analyse Hijackthis ^^ Résolu/Fermé

Question

Bonjour! Voila mon rapport d'analyse apres avoir nettoyé avec ad-aware, ccleaner, etc..
Je vous le laisse ^^

Logfile of HijackThis v1.99.1
Scan saved at 18:10:22, on 10/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Program Files\Fichiers communs\AOL\1171904441\ee\AOLSoftware.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Fichiers communs\SystemDoctor\usdrmdr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WINSOS\WINSOS.EXE
C:\WINDOWS\NCLAUNCH.EXe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\Messenger\Msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\AOL Compagnon\companion.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1	ools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1	ools\iesdpb.dll
O2 - BHO: Class - {F4A41C9A-A713-9C96-601E-1966003429F8} - C:\WINDOWS\addke.dll (file missing)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll (file missing)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [1E1.tmp] C:\DOCUME~1\Bryan\LOCALS~1\Temp\1E1.tmp.exe 3 10001
O4 - HKLM\..\Run: [apigq32.exe] C:\WINDOWS\system32\apigq32.exe
O4 - HKLM\..\Run: [vs7W36i] icfgrcoi.exe
O4 - HKLM\..\Run: [msiz.exe] C:\WINDOWS\system32\msiz.exe
O4 - HKLM\..\Run: [apigo.exe] C:\WINDOWS\system32\apigo.exe
O4 - HKLM\..\Run: [atlnj32.exe] C:\WINDOWS\system32\atlnj32.exe
O4 - HKLM\..\Run: [sdkil.exe] C:\WINDOWS\system32\sdkil.exe
O4 - HKLM\..\Run: [d3mo32.exe] C:\WINDOWS\system32\d3mo32.exe
O4 - HKLM\..\Run: [addmu.exe] C:\WINDOWS\system32\addmu.exe
O4 - HKLM\..\Run: [cray.exe] C:\WINDOWS\system32\cray.exe
O4 - HKLM\..\Run: [atlrm.exe] C:\WINDOWS\system32\atlrm.exe
O4 - HKLM\..\Run: [crsa32.exe] C:\WINDOWS\system32\crsa32.exe
O4 - HKLM\..\Run: [netpa.exe] C:\WINDOWS\system32
etpa.exe
O4 - HKLM\..\Run: [apiyb32.exe] C:\WINDOWS\apiyb32.exe
O4 - HKLM\..\Run: [netao32.exe] C:\WINDOWS\system32
etao32.exe
O4 - HKLM\..\Run: [crha32.exe] C:\WINDOWS\system32\crha32.exe
O4 - HKLM\..\Run: [addut.exe] C:\WINDOWS\system32\addut.exe
O4 - HKLM\..\Run: [sdkiu.exe] C:\WINDOWS\sdkiu.exe
O4 - HKLM\..\Run: [iezt.exe] C:\WINDOWS\system32\iezt.exe
O4 - HKLM\..\Run: [javaea.exe] C:\WINDOWS\system32\javaea.exe
O4 - HKLM\..\Run: [appng.exe] C:\WINDOWS\system32\appng.exe
O4 - HKLM\..\Run: [cron.exe] C:\WINDOWS\cron.exe
O4 - HKLM\..\Run: [appjb32.exe] C:\WINDOWS\appjb32.exe
O4 - HKLM\..\Run: [addyu.exe] C:\WINDOWS\system32\addyu.exe
O4 - HKLM\..\Run: [atlrt32.exe] C:\WINDOWS\system32\atlrt32.exe
O4 - HKLM\..\Run: [d3tj32.exe] C:\WINDOWS\d3tj32.exe
O4 - HKLM\..\Run: [sysgc.exe] C:\WINDOWS\system32\sysgc.exe
O4 - HKLM\..\Run: [winuy32.exe] C:\WINDOWS\system32\winuy32.exe
O4 - HKLM\..\Run: [winrc32.exe] C:\WINDOWS\system32\winrc32.exe
O4 - HKLM\..\Run: [atlza32.exe] C:\WINDOWS\atlza32.exe
O4 - HKLM\..\Run: [addru32.exe] C:\WINDOWS\system32\addru32.exe
O4 - HKLM\..\Run: [crxk.exe] C:\WINDOWS\system32\crxk.exe
O4 - HKLM\..\Run: [nettk32.exe] C:\WINDOWS\system32
ettk32.exe
O4 - HKLM\..\Run: [apipj.exe] C:\WINDOWS\apipj.exe
O4 - HKLM\..\Run: [addac32.exe] C:\WINDOWS\system32\addac32.exe
O4 - HKLM\..\Run: [crre32.exe] C:\WINDOWS\crre32.exe
O4 - HKLM\..\Run: [ntbb.exe] C:\WINDOWS
tbb.exe
O4 - HKLM\..\Run: [d3so32.exe] C:\WINDOWS\system32\d3so32.exe
O4 - HKLM\..\Run: [apijt.exe] C:\WINDOWS\system32\apijt.exe
O4 - HKLM\..\Run: [apprq.exe] C:\WINDOWS\apprq.exe
O4 - HKLM\..\Run: [ntgw.exe] C:\WINDOWS
tgw.exe
O4 - HKLM\..\Run: [sysll.exe] C:\WINDOWS\system32\sysll.exe
O4 - HKLM\..\Run: [msxp.exe] C:\WINDOWS\system32\msxp.exe
O4 - HKLM\..\Run: [sdkql32.exe] C:\WINDOWS\system32\sdkql32.exe
O4 - HKLM\..\Run: [netoc32.exe] C:\WINDOWS
etoc32.exe
O4 - HKLM\..\Run: [ntox32.exe] C:\WINDOWS
tox32.exe
O4 - HKLM\..\Run: [atlvu32.exe] C:\WINDOWS\system32\atlvu32.exe
O4 - HKLM\..\Run: [addwq32.exe] C:\WINDOWS\addwq32.exe
O4 - HKLM\..\Run: [atlmw.exe] C:\WINDOWS\atlmw.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [ievc32.exe] C:\WINDOWS\ievc32.exe
O4 - HKLM\..\Run: [javaxp32.exe] C:\WINDOWS\javaxp32.exe
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [apilm.exe] C:\WINDOWS\system32\apilm.exe
O4 - HKLM\..\Run: [NI.UWFX5V_0001_0802] "C:\Documents and Settings\Bryan\Local Settings\Temporary Internet Files\Content.IE5\H01B3ME6\WFI_FRA[1].exe"
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Controleur de calendrier pour Ulead Photo Express] C:\Program Files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe
O4 - HKLM\..\Run: [hxlcvuq] C:\WINDOWS\system32\bxznsr.exe r
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1171904441\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [CAST SURF BROWSE TOOL] C:\Documents and Settings\All Users\Application Data\Shim Cdrom Cast Surf\Sect Way.exe
O4 - HKLM\..\Run: [MDRV_Check] "C:\Program Files\Fichiers communs\SystemDoctor\usdrmdr.exe"
O4 - HKLM\..\Run: [DC6V_Check] "C:\Program Files\Fichiers communs\SystemDoctor\usdrdc.exe"
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [eBo6RWGEi] htini11.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI
O4 - HKCU\..\Run: [NCLaunch] C:\WINDOWS\NCLAUNCH.EXe
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\Msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: AOL Compagnon.lnk = C:\Program Files\AOL Compagnon\companion.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1	ools\iesdpb.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O16 - DPF: ServerPushBox - http://www.turismodoalgarve.pt/meteo/rta/faroport/servp14.cab
O16 - DPF: {093F9CF8-0DE1-491C-95D5-5EC257BD4CA3} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {4BA12BBE-A1CD-4E13-85E4-A05E3FF6F658} (Pygmy Productions - Installer of Bluedot Game Object) - http://www.bluedotproject.com/BlueInstaller.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/10497be59b7623c58915/netzip/RdxIE601.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/2.0.0.33/player.virtools.com/downloads/player/Install2.0/Installer.exe
O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} (NPKCX Control) - http://guard.gunbound.net/nProtect/keyCrypt/npkcx.cab
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - http://runonce.msn.com/setacceptlang.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\Program Files\Fichiers communs\AOL\AOL Spyware Protection\aolserv.exe (file missing)
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: npkcsvc - INCA Internet Co., Ltd. - C:\WINDOWS\System32
pkcsvc.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

kris6943 · Answer

bonjour

ton rapport est une veritable catastrophe

telecharge navilog e
télécharger http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
quand tu en seras ici
http://img525.imageshack.us/img525/197/sanstitre2hj5.jpg

tu choisiras l'option N°1
il va se créer un rapport qui t'indiquera si ton PC est infecté
merci de poster ce rapport ici

zinko · Answer

voilà !

Search Navipromo version 3.0.1 commencé le 11/09/2007 à  8:20:03,64

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Program Files
avilog1
Mise a jour le 08.09.2007 a 21h00 by IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180 


*** Recherche Programmes installes ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\MOI\Application Data ***


*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
https://www.f-secure.com/en


F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
======================================

Copyright 2005-2006 F-Secure Corporation. All rights reserved.
This is a beta version. It will expire on 1st of October, 2007.
Version information: 2.2.1064.

