans trop m'avancer, une dll est un objet qui n'est chargé en mémoire qu'au moment de son utilisation.

J'attends les scans de bit defender et AVG.

par contre, la réponse sur rundll justement est bizarre.

On va faire comme ça :
Télécharge OAD http://sosvirus.changelog.fr/OAD.exe
- Enregistre le sur ton bureau

Double clique sur le OAD pour le lancer

- nom de fichier à rechercher tape ou fais un copier coller de : RUNDLL32.EXE
- Type de recherche : sélectionne l'option 6 puis valide [entree]

OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ai terminé.
Le rapport de recherche s'affichera automatiquement à dès qu'il en aura terminé.

- Fais un copier / coller de ce rapport dans ton prochain post.

Note importante : Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes. Sois patient 

@+

Mika_23 · Answer

Bonjour Lyonnais92

Alors voici ce que les résultats donnent :

Avg 
C:\Documents and Settings\Cookies\abc@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Aucune action entreprise.

OAD :
 2007-07-24 ---- 11:14:25,87  

----------------------------------
§§§§§§ [RUNDLL32.EXE ] §§§§§§
----------------------------------
[X] Registre
 
-------------- [  ] rapide
-- Fichier --- [  ] disque systeme
 ------------- [X] complete


********************
     [Registre] 
********************


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\ShellNew]
"Command"="rundll32.exe appwiz.cpl,NewLinkHere %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\callto\shell\open\command]
@="rundll32.exe msconf.dll,CallToProtocolHandler %l"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CATFile\shell\open\command]
@="rundll32.exe cryptext.dll,CryptExtOpenCAT %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CERFile\shell\add\command]
@="rundll32.exe cryptext.dll,CryptExtAddCER %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CERFile\shell\open\command]
@="rundll32.exe cryptext.dll,CryptExtOpenCER %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CertificateStoreFile\shell\open\command]
@="rundll32.exe cryptext.dll,CryptExtOpenSTR %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{783C030F-E948-487D-B35D-94FCF0F0C172}\LocalServer32]
@="rundll32.exe C:\WINDOWS\system32\hotplug.dll,CreateLocalServer {783C030F-E948-487D-B35D-94FCF0F0C172}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{995C996E-D918-4a8c-A302-45719A6F4EA7}\LocalServer32]
@="rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}\LocalServer32]
@="rundll32.exe shell32.dll,SHCreateLocalServerRunDll {FFB8655F-81B9-4fce-B89C-9A6BA76D13E7}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CompressedFolder\Shell\Open\Command]
@="rundll32.exe zipfldr.dll,RouteTheCall %L"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ConferenceLink\shell\open\command]
@="rundll32.exe msconf.dll,OpenConfLink %l"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cplfile\shell\cplopen\command]
@="rundll32.exe shell32.dll,Control_RunDLL \"%1\",%*"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cplfile\shellunas\command]
@="rundll32.exe shell32.dll,Control_RunDLLAsUser \"%1\",%*"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CRLFile\shell\add\command]
@="rundll32.exe cryptext.dll,CryptExtAddCRL %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CRLFile\shell\open\command]
@="rundll32.exe cryptext.dll,CryptExtOpenCRL %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\emffile\shell\open\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\emffile\shell\printto\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_PrintTo /pt \"%1\" \"%2\" \"%3\" \"%4\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\giffile\shell\printto\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_PrintTo /pt \"%1\" \"%2\" \"%3\" \"%4\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\shell\open\command]
@="rundll32.exe ieframe.dll,OpenURL %l"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\shell\print\command]
@="rundll32.exe C:\WINDOWS\system32\mshtml.dll,PrintHTML \"%1\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\shell\printto\command]
@="rundll32.exe C:\WINDOWS\system32\mshtml.dll,PrintHTML \"%1\" \"%2\" \"%3\" \"%4\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IVFfile\shell\close\command]
@="RunDll32.exe C:\WINDOWS\system32\wmpdxm.dll,RunDll /play %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IVFfile\shell\open\command]
@="RunDll32.exe C:\WINDOWS\system32\wmpdxm.dll,RunDll /play %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jpegfile\shell\open\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jpegfile\shell\printto\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_PrintTo /pt \"%1\" \"%2\" \"%3\" \"%4\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSDASC\shell\open\command]
@="Rundll32.exe C:\PROGRA~1\FICHIE~1\System\OLEDB~1\oledb32.dll,OpenDSLFile %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\P7RFile\shell\add\command]
@="rundll32.exe cryptext.dll,CryptExtAddP7R %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\P7RFile\shell\open\command]
@="rundll32.exe cryptext.dll,CryptExtOpenP7R %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\P7SFile\shell\open\command]
@="rundll32.exe cryptext.dll,CryptExtOpenPKCS7 %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Paint.Picture\shell\open\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Paint.Picture\shell\printto\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_PrintTo /pt \"%1\" \"%2\" \"%3\" \"%4\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PFXFile\shell\add\command]
@="rundll32.exe cryptext.dll,CryptExtAddPFX %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\pjpegfile\shell\open\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\pjpegfile\shell\printto\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_PrintTo /pt \"%1\" \"%2\" \"%3\" \"%4\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\pngfile\shell\open\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\pngfile\shell\printto\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_PrintTo /pt \"%1\" \"%2\" \"%3\" \"%4\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\prffile\Shell\Open\Command]
@="rundll32.exe msrating.dll,ClickedOnPRF %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classesatfile\Shell\Open\Command]
@="rundll32.exe msrating.dll,ClickedOnRAT %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classeslogin\shell\open\command]
@="rundll32.exe url.dll,TelnetProtocolHandler %l"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\scrfile\shell\install\command]
@="rundll32.exe desk.cpl,InstallScreenSaver %l"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SPCFile\shell\add\command]
@="rundll32.exe cryptext.dll,CryptExtAddSPC %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SPCFile\shell\open\command]
@="rundll32.exe cryptext.dll,CryptExtOpenPKCS7 %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\STLFile\shell\add\command]
@="rundll32.exe cryptext.dll,CryptExtAddCTL %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\STLFile\shell\open\command]
@="rundll32.exe cryptext.dll,CryptExtOpenCTL %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes	elnet\shell\open\command]
@="rundll32.exe url.dll,TelnetProtocolHandler %l"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TIFImage.Document\shell\open\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TIFImage.Document\shell\printto\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_PrintTo /pt \"%1\" \"%2\" \"%3\" \"%4\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes	n3270\shell\open\command]
@="rundll32.exe url.dll,TelnetProtocolHandler %l"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmffile\shell\open\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmffile\shell\printto\command]
@="rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_PrintTo /pt \"%1\" \"%2\" \"%3\" \"%4\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Internet Call\Microsoft NetMeeting\Protocols\callto\shell\open\command]
@="rundll32.exe msconf.dll,CallToProtocolHandler %l"

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Mail\Microsoft Outlook\shell\Properties\command]
@="rundll32.exe shell32.dll,Control_RunDLL \"C:\PROGRA~1\FICHIE~1\SYSTEM\MSMAPI\1033\MLCFG32.CPL\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
"StubPath"="rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
"StubPath"="rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
"StubPath"="rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
"StubPath"="C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCHealth]
"UninstallString"="rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCHealth]
"QuietUninstallString"="rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf"

*******************
     [Fichier] 
*******************



*********************
     [Même date] 
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.02
----------------------------------
§§§§§ Fin Rapport §§§§§ 
----------------------------------




Bitdefender ( J'ai remarquer que tout ce qui est infecté est dans la zone de quarantaine de House call . Est ce que je peux les supprimés ? )
BitDefender Online Scanner
  
  
 
Scan report generated at: Tue, Jul 24, 2007 - 14:31:59
 
 
  
  
 
Scan path: A:\;C:\;D:\;E:\;F:\;G:\;
  
  
 
 
  
  
 
Statistics
 
Time
 03:08:14
 
Files
 275804
 
Folders
 6698
 
Boot Sectors
 2
 
Archives
 1437
 
Packed Files
 7345
 
  
  
 
Results
 
Identified Viruses 
 4
 
Infected Files 
 193
 
Suspect Files 
 0
 
Warnings
 0
 
Disinfected
 0
 
Deleted Files
 193
 
  
  
 
Engines Info
 
Virus Definitions
 640367
 
Engine build
 AVCORE v1.0 (build 2410) (i386) (Jun 12 2007 21:08:27)
 
Scan plugins
 14
 
Archive plugins
 38
 
Unpack plugins
 6
 
E-mail plugins
 6
 
System plugins
 1
 
  
  
 
Scan Settings
 
First Action
 Disinfect
 
Second Action
 Delete
 
Heuristics
 Yes
 
Enable Warnings
 Yes
 
Scanned Extensions
 *;
 
Exclude Extensions
  
 
Scan Emails
 Yes
 
Scan Archives
 Yes
 
Scan Packed
 Yes
 
Scan Files
 Yes
 
Scan Boot
 Yes
 
  
  
 
  Scanned File
  Status
 
C:\Documents and Settings\.housecall6.6\Quarantine\#1 Video Converter 4.1.19.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\#1 Video Converter 4.1.19.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\#1 Video Converter 4.1.19.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\#1 Video Converter 4.1.19.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\#1 Video Converter 4.1.19.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\1000 Passwords Plus v1.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\1000 Passwords Plus v1.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\1000 Passwords Plus v1.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\1000 Passwords Plus v1.0.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\1000 Passwords Plus v1.0.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\4U AVI MPEG Converter v5.0.3.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\4U AVI MPEG Converter v5.0.3.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\4U AVI MPEG Converter v5.0.3.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\4U AVI MPEG Converter v5.0.3.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\4U AVI MPEG Converter v5.0.3.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\4U WMA MP3 Converter v5.6.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\4U WMA MP3 Converter v5.6.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\4U WMA MP3 Converter v5.6.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\4U WMA MP3 Converter v5.6.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\4U WMA MP3 Converter v5.6.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\7 Faces of Dr. Lao (1964) DVDRip Xvid.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\7 Faces of Dr. Lao (1964) DVDRip Xvid.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\7 Faces of Dr. Lao (1964) DVDRip Xvid.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\7 Faces of Dr. Lao (1964) DVDRip Xvid.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\7 Faces of Dr. Lao (1964) DVDRip Xvid.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\A Good Year TS SVCD-DiNATY.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\A Good Year TS SVCD-DiNATY.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\A Good Year TS SVCD-DiNATY.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\A Good Year TS SVCD-DiNATY.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\A Good Year TS SVCD-DiNATY.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\a.zip.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Worm.Vb.AN
 