[+] Started on 09/11/07 at 08:20:07.
[+] Initializing ...
[+] Starting scan, press Ctrl-C to abort.
[+] Scanning for hidden items .................................................................................................................................................................................................................................................................................................
[+] Scan complete.
[+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
[+] Exited on 09/11/07 at 08:56:49 (return code = 0).


*** Recherche avec GenericNaviSearch ***
!!! Tous Ces résultats peuvent révéler des fichiers légitimes !!!
!!! A verifier impérativement avant toute suppression manuelle !!!

* Scan C:\WINDOWS\system32 *

Fichiers trouvés :

Aucun Fichier trouvé !

Fichiers suspects :

Aucun Fichier suspect trouvé !



*** Recherche fichiers *** 




*** Recherche cles registre ***



*** Module de Recherche complémentaire *** 
(Recherche fichiers spécifiques) 
 
1)Recherche fichiers connus:

2)Recherche Heuristique :
* 





3)Recherche Certificats :

Certificat Egroup absent !


*** Analyse Terminé le 11/09/2007 à  8:57:27,81 ***

kris6943 · Answer

1) desinstalle navilog il n'a rien trouvé

2) fais un scan complet de ton disque dur avec avira

3) telecharges smitfraud fix et lance le avec l'option 1 et reviens mettre le rapport

telechargement ici
http://siri.urz.free.fr/Fix/SmitfraudFix.exe

mode d'emploi ici
https://www.zebulon.fr/dossiers/tutoriaux/66-smitfraudfix.html

duflox · Answer

salut a vous deux!!!je suis sur le topic a la demande de kris6943

et bah dit donc y a du monde sur ton pc!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

commence par faire ceci:

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe 


Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :

• Redémarre ton ordinateur
• Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
Déroule la liste des instructions ci-dessous :
• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
• Appuie sur Y pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
• Appuie sur une touche pour redémarrer le PC.
• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

zinko · Answer

Ouai je sais qu'il y a du monde dessus :P..
Déjà j'ai lancé un scan d'Avast et il m'a supprimé un bon paquet de Trojan..
Maintenant je vais faire ce que tu me dit !! merci ^^

zinko · Answer

voilà c'est fait !

SDFix: Version 1.104

Run by MOI on 12/09/2007 at 12:03

Microsoft Windows XP [version 5.1.2600]

Running From: C:\DOCUME~1\MOI\Bureau\SDFix\SDFix

Safe Mode:
Checking Services: 


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files: 

Trojan Files Found:

C:\WINDOWS\SYSTEM32\ADDDY.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDES32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDHP.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDNL.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDPP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDQZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDRA.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDRJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDSM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDUO.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDVH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDWL.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIAV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIJS.EXE - Deleted
C:\WINDOWS\SYSTEM32\APILE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APINU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIQD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIQK.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIRW.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIST32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIUD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIWO.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIXY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIZN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPAK.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPEN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPHF.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPJU.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPNQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPPB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPQQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPWE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPXD.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPYC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPYI.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLGI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLII32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLJK.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLLP.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLMU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLOT32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLQZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLSI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLSM.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLWS.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRDJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRFA.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRGZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRIL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRIW.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRPB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRTI.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRUX.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3AQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3AS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3BF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3CK.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3DH.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3EN.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3FF.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3FW.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3GB.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3GS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3IC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3JL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3LB.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3LM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3UI.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3XW.EXE - Deleted
C:\WINDOWS\SYSTEM32\IECL.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEEA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEJN.EXE - Deleted
C:\WINDOWS\SYSTEM32\IENQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEOJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEPC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEUK.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPBB.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPFB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPHV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPNW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPNX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPOK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPOX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPPB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPPH.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPPU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPQE.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPQR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPQW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPRF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPVU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPVX.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPXL.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAAT32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVABJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVABY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVACZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAGO.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAJI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAQA.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAQR.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVARO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVASH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVATK.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVATP.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVATU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAUH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAVK.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAYD.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCCQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCNW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCOH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCPN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCRS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCSZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCXW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCYB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSAT.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSCH.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSCJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSEF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSIG.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSPP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSRA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSRO.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETCW.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETEH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETFY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETHE.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETHI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETJB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETMR.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETQY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETRY.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETST.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETTN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETUS.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETVK.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETYL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTEN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTKE.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTKP.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTMO.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTNH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTPE.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTYV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTZT.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKAW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKBF.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKCU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKGG.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKGG32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKGJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKHU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKIR.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKIV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKMD.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKPN.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKPR.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKST32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKTM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKUA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKVL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKYH.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKYZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSAR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSBL.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSDH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSFF.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSHD.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSRQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSRW.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSSN.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINBP.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINDS.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINEQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINEY.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINGF.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINNW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINOM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINQF.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINSX.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINVU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINWA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINWQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINXY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINYS.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINZX.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDBY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCR.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCT.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDFF.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDFV.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDGD.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDII.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIL.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDJI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDKB.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDMK.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDNS.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDQX.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDSI.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDTI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDUC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDVF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDVV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDXD.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDXK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDZZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIAG.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIBM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APICN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIFU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIIY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIKX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIMC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIQN.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIRR.DLL - Deleted
C:\WINDOWS\SYSTEM32\APITX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIUW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIWY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPBM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPBS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPCM.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPDE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPEF.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPFI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPGL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPJQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPJZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKB.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPLA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPML.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPOY.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPPS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPPT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPPU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPPY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPRD.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPWV.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPXW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPZG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLAY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLBY.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLCP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLDE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLDU.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLEI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLGI.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLGW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLJL.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLJS.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLMP.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLSR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLTX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLUR.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLUW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLUX.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLVL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CMNGW.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRAH.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRAT.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRBJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRDF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CREB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFX.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRGY.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRJE.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRJI.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRJR.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKM.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRLV.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRNF.DLL - Deleted
C:\WINDOWS\SYSTEM32\CROK.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRSO.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRSQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRSS.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRTD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRTJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRTS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRUF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRWB.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRXF.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRXR.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3AA.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3AI.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3AW.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3BD.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3CE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3CV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3DG.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3HY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3ID.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JB.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JN.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3LN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3MF.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3NQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3OS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3OY.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3QN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3RX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3TM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3UI.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3US32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3XJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3XZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3YF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\FHDBI.DLL - Deleted
C:\WINDOWS\SYSTEM32\HNRHC.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEED32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEFF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEHB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEIB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEIK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEJP.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEKD.DLL - Deleted
C:\WINDOWS\SYSTEM32\IENN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IENQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IENR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOU.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEQF.DLL - Deleted
C:\WINDOWS\SYSTEM32\IERM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IETB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IETM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEUM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEUP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEVL.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEWD.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEWF.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEWO.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEWQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEXQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEYG.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPBN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPBU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPCI.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPCU.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPDV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPFI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPGV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPJO.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPJR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLM.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPMD.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPNO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPPY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPQR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPQS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPRR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPSJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPSK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPUZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPVP.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPWA.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPWE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPZD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAAM.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVADC.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAEA.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAEB.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAFF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAFR.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAFZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAIW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAKF.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAKL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAKP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVALD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVALY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANN.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAOZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAQH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVASB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVASO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAUI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVA.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVM.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAYM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAYX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\LIRLD.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAH.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCBQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCCH.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCDM.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCGK.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJM.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCKS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCLD.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCLK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMA.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCNU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCQV.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCRJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCWA.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCWU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCZF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFXHE.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSAC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSAH.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSAX.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSBC.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSBP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSDM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSFE.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSFI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSFU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSGZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSHN.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSIG.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSJL.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSJZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSLZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSMI.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSMW.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSNZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSQP.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSRJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSRJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSTC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSVC.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSXG.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSXJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSXZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSZM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MWUJX.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETCF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETCR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETCU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETCV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETDP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETED.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETHN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETIS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETJR.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETKH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLR.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETNW.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETOF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRY.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETTD.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETTF.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETUS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETWU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETWV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETYE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETZN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETZV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NEWCV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTAF.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTAQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTBS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTBU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDD.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTEE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTEU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTFO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTFT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTHC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTHE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTJY.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTKL.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTKP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTKX.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTKY.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTLA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTUB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWF.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NVJIL.DLL - Deleted
C:\WINDOWS\SYSTEM32\OYUEG.DLL - Deleted
C:\WINDOWS\SYSTEM32\PRWEJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCU.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKEH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKGG.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKGU.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKGZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKHC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKJD.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKJE.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKKB.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKMA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKOE.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKOP.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKRA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKRF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKRX.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKSM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKSW.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUM.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUU.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKVD.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKVH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKVV.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKYC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKYX.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSAM.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSAS.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSAW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSBH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSBW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSCL.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSCV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDN.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSEO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSEY.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSIL.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSJK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSJP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSLF.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSPB.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSQI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSRN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSSP.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSUA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSUR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSVK.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSYA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSYU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSZJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\UZVGM.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINAI.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINAV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINBI.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINED.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINER32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINGP.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINJP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINLW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINPJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINQZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRR.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRX.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINSL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINSX.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINTR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINVC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINWE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINWK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINWM.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINWT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINYF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINZI.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINZI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINZR.DLL - Deleted
C:\WINDOWS\SYSTEM32\YMFNT.DLL - Deleted
C:\WINDOWS\SYSTEM32\YNJRS.DLL - Deleted



Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found. 