C:\Documents and Settings\.housecall6.6\Quarantine\a.zip.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\a.zip.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\a.zip.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Accepted DVDRip XViD-ALLiANCE.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Accepted DVDRip XViD-ALLiANCE.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Accepted DVDRip XViD-ALLiANCE.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Accepted DVDRip XViD-ALLiANCE.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Accepted DVDRip XViD-ALLiANCE.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Acronis Disk Director Suite 10.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Acronis Disk Director Suite 10.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Acronis Disk Director Suite 10.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Acronis Disk Director Suite 10.0.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Acronis Disk Director Suite 10.0.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\AdShareIt SWF To Video Pro v5.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\AdShareIt SWF To Video Pro v5.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\AdShareIt SWF To Video Pro v5.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\AdShareIt SWF To Video Pro v5.2.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\AdShareIt SWF To Video Pro v5.2.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Advanced Intuit Password Recovery v1.4.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Advanced Intuit Password Recovery v1.4.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Advanced Intuit Password Recovery v1.4.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Advanced Intuit Password Recovery v1.4.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Advanced Intuit Password Recovery v1.4.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Advanced Spyware Remover 1.95.32348.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Advanced Spyware Remover 1.95.32348.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Advanced Spyware Remover 1.95.32348.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Advanced Spyware Remover 1.95.32348.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Advanced Spyware Remover 1.95.32348.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\AdvancedRemoteInfo 0.6.5.3.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\AdvancedRemoteInfo 0.6.5.3.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\AdvancedRemoteInfo 0.6.5.3.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\AdvancedRemoteInfo 0.6.5.3.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\AdvancedRemoteInfo 0.6.5.3.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Agogo Video to iPod PSP Cell Phone Xbox Pocket.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Agogo Video to iPod PSP Cell Phone Xbox Pocket.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Agogo Video to iPod PSP Cell Phone Xbox Pocket.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settingsie\.housecall6.6\Quarantine\Agogo Video to iPod PSP Cell Phone Xbox Pocket.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Agogo Video to iPod PSP Cell Phone Xbox Pocket.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Ai Roboform v6.84.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Ai Roboform v6.84.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Ai Roboform v6.84.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Ai Roboform v6.84.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Ai Roboform v6.84.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Akon Ft Eminem - Smack That.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Akon Ft Eminem - Smack That.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Akon Ft Eminem - Smack That.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Akon Ft Eminem - Smack That.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Akon Ft Eminem - Smack That.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alarm Clock Pro 7.8.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alarm Clock Pro 7.8.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alarm Clock Pro 7.8.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alarm Clock Pro 7.8.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alarm Clock Pro 7.8.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 1.9.6.4629.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 1.9.6.4629.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 1.9.6.4629.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 1.9.6.4629.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 1.9.6.4629.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 1.9.6.4719.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 1.9.6.4719.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 1.9.6.4719.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 1.9.6.4719.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 1.9.6.4719.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 ver. 1.9.6.4719.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\ie\.housecall6.6\Quarantine\Alcohol 120 ver. 1.9.6.4719.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 ver. 1.9.6.4719.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 ver. 1.9.6.4719.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Alcohol 120 ver. 1.9.6.4719.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\AnyDVD 6.0.8.5.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\AnyDVD 6.0.8.5.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\AnyDVD 6.0.8.5.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\AnyDVD 6.0.8.5.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\AnyDVD 6.0.8.5.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Apollo DVD Copy v4.6.9.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\.housecall6.6\Quarantine\Apollo DVD Copy v4.6.9.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\.housecall6.6\Quarantine\Apollo DVD Copy v4.6.9.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\.housecall6.6\Quarantine\Apollo DVD Copy v4.6.9.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\.housecall6.6\Quarantine\Apollo DVD Copy v4.6.9.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Art of the devil DVDRip Xvid.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Art of the devil DVDRip Xvid.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Art of the devil DVDRip Xvid.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Art of the devil DVDRip Xvid.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Art of the devil DVDRip Xvid.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ashampoo Burning Studio v6.20.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ashampoo Burning Studio v6.20.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ashampoo Burning Studio v6.20.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ashampoo Burning Studio v6.20.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ashampoo Burning Studio v6.20.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Audio2SWF v1.003.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Audio2SWF v1.003.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Audio2SWF v1.003.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Audio2SWF v1.003.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Audio2SWF v1.003.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Aurora DVD Ripper v1.1.1.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Aurora DVD Ripper v1.1.1.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Aurora DVD Ripper v1.1.1.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Aurora DVD Ripper v1.1.1.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Aurora DVD Ripper v1.1.1.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Autodesk 3ds Max 9.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Autodesk 3ds Max 9.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Autodesk 3ds Max 9.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Autodesk 3ds Max 9.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Autodesk 3ds Max 9.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\BadCopy Pro 3.71.0728.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\BadCopy Pro 3.71.0728.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\BadCopy Pro 3.71.0728.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\BadCopy Pro 3.71.0728.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\BadCopy Pro 3.71.0728.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Bluetooth Remote Control v2.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Bluetooth Remote Control v2.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Bluetooth Remote Control v2.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Bluetooth Remote Control v2.0.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Bluetooth Remote Control v2.0.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Borland Delphi 2006 Lite v3.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Borland Delphi 2006 Lite v3.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Borland Delphi 2006 Lite v3.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Borland Delphi 2006 Lite v3.0.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Borland Delphi 2006 Lite v3.0.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Carrera 3D Basic ver. 2.1.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Carrera 3D Basic ver. 2.1.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Carrera 3D Basic ver. 2.1.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Carrera 3D Basic ver. 2.1.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Carrera 3D Basic ver. 2.1.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Casino Royale TELESYNC DVDR-DREAMLiGHT.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Casino Royale TELESYNC DVDR-DREAMLiGHT.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Casino Royale TELESYNC DVDR-DREAMLiGHT.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Casino Royale TELESYNC DVDR-DREAMLiGHT.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Casino Royale TELESYNC DVDR-DREAMLiGHT.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Chat Watch 4.48.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Chat Watch 4.48.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Chat Watch 4.48.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Chat Watch 4.48.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Chat Watch 4.48.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Clock Tray Skins ver.3.7.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Clock Tray Skins ver.3.7.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Clock Tray Skins ver.3.7.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Clock Tray Skins ver.3.7.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Clock Tray Skins ver.3.7.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CloneDVD 3.9.4.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CloneDVD 3.9.4.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CloneDVD 3.9.4.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CloneDVD 3.9.4.0.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CloneDVD 3.9.4.0.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CMS Grabber 1.4.6B RapidShare.com.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CMS Grabber 1.4.6B RapidShare.com.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CMS Grabber 1.4.6B RapidShare.com.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CMS Grabber 1.4.6B RapidShare.com.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CMS Grabber 1.4.6B RapidShare.com.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CodeLobster 3.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CodeLobster 3.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CodeLobster 3.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CodeLobster 3.2.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CodeLobster 3.2.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\ColorWasher v2.02b for Photoshop.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\ColorWasher v2.02b for Photoshop.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\ColorWasher v2.02b for Photoshop.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\ColorWasher v2.02b for Photoshop.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\ColorWasher v2.02b for Photoshop.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CorelDRAW Graphics Suite X3.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CorelDRAW Graphics Suite X3.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CorelDRAW Graphics Suite X3.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CorelDRAW Graphics Suite X3.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\CorelDRAW Graphics Suite X3.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Crystal Report 11.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Crystal Report 11.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Crystal Report 11.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Crystal Report 11.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Crystal Report 11.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Cucusoft DVD to iPod Converter v5.16.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Cucusoft DVD to iPod Converter v5.16.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Cucusoft DVD to iPod Converter v5.16.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Cucusoft DVD to iPod Converter v5.16.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Cucusoft DVD to iPod Converter v5.16.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Daemon Tools 4.0.8HE.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Daemon Tools 4.0.8HE.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Daemon Tools 4.0.8HE.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Daemon Tools 4.0.8HE.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Daemon Tools 4.0.8HE.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Deal Or No Deal-FASiSO iSO.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Deal Or No Deal-FASiSO iSO.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Deal Or No Deal-FASiSO iSO.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Deal Or No Deal-FASiSO iSO.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Deal Or No Deal-FASiSO iSO.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Demo Builder 5.10.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Demo Builder 5.10.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Demo Builder 5.10.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Demo Builder 5.10.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Demo Builder 5.10.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DigitByte Traffic Counter v2.1.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DigitByte Traffic Counter v2.1.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DigitByte Traffic Counter v2.1.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DigitByte Traffic Counter v2.1.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DigitByte Traffic Counter v2.1.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DigitSoft DiskShop 2.8.1676.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DigitSoft DiskShop 2.8.1676.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DigitSoft DiskShop 2.8.1676.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DigitSoft DiskShop 2.8.1676.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DigitSoft DiskShop 2.8.1676.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Dog Bite Dog 2006 DVDSCR Xvid.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Dog Bite Dog 2006 DVDSCR Xvid.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Dog Bite Dog 2006 DVDSCR Xvid.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Dog Bite Dog 2006 DVDSCR Xvid.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Dog Bite Dog 2006 DVDSCR Xvid.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Domain Research Tool 1.3.0 Build 1.1.2494.26679.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Domain Research Tool 1.3.0 Build 1.1.2494.26679.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Domain Research Tool 1.3.0 Build 1.1.2494.26679.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Domain Research Tool 1.3.0 Build 1.1.2494.26679.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Domain Research Tool 1.3.0 Build 1.1.2494.26679.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Doom III iSO.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Doom III iSO.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Doom III iSO.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Doom III iSO.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Doom III iSO.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Dreamfall The Longest Journey iSO.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Dreamfall The Longest Journey iSO.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Dreamfall The Longest Journey iSO.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Dreamfall The Longest Journey iSO.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Dreamfall The Longest Journey iSO.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DVD to iPod Converter.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DVD to iPod Converter.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DVD to iPod Converter.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DVD to iPod Converter.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DVD to iPod Converter.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DVDFab Platinum 3.0.2.2 Beta.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DVDFab Platinum 3.0.2.2 Beta.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DVDFab Platinum 3.0.2.2 Beta.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DVDFab Platinum 3.0.2.2 Beta.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\DVDFab Platinum 3.0.2.2 Beta.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\dvdXsoft DVD to PSP Converter.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\dvdXsoft DVD to PSP Converter.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\dvdXsoft DVD to PSP Converter.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\dvdXsoft DVD to PSP Converter.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\dvdXsoft DVD to PSP Converter.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\dvdXsoft Sound Recorder XP.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\dvdXsoft Sound Recorder XP.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\dvdXsoft Sound Recorder XP.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\dvdXsoft Sound Recorder XP.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\dvdXsoft Sound Recorder XP.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ease Audio Converter v3.40.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ease Audio Converter v3.40.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ease Audio Converter v3.40.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ease Audio Converter v3.40.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ease Audio Converter v3.40.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Easy File Sharing Web Server v4.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Easy File Sharing Web Server v4.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Easy File Sharing Web Server v4.0.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Easy File Sharing Web Server v4.0.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Easy File Sharing Web Server v4.0.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Easy Music CD Burner v3.0.47.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Easy Music CD Burner v3.0.47.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Easy Music CD Burner v3.0.47.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Easy Music CD Burner v3.0.47.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Easy Music CD Burner v3.0.47.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ehsan Gheybi Ft Bibak - Bia Kenaram (R&B).rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ehsan Gheybi Ft Bibak - Bia Kenaram (R&B).rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ehsan Gheybi Ft Bibak - Bia Kenaram (R&B).rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ehsan Gheybi Ft Bibak - Bia Kenaram (R&B).rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Ehsan Gheybi Ft Bibak - Bia Kenaram (R&B).rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\EssentialPIM 1.95.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\EssentialPIM 1.95.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\EssentialPIM 1.95.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\EssentialPIM 1.95.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\EssentialPIM 1.95.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Evidence Destructor v2.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Evidence Destructor v2.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Evidence Destructor v2.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Evidence Destructor v2.2.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Evidence Destructor v2.2.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Family Tree Maker v8.0.061006.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Family Tree Maker v8.0.061006.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Family Tree Maker v8.0.061006.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Family Tree Maker v8.0.061006.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Family Tree Maker v8.0.061006.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\FantasyDVD Player Platinum v9.1.0.712.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\FantasyDVD Player Platinum v9.1.0.712.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\FantasyDVD Player Platinum v9.1.0.712.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\FantasyDVD Player Platinum v9.1.0.712.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\FantasyDVD Player Platinum v9.1.0.712.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fashist Feat Velgard & The God - Blue Rain.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fashist Feat Velgard & The God - Blue Rain.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fashist Feat Velgard & The God - Blue Rain.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fashist Feat Velgard & The God - Blue Rain.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fashist Feat Velgard & The God - Blue Rain.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fifa 2007.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fifa 2007.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fifa 2007.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fifa 2007.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fifa 2007.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fine Metronome 2.5.0.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fine Metronome 2.5.0.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fine Metronome 2.5.0.2.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fine Metronome 2.5.0.2.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\Fine Metronome 2.5.0.2.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\FlashGet 1.73.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Infected with: Backdoor.IRCbot.TK
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\FlashGet 1.73.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Disinfection failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\FlashGet 1.73.rar.bac_a01040=>(Quarantine-4)=>Setup.exe
 Deleted
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\FlashGet 1.73.rar.bac_a01040=>(Quarantine-4)
 Updated
 
C:\Documents and Settings\anne marie\.housecall6.6\Quarantine\FlashGet 1.73.rar.bac_a01040
 Update failed
 
C:\Documents and Settings\anne marie\.housecall6.6\Quara

Lyonnais92 · Answer

Bonjour,

oui, vide la quarantaine de Housecall.

C'est quoi ce logiciel ?

@+

Mika_23 · Answer

Re 

Houscall est un anti-virus en ligne sur www.sosmonordi.com .
Merci beaucoup pour vos conseils mon ordinateur fonctionne plus rapidement maintenant ! 

Est-ce qu'il y avait quelque chose de suspect dans mes raports ? 
Merci encore !

Lyonnais92 · Answer

Bonjour,

remets un log Hijackthis.
@+

Mika_23 · Answer

re bonjour

Alors voila mon log hijackthis ! 

Logfile of HijackThis v1.99.1
Scan saved at 09:42:44, on 2007-07-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\NetAssistant\bin\mpbtn.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\Mes documents\hijackthis_199\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.distributel.net/distributel-portail_fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.distributel.net/distributel-portail_fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.distributel.net/distributel-portail_fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Distributel
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Assistant Internet.lnk = C:\Program Files\NetAssistant\bin\matcli.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://peacepunk.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/promotions/spywaredetector/ICSScanner371290.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - rundll32.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe


Est-ce que tout semble beau ?

Lyonnais92 · Answer

Re,

toujours un souci avec cette ligne :

O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - rundll32.exe (file missing)

On va refaire une recherche sur le fichier. (attention avec un choix de recherche différent)

======================================== 
->Affiche tous les fichiers et dossiers : 
clique sur démarrer/panneau de configuration (en affichage classique)/option des dossiers/affichage 

[Coche] « afficher les dossiers et fichiers cachés » 

[Décoche] la case « Masquer les fichiers protégés du système d'exploitation (recommandé) » 

[Décoche] « masquer les extensions dont le type est connu » 

Puis fais [appliquer] pour valider les changements. 

Et [Ok] 
======================================== 
Ensuite, Double clique sur le OAD pour le lancer 

- nom de fichier à rechercher tape ou fais un copier coller de : RUNDLL32.EXE 
- Type de recherche : sélectionne l'option 3 puis valide [entree] 

OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ai terminé. 
Le rapport de recherche s'affichera automatiquement à dès qu'il en aura terminé. 

- Fais un copier / coller de ce rapport dans ton prochain post. 

Note importante : Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes. Sois patient 
@+

Mika_23 · Answer

re bonjour 

Voici ce que m'as donné OAD : 

 2007-07-27 ----  9:18:51,71  

----------------------------------
§§§§§§ [RUNDLL32.EXE] §§§§§§
----------------------------------
[  ] Registre
 
-------------- [  ] rapide
-- Fichier --- [  ] disque systeme
 ------------- [X] complete


*******************
     [Fichier] 
*******************

c:\WINDOWS\system32\dllcacheundll32.exe
c:\WINDOWS\system32undll32.exe


*********************
     [Même date] 
*********************

C:\Bootfont.bin 
C:\NTDETECT.COM 
C:
tldr 
C:\WINDOWS\clock.avi 
C:\WINDOWS\explorer.exe 
C:\WINDOWS\explorer.scf 
C:\WINDOWS\hh.exe 
C:\WINDOWS\msdfmap.ini 
C:\WINDOWS
otepad.exe 
C:\WINDOWSegedit.exe 
C:\WINDOWS\system.ini 
C:\WINDOWS	askman.exe 
C:\WINDOWS	wain.dll 
C:\WINDOWS	wain_32.dll 
C:\WINDOWS	wunk_16.exe 
C:\WINDOWS	wunk_32.exe 
C:\WINDOWS\vmmreg32.dll 
C:\WINDOWS\win.ini 
C:\WINDOWS\winhelp.exe 
C:\WINDOWS\winhlp32.exe 
C:\WINDOWS\wmprfFRA.prx 
C:\WINDOWS\_default.pif 
C:\WINDOWS\system32\12520437.cpx 
C:\WINDOWS\system32\12520850.cpx 
C:\WINDOWS\system32\6to4svc.dll 
C:\WINDOWS\system32\aaaamon.dll 
C:\WINDOWS\system32\acelpdec.ax 
C:\WINDOWS\system32\acledit.dll 
C:\WINDOWS\system32\aclui.dll 
C:\WINDOWS\system32\activeds.dll 
C:\WINDOWS\system32\activeds.tlb 
C:\WINDOWS\system32\actmovie.exe 
C:\WINDOWS\system32\actxprxy.dll 
C:\WINDOWS\system32\admparse.dll 
C:\WINDOWS\system32\adptif.dll 
C:\WINDOWS\system32\adsldp.dll 
C:\WINDOWS\system32\adsldpc.dll 
C:\WINDOWS\system32\adsmsext.dll 
C:\WINDOWS\system32\adsnt.dll 
C:\WINDOWS\system32\advapi32.dll 
C:\WINDOWS\system32\advpack.dll 
C:\WINDOWS\system32\ahui.exe 
C:\WINDOWS\system32\alg.exe 
C:\WINDOWS\system32\alrsvc.dll 
C:\WINDOWS\system32\amstream.dll 
C:\WINDOWS\system32\ansi.sys 
C:\WINDOWS\system32\apcups.dll 
C:\WINDOWS\system32\append.exe 
C:\WINDOWS\system32\apphelp.dll 
C:\WINDOWS\system32\appwiz.cpl 
C:\WINDOWS\system32\arp.exe 
C:\WINDOWS\system32\asctrls.ocx 
C:\WINDOWS\system32\asferror.dll 
C:\WINDOWS\system32\asycfilt.dll 
C:\WINDOWS\system32\at.exe 
C:\WINDOWS\system32\atkctrs.dll 
C:\WINDOWS\system32\atl.dll 
C:\WINDOWS\system32\atmadm.exe 
C:\WINDOWS\system32\atmfd.dll 
C:\WINDOWS\system32\atmlib.dll 
C:\WINDOWS\system32\atmpvcno.dll 
C:\WINDOWS\system32\attrib.exe 
C:\WINDOWS\system32\audiosrv.dll 
C:\WINDOWS\system32\auditusr.exe 
C:\WINDOWS\system32\authz.dll 
C:\WINDOWS\system32\autochk.exe 
C:\WINDOWS\system32\autoconv.exe 
C:\WINDOWS\system32\autodisc.dll 
C:\WINDOWS\system32\autofmt.exe 
C:\WINDOWS\system32\autolfn.exe 
C:\WINDOWS\system32\avicap.dll 
C:\WINDOWS\system32\avicap32.dll 
C:\WINDOWS\system32\avifil32.dll 
C:\WINDOWS\system32\avifile.dll 
C:\WINDOWS\system32\basesrv.dll 
C:\WINDOWS\system32\batmeter.dll 
C:\WINDOWS\system32\batt.dll 
C:\WINDOWS\system32\bidispl.dll 
C:\WINDOWS\system32\bios1.rom 
C:\WINDOWS\system32\bios4.rom 
C:\WINDOWS\system32\blackbox.dll 
C:\WINDOWS\system32\blastcln.exe 
C:\WINDOWS\system32\bootok.exe 
C:\WINDOWS\system32\bootvid.dll 
C:\WINDOWS\system32\bootvrfy.exe 
C:\WINDOWS\system32\browselc.dll 
C:\WINDOWS\system32\browser.dll 
C:\WINDOWS\system32\browseui.dll 
C:\WINDOWS\system32\browsewm.dll 
C:\WINDOWS\system32\bthci.dll 
C:\WINDOWS\system32\bthprops.cpl 
C:\WINDOWS\system32\bthserv.dll 
C:\WINDOWS\system32\btpanui.dll 
C:\WINDOWS\system32\cabinet.dll 
C:\WINDOWS\system32\cabview.dll 
C:\WINDOWS\system32\cacls.exe 
C:\WINDOWS\system32\camocx.dll 
C:\WINDOWS\system32\capesnpn.dll 
C:\WINDOWS\system32\cards.dll 
C:\WINDOWS\system32\ccfgnt.dll 
C:\WINDOWS\system32\cdfview.dll 
C:\WINDOWS\system32\cdm.dll 
C:\WINDOWS\system32\cdosys.dll 
C:\WINDOWS\system32\certcli.dll 
C:\WINDOWS\system32\certmgr.dll 
C:\WINDOWS\system32\certmgr.msc 
C:\WINDOWS\system32\cewmdm.dll 
C:\WINDOWS\system32\cfgmgr32.dll 
C:\WINDOWS\system32\ChaŒnes.scf 
C:\WINDOWS\system32\chcp.com 
C:\WINDOWS\system32\chkdsk.exe 
C:\WINDOWS\system32\chkntfs.exe 
C:\WINDOWS\system32\ciadmin.dll 
C:\WINDOWS\system32\ciadv.msc 
C:\WINDOWS\system32\cic.dll 
C:\WINDOWS\system32\cidaemon.exe 
C:\WINDOWS\system32\ciodm.dll 
C:\WINDOWS\system32\cisvc.exe 
C:\WINDOWS\system32\ckcnv.exe 
C:\WINDOWS\system32\clb.dll 
C:\WINDOWS\system32\cleanmgr.exe 
C:\WINDOWS\system32\cliconf.chm 
C:\WINDOWS\system32\cliconfg.dll 
C:\WINDOWS\system32\cliconfg.exe 
C:\WINDOWS\system32\cliconfg.rll 
C:\WINDOWS\system32\clipsrv.exe 
C:\WINDOWS\system32\clusapi.dll 
C:\WINDOWS\system32\cmcfg32.dll 
C:\WINDOWS\system32\cmd.exe 
C:\WINDOWS\system32\cmdial32.dll 
C:\WINDOWS\system32\cmdl32.exe 
C:\WINDOWS\system32\cmmgr32.hlp 
C:\WINDOWS\system32\cmmon32.exe 
C:\WINDOWS\system32\cmos.ram 
C:\WINDOWS\system32\cmpbk32.dll 
C:\WINDOWS\system32\cmsetACL.dll 
C:\WINDOWS\system32\cmstp.exe 
C:\WINDOWS\system32\cmutil.dll 
C:\WINDOWS\system32\cnetcfg.dll 
C:\WINDOWS\system32\cnvfat.dll 
C:\WINDOWS\system32\comcat.dll 
C:\WINDOWS\system32\comctl32.dll 
C:\WINDOWS\system32\comdlg32.dll 
C:\WINDOWS\system32\comm.drv 
C:\WINDOWS\system32\command.com 
C:\WINDOWS\system32\commdlg.dll 
C:\WINDOWS\system32\comp.exe 
C:\WINDOWS\system32\compact.exe 
C:\WINDOWS\system32\compatUI.dll 
C:\WINDOWS\system32\compmgmt.msc 
C:\WINDOWS\system32\compobj.dll 
C:\WINDOWS\system32\compstui.dll 
C:\WINDOWS\system32\comres.dll 
C:\WINDOWS\system32\confmsp.dll 
C:\WINDOWS\system32\conime.exe 
C:\WINDOWS\system32\console.dll 
C:\WINDOWS\system32\control.exe 
C:\WINDOWS\system32\convert.exe 
C:\WINDOWS\system32\corpol.dll 
C:\WINDOWS\system32\country.sys 
C:\WINDOWS\system32\credui.dll 
C:\WINDOWS\system32\crtdll.dll 
C:\WINDOWS\system32\crypt32.dll 
C:\WINDOWS\system32\cryptdlg.dll 
C:\WINDOWS\system32\cryptdll.dll 
C:\WINDOWS\system32\cryptext.dll 
C:\WINDOWS\system32\cryptnet.dll 
C:\WINDOWS\system32\cryptsvc.dll 
C:\WINDOWS\system32\cryptui.dll 
C:\WINDOWS\system32\cscdll.dll 
C:\WINDOWS\system32\cscript.exe 
C:\WINDOWS\system32\cscui.dll 
C:\WINDOWS\system32\csrsrv.dll 
C:\WINDOWS\system32\csrss.exe 
C:\WINDOWS\system32\csseqchk.dll 
C:\WINDOWS\system32\ctfmon.exe 
C:\WINDOWS\system32\ctl3d32.dll 
C:\WINDOWS\system32\ctl3dv2.dll 
C:\WINDOWS\system32\ctype.nls 
C:\WINDOWS\system32\c_037.nls 
C:\WINDOWS\system32\c_10000.nls 
C:\WINDOWS\system32\c_10006.nls 
C:\WINDOWS\system32\c_10007.nls 
C:\WINDOWS\system32\c_10010.nls 
C:\WINDOWS\system32\c_10017.nls 
C:\WINDOWS\system32\c_10029.nls 
C:\WINDOWS\system32\c_10079.nls 
C:\WINDOWS\system32\c_10081.nls 
C:\WINDOWS\system32\c_10082.nls 
C:\WINDOWS\system32\c_1026.nls 
C:\WINDOWS\system32\c_1250.nls 
C:\WINDOWS\system32\c_1251.nls 
C:\WINDOWS\system32\c_1252.nls 
C:\WINDOWS\system32\c_1253.nls 
C:\WINDOWS\system32\c_1254.nls 
C:\WINDOWS\system32\c_1255.nls 
C:\WINDOWS\system32\c_1256.nls 
C:\WINDOWS\system32\c_1257.nls 
C:\WINDOWS\system32\c_1258.nls 
C:\WINDOWS\system32\c_20261.nls 
C:\WINDOWS\system32\c_20866.nls 
C:\WINDOWS\system32\c_20905.nls 
C:\WINDOWS\system32\c_21866.nls 
C:\WINDOWS\system32\c_28591.nls 
C:\WINDOWS\system32\c_28592.nls 
C:\WINDOWS\system32\c_28593.nls 
C:\WINDOWS\system32\c_28598.nls 
C:\WINDOWS\system32\c_28605.nls 
C:\WINDOWS\system32\c_437.nls 
C:\WINDOWS\system32\c_500.nls 
C:\WINDOWS\system32\c_737.nls 
C:\WINDOWS\system32\c_775.nls 
C:\WINDOWS\system32\c_850.nls 
C:\WINDOWS\system32\c_852.nls 
C:\WINDOWS\system32\c_855.nls 
C:\WINDOWS\system32\c_857.nls 
C:\WINDOWS\system32\c_860.nls 
C:\WINDOWS\system32\c_861.nls 
C:\WINDOWS\system32\c_863.nls 
C:\WINDOWS\system32\c_865.nls 
C:\WINDOWS\system32\c_866.nls 
C:\WINDOWS\system32\c_869.nls 
C:\WINDOWS\system32\c_874.nls 
C:\WINDOWS\system32\c_875.nls 
C:\WINDOWS\system32\c_932.nls 
C:\WINDOWS\system32\c_936.nls 
C:\WINDOWS\system32\c_949.nls 
C:\WINDOWS\system32\c_950.nls 
C:\WINDOWS\system32\d3d8.dll 
C:\WINDOWS\system32\d3d8thk.dll 
C:\WINDOWS\system32\d3d9.dll 
C:\WINDOWS\system32\d3dim.dll 
C:\WINDOWS\system32\d3dim700.dll 
C:\WINDOWS\system32\d3dpmesh.dll 
C:\WINDOWS\system32\d3dramp.dll 
C:\WINDOWS\system32\d3drm.dll 
C:\WINDOWS\system32\d3dxof.dll 
C:\WINDOWS\system32\danim.dll 
C:\WINDOWS\system32\dataclen.dll 
C:\WINDOWS\system32\datime.dll 
C:\WINDOWS\system32\davclnt.dll 
C:\WINDOWS\system32\daxctle.ocx 
C:\WINDOWS\system32\dbgeng.dll 
C:\WINDOWS\system32\dbghelp.dll 
C:\WINDOWS\system32\dbmsrpcn.dll 
C:\WINDOWS\system32\dbnetlib.dll 
C:\WINDOWS\system32\dbnmpntw.dll 
C:\WINDOWS\system32\Dcache.bin 
C:\WINDOWS\system32\dciman32.dll 
C:\WINDOWS\system32\ddeml.dll 
C:\WINDOWS\system32\ddeshare.exe 
C:\WINDOWS\system32\ddraw.dll 
C:\WINDOWS\system32\ddrawex.dll 
C:\WINDOWS\system32\debug.exe 
C:\WINDOWS\system32\defrag.exe 
C:\WINDOWS\system32\desk.cpl 
C:\WINDOWS\system32\deskadp.dll 
C:\WINDOWS\system32\deskmon.dll 
C:\WINDOWS\system32\deskperf.dll 
C:\WINDOWS\system32\devenum.dll 
C:\WINDOWS\system32\devmgmt.msc 
C:\WINDOWS\system32\devmgr.dll 
C:\WINDOWS\system32\dfrg.msc 
C:\WINDOWS\system32\dfrgfat.exe 
C:\WINDOWS\system32\dfrgntfs.exe 
C:\WINDOWS\system32\dfrgres.dll 
C:\WINDOWS\system32\dfrgsnap.dll 
C:\WINDOWS\system32\dfrgui.dll 
C:\WINDOWS\system32\dfsshlex.dll 
C:\WINDOWS\system32\dgnet.dll 
C:\WINDOWS\system32\dgsetup.dll 
C:\WINDOWS\system32\dhcpcsvc.dll 
C:\WINDOWS\system32\dhcpmon.dll 
C:\WINDOWS\system32\dhcpsapi.dll 
C:\WINDOWS\system32\diactfrm.dll 
C:\WINDOWS\system32\diantz.exe 
C:\WINDOWS\system32\digest.dll 
C:\WINDOWS\system32\dimap.dll 
C:\WINDOWS\system32\dinput.dll 
C:\WINDOWS\system32\dinput8.dll 