C:\WINDOWS\system32
No streams found. 

C:\WINDOWS\system32\svchost.exe
No streams found.
 
C:\WINDOWS\system32
toskrnl.exe
No streams found.
 


                                 Final Check:

Remaining Services:
------------------




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\softnyx\GunBound\GunBound.gme"="C:\Program Files\softnyx\GunBound\GunBound.gme:*:Enabled:GunBound"
"C:\Program Files\softnyx\GunBound\gunbound.exe"="C:\Program Files\softnyx\GunBound\gunbound.exe:*:Enabled:GunBound Startup Application"
"C:\WINDOWS\system32\LEXPPS.EXE"="C:\WINDOWS\system32\LEXPPS.EXE:*:Enabled:LEXPPS.EXE"
"C:\Program Files\softnyx\GunboundWC\GunBound.gme"="C:\Program Files\softnyx\GunboundWC\GunBound.gme:*:Enabled:GunBound"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\softnyx\Rakion\Bin\Rakion.bin"="C:\Program Files\softnyx\Rakion\Bin\Rakion.bin:*:Enabled:Rakion"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Documents and Settings\MOI\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\DofusUpdater\DofusUpdater.exe"="C:\Documents and Settings\MOI\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\DofusUpdater\DofusUpdater.exe:*:Enabled:Installation de Dofus"
"C:\Program Files\WINSOS\winsos.exe"="C:\Program Files\WINSOS\winsos.exe:*:Enabled:Winsos"
"C:\Program Files\WINSOS\anti-spy.exe"="C:\Program Files\WINSOS\anti-spy.exe:*:Enabled:anti-spy Winsos"
"C:\Program Files\WINSOS\help.exe"="C:\Program Files\WINSOS\help.exe:*:Enabled:Winsos Help"
"C:\Program Files\Azureus\Azureus.exe"="C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus"
"C:\WINDOWS\system32\rtcshare.exe"="C:\WINDOWS\system32\rtcshare.exe:*:Enabled:Partage de l'application RTC"
"C:\Program Files\NetMeeting\conf.exe"="C:\Program Files\NetMeeting\conf.exe:*:Enabled:Windows© NetMeeting©"
"C:\Program Files\IncrediMail\bin\IMApp.exe"="C:\Program Files\IncrediMail\bin\IMApp.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\IncMail.exe"="C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail"
"C:\Program Files\IncrediMail\bin\ImpCnt.exe"="C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\StubInstaller.exe"="C:\StubInstaller.exe:*:Enabled:LimeWire swarmed installer"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\Fichiers communs\AOL\1171904441\ee\aolsoftware.exe"="C:\Program Files\Fichiers communs\AOL\1171904441\ee\aolsoftware.exe:*:Enabled:AOL Shared Components"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\MSN Messenger\msncall.exe"="C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\AOL 9.0\waol.exe"="C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"C:\Program Files\MSN Messenger\msnmsgr.exe"="C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"

Remaining Files:
---------------

File Backups: - C:\DOCUME~1\MOI\Bureau\SDFix\SDFix\backups\backups.zip

Files with Hidden Attributes:

C:\Documents and Settings\MOI\Mes documents\Ma musique\Mary J Blige - The Breakthrough (2005) - R&B - www.torrentazos.com By FEFE2003\Thumbs.db
C:\Documents and Settings\MOI\Local Settings\Temp\~rnsetup\pncrt.dll
C:\WINDOWS\addax.dll
C:\WINDOWS\addbf32.dll
C:\WINDOWS\addcc.dll
C:\WINDOWS\addcd32.dll
C:\WINDOWS\adddd.dll
C:\WINDOWS\adddj32.dll
C:\WINDOWS\adddr32.dll
C:\WINDOWS\addfi.dll
C:\WINDOWS\addgf.dll
C:\WINDOWS\addhn.dll
C:\WINDOWS\addhu32.dll
C:\WINDOWS\addjm32.dll
C:\WINDOWS\addkn32.dll
C:\WINDOWS\addli.dll
C:\WINDOWS\addlz.dll
C:\WINDOWS\addmn32.dll
C:\WINDOWS\addno32.dll
C:\WINDOWS\addnq.dll
C:\WINDOWS\addns.dll
C:\WINDOWS\addoh.dll
C:\WINDOWS\addqe32.dll
C:\WINDOWS\addqi.dll
C:\WINDOWS\addqj32.dll
C:\WINDOWS\addqo.dll
C:\WINDOWS\addrv.dll
C:\WINDOWS\addsc32.dll
C:\WINDOWS\addsq.dll
C:\WINDOWS\addti32.dll
C:\WINDOWS\addtz.dll
C:\WINDOWS\adduk.dll
C:\WINDOWS\addus32.dll
C:\WINDOWS\addwj.dll
C:\WINDOWS\addxd.dll
C:\WINDOWS\addzc32.dll
C:\WINDOWS\addzz32.dll
C:\WINDOWS\apiar.dll
C:\WINDOWS\apiau32.dll
C:\WINDOWS\apiax.dll
C:\WINDOWS\apiek32.dll
C:\WINDOWS\apier.dll
C:\WINDOWS\apifb.dll
C:\WINDOWS\apifq32.dll
C:\WINDOWS\apigw32.dll
C:\WINDOWS\apiho32.dll
C:\WINDOWS\apijm.dll
C:\WINDOWS\apikg32.dll
C:\WINDOWS\apinz32.dll
C:\WINDOWS\apiqo.dll
C:\WINDOWS\apiqw32.dll
C:\WINDOWS\apirx32.dll
C:\WINDOWS\apist32.dll
C:\WINDOWS\apisy.dll
C:\WINDOWS\apitf32.dll
C:\WINDOWS\apitx32.dll
C:\WINDOWS\apiut.dll
C:\WINDOWS\apivu.dll
C:\WINDOWS\apiyn.dll
C:\WINDOWS\apiyu.dll
C:\WINDOWS\apizy32.dll
C:\WINDOWS\appaw.dll
C:\WINDOWS\appaw32.dll
C:\WINDOWS\appbi32.dll
C:\WINDOWS\appcd.dll
C:\WINDOWS\appdb.dll
C:\WINDOWS\appek32.dll
C:\WINDOWS\appep32.dll
C:\WINDOWS\appgd32.dll
C:\WINDOWS\appgt32.dll
C:\WINDOWS\apphe32.dll
C:\WINDOWS\appif.dll
C:\WINDOWS\appjv.dll
C:\WINDOWS\appku.dll
C:\WINDOWS\apple32.dll
C:\WINDOWS\applv32.dll
C:\WINDOWS\appmj32.dll
C:\WINDOWS\appmt32.dll
C:\WINDOWS\appmv32.dll
C:\WINDOWS\appnb.dll
C:\WINDOWS\appno.dll
C:\WINDOWS\appot32.dll
C:\WINDOWS\apppe.dll
C:\WINDOWS\apppm.dll
C:\WINDOWS\appqo.dll
C:\WINDOWS\appra.dll
C:\WINDOWS\apprf32.dll
C:\WINDOWS\apprk.dll
C:\WINDOWS\appte32.dll
C:\WINDOWS\appvh.dll
C:\WINDOWS\appvi32.dll
C:\WINDOWS\appvl32.dll
C:\WINDOWS\appxs32.dll
C:\WINDOWS\appxw.dll
C:\WINDOWS\appyt.dll
C:\WINDOWS\appzy.dll
C:\WINDOWS\atlaz32.dll
C:\WINDOWS\atlbl.dll
C:\WINDOWS\atlbp32.dll
C:\WINDOWS\atlci.dll
C:\WINDOWS\atldw32.dll
C:\WINDOWS\atlee.dll
C:\WINDOWS\atlgy32.dll
C:\WINDOWS\atlgz.dll
C:\WINDOWS\atlhm.dll
C:\WINDOWS\atlhz.dll
C:\WINDOWS\atlia32.dll
C:\WINDOWS\atlkk32.dll
C:\WINDOWS\atlla.dll
C:\WINDOWS\atlll.dll
C:\WINDOWS\atlmm.dll
C:\WINDOWS\atlmn.dll
C:\WINDOWS\atlmu32.dll
C:\WINDOWS\atlmx.dll
C:\WINDOWS\atlot.dll
C:\WINDOWS\atlpf32.dll
C:\WINDOWS\atlqa.dll
C:\WINDOWS\atlqi32.dll
C:\WINDOWS\atlrn.dll
C:\WINDOWS\atltd32.dll
C:\WINDOWS\atltn.dll
C:\WINDOWS\atlzy32.dll
C:\WINDOWS\AuHCcup1.dll
C:\WINDOWS\bixdg.dll
C:\WINDOWS\BPMNT.dll
C:\WINDOWS\cfcgk.dll
C:\WINDOWS\Coca Cola.dll
C:\WINDOWS\crcb.dll
C:\WINDOWS\crct32.dll
C:\WINDOWS\crfb32.dll
C:\WINDOWS\crfv.dll
C:\WINDOWS\crfw32.dll
C:\WINDOWS\crfy.dll
C:\WINDOWS\crgy.dll
C:\WINDOWS\crhg32.dll
C:\WINDOWS\crho.dll
C:\WINDOWS\crjb32.dll
C:\WINDOWS\crjm.dll
C:\WINDOWS\crlm32.dll
C:\WINDOWS\crmg.dll
C:\WINDOWS\crnx32.dll
C:\WINDOWS\crog.dll
C:\WINDOWS\crow32.dll
C:\WINDOWS\crpb.dll
C:\WINDOWS\crpr32.dll
C:\WINDOWS\crqa32.dll
C:\WINDOWS\crqi.dll
C:\WINDOWS\crqk32.dll
C:\WINDOWS\crrc32.dll
C:\WINDOWS\crrh32.dll
C:\WINDOWS\crrk32.dll
C:\WINDOWS\crsj.dll
C:\WINDOWS\crss32.dll
C:\WINDOWS\crtb.dll
C:\WINDOWS\crvt.dll
C:\WINDOWS\crzh32.dll
C:\WINDOWS\crzi32.dll
C:\WINDOWS\d3ag32.dll
C:\WINDOWS\d3de32.dll
C:\WINDOWS\d3ga32.dll
C:\WINDOWS\d3ge32.dll
C:\WINDOWS\d3gs32.dll
C:\WINDOWS\d3ic.dll
C:\WINDOWS\d3iq32.dll
C:\WINDOWS\d3ja32.dll
C:\WINDOWS\d3jv32.dll
C:\WINDOWS\d3kh32.dll
C:\WINDOWS\d3mg.dll
C:\WINDOWS\d3oo32.dll
C:\WINDOWS\d3ov.dll
C:\WINDOWS\d3ph32.dll
C:\WINDOWS\d3qa32.dll
C:\WINDOWS\d3qx32.dll
C:\WINDOWS\d3qz32.dll
C:\WINDOWS\d3rc32.dll
C:\WINDOWS\d3rt.dll
C:\WINDOWS\d3rv32.dll
C:\WINDOWS\d3sa.dll
C:\WINDOWS\d3sl32.dll
C:\WINDOWS\d3sp32.dll
C:\WINDOWS\d3tr32.dll
C:\WINDOWS\d3uy32.dll
C:\WINDOWS\d3vb.dll
C:\WINDOWS\d3wa32.dll
C:\WINDOWS\d3wd32.dll
C:\WINDOWS\d3we.dll
C:\WINDOWS\d3wp32.dll
C:\WINDOWS\d3ws.dll
C:\WINDOWS\d3xf.dll
C:\WINDOWS\ewico.dll
C:\WINDOWS\guhmw.dll
C:\WINDOWS\gzbyb.dll
C:\WINDOWS\hcextoutput.dll
C:\WINDOWS\ieae32.dll
C:\WINDOWS\ieaf32.dll
C:\WINDOWS\ieaj32.dll
C:\WINDOWS\ieci32.dll
C:\WINDOWS\ieeg32.dll
C:\WINDOWS\iegq32.dll
C:\WINDOWS\iegw32.dll
C:\WINDOWS\iehg32.dll
C:\WINDOWS\iehu32.dll
C:\WINDOWS\ieic32.dll
C:\WINDOWS\ieim.dll
C:\WINDOWS\ieiy.dll
C:\WINDOWS\ieiz.dll
C:\WINDOWS\ieka.dll
C:\WINDOWS\iekr.dll
C:\WINDOWS\ielb32.dll
C:\WINDOWS\iemf32.dll
C:\WINDOWS\iemm32.dll
C:\WINDOWS\iend.dll
C:\WINDOWS\ieoo.dll
C:\WINDOWS\iepp32.dll
C:\WINDOWS\iesc.dll
C:\WINDOWS\iexs.dll
C:\WINDOWS\ieyw32.dll
C:\WINDOWS\iezc.dll
C:\WINDOWS\iezo.dll
C:\WINDOWS\iezv.dll
C:\WINDOWS\impborl.dll
C:\WINDOWS\ipbl.dll
C:\WINDOWS\ipcb32.dll
C:\WINDOWS\ipcr.dll
C:\WINDOWS\ipdq32.dll
C:\WINDOWS\ipfd32.dll
C:\WINDOWS\ipgx32.dll
C:\WINDOWS\ipkh32.dll
C:\WINDOWS\ipmr32.dll
C:\WINDOWS\ipmw.dll
C:\WINDOWS\ipoe.dll
C:\WINDOWS\ippc32.dll
C:\WINDOWS\ippe32.dll
C:\WINDOWS\ipqk32.dll
C:\WINDOWS\ipqq32.dll
C:\WINDOWS\ipqv32.dll
C:\WINDOWS\ipqx.dll
C:\WINDOWS\ipsa.dll
C:\WINDOWS\ipwn.dll
C:\WINDOWS\javaah.dll
C:\WINDOWS\javaar.dll
C:\WINDOWS\javacp32.dll
C:\WINDOWS\javado32.dll
C:\WINDOWS\javaee32.dll
C:\WINDOWS\javaef.dll
C:\WINDOWS\javaex32.dll
C:\WINDOWS\javafq32.dll
C:\WINDOWS\javafr32.dll
C:\WINDOWS\javagd32.dll
C:\WINDOWS\javagi32.dll
C:\WINDOWS\javahw32.dll
C:\WINDOWS\javaiv32.dll
C:\WINDOWS\javalr.dll
C:\WINDOWS\javaml.dll
C:\WINDOWS\javanu.dll
C:\WINDOWS\javany.dll
C:\WINDOWS\javaoq32.dll
C:\WINDOWS\javapa32.dll
C:\WINDOWS\javapv.dll
C:\WINDOWS\javaqo.dll
C:\WINDOWS\javaro.dll
C:\WINDOWS\javart32.dll
C:\WINDOWS\javasb.dll
C:\WINDOWS\javasv.dll
C:\WINDOWS\javasy.dll
C:\WINDOWS\javaub.dll
C:\WINDOWS\javaud32.dll
C:\WINDOWS\javavc32.dll
C:\WINDOWS\javawm.dll
C:\WINDOWS\javaym32.dll
C:\WINDOWS\jbckj.dll
C:\WINDOWS\loadhttp.dll
C:\WINDOWS\mfccg.dll
C:\WINDOWS\mfcds.dll
C:\WINDOWS\mfcfk32.dll
C:\WINDOWS\mfciq.dll
C:\WINDOWS\mfcje.dll
C:\WINDOWS\mfcjp.dll
C:\WINDOWS\mfcjr32.dll
C:\WINDOWS\mfcjw32.dll
C:\WINDOWS\mfckk32.dll
C:\WINDOWS\mfclv.dll
C:\WINDOWS\mfcmi.dll
C:\WINDOWS\mfcmo32.dll
C:\WINDOWS\mfcmx.dll
C:\WINDOWS\mfcnj32.dll
C:\WINDOWS\mfcpn32.dll
C:\WINDOWS\mfcsq32.dll
C:\WINDOWS\mfctj32.dll
C:\WINDOWS\mfctu32.dll
C:\WINDOWS\mfcul32.dll
C:\WINDOWS\mfcuw32.dll
C:\WINDOWS\mfcvc32.dll
C:\WINDOWS\mfcvj32.dll
C:\WINDOWS\mfcwt.dll