C:\WINDOWS\system32\diskcomp.com 
C:\WINDOWS\system32\diskcopy.com 
C:\WINDOWS\system32\diskcopy.dll 
C:\WINDOWS\system32\diskmgmt.msc 
C:\WINDOWS\system32\diskpart.exe 
C:\WINDOWS\system32\diskperf.exe 
C:\WINDOWS\system32\dispex.dll 
C:\WINDOWS\system32\dllhost.exe 
C:\WINDOWS\system32\dllhst3g.exe 
C:\WINDOWS\system32\dmadmin.exe 
C:\WINDOWS\system32\dmband.dll 
C:\WINDOWS\system32\dmcompos.dll 
C:\WINDOWS\system32\dmconfig.dll 
C:\WINDOWS\system32\dmdlgs.dll 
C:\WINDOWS\system32\dmdskmgr.dll 
C:\WINDOWS\system32\dmdskres.dll 
C:\WINDOWS\system32\dmime.dll 
C:\WINDOWS\system32\dmintf.dll 
C:\WINDOWS\system32\dmloader.dll 
C:\WINDOWS\system32\dmocx.dll 
C:\WINDOWS\system32\dmremote.exe 
C:\WINDOWS\system32\dmscript.dll 
C:\WINDOWS\system32\dmserver.dll 
C:\WINDOWS\system32\dmstyle.dll 
C:\WINDOWS\system32\dmsynth.dll 
C:\WINDOWS\system32\dmusic.dll 
C:\WINDOWS\system32\dmview.ocx 
C:\WINDOWS\system32\dnsapi.dll 
C:\WINDOWS\system32\dnsrslvr.dll 
C:\WINDOWS\system32\docprop.dll 
C:\WINDOWS\system32\docprop2.dll 
C:\WINDOWS\system32\doskey.exe 
C:\WINDOWS\system32\dosx.exe 
C:\WINDOWS\system32\dpcdll.dll 
C:\WINDOWS\system32\dplay.dll 
C:\WINDOWS\system32\dplaysvr.exe 
C:\WINDOWS\system32\dplayx.dll 
C:\WINDOWS\system32\dpmodemx.dll 
C:\WINDOWS\system32\dpnaddr.dll 
C:\WINDOWS\system32\dpnet.dll 
C:\WINDOWS\system32\dpnhpast.dll 
C:\WINDOWS\system32\dpnhupnp.dll 
C:\WINDOWS\system32\dpnlobby.dll 
C:\WINDOWS\system32\dpnmodem.dll 
C:\WINDOWS\system32\dpnsvr.exe 
C:\WINDOWS\system32\dpnwsock.dll 
C:\WINDOWS\system32\dpserial.dll 
C:\WINDOWS\system32\dpvacm.dll 
C:\WINDOWS\system32\dpvoice.dll 
C:\WINDOWS\system32\dpvsetup.exe 
C:\WINDOWS\system32\dpvvox.dll 
C:\WINDOWS\system32\dpwsock.dll 
C:\WINDOWS\system32\dpwsockx.dll 
C:\WINDOWS\system32\drmclien.dll 
C:\WINDOWS\system32\drmstor.dll 
C:\WINDOWS\system32\drmv2clt.dll 
C:\WINDOWS\system32\drprov.dll 
C:\WINDOWS\system32\drwatson.exe 
C:\WINDOWS\system32\drwtsn32.exe 
C:\WINDOWS\system32\ds16gt.dLL 
C:\WINDOWS\system32\ds32gt.dll 
C:\WINDOWS\system32\dsauth.dll 
C:\WINDOWS\system32\dsdmo.dll 
C:\WINDOWS\system32\dsdmoprp.dll 
C:\WINDOWS\system32\dskquota.dll 
C:\WINDOWS\system32\dskquoui.dll 
C:\WINDOWS\system32\dsound.dll 
C:\WINDOWS\system32\dsound.vxd 
C:\WINDOWS\system32\dsound3d.dll 
C:\WINDOWS\system32\dsprop.dll 
C:\WINDOWS\system32\dsprpres.dll 
C:\WINDOWS\system32\dsquery.dll 
C:\WINDOWS\system32\dssec.dat 
C:\WINDOWS\system32\dssec.dll 
C:\WINDOWS\system32\dssenh.dll 
C:\WINDOWS\system32\dsuiext.dll 
C:\WINDOWS\system32\dswave.dll 
C:\WINDOWS\system32\dumprep.exe 
C:\WINDOWS\system32\duser.dll 
C:\WINDOWS\system32\dvdupgrd.exe 
C:\WINDOWS\system32\dwwin.exe 
C:\WINDOWS\system32\dx7vb.dll 
C:\WINDOWS\system32\dx8vb.dll 
C:\WINDOWS\system32\dxdiag.exe 
C:\WINDOWS\system32\dxdiagn.dll 
C:\WINDOWS\system32\dxmasf.dll 
C:\WINDOWS\system32\dxtmsft.dll 
C:\WINDOWS\system32\dxtrans.dll 
C:\WINDOWS\system32\edb500.dll 
C:\WINDOWS\system32\edit.com 
C:\WINDOWS\system32\edit.hlp 
C:\WINDOWS\system32\edlin.exe 
C:\WINDOWS\system32\ega.cpi 
C:\WINDOWS\system32\els.dll 
C:\WINDOWS\system32\encapi.dll 
C:\WINDOWS\system32\encdec.dll 
C:\WINDOWS\system32\ersvc.dll 
C:\WINDOWS\system32\es.dll 
C:\WINDOWS\system32\esent.dll 
C:\WINDOWS\system32\esent97.dll 
C:\WINDOWS\system32\esentprf.dll 
C:\WINDOWS\system32\esentprf.hxx 
C:\WINDOWS\system32\esentprf.ini 
C:\WINDOWS\system32\esentutl.exe 
C:\WINDOWS\system32\eudcedit.exe 
C:\WINDOWS\system32\eula.txt 
C:\WINDOWS\system32\eventcls.dll 
C:\WINDOWS\system32\eventlog.dll 
C:\WINDOWS\system32\eventvwr.exe 
C:\WINDOWS\system32\eventvwr.msc 
C:\WINDOWS\system32\exe2bin.exe 
C:\WINDOWS\system32\expand.exe 
C:\WINDOWS\system32\expsrv.dll 
C:\WINDOWS\system32\extmgr.dll 
C:\WINDOWS\system32\extrac32.exe 
C:\WINDOWS\system32\exts.dll 
C:\WINDOWS\system32\fastopen.exe 
C:\WINDOWS\system32\faultrep.dll 
C:\WINDOWS\system32\fc.exe 
C:\WINDOWS\system32\feclient.dll 
C:\WINDOWS\system32\filemgmt.dll 
C:\WINDOWS\system32\find.exe 
C:\WINDOWS\system32\findstr.exe 
C:\WINDOWS\system32\finger.exe 
C:\WINDOWS\system32\firewall.cpl 
C:\WINDOWS\system32\fixmapi.exe 
C:\WINDOWS\system32\fldrclnr.dll 
C:\WINDOWS\system32\fmifs.dll 
C:\WINDOWS\system32\fontext.dll 
C:\WINDOWS\system32\fontsub.dll 
C:\WINDOWS\system32\fontview.exe 
C:\WINDOWS\system32\forcedos.exe 
C:\WINDOWS\system32\format.com 
C:\WINDOWS\system32\framebuf.dll 
C:\WINDOWS\system32\fsmgmt.msc 
C:\WINDOWS\system32\fsquirt.exe 
C:\WINDOWS\system32\fsusd.dll 
C:\WINDOWS\system32\fsutil.exe 
C:\WINDOWS\system32\ftp.exe 
C:\WINDOWS\system32\ftsrch.dll 
C:\WINDOWS\system32\fwcfg.dll 
C:\WINDOWS\system32\g711codc.ax 
C:\WINDOWS\system32\gcdef.dll 
C:\WINDOWS\system32\gdi.exe 
C:\WINDOWS\system32\gdi32.dll 
C:\WINDOWS\system32\geo.nls 
C:\WINDOWS\system32\glmf32.dll 
C:\WINDOWS\system32\glu32.dll 
C:\WINDOWS\system32\gpkcsp.dll 
C:\WINDOWS\system32\gpkrsrc.dll 
C:\WINDOWS\system32\graftabl.com 
C:\WINDOWS\system32\graphics.com 
C:\WINDOWS\system32\graphics.pro 
C:\WINDOWS\system32\grpconv.exe 
C:\WINDOWS\system32\h323.tsp 
C:\WINDOWS\system32\h323msp.dll 
C:\WINDOWS\system32\hal.dll 
C:\WINDOWS\system32\hccoin.dll 
C:\WINDOWS\system32\hdwwiz.cpl 
C:\WINDOWS\system32\help.exe 
C:\WINDOWS\system32\hhctrl.ocx 
C:\WINDOWS\system32\hhsetup.dll 
C:\WINDOWS\system32\hidphone.tsp 
C:\WINDOWS\system32\himem.sys 
C:\WINDOWS\system32\hlink.dll 
C:\WINDOWS\system32\hnetcfg.dll 
C:\WINDOWS\system32\hnetmon.dll 
C:\WINDOWS\system32\hnetwiz.dll 
C:\WINDOWS\system32\homepage.inf 
C:\WINDOWS\system32\hostname.exe 
C:\WINDOWS\system32\hotplug.dll 
C:\WINDOWS\system32\html.iec 
C:\WINDOWS\system32\httpapi.dll 
C:\WINDOWS\system32\htui.dll 
C:\WINDOWS\system32\iac25_32.ax 
C:\WINDOWS\system32\iasacct.dll 
C:\WINDOWS\system32\iasads.dll 
C:\WINDOWS\system32\iashlpr.dll 
C:\WINDOWS\system32\iasnap.dll 
C:\WINDOWS\system32\iaspolcy.dll 
C:\WINDOWS\system32\iasrad.dll 
C:\WINDOWS\system32\iasrecst.dll 
C:\WINDOWS\system32\iassam.dll 
C:\WINDOWS\system32\iassdo.dll 
C:\WINDOWS\system32\iassvcs.dll 
C:\WINDOWS\system32\iccvid.dll 
C:\WINDOWS\system32\icm32.dll 
C:\WINDOWS\system32\icmp.dll 
C:\WINDOWS\system32\icmui.dll 
C:\WINDOWS\system32\idq.dll 
C:\WINDOWS\system32\ie4uinit.exe 
C:\WINDOWS\system32\ieakeng.dll 
C:\WINDOWS\system32\ieaksie.dll 
C:\WINDOWS\system32\ieakui.dll 
C:\WINDOWS\system32\iedkcs32.dll 
C:\WINDOWS\system32\ieencode.dll 
C:\WINDOWS\system32\iepeers.dll 
C:\WINDOWS\system32\iernonce.dll 
C:\WINDOWS\system32\iesetup.dll 
C:\WINDOWS\system32\ieuinit.inf 
C:\WINDOWS\system32\iexpress.exe 
C:\WINDOWS\system32\ifmon.dll 
C:\WINDOWS\system32\ifsutil.dll 
C:\WINDOWS\system32\igmpagnt.dll 
C:\WINDOWS\system32\imaadp32.acm 
C:\WINDOWS\system32\imagehlp.dll 
C:\WINDOWS\system32\imapi.exe 
C:\WINDOWS\system32\imeshare.dll 
C:\WINDOWS\system32\imgutil.dll 
C:\WINDOWS\system32\imm32.dll 
C:\WINDOWS\system32\inetcpl.cpl 
C:\WINDOWS\system32\inetcplc.dll 
C:\WINDOWS\system32\inetmib1.dll 
C:\WINDOWS\system32\inetpp.dll 
C:\WINDOWS\system32\inetppui.dll 
C:\WINDOWS\system32\infosoft.dll 
C:\WINDOWS\system32\initpki.dll 
C:\WINDOWS\system32\input.dll 
C:\WINDOWS\system32\inseng.dll 
C:\WINDOWS\system32\instcat.sql 
C:\WINDOWS\system32\intl.cpl 
C:\WINDOWS\system32\iologmsg.dll 
C:\WINDOWS\system32\ipconf.tsp 
C:\WINDOWS\system32\ipconfig.exe 
C:\WINDOWS\system32\iphlpapi.dll 
C:\WINDOWS\system32\ipmontr.dll 
C:\WINDOWS\system32\ipnathlp.dll 
C:\WINDOWS\system32\ippromon.dll 
C:\WINDOWS\system32\iprop.dll 
C:\WINDOWS\system32\iprtprio.dll 
C:\WINDOWS\system32\iprtrmgr.dll 
C:\WINDOWS\system32\ipsec6.exe 
C:\WINDOWS\system32\ipsecsnp.dll 
C:\WINDOWS\system32\ipsecsvc.dll 
C:\WINDOWS\system32\ipsmsnap.dll 
C:\WINDOWS\system32\ipv6.exe 
C:\WINDOWS\system32\ipv6mon.dll 
C:\WINDOWS\system32\ipxmontr.dll 
C:\WINDOWS\system32\ipxpromn.dll 
C:\WINDOWS\system32\ipxrip.dll 
C:\WINDOWS\system32\ipxroute.exe 
C:\WINDOWS\system32\ipxrtmgr.dll 
C:\WINDOWS\system32\ipxsap.dll 
C:\WINDOWS\system32\ipxwan.dll 
C:\WINDOWS\system32\ir32_32.dll 
C:\WINDOWS\system32\ir41_32.ax 
C:\WINDOWS\system32\ir41_qc.dll 
C:\WINDOWS\system32\ir41_qcx.dll 
C:\WINDOWS\system32\ir50_32.dll 
C:\WINDOWS\system32\ir50_qc.dll 
C:\WINDOWS\system32\ir50_qcx.dll 
C:\WINDOWS\system32\irprops.cpl 
C:\WINDOWS\system32\itircl.dll 
C:\WINDOWS\system32\itss.dll 
C:\WINDOWS\system32\iuengine.dll 
C:\WINDOWS\system32\ivfsrc.ax 
C:\WINDOWS\system32\ixsso.dll 
C:\WINDOWS\system32\jet500.dll 
C:\WINDOWS\system32\jgaw400.dll 
C:\WINDOWS\system32\jgdw400.dll 
C:\WINDOWS\system32\jgmd400.dll 
C:\WINDOWS\system32\jgpl400.dll 
C:\WINDOWS\system32\jgsd400.dll 
C:\WINDOWS\system32\jgsh400.dll 
C:\WINDOWS\system32\jobexec.dll 
C:\WINDOWS\system32\joy.cpl 
C:\WINDOWS\system32\jscript.dll 
C:\WINDOWS\system32\jsfr.dll 
C:\WINDOWS\system32\jsproxy.dll 
C:\WINDOWS\system32\kb16.com 
C:\WINDOWS\system32\kbdal.dll 
C:\WINDOWS\system32\kbdaze.dll 
C:\WINDOWS\system32\kbdazel.dll 
C:\WINDOWS\system32\kbdbe.dll 
C:\WINDOWS\system32\kbdbene.dll 
C:\WINDOWS\system32\kbdblr.dll 
C:\WINDOWS\system32\kbdbr.dll 
C:\WINDOWS\system32\kbdbu.dll 