C:\WINDOWS\mfcxe32.dll
C:\WINDOWS\mfcxj.dll
C:\WINDOWS\mfcxu.dll
C:\WINDOWS\mfcxv32.dll
C:\WINDOWS\mfcyn.dll
C:\WINDOWS\mickey32.dll
C:\WINDOWS\mscc.dll
C:\WINDOWS\msdx.dll
C:\WINDOWS\msex32.dll
C:\WINDOWS\msgz32.dll
C:\WINDOWS\mshg.dll
C:\WINDOWS\mshz32.dll
C:\WINDOWS\mskk.dll
C:\WINDOWS\msmf32.dll
C:\WINDOWS\msmm32.dll
C:\WINDOWS\mspn.dll
C:\WINDOWS\msqn.dll
C:\WINDOWS\mssf.dll
C:\WINDOWS\msta.dll
C:\WINDOWS\mstj32.dll
C:\WINDOWS\msuj.dll
C:\WINDOWS\msxu32.dll
C:\WINDOWS\mszn32.dll
C:\WINDOWS\mszy32.dll
C:\WINDOWS
etao32.dll
C:\WINDOWS
etbd.dll
C:\WINDOWS
etcp.dll
C:\WINDOWS
etdw.dll
C:\WINDOWS
etev.dll
C:\WINDOWS
etfc.dll
C:\WINDOWS
ethp.dll
C:\WINDOWS
ethw32.dll
C:\WINDOWS
etlf32.dll
C:\WINDOWS
etlu.dll
C:\WINDOWS
etlx.dll
C:\WINDOWS
etly32.dll
C:\WINDOWS
etmd32.dll
C:\WINDOWS
etmi.dll
C:\WINDOWS
etmi32.dll
C:\WINDOWS
etmn32.dll
C:\WINDOWS
etng32.dll
C:\WINDOWS
etrf32.dll
C:\WINDOWS
etrg32.dll
C:\WINDOWS
etuo32.dll
C:\WINDOWS
etur32.dll
C:\WINDOWS
etvn.dll
C:\WINDOWS
etvz32.dll
C:\WINDOWS
etwv32.dll
C:\WINDOWS
etwy.dll
C:\WINDOWS
etxg32.dll
C:\WINDOWS
etxh32.dll
C:\WINDOWS
etyd32.dll
C:\WINDOWS
etzv32.dll
C:\WINDOWS
gpkv.dll
C:\WINDOWS
tdu.dll
C:\WINDOWS
tea32.dll
C:\WINDOWS
teh.dll
C:\WINDOWS
tgl.dll
C:\WINDOWS
tgw.dll
C:\WINDOWS
tij.dll
C:\WINDOWS
tiz32.dll
C:\WINDOWS
tjb32.dll
C:\WINDOWS
tjf.dll
C:\WINDOWS
tki.dll
C:\WINDOWS
tku32.dll
C:\WINDOWS
tkw32.dll
C:\WINDOWS
tld.dll
C:\WINDOWS
tms.dll
C:\WINDOWS
tog.dll
C:\WINDOWS
tpg.dll
C:\WINDOWS
tpw.dll
C:\WINDOWS
tqm32.dll
C:\WINDOWS
tqu32.dll
C:\WINDOWS
tqw.dll
C:\WINDOWS
tsw32.dll
C:\WINDOWS
tut32.dll
C:\WINDOWS
txy.dll
C:\WINDOWS
tzs.dll
C:\WINDOWS\oiqdz.dll
C:\WINDOWS\patchw32.dll
C:\WINDOWS\PCDLIB32.DLL
C:\WINDOWS\quvsy.dll
C:\WINDOWS\sdkcs32.dll
C:\WINDOWS\sdkdj32.dll
C:\WINDOWS\sdkdt32.dll
C:\WINDOWS\sdkeb32.dll
C:\WINDOWS\sdked.dll
C:\WINDOWS\sdkfw32.dll
C:\WINDOWS\sdkhe32.dll
C:\WINDOWS\sdkin32.dll
C:\WINDOWS\sdkjw.dll
C:\WINDOWS\sdkkd32.dll
C:\WINDOWS\sdkll.dll
C:\WINDOWS\sdkms32.dll
C:\WINDOWS\sdkod32.dll
C:\WINDOWS\sdkon.dll
C:\WINDOWS\sdkqv.dll
C:\WINDOWS\sdkse.dll
C:\WINDOWS\sdksj32.dll
C:\WINDOWS\sdktn32.dll
C:\WINDOWS\sdkui.dll
C:\WINDOWS\sdkzg.dll
C:\WINDOWS\sqtrv.dll
C:\WINDOWS\sysat32.dll
C:\WINDOWS\syscc32.dll
C:\WINDOWS\sysdg32.dll
C:\WINDOWS\sysdo32.dll
C:\WINDOWS\sysep32.dll
C:\WINDOWS\sysfs32.dll
C:\WINDOWS\sysfx.dll
C:\WINDOWS\sysgs32.dll
C:\WINDOWS\sysgy32.dll
C:\WINDOWS\sysiz32.dll
C:\WINDOWS\sysjc32.dll
C:\WINDOWS\sysnd32.dll
C:\WINDOWS\sysnk.dll
C:\WINDOWS\sysqh.dll
C:\WINDOWS\sysqn32.dll
C:\WINDOWS\sysqx32.dll
C:\WINDOWS\syssy.dll
C:\WINDOWS\systa32.dll
C:\WINDOWS\syste.dll
C:\WINDOWS\sysua.dll
C:\WINDOWS\sysuf32.dll
C:\WINDOWS\syszg32.dll
C:\WINDOWS\TMUPDATE.DLL
C:\WINDOWS	wain.dll
C:\WINDOWS	wain_32.dll
C:\WINDOWS\UNZIP.DLL
C:\WINDOWS\vmmreg32.dll
C:\WINDOWS\vsapi32.dll
C:\WINDOWS\winav32.dll
C:\WINDOWS\winbq32.dll
C:\WINDOWS\winfh.dll
C:\WINDOWS\winlh32.dll
C:\WINDOWS\winmz32.dll
C:\WINDOWS\winnk32.dll
C:\WINDOWS\winnn.dll
C:\WINDOWS\winpq.dll
C:\WINDOWS\winsl.dll
C:\WINDOWS\winsw.dll
C:\WINDOWS\winum.dll
C:\WINDOWS\winvk32.dll
C:\WINDOWS\winyg.dll
C:\WINDOWS\WRServices.dll
C:\WINDOWS\xmpth.dll
C:\WINDOWS\xuwxi.dll
C:\WINDOWS\$hf_mig$\KB873333\spmsg.dll
C:\WINDOWS\$hf_mig$\KB873333\SP2GDR\ole32.dll
C:\WINDOWS\$hf_mig$\KB873333\SP2GDR\olecli32.dll
C:\WINDOWS\$hf_mig$\KB873333\SP2GDR\olecnv32.dll
C:\WINDOWS\$hf_mig$\KB873333\SP2GDRpcss.dll
C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\ole32.dll
C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\olecli32.dll
C:\WINDOWS\$hf_mig$\KB873333\SP2QFE\olecnv32.dll
C:\WINDOWS\$hf_mig$\KB873333\SP2QFEpcss.dll
C:\WINDOWS\$hf_mig$\KB873333\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll
C:\WINDOWS\$hf_mig$\KB873339\SP2GDR\hypertrm.dll
C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll
C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB885250\spmsg.dll
C:\WINDOWS\$hf_mig$\KB885250\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll
C:\WINDOWS\$hf_mig$\KB885835\SP2GDR\lsasrv.dll
C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll
C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll
C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll
C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll
C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB887742\spmsg.dll
C:\WINDOWS\$hf_mig$\KB887742\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB888113\spmsg.dll
C:\WINDOWS\$hf_mig$\KB888113\SP2GDR\hlink.dll
C:\WINDOWS\$hf_mig$\KB888113\SP2QFE\hlink.dll
C:\WINDOWS\$hf_mig$\KB888113\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll
C:\WINDOWS\$hf_mig$\KB888302\SP2GDR\srvsvc.dll
C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll
C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll
C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll
C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\spru040c.dll
C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB890047\spmsg.dll
C:\WINDOWS\$hf_mig$\KB890047\SP2GDR\shell32.dll
C:\WINDOWS\$hf_mig$\KB890047\SP2QFE\shell32.dll
C:\WINDOWS\$hf_mig$\KB890047\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB890175\spmsg.dll
C:\WINDOWS\$hf_mig$\KB890175\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\authz.dll
C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\user32.dll
C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\winsrv.dll
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB890923\spmsg.dll
C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\browseui.dll
C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\cdfview.dll
C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\iepeers.dll
C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\inseng.dll
C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\mshtml.dll
C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\msrating.dll
C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\shdocvw.dll
C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\shlwapi.dll
C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\urlmon.dll
C:\WINDOWS\$hf_mig$\KB890923\SP2QFE\wininet.dll
C:\WINDOWS\$hf_mig$\KB890923\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB890923\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll
C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB893066\spmsg.dll
C:\WINDOWS\$hf_mig$\KB893066\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB893066\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB893086\spmsg.dll
C:\WINDOWS\$hf_mig$\KB893086\SP2GDR\shell32.dll
C:\WINDOWS\$hf_mig$\KB893086\SP2QFE\shell32.dll
C:\WINDOWS\$hf_mig$\KB893086\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB893086\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
C:\WINDOWS\$hf_mig$\KB893756\SP2QFE	apisrv.dll
C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll
C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll
C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll
C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll
C:\WINDOWS\$hf_mig$\KB894391\SP2QFEpcss.dll
C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB896422\spmsg.dll
C:\WINDOWS\$hf_mig$\KB896422\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB896422\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll
C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB896727\spmsg.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\browseui.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\cdfview.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\iepeers.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\inseng.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\mshtml.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\mshtmled.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\msrating.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\pngfilt.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\shdocvw.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\shlwapi.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\urlmon.dll
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\wininet.dll
C:\WINDOWS\$hf_mig$\KB896727\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB896727\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll
C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll
C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB899588\spmsg.dll
C:\WINDOWS\$hf_mig$\KB899588\SP2QFE\umpnpmgr.dll
C:\WINDOWS\$hf_mig$\KB899588\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB899588\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll
C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll
C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
C:\WINDOWS\$MSI31Uninstall_KB893803$\msi.dll
C:\WINDOWS\$MSI31Uninstall_KB893803$\msihnd.dll
C:\WINDOWS\$MSI31Uninstall_KB893803$\msimsg.dll
C:\WINDOWS\$MSI31Uninstall_KB893803$\msisip.dll
C:\WINDOWS\$MSI31Uninstall_KB893803$\spuninst\updspapi.dll
C:\WINDOWS\$MSI31Uninstall_KB893803v2$\msi.dll
C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\updspapi.dll
C:\WINDOWS\$NtServicePackUninstall$\6to4svc.dll
C:\WINDOWS\$NtServicePackUninstall$\acgenral.dll
C:\WINDOWS\$NtServicePackUninstall$\aclayers.dll
C:\WINDOWS\$NtServicePackUninstall$\aclua.dll
C:\WINDOWS\$NtServicePackUninstall$\aclui.dll
C:\WINDOWS\$NtServicePackUninstall$\acspecfc.dll
C:\WINDOWS\$NtServicePackUninstall$\activeds.dll
C:\WINDOWS\$NtServicePackUninstall$\actxprxy.dll
C:\WINDOWS\$NtServicePackUninstall$\acverfyr.dll
C:\WINDOWS\$NtServicePackUninstall$\acxtrnal.dll
C:\WINDOWS\$NtServicePackUninstall$\admin.dll
C:\WINDOWS\$NtServicePackUninstall$\admparse.dll
C:\WINDOWS\$NtServicePackUninstall$\adsldp.dll
C:\WINDOWS\$NtServicePackUninstall$\adsldpc.dll
C:\WINDOWS\$NtServicePackUninstall$\adsmsext.dll
C:\WINDOWS\$NtServicePackUninstall$\adsnt.dll
C:\WINDOWS\$NtServicePackUninstall$\advapi32.dll
C:\WINDOWS\$NtServicePackUninstall$\advpack.dll
C:\WINDOWS\$NtServicePackUninstall$\agentanm.dll
C:\WINDOWS\$NtServicePackUninstall$\agentctl.dll
C:\WINDOWS\$NtServicePackUninstall$\agentdp2.dll
C:\WINDOWS\$NtServicePackUninstall$\agentdpv.dll
C:\WINDOWS\$NtServicePackUninstall$\agentmpx.dll
C:\WINDOWS\$NtServicePackUninstall$\agentpsh.dll
C:\WINDOWS\$NtServicePackUninstall$\agentsr.dll
C:\WINDOWS\$NtServicePackUninstall$\agtintl.dll
C:\WINDOWS\$NtServicePackUninstall$\alrsvc.dll
C:\WINDOWS\$NtServicePackUninstall$\amstream.dll
C:\WINDOWS\$NtServicePackUninstall$\apphelp.dll
C:\WINDOWS\$NtServicePackUninstall$\asfsipc.dll
C:\WINDOWS\$NtServicePackUninstall$\asycfilt.dll
C:\WINDOWS\$NtServicePackUninstall$\atl.dll
C:\WINDOWS\$NtServicePackUninstall$\atmfd.dll
C:\WINDOWS\$NtServicePackUninstall$\atmlib.dll
C:\WINDOWS\$NtServicePackUninstall$\audiosrv.dll
C:\WINDOWS\$NtServicePackUninstall$\author.dll
C:\WINDOWS\$NtServicePackUninstall$\authz.dll
C:\WINDOWS\$NtServicePackUninstall$\avifil32.dll
C:\WINDOWS\$NtServicePackUninstall$\basesrv.dll
C:\WINDOWS\$NtServicePackUninstall$\batmeter.dll
C:\WINDOWS\$NtServicePackUninstall$\batt.dll
C:\WINDOWS\$NtServicePackUninstall$\bidispl.dll
C:\WINDOWS\$NtServicePackUninstall$\bitsprx2.dll
C:\WINDOWS\$NtServicePackUninstall$\bitsprx3.dll
C:\WINDOWS\$NtServicePackUninstall$\browselc.dll
C:\WINDOWS\$NtServicePackUninstall$\browser.dll
C:\WINDOWS\$NtServicePackUninstall$\browseui.dll
C:\WINDOWS\$NtServicePackUninstall$\browsewm.dll
C:\WINDOWS\$NtServicePackUninstall$\bthci.dll
C:\WINDOWS\$NtServicePackUninstall$\bthserv.dll
C:\WINDOWS\$NtServicePackUninstall$\cabinet.dll
C:\WINDOWS\$NtServicePackUninstall$\cabview.dll
C:\WINDOWS\$NtServicePackUninstall$\callcont.dll
C:\WINDOWS\$NtServicePackUninstall$\camocx.dll
C:\WINDOWS\$NtServicePackUninstall$\catsrv.dll
C:\WINDOWS\$NtServicePackUninstall$\catsrvps.dll
C:\WINDOWS\$NtServicePackUninstall$\catsrvut.dll
C:\WINDOWS\$NtServicePackUninstall$\cdfview.dll
C:\WINDOWS\$NtServicePackUninstall$\cdosys.dll
C:\WINDOWS\$NtServicePackUninstall$\certcli.dll
C:\WINDOWS\$NtServicePackUninstall$\certmgr.dll
C:\WINDOWS\$NtServicePackUninstall$\cfgbkend.dll
C:\WINDOWS\$NtServicePackUninstall$\cfgmgr32.dll
C:\WINDOWS\$NtServicePackUninstall$\cimwin32.dll
C:\WINDOWS\$NtServicePackUninstall$\cintime.dll
C:\WINDOWS\$NtServicePackUninstall$\ciodm.dll
C:\WINDOWS\$NtServicePackUninstall$\clbcatex.dll
C:\WINDOWS\$NtServicePackUninstall$\clbcatq.dll
C:\WINDOWS\$NtServicePackUninstall$\cliconfg.dll
C:\WINDOWS\$NtServicePackUninstall$\clusapi.dll
C:\WINDOWS\$NtServicePackUninstall$\cmcfg32.dll
C:\WINDOWS\$NtServicePackUninstall$\cmdial32.dll
C:\WINDOWS\$NtServicePackUninstall$\cmprops.dll
C:\WINDOWS\$NtServicePackUninstall$\cmutil.dll
C:\WINDOWS\$NtServicePackUninstall$\cnbjmon.dll
C:\WINDOWS\$NtServicePackUninstall$\colbact.dll
C:\WINDOWS\$NtServicePackUninstall$\comadmin.dll
C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll
C:\WINDOWS\$NtServicePackUninstall$\comdlg32.dll
C:\WINDOWS\$NtServicePackUninstall$\compatui.dll
C:\WINDOWS\$NtServicePackUninstall$\compstui.dll
C:\WINDOWS\$NtServicePackUninstall$\comres.dll
C:\WINDOWS\$NtServicePackUninstall$\comsvcs.dll
C:\WINDOWS\$NtServicePackUninstall$\comuid.dll
C:\WINDOWS\$NtServicePackUninstall$\confmrsl.dll
C:\WINDOWS\$NtServicePackUninstall$\corpol.dll
C:\WINDOWS\$NtServicePackUninstall$\credui.dll
C:\WINDOWS\$NtServicePackUninstall$\crypt32.dll