C:\WINDOWS\system32\kbdca.dll 
C:\WINDOWS\system32\kbdcan.dll 
C:\WINDOWS\system32\kbdcr.dll 
C:\WINDOWS\system32\kbdcz.dll 
C:\WINDOWS\system32\kbdcz1.dll 
C:\WINDOWS\system32\kbdcz2.dll 
C:\WINDOWS\system32\kbdda.dll 
C:\WINDOWS\system32\kbddv.dll 
C:\WINDOWS\system32\kbdes.dll 
C:\WINDOWS\system32\kbdest.dll 
C:\WINDOWS\system32\kbdfc.dll 
C:\WINDOWS\system32\kbdfi.dll 
C:\WINDOWS\system32\kbdfi1.dll 
C:\WINDOWS\system32\kbdfo.dll 
C:\WINDOWS\system32\kbdfr.dll 
C:\WINDOWS\system32\kbdgae.dll 
C:\WINDOWS\system32\kbdgkl.dll 
C:\WINDOWS\system32\kbdgr.dll 
C:\WINDOWS\system32\kbdgr1.dll 
C:\WINDOWS\system32\kbdhe.dll 
C:\WINDOWS\system32\kbdhe220.dll 
C:\WINDOWS\system32\kbdhe319.dll 
C:\WINDOWS\system32\kbdhela2.dll 
C:\WINDOWS\system32\kbdhela3.dll 
C:\WINDOWS\system32\kbdhept.dll 
C:\WINDOWS\system32\kbdhu.dll 
C:\WINDOWS\system32\kbdhu1.dll 
C:\WINDOWS\system32\kbdic.dll 
C:\WINDOWS\system32\kbdinbe1.dll 
C:\WINDOWS\system32\kbdinben.dll 
C:\WINDOWS\system32\kbdinmal.dll 
C:\WINDOWS\system32\kbdir.dll 
C:\WINDOWS\system32\kbdit.dll 
C:\WINDOWS\system32\kbdit142.dll 
C:\WINDOWS\system32\kbdkaz.dll 
C:\WINDOWS\system32\kbdkyr.dll 
C:\WINDOWS\system32\kbdla.dll 
C:\WINDOWS\system32\kbdlt.dll 
C:\WINDOWS\system32\kbdlt1.dll 
C:\WINDOWS\system32\kbdlv.dll 
C:\WINDOWS\system32\kbdlv1.dll 
C:\WINDOWS\system32\kbdmac.dll 
C:\WINDOWS\system32\kbdmaori.dll 
C:\WINDOWS\system32\kbdmlt47.dll 
C:\WINDOWS\system32\kbdmlt48.dll 
C:\WINDOWS\system32\kbdmon.dll 
C:\WINDOWS\system32\kbdne.dll 
C:\WINDOWS\system32\kbdnec.dll 
C:\WINDOWS\system32\kbdno.dll 
C:\WINDOWS\system32\kbdno1.dll 
C:\WINDOWS\system32\kbdpl.dll 
C:\WINDOWS\system32\kbdpl1.dll 
C:\WINDOWS\system32\kbdpo.dll 
C:\WINDOWS\system32\kbdro.dll 
C:\WINDOWS\system32\kbdru.dll 
C:\WINDOWS\system32\kbdru1.dll 
C:\WINDOWS\system32\kbdsf.dll 
C:\WINDOWS\system32\kbdsg.dll 
C:\WINDOWS\system32\kbdsl.dll 
C:\WINDOWS\system32\kbdsl1.dll 
C:\WINDOWS\system32\kbdsmsfi.dll 
C:\WINDOWS\system32\kbdsmsno.dll 
C:\WINDOWS\system32\kbdsp.dll 
C:\WINDOWS\system32\kbdsw.dll 
C:\WINDOWS\system32\kbdtat.dll 
C:\WINDOWS\system32\kbdtuf.dll 
C:\WINDOWS\system32\kbdtuq.dll 
C:\WINDOWS\system32\kbduk.dll 
C:\WINDOWS\system32\kbdukx.dll 
C:\WINDOWS\system32\kbdur.dll 
C:\WINDOWS\system32\kbdus.dll 
C:\WINDOWS\system32\kbdusl.dll 
C:\WINDOWS\system32\kbdusr.dll 
C:\WINDOWS\system32\kbdusx.dll 
C:\WINDOWS\system32\kbduzb.dll 
C:\WINDOWS\system32\kbdycc.dll 
C:\WINDOWS\system32\kbdycl.dll 
C:\WINDOWS\system32\kd1394.dll 
C:\WINDOWS\system32\kdcom.dll 
C:\WINDOWS\system32\kerberos.dll 
C:\WINDOWS\system32\kernel32.dll 
C:\WINDOWS\system32\key01.sys 
C:\WINDOWS\system32\keyboard.drv 
C:\WINDOWS\system32\keyboard.sys 
C:\WINDOWS\system32\keymgr.dll 
C:\WINDOWS\system32\kmddsp.tsp 
C:\WINDOWS\system32\krnl386.exe 
C:\WINDOWS\system32\l3codeca.acm 
C:\WINDOWS\system32\l3codecx.ax 
C:\WINDOWS\system32\label.exe 
C:\WINDOWS\system32\langwrbk.dll 
C:\WINDOWS\system32\lanman.drv 
C:\WINDOWS\system32\LAPRXY.dll 
C:\WINDOWS\system32\licdll.dll 
C:\WINDOWS\system32\licmgr10.dll 
C:\WINDOWS\system32\lights.exe 
C:\WINDOWS\system32\linkinfo.dll 
C:\WINDOWS\system32\lmhsvc.dll 
C:\WINDOWS\system32\lmrt.dll 
C:\WINDOWS\system32\lnkstub.exe 
C:\WINDOWS\system32\loadfix.com 
C:\WINDOWS\system32\loadperf.dll 
C:\WINDOWS\system32\locale.nls 
C:\WINDOWS\system32\localsec.dll 
C:\WINDOWS\system32\localspl.dll 
C:\WINDOWS\system32\localui.dll 
C:\WINDOWS\system32\locator.exe 
C:\WINDOWS\system32\lodctr.exe 
C:\WINDOWS\system32\logagent.exe 
C:\WINDOWS\system32\loghours.dll 
C:\WINDOWS\system32\logman.exe 
C:\WINDOWS\system32\logon.scr 
C:\WINDOWS\system32\logonui.exe 
C:\WINDOWS\system32\lpk.dll 
C:\WINDOWS\system32\lpq.exe 
C:\WINDOWS\system32\lpr.exe 
C:\WINDOWS\system32\lprhelp.dll 
C:\WINDOWS\system32\lprmonui.dll 
C:\WINDOWS\system32\lsasrv.dll 
C:\WINDOWS\system32\lsass.exe 
C:\WINDOWS\system32\lusrmgr.msc 
C:\WINDOWS\system32\lz32.dll 
C:\WINDOWS\system32\lzexpand.dll 
C:\WINDOWS\system32\l_except.nls 
C:\WINDOWS\system32\l_intl.nls 
C:\WINDOWS\system32\magnify.exe 
C:\WINDOWS\system32\mag_hook.dll 
C:\WINDOWS\system32\main.cpl 
C:\WINDOWS\system32\makecab.exe 
C:\WINDOWS\system32\mapistub.dll 
C:\WINDOWS\system32\mcastmib.dll 
C:\WINDOWS\system32\mcd32.dll 
C:\WINDOWS\system32\mcdsrv32.dll 
C:\WINDOWS\system32\mchgrcoi.dll 
C:\WINDOWS\system32\mciavi.drv 
C:\WINDOWS\system32\mciavi32.dll 
C:\WINDOWS\system32\mcicda.dll 
C:\WINDOWS\system32\mciole16.dll 
C:\WINDOWS\system32\mciole32.dll 
C:\WINDOWS\system32\mciqtz32.dll 
C:\WINDOWS\system32\mciseq.dll 
C:\WINDOWS\system32\mciseq.drv 
C:\WINDOWS\system32\mciwave.dll 
C:\WINDOWS\system32\mciwave.drv 
C:\WINDOWS\system32\mdhcp.dll 
C:\WINDOWS\system32\mdminst.dll 
C:\WINDOWS\system32\mem.exe 
C:\WINDOWS\system32\mf3216.dll 
C:\WINDOWS\system32\mfc40.dll 
C:\WINDOWS\system32\mfc40loc.dll 
C:\WINDOWS\system32\mfc40u.dll 
C:\WINDOWS\system32\mfc42.dll 
C:\WINDOWS\system32\mfc42loc.dll 
C:\WINDOWS\system32\mfc42u.dll 
C:\WINDOWS\system32\mfcsubs.dll 
C:\WINDOWS\system32\mgmtapi.dll 
C:\WINDOWS\system32\mib.bin 
C:\WINDOWS\system32\midimap.dll 
C:\WINDOWS\system32\miglibnt.dll 
C:\WINDOWS\system32\migpwd.exe 
C:\WINDOWS\system32\mimefilt.dll 
C:\WINDOWS\system32\mlang.dat 
C:\WINDOWS\system32\mlang.dll 
C:\WINDOWS\system32\mll_hp.dll 
C:\WINDOWS\system32\mll_mtf.dll 
C:\WINDOWS\system32\mll_qic.dll 
C:\WINDOWS\system32\mmc.exe 
C:\WINDOWS\system32\mmcbase.dll 
C:\WINDOWS\system32\mmcndmgr.dll 
C:\WINDOWS\system32\mmcshext.dll 
C:\WINDOWS\system32\mmdriver.inf 
C:\WINDOWS\system32\mmdrv.dll 
C:\WINDOWS\system32\mmsys.cpl 
C:\WINDOWS\system32\mmsystem.dll 
C:\WINDOWS\system32\mmtask.tsk 
C:\WINDOWS\system32\mmutilse.dll 
C:\WINDOWS\system32\mobsync.dll 
C:\WINDOWS\system32\mobsync.exe 
C:\WINDOWS\system32\mode.com 
C:\WINDOWS\system32\modemui.dll 
C:\WINDOWS\system32\modex.dll 
C:\WINDOWS\system32\more.com 
C:\WINDOWS\system32\moricons.dll 
C:\WINDOWS\system32\mountvol.exe 
C:\WINDOWS\system32\mouse.drv 
C:\WINDOWS\system32\MP43DMOD.dll 
C:\WINDOWS\system32\MP4SDMOD.dll 
C:\WINDOWS\system32\mpeg2data.ax 
C:\WINDOWS\system32\mpg2splt.ax 
C:\WINDOWS\system32\MPG4DMOD.dll 
C:\WINDOWS\system32\mpg4ds32.ax 
C:\WINDOWS\system32\mpnotify.exe 
C:\WINDOWS\system32\mpr.dll 
C:\WINDOWS\system32\mprapi.dll 
C:\WINDOWS\system32\mprddm.dll 
C:\WINDOWS\system32\mprdim.dll 
C:\WINDOWS\system32\mprmsg.dll 
C:\WINDOWS\system32\mprui.dll 
C:\WINDOWS\system32\mrinfo.exe 
C:\WINDOWS\system32\msaatext.dll 
C:\WINDOWS\system32\msacm.dll 
C:\WINDOWS\system32\msacm32.dll 
C:\WINDOWS\system32\msacm32.drv 
C:\WINDOWS\system32\msadds32.ax 
C:\WINDOWS\system32\msadp32.acm 
C:\WINDOWS\system32\msafd.dll 
C:\WINDOWS\system32\msapsspc.dll 
C:\WINDOWS\system32\msasn1.dll 
C:\WINDOWS\system32\msaud32.acm 
C:\WINDOWS\system32\msaudite.dll 
C:\WINDOWS\system32\mscat32.dll 
C:\WINDOWS\system32\mscdexnt.exe 
C:\WINDOWS\system32\mscms.dll 
C:\WINDOWS\system32\mscpx32r.dLL 
C:\WINDOWS\system32\mscpxl32.dLL 
C:\WINDOWS\system32\MSCTF.dll 
C:\WINDOWS\system32\MSCTFIME.IME 
C:\WINDOWS\system32\MSCTFP.dll 
C:\WINDOWS\system32\msdadiag.dll 
C:\WINDOWS\system32\msdart.dll 
C:\WINDOWS\system32\msdatsrc.tlb 
C:\WINDOWS\system32\msdmo.dll 
C:\WINDOWS\system32\msdxm.ocx 
C:\WINDOWS\system32\msdxmlc.dll 
C:\WINDOWS\system32\msencode.dll 
C:\WINDOWS\system32\msexch40.dll 
C:\WINDOWS\system32\msexcl40.dll 
C:\WINDOWS\system32\msftedit.dll 
C:\WINDOWS\system32\msg711.acm 
C:\WINDOWS\system32\msgina.dll 
C:\WINDOWS\system32\msgsm32.acm 
C:\WINDOWS\system32\msgsvc.dll 
C:\WINDOWS\system32\mshta.exe 
C:\WINDOWS\system32\mshtml.dll 
C:\WINDOWS\system32\mshtml.tlb 
C:\WINDOWS\system32\mshtmled.dll 
C:\WINDOWS\system32\mshtmler.dll 
C:\WINDOWS\system32\msi.dll 
C:\WINDOWS\system32\msident.dll 
C:\WINDOWS\system32\msidle.dll 
C:\WINDOWS\system32\msidntld.dll 
C:\WINDOWS\system32\msieftp.dll 
C:\WINDOWS\system32\msiexec.exe 
C:\WINDOWS\system32\msihnd.dll 
C:\WINDOWS\system32\msimg32.dll 
C:\WINDOWS\system32\msimsg.dll 
C:\WINDOWS\system32\MSIMTF.dll 
C:\WINDOWS\system32\msiregmv.exe 
C:\WINDOWS\system32\msisip.dll 
C:\WINDOWS\system32\msjet40.dll 
C:\WINDOWS\system32\msjetoledb40.dll 
C:\WINDOWS\system32\msjint40.dll 
C:\WINDOWS\system32\msjter40.dll 
C:\WINDOWS\system32\msjtes40.dll 
C:\WINDOWS\system32\mslbui.dll 
C:\WINDOWS\system32\msls31.dll 
C:\WINDOWS\system32\msltus40.dll 
C:\WINDOWS\system32\msnetobj.dll 
C:\WINDOWS\system32\msnsspc.dll 
C:\WINDOWS\system32\msobjs.dll 
C:\WINDOWS\system32\msorc32r.dll 
C:\WINDOWS\system32\msorcl32.dll 
C:\WINDOWS\system32\mspatcha.dll 
C:\WINDOWS\system32\mspbde40.dll 
C:\WINDOWS\system32\mspmsnsv.dll 
C:\WINDOWS\system32\mspmsp.dll 
C:\WINDOWS\system32\msports.dll 
C:\WINDOWS\system32\msprivs.dll 
C:\WINDOWS\system32\msr2c.dll 
C:\WINDOWS\system32\msr2cenu.dll 
C:\WINDOWS\system32\msratelc.dll 
C:\WINDOWS\system32\msrating.dll 
C:\WINDOWS\system32\msrclr40.dll 
C:\WINDOWS\system32\msrd2x40.dll 
C:\WINDOWS\system32\msrd3x40.dll 
C:\WINDOWS\system32\msrecr40.dll 
C:\WINDOWS\system32\msrepl40.dll 
C:\WINDOWS\system32\msrle32.dll 
C:\WINDOWS\system32\mssap.dll 
C:\WINDOWS\system32\msscds32.ax 
C:\WINDOWS\system32\msscp.dll 
C:\WINDOWS\system32\msscript.ocx 
C:\WINDOWS\system32\mssign32.dll 
C:\WINDOWS\system32\mssip32.dll 
C:\WINDOWS\system32\msswch.dll 
C:\WINDOWS\system32\msswchx.exe 
C:\WINDOWS\system32\mstext40.dll 
C:\WINDOWS\system32\mstime.dll 
C:\WINDOWS\system32\mstlsapi.dll 
C:\WINDOWS\system32\msutb.dll 
C:\WINDOWS\system32\msv1_0.dll 
C:\WINDOWS\system32\msvbvm50.dll 
C:\WINDOWS\system32\msvbvm60.dll 
C:\WINDOWS\system32\msvcirt.dll 
C:\WINDOWS\system32\msvcp50.dll 
C:\WINDOWS\system32\msvcp60.dll 
C:\WINDOWS\system32\msvcrt.dll 
C:\WINDOWS\system32\msvcrt20.dll 
C:\WINDOWS\system32\msvcrt40.dll 
C:\WINDOWS\system32\msvfw32.dll 
C:\WINDOWS\system32\msvidc32.dll 
C:\WINDOWS\system32\msvidctl.dll 
C:\WINDOWS\system32\msvideo.dll 
C:\WINDOWS\system32\msw3prt.dll 
C:\WINDOWS\system32\mswdat10.dll 
C:\WINDOWS\system32\mswebdvd.dll 
C:\WINDOWS\system32\mswmdm.dll 
C:\WINDOWS\system32\mswsock.dll 
C:\WINDOWS\system32\mswstr10.dll 
C:\WINDOWS\system32\msxbde40.dll 
C:\WINDOWS\system32\msxml.dll 
C:\WINDOWS\system32\msxml2.dll 
C:\WINDOWS\system32\msxml2r.dll 
C:\WINDOWS\system32\msxml3.dll 
C:\WINDOWS\system32\msxml3r.dll 
C:\WINDOWS\system32\msxmlr.dll 
C:\WINDOWS\system32\mtxclu.dll 
C:\WINDOWS\system32\mycomput.dll 
C:\WINDOWS\system32\mydocs.dll 
C:\WINDOWS\system32
arrator.exe 
C:\WINDOWS\system32
arrhook.dll 
C:\WINDOWS\system32
btstat.exe 
C:\WINDOWS\system32
cobjapi.dll 
C:\WINDOWS\system32
cpa.cpl 
C:\WINDOWS\system32
cxpnt.dll 
C:\WINDOWS\system32
ddeapi.dll 
C:\WINDOWS\system32
ddeapir.exe 
C:\WINDOWS\system32
ddenb32.dll 
C:\WINDOWS\system32
dptsp.tsp 
C:\WINDOWS\system32
et.exe 
C:\WINDOWS\system32
et.hlp 
C:\WINDOWS\system32
et1.exe 
C:\WINDOWS\system32
etapi.dll 
C:\WINDOWS\system32
etapi32.dll 
C:\WINDOWS\system32
etcfgx.dll 
C:\WINDOWS\system32
etdde.exe 
C:\WINDOWS\system32
etevent.dll 
C:\WINDOWS\system32
eth.dll 
C:\WINDOWS\system32
etid.dll 
C:\WINDOWS\system32
etlogon.dll 
C:\WINDOWS\system32
etman.dll 
C:\WINDOWS\system32
etmsg.dll 
C:\WINDOWS\system32
etplwiz.dll 
C:\WINDOWS\system32
etrap.dll 
C:\WINDOWS\system32
etsetup.cpl 
C:\WINDOWS\system32
etsetup.exe 
C:\WINDOWS\system32
etsh.exe 
C:\WINDOWS\system32
etshell.dll 
C:\WINDOWS\system32
etstat.exe 
C:\WINDOWS\system32
etui0.dll 
C:\WINDOWS\system32
etui1.dll 
C:\WINDOWS\system32
etui2.dll 
C:\WINDOWS\system32
ewdev.dll 
C:\WINDOWS\system32
lhtml.dll 
C:\WINDOWS\system32
lsfunc.exe 
C:\WINDOWS\system32
oise.chs 
C:\WINDOWS\system32
oise.cht 
C:\WINDOWS\system32
oise.dat 
C:\WINDOWS\system32
oise.deu 
C:\WINDOWS\system32
oise.eng 
C:\WINDOWS\system32
oise.enu 
C:\WINDOWS\system32
oise.esn 
C:\WINDOWS\system32
oise.fra 
C:\WINDOWS\system32
oise.ita 
C:\WINDOWS\system32
oise.nld 
C:\WINDOWS\system32
oise.sve 
C:\WINDOWS\system32
oise.tha 
C:\WINDOWS\system32
otepad.exe 
C:\WINDOWS\system32
pptools.dll 
C:\WINDOWS\system32
slookup.exe 
C:\WINDOWS\system32
tdll.dll 
C:\WINDOWS\system32
tdos.sys 
C:\WINDOWS\system32
tdos404.sys 
C:\WINDOWS\system32
tdos411.sys 
C:\WINDOWS\system32
tdos412.sys 
C:\WINDOWS\system32
tdos804.sys 
C:\WINDOWS\system32
tdsapi.dll 
C:\WINDOWS\system32
timage.gif 
C:\WINDOWS\system32
tio.sys 
C:\WINDOWS\system32
tio404.sys 
C:\WINDOWS\system32
tio411.sys 
C:\WINDOWS\system32
tio412.sys 
C:\WINDOWS\system32
tio804.sys 
C:\WINDOWS\system32
tlanman.dll 
C:\WINDOWS\system32
tlanui.dll 
C:\WINDOWS\system32
tlanui2.dll 
C:\WINDOWS\system32
tlsapi.dll 
C:\WINDOWS\system32
tmarta.dll 
C:\WINDOWS\system32
tmsapi.dll 
C:\WINDOWS\system32
tmsdba.dll 
C:\WINDOWS\system32
tmsevt.dll 
C:\WINDOWS\system32
tmsmgr.dll 
C:\WINDOWS\system32
tmsmgr.msc 
C:\WINDOWS\system32
tmsoprq.msc 
C:\WINDOWS\system32
tmssvc.dll 
C:\WINDOWS\system32
toskrnl.exe 
C:\WINDOWS\system32
tprint.dll 
C:\WINDOWS\system32
tsd.exe 
C:\WINDOWS\system32
tsdexts.dll 
C:\WINDOWS\system32
tshrui.dll 
C:\WINDOWS\system32
tvdm.exe 
C:\WINDOWS\system32
tvdmd.dll 
C:\WINDOWS\system32
usrmgr.cpl 
C:\WINDOWS\system32
wprovau.dll 
C:\WINDOWS\system32\oakley.dll 
C:\WINDOWS\system32\objsel.dll 
C:\WINDOWS\system32\occache.dll 
C:\WINDOWS\system32\ocmanage.dll 
C:\WINDOWS\system32\odbc16gt.dll 
C:\WINDOWS\system32\odbc32.dll 
C:\WINDOWS\system32\odbc32gt.dll 
C:\WINDOWS\system32\odbcad32.exe 
C:\WINDOWS\system32\odbcbcp.dll 
C:\WINDOWS\system32\odbcconf.dll 
C:\WINDOWS\system32\odbcconf.exe 
C:\WINDOWS\system32\odbcconf.rsp 
C:\WINDOWS\system32\odbccp32.cpl 
C:\WINDOWS\system32\odbccp32.dll 
C:\WINDOWS\system32\odbccr32.dll 
C:\WINDOWS\system32\odbccu32.dll 
C:\WINDOWS\system32\odbcint.dll 
C:\WINDOWS\system32\odbcji32.dll 
C:\WINDOWS\system32\odbcjt32.dll 
C:\WINDOWS\system32\odbcp32r.dll 
C:\WINDOWS\system32\odbctrac.dll 
C:\WINDOWS\system32\oddbse32.dll 
C:\WINDOWS\system32\odexl32.dll 
C:\WINDOWS\system32\odfox32.dll 
C:\WINDOWS\system32\odpdx32.dll 
C:\WINDOWS\system32\odtext32.dll 
C:\WINDOWS\system32\oembios.bin 
C:\WINDOWS\system32\oembios.dat 
C:\WINDOWS\system32\oembios.sig 
C:\WINDOWS\system32\offfilt.dll 
C:\WINDOWS\system32\ole2.dll 
C:\WINDOWS\system32\ole2disp.dll 
C:\WINDOWS\system32\ole2nls.dll 
C:\WINDOWS\system32\ole32.dll 
C:\WINDOWS\system32\oleacc.dll 
C:\WINDOWS\system32\oleaccrc.dll 
C:\WINDOWS\system32\oleaut32.dll 
C:\WINDOWS\system32\olecli.dll 
C:\WINDOWS\system32\olecli32.dll 
C:\WINDOWS\system32\olecnv32.dll 
C:\WINDOWS\system32\oledlg.dll 
C:\WINDOWS\system32\oleprn.dll 
C:\WINDOWS\system32\olepro32.dll 
C:\WINDOWS\system32\olesvr.dll 
C:\WINDOWS\system32\olesvr32.dll 
C:\WINDOWS\system32\olethk32.dll 
C:\WINDOWS\system32\opengl32.dll 
C:\WINDOWS\system32\osk.exe 
C:\WINDOWS\system32\osuninst.dll 
C:\WINDOWS\system32\osuninst.exe 
C:\WINDOWS\system32\p2p.dll 
C:\WINDOWS\system32\p2pgasvc.dll 
C:\WINDOWS\system32\p2pgraph.dll 
C:\WINDOWS\system32\p2pnetsh.dll 
C:\WINDOWS\system32\p2psvc.dll 
C:\WINDOWS\system32\packager.exe 
C:\WINDOWS\system32\panmap.dll 
C:\WINDOWS\system32\pathping.exe 
C:\WINDOWS\system32\pautoenr.dll 
C:\WINDOWS\system32\pcl.sep 
C:\WINDOWS\system32\pdh.dll 
C:\WINDOWS\system32\pentnt.exe 
C:\WINDOWS\system32\perfc009.dat 
C:\WINDOWS\system32\perfc00C.dat 
C:\WINDOWS\system32\perfci.h 
C:\WINDOWS\system32\perfci.ini 
C:\WINDOWS\system32\perfctrs.dll 
C:\WINDOWS\system32\perfd009.dat 
C:\WINDOWS\system32\perfd00C.dat 
C:\WINDOWS\system32\perfdisk.dll 
C:\WINDOWS\system32\perffilt.h 
C:\WINDOWS\system32\perffilt.ini 
C:\WINDOWS\system32\perfh009.dat 
C:\WINDOWS\system32\perfh00C.dat 
C:\WINDOWS\system32\perfi009.dat 
C:\WINDOWS\system32\perfi00C.dat 
C:\WINDOWS\system32\perfmon.exe 
C:\WINDOWS\system32\perfmon.msc 
C:\WINDOWS\system32\perfnet.dll 
C:\WINDOWS\system32\perfos.dll 
C:\WINDOWS\system32\perfproc.dll 
C:\WINDOWS\system32\perfts.dll 
C:\WINDOWS\system32\perfwci.h 
C:\WINDOWS\system32\perfwci.ini 
C:\WINDOWS\system32\photowiz.dll 
C:\WINDOWS\system32\pidgen.dll 
C:\WINDOWS\system32\pifmgr.dll 
C:\WINDOWS\system32\ping.exe 
C:\WINDOWS\system32\ping6.exe 
C:\WINDOWS\system32\plustab.dll 
C:\WINDOWS\system32\pmspl.dll 
C:\WINDOWS\system32\pngfilt.dll 
C:\WINDOWS\system32\pnrpnsp.dll 
C:\WINDOWS\system32\polstore.dll 
C:\WINDOWS\system32\powercfg.cpl 
C:\WINDOWS\system32\powercfg.exe 
C:\WINDOWS\system32\powrprof.dll 
C:\WINDOWS\system32\prflbmsg.dll 
C:\WINDOWS\system32\print.exe 
C:\WINDOWS\system32\printui.dll 
C:\WINDOWS\system32\proctexe.ocx 
C:\WINDOWS\system32\prodspec.ini 
C:\WINDOWS\system32\profmap.dll 
C:\WINDOWS\system32\progman.exe 
C:\WINDOWS\system32\proquota.exe 
C:\WINDOWS\system32\proxycfg.exe 
C:\WINDOWS\system32\psapi.dll 
C:\WINDOWS\system32\psbase.dll 
C:\WINDOWS\system32\pschdcnt.h 
C:\WINDOWS\system32\pschdprf.dll 
C:\WINDOWS\system32\pschdprf.ini 
C:\WINDOWS\system32\pscript.sep 
C:\WINDOWS\system32\psnppagn.dll 
C:\WINDOWS\system32\pstorec.dll 
C:\WINDOWS\system32\pstorsvc.dll 
C:\WINDOWS\system32\pubprn.vbs 
C:\WINDOWS\system32\qasf.dll 
C:\WINDOWS\system32\qcap.dll 
C:\WINDOWS\system32\qdv.dll 
C:\WINDOWS\system32\qdvd.dll 
C:\WINDOWS\system32\qedit.dll 
C:\WINDOWS\system32\qedwipes.dll 
C:\WINDOWS\system32\qosname.dll 
C:\WINDOWS\system32\quartz.dll 
C:\WINDOWS\system32\query.dll 
C:\WINDOWS\system32asadhlp.dll 
C:\WINDOWS\system32asapi32.dll 
C:\WINDOWS\system32asauto.dll 
C:\WINDOWS\system32asautou.exe 
C:\WINDOWS\system32aschap.dll 
C:\WINDOWS\system32asctrnm.h 
C:\WINDOWS\system32asctrs.dll 
C:\WINDOWS\system32asctrs.ini 
C:\WINDOWS\system32asdial.exe 
C:\WINDOWS\system32asdlg.dll 
C:\WINDOWS\system32asman.dll 
C:\WINDOWS\system32asmans.dll 
C:\WINDOWS\system32asmontr.dll 
C:\WINDOWS\system32asmxs.dll 
C:\WINDOWS\system32asphone.exe 
C:\WINDOWS\system32asppp.dll 
C:\WINDOWS\system32asrad.dll 
C:\WINDOWS\system32assapi.dll 
C:\WINDOWS\system32asser.dll 
C:\WINDOWS\system32astapi.dll 
C:\WINDOWS\system32astls.dll 
C:\WINDOWS\system32cbdyctl.dll 
C:\WINDOWS\system32cimlby.exe 
C:\WINDOWS\system32cp.exe 
C:\WINDOWS\system32dpdd.dll 
C:\WINDOWS\system32ecover.exe 
C:\WINDOWS\system32edir.exe 
C:\WINDOWS\system32eg.exe 
C:\WINDOWS\system32egapi.dll 
C:\WINDOWS\system32egedt32.exe 
C:\WINDOWS\system32egsvc.dll 