C:\WINDOWS\$NtServicePackUninstall$\crypt32.dll.000
C:\WINDOWS\$NtServicePackUninstall$\cryptdlg.dll
C:\WINDOWS\$NtServicePackUninstall$\cryptdll.dll
C:\WINDOWS\$NtServicePackUninstall$\cryptext.dll
C:\WINDOWS\$NtServicePackUninstall$\cryptnet.dll
C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll.000
C:\WINDOWS\$NtServicePackUninstall$\cryptui.dll
C:\WINDOWS\$NtServicePackUninstall$\cscdll.dll
C:\WINDOWS\$NtServicePackUninstall$\cscui.dll
C:\WINDOWS\$NtServicePackUninstall$\csrsrv.dll
C:\WINDOWS\$NtServicePackUninstall$\custsat.dll
C:\WINDOWS\$NtServicePackUninstall$\d3d8.dll
C:\WINDOWS\$NtServicePackUninstall$\d3d8thk.dll
C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll
C:\WINDOWS\$NtServicePackUninstall$\d3dim700.dll
C:\WINDOWS\$NtServicePackUninstall$\danim.dll
C:\WINDOWS\$NtServicePackUninstall$\dao360.dll
C:\WINDOWS\$NtServicePackUninstall$\dataclen.dll
C:\WINDOWS\$NtServicePackUninstall$\davclnt.dll
C:\WINDOWS\$NtServicePackUninstall$\dbghelp.dll
C:\WINDOWS\$NtServicePackUninstall$\dbmsrpcn.dll
C:\WINDOWS\$NtServicePackUninstall$\dbnetlib.dll
C:\WINDOWS\$NtServicePackUninstall$\dbnmpntw.dll
C:\WINDOWS\$NtServicePackUninstall$\dcap32.dll
C:\WINDOWS\$NtServicePackUninstall$\dciman32.dll
C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll
C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll.000
C:\WINDOWS\$NtServicePackUninstall$\ddrawex.dll
C:\WINDOWS\$NtServicePackUninstall$\devenum.dll
C:\WINDOWS\$NtServicePackUninstall$\devmgr.dll
C:\WINDOWS\$NtServicePackUninstall$\dfrgsnap.dll
C:\WINDOWS\$NtServicePackUninstall$\dfrgui.dll
C:\WINDOWS\$NtServicePackUninstall$\dfsshlex.dll
C:\WINDOWS\$NtServicePackUninstall$\dgnet.dll
C:\WINDOWS\$NtServicePackUninstall$\dhcpcsvc.dll
C:\WINDOWS\$NtServicePackUninstall$\digest.dll
C:\WINDOWS\$NtServicePackUninstall$\dinput.dll
C:\WINDOWS\$NtServicePackUninstall$\dinput8.dll
C:\WINDOWS\$NtServicePackUninstall$\directdb.dll
C:\WINDOWS\$NtServicePackUninstall$\dmband.dll
C:\WINDOWS\$NtServicePackUninstall$\dmcompos.dll
C:\WINDOWS\$NtServicePackUninstall$\dmdskmgr.dll
C:\WINDOWS\$NtServicePackUninstall$\dmime.dll
C:\WINDOWS\$NtServicePackUninstall$\dmloader.dll
C:\WINDOWS\$NtServicePackUninstall$\dmscript.dll
C:\WINDOWS\$NtServicePackUninstall$\dmserver.dll
C:\WINDOWS\$NtServicePackUninstall$\dmstyle.dll
C:\WINDOWS\$NtServicePackUninstall$\dmsynth.dll
C:\WINDOWS\$NtServicePackUninstall$\dmusic.dll
C:\WINDOWS\$NtServicePackUninstall$\dmutil.dll
C:\WINDOWS\$NtServicePackUninstall$\dnsapi.dll
C:\WINDOWS\$NtServicePackUninstall$\dnsrslvr.dll
C:\WINDOWS\$NtServicePackUninstall$\docprop2.dll
C:\WINDOWS\$NtServicePackUninstall$\dpcdll.dll
C:\WINDOWS\$NtServicePackUninstall$\dplayx.dll
C:\WINDOWS\$NtServicePackUninstall$\dplayx.dll.000
C:\WINDOWS\$NtServicePackUninstall$\dpmodemx.dll
C:\WINDOWS\$NtServicePackUninstall$\dpnaddr.dll
C:\WINDOWS\$NtServicePackUninstall$\dpnet.dll
C:\WINDOWS\$NtServicePackUninstall$\dpnhpast.dll
C:\WINDOWS\$NtServicePackUninstall$\dpnhupnp.dll
C:\WINDOWS\$NtServicePackUninstall$\dpnlobby.dll
C:\WINDOWS\$NtServicePackUninstall$\dpvacm.dll
C:\WINDOWS\$NtServicePackUninstall$\dpvoice.dll
C:\WINDOWS\$NtServicePackUninstall$\dpvvox.dll
C:\WINDOWS\$NtServicePackUninstall$\dpwsockx.dll
C:\WINDOWS\$NtServicePackUninstall$\drprov.dll
C:\WINDOWS\$NtServicePackUninstall$\ds32gt.dll
C:\WINDOWS\$NtServicePackUninstall$\dsdmo.dll
C:\WINDOWS\$NtServicePackUninstall$\dsdmoprp.dll
C:\WINDOWS\$NtServicePackUninstall$\dskquota.dll
C:\WINDOWS\$NtServicePackUninstall$\dsound.dll
C:\WINDOWS\$NtServicePackUninstall$\dsound.dll.000
C:\WINDOWS\$NtServicePackUninstall$\dsound3d.dll
C:\WINDOWS\$NtServicePackUninstall$\dsprop.dll
C:\WINDOWS\$NtServicePackUninstall$\dsprpres.dll
C:\WINDOWS\$NtServicePackUninstall$\dsquery.dll
C:\WINDOWS\$NtServicePackUninstall$\dssec.dll
C:\WINDOWS\$NtServicePackUninstall$\dssenh.dll
C:\WINDOWS\$NtServicePackUninstall$\dsuiext.dll
C:\WINDOWS\$NtServicePackUninstall$\dswave.dll
C:\WINDOWS\$NtServicePackUninstall$\duser.dll
C:\WINDOWS\$NtServicePackUninstall$\dx7vb.dll
C:\WINDOWS\$NtServicePackUninstall$\dx8vb.dll
C:\WINDOWS\$NtServicePackUninstall$\dxdiagn.dll
C:\WINDOWS\$NtServicePackUninstall$\dxmasf.dll
C:\WINDOWS\$NtServicePackUninstall$\dxmrtp.dll
C:\WINDOWS\$NtServicePackUninstall$\dxtmsft.dll
C:\WINDOWS\$NtServicePackUninstall$\dxtrans.dll
C:\WINDOWS\$NtServicePackUninstall$\els.dll
C:\WINDOWS\$NtServicePackUninstall$\encapi.dll
C:\WINDOWS\$NtServicePackUninstall$\encdec.dll
C:\WINDOWS\$NtServicePackUninstall$\ersvc.dll
C:\WINDOWS\$NtServicePackUninstall$\es.dll
C:\WINDOWS\$NtServicePackUninstall$\esent.dll
C:\WINDOWS\$NtServicePackUninstall$\esscli.dll
C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
C:\WINDOWS\$NtServicePackUninstall$\evntagnt.dll
C:\WINDOWS\$NtServicePackUninstall$\evntrprv.dll
C:\WINDOWS\$NtServicePackUninstall$\expsrv.dll
C:\WINDOWS\$NtServicePackUninstall$\fastprox.dll
C:\WINDOWS\$NtServicePackUninstall$\faultrep.dll
C:\WINDOWS\$NtServicePackUninstall$\feclient.dll
C:\WINDOWS\$NtServicePackUninstall$\filemgmt.dll
C:\WINDOWS\$NtServicePackUninstall$\fldrclnr.dll
C:\WINDOWS\$NtServicePackUninstall$\fontext.dll
C:\WINDOWS\$NtServicePackUninstall$\fp40ext.dll
C:\WINDOWS\$NtServicePackUninstall$\fp4amsft.dll
C:\WINDOWS\$NtServicePackUninstall$\fp4anscp.dll
C:\WINDOWS\$NtServicePackUninstall$\fp4apws.dll
C:\WINDOWS\$NtServicePackUninstall$\fp4areg.dll
C:\WINDOWS\$NtServicePackUninstall$\fp4atxt.dll
C:\WINDOWS\$NtServicePackUninstall$\fp4autl.dll
C:\WINDOWS\$NtServicePackUninstall$\fp4avnb.dll
C:\WINDOWS\$NtServicePackUninstall$\fp4avss.dll
C:\WINDOWS\$NtServicePackUninstall$\fp4awebs.dll
C:\WINDOWS\$NtServicePackUninstall$\fp4awel.dll
C:\WINDOWS\$NtServicePackUninstall$\fpadmdll.dll
C:\WINDOWS\$NtServicePackUninstall$\fpencode.dll
C:\WINDOWS\$NtServicePackUninstall$\fpexedll.dll
C:\WINDOWS\$NtServicePackUninstall$\fpmmc.dll
C:\WINDOWS\$NtServicePackUninstall$\fpmmcsat.dll
C:\WINDOWS\$NtServicePackUninstall$\framebuf.dll
C:\WINDOWS\$NtServicePackUninstall$\framedyn.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsapi.dll
C:\WINDOWS\$NtServicePackUninstall$\fxscom.dll
C:\WINDOWS\$NtServicePackUninstall$\fxscomex.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsdrv.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsevent.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsext32.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsmon.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsocm.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsperf.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsres.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsst.dll