C:\WINDOWS\system32egsvr32.exe 
C:\WINDOWS\system32egwiz.exe 
C:\WINDOWS\system32egwizc.dll 
C:\WINDOWS\system32emotesp.tsp 
C:\WINDOWS\system32end.dll 
C:\WINDOWS\system32eplace.exe 
C:\WINDOWS\system32esutils.dll 
C:\WINDOWS\system32exec.exe 
C:\WINDOWS\system32iched20.dll 
C:\WINDOWS\system32iched32.dll 
C:\WINDOWS\system32nr20.dll 
C:\WINDOWS\system32oute.exe 
C:\WINDOWS\system32outemon.exe 
C:\WINDOWS\system32outetab.dll 
C:\WINDOWS\system32pcns4.dll 
C:\WINDOWS\system32pcrt4.dll 
C:\WINDOWS\system32pcss.dll 
C:\WINDOWS\system32saci.rat 
C:\WINDOWS\system32saenh.dll 
C:\WINDOWS\system32sh.exe 
C:\WINDOWS\system32shx32.dll 
C:\WINDOWS\system32sm.exe 
C:\WINDOWS\system32smps.dll 
C:\WINDOWS\system32smsink.exe 
C:\WINDOWS\system32smui.exe 
C:\WINDOWS\system32svp.exe 
C:\WINDOWS\system32svp.ini 
C:\WINDOWS\system32svpcnts.h 
C:\WINDOWS\system32svpmsg.dll 
C:\WINDOWS\system32svpperf.dll 
C:\WINDOWS\system32svpsp.dll 
C:\WINDOWS\system32tcshare.exe 
C:\WINDOWS\system32tipxmib.dll 
C:\WINDOWS\system32tm.dll 
C:\WINDOWS\system32tutils.dll 
C:\WINDOWS\system32unas.exe 
C:\WINDOWS\system32undll32.exe 
C:\WINDOWS\system32unonce.exe 
C:\WINDOWS\system32\samlib.dll 
C:\WINDOWS\system32\samsrv.dll 
C:\WINDOWS\system32\savedump.exe 
C:\WINDOWS\system32\sbe.dll 
C:\WINDOWS\system32\sbeio.dll 
C:\WINDOWS\system32\sc.exe 
C:\WINDOWS\system32\scarddlg.dll 
C:\WINDOWS\system32\scardssp.dll 
C:\WINDOWS\system32\scardsvr.exe 
C:\WINDOWS\system32\sccbase.dll 
C:\WINDOWS\system32\sccsccp.dll 
C:\WINDOWS\system32\scecli.dll 
C:\WINDOWS\system32\scesrv.dll 
C:\WINDOWS\system32\schannel.dll 
C:\WINDOWS\system32\sclgntfy.dll 
C:\WINDOWS\system32\scofr.dll 
C:\WINDOWS\system32\scredir.dll 
C:\WINDOWS\system32\scrnsave.scr 
C:\WINDOWS\system32\scrobj.dll 
C:\WINDOWS\system32\scrrnfr.dll 
C:\WINDOWS\system32\scrrun.dll 
C:\WINDOWS\system32\sdbinst.exe 
C:\WINDOWS\system32\sdhcinst.dll 
C:\WINDOWS\system32\sdpblb.dll 
C:\WINDOWS\system32\seclogon.dll 
C:\WINDOWS\system32\secupd.dat 
C:\WINDOWS\system32\secupd.sig 
C:\WINDOWS\system32\secur32.dll 
C:\WINDOWS\system32\security.dll 
C:\WINDOWS\system32\sendcmsg.dll 
C:\WINDOWS\system32\sendmail.dll 
C:\WINDOWS\system32\sens.dll 
C:\WINDOWS\system32\sensapi.dll 
C:\WINDOWS\system32\senscfg.dll 
C:\WINDOWS\system32\serialui.dll 
C:\WINDOWS\system32\services.exe 
C:\WINDOWS\system32\services.msc 
C:\WINDOWS\system32\serwvdrv.dll 
C:\WINDOWS\system32\sethc.exe 
C:\WINDOWS\system32\setup.bmp 
C:\WINDOWS\system32\setup.exe 
C:\WINDOWS\system32\setupapi.dll 
C:\WINDOWS\system32\setupdll.dll 
C:\WINDOWS\system32\setver.exe 
C:\WINDOWS\system32\sfc.dll 
C:\WINDOWS\system32\sfc.exe 
C:\WINDOWS\system32\sfcfiles.dll 
C:\WINDOWS\system32\sfc_os.dll 
C:\WINDOWS\system32\sfmapi.dll 
C:\WINDOWS\system32\share.exe 
C:\WINDOWS\system32\shdoclc.dll 
C:\WINDOWS\system32\shdocvw.dll 
C:\WINDOWS\system32\shell.dll 
C:\WINDOWS\system32\shell32.dll 
C:\WINDOWS\system32\shellstyle.dll 
C:\WINDOWS\system32\shfolder.dll 
C:\WINDOWS\system32\shgina.dll 
C:\WINDOWS\system32\shimeng.dll 
C:\WINDOWS\system32\shimgvw.dll 
C:\WINDOWS\system32\shlwapi.dll 
C:\WINDOWS\system32\shmedia.dll 
C:\WINDOWS\system32\shmgrate.exe 
C:\WINDOWS\system32\shrpubw.exe 
C:\WINDOWS\system32\shscrap.dll 
C:\WINDOWS\system32\shsvcs.dll 
C:\WINDOWS\system32\shutdown.exe 
C:\WINDOWS\system32\sigtab.dll 
C:\WINDOWS\system32\sigverif.exe 
C:\WINDOWS\system32\simpdata.tlb 
C:\WINDOWS\system32\sisbkup.dll 
C:\WINDOWS\system32\skdll.dll 
C:\WINDOWS\system32\skeys.exe 
C:\WINDOWS\system32\slayerxp.dll 
C:\WINDOWS\system32\slbcsp.dll 
C:\WINDOWS\system32\slbiop.dll 
C:\WINDOWS\system32\slbrccsp.dll 
C:\WINDOWS\system32\sl_anet.acm 
C:\WINDOWS\system32\smbinst.exe 
C:\WINDOWS\system32\smlogcfg.dll 
C:\WINDOWS\system32\smlogsvc.exe 
C:\WINDOWS\system32\smss.exe 
C:\WINDOWS\system32\snmpapi.dll 
C:\WINDOWS\system32\snmpsnap.dll 
C:\WINDOWS\system32\softpub.dll 
C:\WINDOWS\system32\sort.exe 
C:\WINDOWS\system32\sortkey.nls 
C:\WINDOWS\system32\sorttbls.nls 
C:\WINDOWS\system32\sound.drv 
C:\WINDOWS\system32\spnpinst.exe 
C:\WINDOWS\system32\spoolss.dll 
C:\WINDOWS\system32\spoolsv.exe 
C:\WINDOWS\system32\sprestrt.exe 
C:\WINDOWS\system32\sqlsodbc.chm 
C:\WINDOWS\system32\sqlsrv32.dll 
C:\WINDOWS\system32\sqlsrv32.rll 
C:\WINDOWS\system32\sqlunirl.dll 
C:\WINDOWS\system32\sqlwid.dll 
C:\WINDOWS\system32\sqlwoa.dll 
C:\WINDOWS\system32\srvsvc.dll 
C:\WINDOWS\system32\ss3dfo.scr 
C:\WINDOWS\system32\ssbezier.scr 
C:\WINDOWS\system32\ssdpapi.dll 
C:\WINDOWS\system32\ssdpsrv.dll 
C:\WINDOWS\system32\ssflwbox.scr 
C:\WINDOWS\system32\ssmarque.scr 
C:\WINDOWS\system32\ssmypics.scr 
C:\WINDOWS\system32\ssmyst.scr 
C:\WINDOWS\system32\sspipes.scr 
C:\WINDOWS\system32\ssstars.scr 
C:\WINDOWS\system32\sstext3d.scr 
C:\WINDOWS\system32\stdole2.tlb 
C:\WINDOWS\system32\stdole32.tlb 
C:\WINDOWS\system32\sti.dll 
C:\WINDOWS\system32\stimon.exe 
C:\WINDOWS\system32\sti_ci.dll 
C:\WINDOWS\system32\stobject.dll 
C:\WINDOWS\system32\storage.dll 
C:\WINDOWS\system32\strmdll.dll 
C:\WINDOWS\system32\strmfilt.dll 
C:\WINDOWS\system32\subst.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svcpack.dll 
C:\WINDOWS\system32\swprv.dll 
C:\WINDOWS\system32\sxs.dll 
C:\WINDOWS\system32\syncapp.exe 
C:\WINDOWS\system32\synceng.dll 
C:\WINDOWS\system32\syncui.dll 
C:\WINDOWS\system32\sysdm.cpl 
C:\WINDOWS\system32\sysedit.exe 
C:\WINDOWS\system32\sysinv.dll 
C:\WINDOWS\system32\syskey.exe 
C:\WINDOWS\system32\sysmon.ocx 
C:\WINDOWS\system32\sysocmgr.exe 
C:\WINDOWS\system32\sysprint.sep 
C:\WINDOWS\system32\sysprtj.sep 
C:\WINDOWS\system32\syssetup.dll 
C:\WINDOWS\system32\system.drv 
C:\WINDOWS\system32\systray.exe 
C:\WINDOWS\system32	2embed.dll 
C:\WINDOWS\system32	api.dll 
C:\WINDOWS\system32	api3.dll 
C:\WINDOWS\system32	api32.dll 
C:\WINDOWS\system32	apiperf.dll 
C:\WINDOWS\system32	apisrv.dll 
C:\WINDOWS\system32	apiui.dll 
C:\WINDOWS\system32	askman.exe 
C:\WINDOWS\system32	askmgr.exe 
C:\WINDOWS\system32	cmsetup.exe 
C:\WINDOWS\system32	cpmib.dll 
C:\WINDOWS\system32	cpmon.dll 
C:\WINDOWS\system32	cpmon.ini 
C:\WINDOWS\system32	cpmonui.dll 
C:\WINDOWS\system32	cpsvcs.exe 
C:\WINDOWS\system32	dc.ocx 
C:\WINDOWS\system32	elephon.cpl 
C:\WINDOWS\system32	elnet.exe 
C:\WINDOWS\system32	ermmgr.dll 
C:\WINDOWS\system32	ftp.exe 
C:\WINDOWS\system32	hemeui.dll 
C:\WINDOWS\system32	imedate.cpl 
C:\WINDOWS\system32	imer.drv 
C:\WINDOWS\system32	oolhelp.dll 
C:\WINDOWS\system32	ourstart.exe 
C:\WINDOWS\system32	racert.exe 
C:\WINDOWS\system32	racert6.exe 
C:\WINDOWS\system32	raffic.dll 
C:\WINDOWS\system32	ree.com 
C:\WINDOWS\system32	rkwks.dll 
C:\WINDOWS\system32	sappcmp.dll 
C:\WINDOWS\system32	sd32.dll 
C:\WINDOWS\system32	sddd.dll 
C:\WINDOWS\system32	ssoft32.acm 
C:\WINDOWS\system32	wext.dll 
C:\WINDOWS\system32	xflog.dll 
C:\WINDOWS\system32	ypelib.dll 
C:\WINDOWS\system32\udhisapi.dll 
C:\WINDOWS\system32\ufat.dll 
C:\WINDOWS\system32\ulib.dll 
C:\WINDOWS\system32\umandlg.dll 
C:\WINDOWS\system32\umdmxfrm.dll 
C:\WINDOWS\system32\umpnpmgr.dll 
C:\WINDOWS\system32\unicode.nls 
C:\WINDOWS\system32\unimdm.tsp 
C:\WINDOWS\system32\unimdmat.dll 
C:\WINDOWS\system32\uniplat.dll 
C:\WINDOWS\system32\unlodctr.exe 
C:\WINDOWS\system32\untfs.dll 
C:\WINDOWS\system32\upnp.dll 
C:\WINDOWS\system32\upnpcont.exe 
C:\WINDOWS\system32\upnphost.dll 
C:\WINDOWS\system32\upnpui.dll 
C:\WINDOWS\system32\ups.exe 
C:\WINDOWS\system32\ureg.dll 
C:\WINDOWS\system32\url.dll 
C:\WINDOWS\system32\urlmon.dll 
C:\WINDOWS\system32\usbmon.dll 
C:\WINDOWS\system32\user.exe 
C:\WINDOWS\system32\user32.dll 
C:\WINDOWS\system32\userenv.dll 
C:\WINDOWS\system32\userinit.exe 
C:\WINDOWS\system32\usp10.dll 
C:\WINDOWS\system32\utildll.dll 
C:\WINDOWS\system32\utilman.exe 
C:\WINDOWS\system32\uxtheme.dll 
C:\WINDOWS\system32\v7vga.rom 
C:\WINDOWS\system32\vbajet32.dll 
C:\WINDOWS\system32\vbisurf.ax 
C:\WINDOWS\system32\vbscript.dll 
C:\WINDOWS\system32\vbsfr.dll 
C:\WINDOWS\system32\vcdex.dll 
C:\WINDOWS\system32\vdmdbg.dll 
C:\WINDOWS\system32\vdmredir.dll 
C:\WINDOWS\system32\ver.dll 
C:\WINDOWS\system32\verifier.dll 
C:\WINDOWS\system32\verifier.exe 
C:\WINDOWS\system32\version.dll 
C:\WINDOWS\system32\vfpodbc.dll 
C:\WINDOWS\system32\vga.dll 
C:\WINDOWS\system32\vga.drv 
C:\WINDOWS\system32\vga256.dll 
C:\WINDOWS\system32\vga64k.dll 
C:\WINDOWS\system32\vjoy.dll 
C:\WINDOWS\system32\vssadmin.exe 
C:\WINDOWS\system32\vssapi.dll 
C:\WINDOWS\system32\vssvc.exe 
C:\WINDOWS\system32\vss_ps.dll 
C:\WINDOWS\system32\w32time.dll 
C:\WINDOWS\system32\w32tm.exe 
C:\WINDOWS\system32\w32topl.dll 
C:\WINDOWS\system32\w3ssl.dll 
C:\WINDOWS\system32\watchdog.sys 
C:\WINDOWS\system32\wavemsp.dll 
C:\WINDOWS\system32\wbcache.deu 
C:\WINDOWS\system32\wbcache.enu 
C:\WINDOWS\system32\wbcache.esn 
C:\WINDOWS\system32\wbcache.fra 
C:\WINDOWS\system32\wbcache.ita 
C:\WINDOWS\system32\wbcache.nld 
C:\WINDOWS\system32\wbcache.sve 
C:\WINDOWS\system32\wbdbase.deu 
C:\WINDOWS\system32\wbdbase.enu 
C:\WINDOWS\system32\wbdbase.esn 
C:\WINDOWS\system32\wbdbase.fra 
C:\WINDOWS\system32\wbdbase.ita 
C:\WINDOWS\system32\wbdbase.nld 
C:\WINDOWS\system32\wbdbase.sve 
C:\WINDOWS\system32\wdigest.dll 
C:\WINDOWS\system32\wdl.trm 
C:\WINDOWS\system32\webcheck.dll 
C:\WINDOWS\system32\webclnt.dll 
C:\WINDOWS\system32\webfldrs.msi 
C:\WINDOWS\system32\webhits.dll 
C:\WINDOWS\system32\webvw.dll 
C:\WINDOWS\system32\wextract.exe 
C:\WINDOWS\system32\wfwnet.drv 
C:\WINDOWS\system32\wiaacmgr.exe 
C:\WINDOWS\system32\wiadefui.dll 
C:\WINDOWS\system32\wiadss.dll 
C:\WINDOWS\system32\wiascr.dll 
C:\WINDOWS\system32\wiaservc.dll 
C:\WINDOWS\system32\wiasf.ax 
C:\WINDOWS\system32\wiashext.dll 
C:\WINDOWS\system32\wiavideo.dll 
C:\WINDOWS\system32\wiavusd.dll 
C:\WINDOWS\system32\wifeman.dll 
C:\WINDOWS\system32\win.com 
C:\WINDOWS\system32\win32k.sys 
C:\WINDOWS\system32\win32spl.dll 
C:\WINDOWS\system32\win87em.dll 
C:\WINDOWS\system32\winbrand.dll 
C:\WINDOWS\system32\winfax.dll 
C:\WINDOWS\system32\winhelp.hlp 
C:\WINDOWS\system32\winhlp32.exe 
C:\WINDOWS\system32\winhttp.dll 
C:\WINDOWS\system32\wininet.dll 
C:\WINDOWS\system32\winipsec.dll 
C:\WINDOWS\system32\winlogon.exe 
C:\WINDOWS\system32\winmm.dll 
C:\WINDOWS\system32\winmsd.exe 
C:\WINDOWS\system32\winnls.dll 
C:\WINDOWS\system32\winntbbu.dll 
C:\WINDOWS\system32\winoldap.mod 
C:\WINDOWS\system32\winrnr.dll 
C:\WINDOWS\system32\winscard.dll 
C:\WINDOWS\system32\winshfhc.dll 
C:\WINDOWS\system32\winsock.dll 
C:\WINDOWS\system32\winspool.drv 
C:\WINDOWS\system32\winspool.exe 
C:\WINDOWS\system32\winsrv.dll 
C:\WINDOWS\system32\winsta.dll 
C:\WINDOWS\system32\winstrm.dll 
C:\WINDOWS\system32\wintrust.dll 
C:\WINDOWS\system32\winver.exe 
C:\WINDOWS\system32\wkssvc.dll 
C:\WINDOWS\system32\wldap32.dll 
C:\WINDOWS\system32\wlnotify.dll 
C:\WINDOWS\system32\WMADMOD.dll 
C:\WINDOWS\system32\WMADMOE.dll 
C:\WINDOWS\system32\wmasf.dll 
C:\WINDOWS\system32\wmdmlog.dll 
C:\WINDOWS\system32\wmdmps.dll 
C:\WINDOWS\system32\wmerrFRA.dll 
C:\WINDOWS\system32\wmerror.dll 
C:\WINDOWS\system32\wmi.dll 
C:\WINDOWS\system32\wmidx.dll 
C:\WINDOWS\system32\wmiprop.dll 
C:\WINDOWS\system32\WMNetMgr.dll 
C:\WINDOWS\system32\wmp.dll 
C:\WINDOWS\system32\wmp.ocx 
C:\WINDOWS\system32\wmpasf.dll 
C:\WINDOWS\system32\wmpcd.dll 
C:\WINDOWS\system32\wmpcore.dll 
C:\WINDOWS\system32\wmpdxm.dll 
C:\WINDOWS\system32\wmploc.dll 
C:\WINDOWS\system32\wmpshell.dll 
C:\WINDOWS\system32\wmpui.dll 
C:\WINDOWS\system32\wmsdmod.dll 
C:\WINDOWS\system32\wmsdmoe.dll 
C:\WINDOWS\system32\wmsdmoe2.dll 
C:\WINDOWS\system32\WMSPDMOD.dll 
C:\WINDOWS\system32\WMSPDMOE.dll 
C:\WINDOWS\system32\wmstream.dll 
C:\WINDOWS\system32\wmv8ds32.ax 
C:\WINDOWS\system32\wmvcore.dll 
C:\WINDOWS\system32\wmvdmod.dll 
C:\WINDOWS\system32\wmvdmoe2.dll 
C:\WINDOWS\system32\wmvds32.ax 
C:\WINDOWS\system32\wow32.dll 
C:\WINDOWS\system32\wowdeb.exe 
C:\WINDOWS\system32\wowexec.exe 
C:\WINDOWS\system32\wpa.dbl 
C:\WINDOWS\system32\wpabaln.exe 
C:\WINDOWS\system32\wpnpinst.exe 
C:\WINDOWS\system32\ws2help.dll 
C:\WINDOWS\system32\ws2_32.dll 
C:\WINDOWS\system32\wscntfy.exe 
C:\WINDOWS\system32\wscript.exe 
C:\WINDOWS\system32\wscsvc.dll 
C:\WINDOWS\system32\wscui.cpl 
C:\WINDOWS\system32\wshatm.dll 
C:\WINDOWS\system32\wshbth.dll 
C:\WINDOWS\system32\wshcon.dll 
C:\WINDOWS\system32\wshext.dll 
C:\WINDOWS\system32\wshfr.dll 
C:\WINDOWS\system32\wship6.dll 
C:\WINDOWS\system32\wshisn.dll 
C:\WINDOWS\system32\wshnetbs.dll 
C:\WINDOWS\system32\wshom.ocx 
C:\WINDOWS\system32\WshRm.dll 
C:\WINDOWS\system32\wshtcpip.dll 
C:\WINDOWS\system32\wsnmp32.dll 
C:\WINDOWS\system32\wsock32.dll 
C:\WINDOWS\system32\wstdecod.dll 
C:\WINDOWS\system32\wtsapi32.dll 
C:\WINDOWS\system32\wupdmgr.exe 
C:\WINDOWS\system32\wzcdlg.dll 
C:\WINDOWS\system32\xactsrv.dll 
C:\WINDOWS\system32\xcopy.exe 
C:\WINDOWS\system32\xenroll.dll 
C:\WINDOWS\system32\xmlprov.dll 
C:\WINDOWS\system32\xmlprovi.dll 
C:\WINDOWS\system32\xpob2res.dll 
C:\WINDOWS\system32\xpsp1res.dll 
C:\WINDOWS\system32\xpsp2res.dll 
C:\WINDOWS\system32\zipfldr.dll 
C:\WINDOWS\system32\drivers\acpi.sys 
C:\WINDOWS\system32\drivers\acpiec.sys 
C:\WINDOWS\system32\drivers\afd.sys 
C:\WINDOWS\system32\drivers\asyncmac.sys 
C:\WINDOWS\system32\drivers\atapi.sys 
C:\WINDOWS\system32\drivers\atmarpc.sys 
C:\WINDOWS\system32\drivers\atmepvc.sys 
C:\WINDOWS\system32\drivers\atmlane.sys 
C:\WINDOWS\system32\drivers\atmuni.sys 
C:\WINDOWS\system32\drivers\beep.sys 
C:\WINDOWS\system32\drivers\bridge.sys 
C:\WINDOWS\system32\drivers\cbidf2k.sys 
C:\WINDOWS\system32\drivers\cdfs.sys 
C:\WINDOWS\system32\drivers\cdrom.sys 
C:\WINDOWS\system32\drivers\classpnp.sys 
C:\WINDOWS\system32\drivers\disk.sys 
C:\WINDOWS\system32\drivers\diskdump.sys 
C:\WINDOWS\system32\drivers\dmboot.sys 
C:\WINDOWS\system32\drivers\dmio.sys 
C:\WINDOWS\system32\drivers\dmload.sys 
C:\WINDOWS\system32\drivers\dxapi.sys 
C:\WINDOWS\system32\drivers\dxg.sys 
C:\WINDOWS\system32\drivers\dxgthk.sys 
C:\WINDOWS\system32\drivers\fastfat.sys 
C:\WINDOWS\system32\drivers\fdc.sys 
C:\WINDOWS\system32\drivers\fips.sys 
C:\WINDOWS\system32\drivers\flpydisk.sys 
C:\WINDOWS\system32\drivers\fs_rec.sys 
C:\WINDOWS\system32\drivers\ftdisk.sys 
C:\WINDOWS\system32\drivers\gm.dls 
C:\WINDOWS\system32\drivers\gmreadme.txt 
C:\WINDOWS\system32\drivers\hidclass.sys 
C:\WINDOWS\system32\drivers\hidparse.sys 
C:\WINDOWS\system32\drivers\http.sys 
C:\WINDOWS\system32\drivers\i8042prt.sys 
C:\WINDOWS\system32\drivers\imapi.sys 
C:\WINDOWS\system32\drivers\intelide.sys 
C:\WINDOWS\system32\drivers\intelppm.sys 
C:\WINDOWS\system32\drivers\ip6fw.sys 
C:\WINDOWS\system32\drivers\ipfltdrv.sys 
C:\WINDOWS\system32\drivers\ipinip.sys 
C:\WINDOWS\system32\drivers\ipnat.sys 
C:\WINDOWS\system32\drivers\ipsec.sys 
C:\WINDOWS\system32\drivers\isapnp.sys 
C:\WINDOWS\system32\drivers\kbdclass.sys 
C:\WINDOWS\system32\drivers\ksecdd.sys 
C:\WINDOWS\system32\drivers\mcd.sys 
C:\WINDOWS\system32\drivers\mnmdd.sys 
C:\WINDOWS\system32\drivers\mountmgr.sys 
C:\WINDOWS\system32\drivers\mrxdav.sys 
C:\WINDOWS\system32\drivers\mrxsmb.sys 
C:\WINDOWS\system32\drivers\msfs.sys 
C:\WINDOWS\system32\drivers\msgpc.sys 
C:\WINDOWS\system32\drivers\mup.sys 
C:\WINDOWS\system32\drivers
dis.sys 
C:\WINDOWS\system32\drivers
distapi.sys 
C:\WINDOWS\system32\drivers
diswan.sys 
C:\WINDOWS\system32\drivers
dproxy.sys 
C:\WINDOWS\system32\drivers
etbios.sys 
C:\WINDOWS\system32\drivers
etbt.sys 
C:\WINDOWS\system32\drivers
mnt.sys 
C:\WINDOWS\system32\drivers
pfs.sys 
C:\WINDOWS\system32\drivers
tfs.sys 
C:\WINDOWS\system32\drivers
ull.sys 
C:\WINDOWS\system32\drivers
wlnkflt.sys 
C:\WINDOWS\system32\drivers
wlnkfwd.sys 
C:\WINDOWS\system32\drivers
wlnkipx.sys 
C:\WINDOWS\system32\drivers
wlnknb.sys 
C:\WINDOWS\system32\drivers
wlnkspx.sys 
C:\WINDOWS\system32\drivers\oprghdlr.sys 
C:\WINDOWS\system32\drivers\partmgr.sys 
C:\WINDOWS\system32\drivers\parvdm.sys 
C:\WINDOWS\system32\drivers\pci.sys 
C:\WINDOWS\system32\drivers\pciide.sys 
C:\WINDOWS\system32\drivers\pciidex.sys 
C:\WINDOWS\system32\drivers\pcmcia.sys 
C:\WINDOWS\system32\drivers\psched.sys 
C:\WINDOWS\system32\drivers\ptilink.sys 
C:\WINDOWS\system32\driversasacd.sys 
C:\WINDOWS\system32\driversasl2tp.sys 
C:\WINDOWS\system32\driversaspppoe.sys 
C:\WINDOWS\system32\driversaspptp.sys 
C:\WINDOWS\system32\driversaspti.sys 
C:\WINDOWS\system32\driversawwan.sys 
C:\WINDOWS\system32\driversdbss.sys 
C:\WINDOWS\system32\driversdpcdd.sys 
C:\WINDOWS\system32\driversmcast.sys 
C:\WINDOWS\system32\driversndismp.sys 
C:\WINDOWS\system32\driversootmdm.sys 
C:\WINDOWS\system32\drivers\scsiport.sys 
C:\WINDOWS\system32\drivers\sdbus.sys 
C:\WINDOWS\system32\drivers\secdrv.sys 
C:\WINDOWS\system32\drivers\serenum.sys 
C:\WINDOWS\system32\drivers\serial.sys 
C:\WINDOWS\system32\drivers\sffdisk.sys 
C:\WINDOWS\system32\drivers\sffp_sd.sys 
C:\WINDOWS\system32\drivers\sfloppy.sys 
C:\WINDOWS\system32\drivers\smclib.sys 
C:\WINDOWS\system32\drivers\srv.sys 
C:\WINDOWS\system32\drivers	ape.sys 
C:\WINDOWS\system32\drivers	cpip.sys 
C:\WINDOWS\system32\drivers	cpip6.sys 
C:\WINDOWS\system32\drivers	di.sys 
C:\WINDOWS\system32\drivers\udfs.sys 
C:\WINDOWS\system32\drivers\update.sys 
C:\WINDOWS\system32\drivers\usb8023.sys 
C:\WINDOWS\system32\drivers\usbccgp.sys 
C:\WINDOWS\system32\drivers\usbd.sys 
C:\WINDOWS\system32\drivers\usbehci.sys 
C:\WINDOWS\system32\drivers\usbhub.sys 
C:\WINDOWS\system32\drivers\usbport.sys 
C:\WINDOWS\system32\drivers\usbstor.sys 
C:\WINDOWS\system32\drivers\usbuhci.sys 
C:\WINDOWS\system32\drivers\vga.sys 
C:\WINDOWS\system32\drivers\videoprt.sys 
C:\WINDOWS\system32\drivers\volsnap.sys 
C:\WINDOWS\system32\drivers\wanarp.sys 
C:\WINDOWS\system32\drivers\wmilib.sys 
C:\WINDOWS\system32\drivers\ws2ifsl.sys 



Outil Aide Diagnostic By !aur3n7 Version 1.02
----------------------------------
§§§§§ Fin Rapport §§§§§ 
----------------------------------


J'ai aussi un message d'euureur quand j'ouvre mon ordi ... Est ce que vous voulez que je le post ? 
Merci beaucoup !

Lyonnais92 · Answer

Bonjour,

oui, donne le message.
@+

Plusieurs saletées sur mon ordi Aide Svp

25 réponses

Votre réponse

Newsletters