zinko · Answer

la suite..

C:\WINDOWS\$NtServicePackUninstall$\fxst30.dll
C:\WINDOWS\$NtServicePackUninstall$\fxstiff.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsui.dll
C:\WINDOWS\$NtServicePackUninstall$\fxswzrd.dll
C:\WINDOWS\$NtServicePackUninstall$\fxsxp32.dll
C:\WINDOWS\$NtServicePackUninstall$\gdi32.dll
C:\WINDOWS\$NtServicePackUninstall$\glu32.dll
C:\WINDOWS\$NtServicePackUninstall$\gpkrsrc.dll
C:\WINDOWS\$NtServicePackUninstall$\guitrn.dll
C:\WINDOWS\$NtServicePackUninstall$\guitrn_a.dll
C:\WINDOWS\$NtServicePackUninstall$\h323cc.dll
C:\WINDOWS\$NtServicePackUninstall$\h323msp.dll
C:\WINDOWS\$NtServicePackUninstall$\hal.dll
C:\WINDOWS\$NtServicePackUninstall$\hccoin.dll
C:\WINDOWS\$NtServicePackUninstall$\hhsetup.dll
C:\WINDOWS\$NtServicePackUninstall$\hid.dll
C:\WINDOWS\$NtServicePackUninstall$\hmmapi.dll
C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll
C:\WINDOWS\$NtServicePackUninstall$\hnetwiz.dll
C:\WINDOWS\$NtServicePackUninstall$\hostmib.dll
C:\WINDOWS\$NtServicePackUninstall$\hotplug.dll
C:\WINDOWS\$NtServicePackUninstall$\htui.dll
C:\WINDOWS\$NtServicePackUninstall$\hypertrm.dll
C:\WINDOWS\$NtServicePackUninstall$\iasrad.dll
C:\WINDOWS\$NtServicePackUninstall$\icaapi.dll
C:\WINDOWS\$NtServicePackUninstall$\iccvid.dll
C:\WINDOWS\$NtServicePackUninstall$\icm32.dll
C:\WINDOWS\$NtServicePackUninstall$\icmp.dll
C:\WINDOWS\$NtServicePackUninstall$\iconlib.dll
C:\WINDOWS\$NtServicePackUninstall$\icwconn.dll
C:\WINDOWS\$NtServicePackUninstall$\icwdial.dll
C:\WINDOWS\$NtServicePackUninstall$\icwdl.dll
C:\WINDOWS\$NtServicePackUninstall$\icwhelp.dll
C:\WINDOWS\$NtServicePackUninstall$\icwphbk.dll
C:\WINDOWS\$NtServicePackUninstall$\icwutil.dll
C:\WINDOWS\$NtServicePackUninstall$\idq.dll
C:\WINDOWS\$NtServicePackUninstall$\ieakeng.dll
C:\WINDOWS\$NtServicePackUninstall$\ieaksie.dll
C:\WINDOWS\$NtServicePackUninstall$\iedkcs32.dll
C:\WINDOWS\$NtServicePackUninstall$\iepeers.dll
C:\WINDOWS\$NtServicePackUninstall$\iernonce.dll
C:\WINDOWS\$NtServicePackUninstall$\iesetup.dll
C:\WINDOWS\$NtServicePackUninstall$\ifmon.dll
C:\WINDOWS\$NtServicePackUninstall$\igmpagnt.dll
C:\WINDOWS\$NtServicePackUninstall$\iis.dll
C:\WINDOWS\$NtServicePackUninstall$\ils.dll
C:\WINDOWS\$NtServicePackUninstall$\imagehlp.dll
C:\WINDOWS\$NtServicePackUninstall$\imekrcic.dll
C:\WINDOWS\$NtServicePackUninstall$\imekrmbx.dll
C:\WINDOWS\$NtServicePackUninstall$\imeshare.dll
C:\WINDOWS\$NtServicePackUninstall$\imgutil.dll
C:\WINDOWS\$NtServicePackUninstall$\imjp81k.dll
C:\WINDOWS\$NtServicePackUninstall$\imjpcic.dll
C:\WINDOWS\$NtServicePackUninstall$\imjpcus.dll
C:\WINDOWS\$NtServicePackUninstall$\imjpdct.dll
C:\WINDOWS\$NtServicePackUninstall$\imjputyc.dll
C:\WINDOWS\$NtServicePackUninstall$\imm32.dll
C:\WINDOWS\$NtServicePackUninstall$\inetcfg.dll
C:\WINDOWS\$NtServicePackUninstall$\inetcomm.dll
C:\WINDOWS\$NtServicePackUninstall$\inetmib1.dll
C:\WINDOWS\$NtServicePackUninstall$\inetpp.dll
C:\WINDOWS\$NtServicePackUninstall$\inetppui.dll
C:\WINDOWS\$NtServicePackUninstall$\inetres.dll
C:\WINDOWS\$NtServicePackUninstall$\initpki.dll
C:\WINDOWS\$NtServicePackUninstall$\input.dll
C:\WINDOWS\$NtServicePackUninstall$\inseng.dll
C:\WINDOWS\$NtServicePackUninstall$\iphlpapi.dll
C:\WINDOWS\$NtServicePackUninstall$\ipnathlp.dll
C:\WINDOWS\$NtServicePackUninstall$\ippromon.dll
C:\WINDOWS\$NtServicePackUninstall$\iprip.dll
C:\WINDOWS\$NtServicePackUninstall$\ipsecsnp.dll
C:\WINDOWS\$NtServicePackUninstall$\ipsecsvc.dll
C:\WINDOWS\$NtServicePackUninstall$\ipsmsnap.dll
C:\WINDOWS\$NtServicePackUninstall$\ipv6mon.dll
C:\WINDOWS\$NtServicePackUninstall$\ir41_qc.dll
C:\WINDOWS\$NtServicePackUninstall$\ir41_qcx.dll
C:\WINDOWS\$NtServicePackUninstall$\ir50_32.dll
C:\WINDOWS\$NtServicePackUninstall$\ir50_qc.dll
C:\WINDOWS\$NtServicePackUninstall$\ir50_qcx.dll
C:\WINDOWS\$NtServicePackUninstall$\isign32.dll
C:\WINDOWS\$NtServicePackUninstall$\isrdbg32.dll
C:\WINDOWS\$NtServicePackUninstall$\itircl.dll
C:\WINDOWS\$NtServicePackUninstall$\itss.dll
C:\WINDOWS\$NtServicePackUninstall$\iuctl.dll
C:\WINDOWS\$NtServicePackUninstall$\ixsso.dll
C:\WINDOWS\$NtServicePackUninstall$\iyuv_32.dll
C:\WINDOWS\$NtServicePackUninstall$\jscript.dll
C:\WINDOWS\$NtServicePackUninstall$\jsproxy.dll
C:\WINDOWS\$NtServicePackUninstall$\kd1394.dll
C:\WINDOWS\$NtServicePackUninstall$\kerberos.dll
C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll
C:\WINDOWS\$NtServicePackUninstall$\keymgr.dll
C:\WINDOWS\$NtServicePackUninstall$\krnlprov.dll
C:\WINDOWS\$NtServicePackUninstall$\ksuser.dll
C:\WINDOWS\$NtServicePackUninstall$\licdll.dll
C:\WINDOWS\$NtServicePackUninstall$\licmgr10.dll
C:\WINDOWS\$NtServicePackUninstall$\licwmi.dll
C:\WINDOWS\$NtServicePackUninstall$\linkinfo.dll
C:\WINDOWS\$NtServicePackUninstall$\lmhsvc.dll
C:\WINDOWS\$NtServicePackUninstall$\lmmib2.dll
C:\WINDOWS\$NtServicePackUninstall$\lmrt.dll
C:\WINDOWS\$NtServicePackUninstall$\loadperf.dll
C:\WINDOWS\$NtServicePackUninstall$\localsec.dll
C:\WINDOWS\$NtServicePackUninstall$\localspl.dll
C:\WINDOWS\$NtServicePackUninstall$\localui.dll
C:\WINDOWS\$NtServicePackUninstall$\log.dll
C:\WINDOWS\$NtServicePackUninstall$\lpdsvc.dll
C:\WINDOWS\$NtServicePackUninstall$\lpk.dll
C:\WINDOWS\$NtServicePackUninstall$\lprhelp.dll
C:\WINDOWS\$NtServicePackUninstall$\lprmon.dll
C:\WINDOWS\$NtServicePackUninstall$\lsasrv.dll
C:\WINDOWS\$NtServicePackUninstall$\mcastmib.dll
C:\WINDOWS\$NtServicePackUninstall$\mciavi32.dll
C:\WINDOWS\$NtServicePackUninstall$\mciqtz32.dll
C:\WINDOWS\$NtServicePackUninstall$\mciseq.dll
C:\WINDOWS\$NtServicePackUninstall$\mciwave.dll
C:\WINDOWS\$NtServicePackUninstall$\mdminst.dll
C:\WINDOWS\$NtServicePackUninstall$\mf3216.dll
C:\WINDOWS\$NtServicePackUninstall$\mfc42.dll
C:\WINDOWS\$NtServicePackUninstall$\mfc42u.dll
C:\WINDOWS\$NtServicePackUninstall$\mfcsubs.dll
C:\WINDOWS\$NtServicePackUninstall$\mgmtapi.dll
C:\WINDOWS\$NtServicePackUninstall$\midimap.dll
C:\WINDOWS\$NtServicePackUninstall$\migism.dll
C:\WINDOWS\$NtServicePackUninstall$\migism_a.dll
C:\WINDOWS\$NtServicePackUninstall$\miglibnt.dll
C:\WINDOWS\$NtServicePackUninstall$\mlang.dll
C:\WINDOWS\$NtServicePackUninstall$\mmcbase.dll
C:\WINDOWS\$NtServicePackUninstall$\mmcndmgr.dll
C:\WINDOWS\system32\hoj0qek.dll
C:\WINDOWS\system32\pcg.dll
C:\Program Files\AOL 9.0\aolphx.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\AOL 9.0\RBM.exe
C:\Program Files\Picasa2\setup.exe
C:\WINDOWS\adddb.exe
C:\WINDOWS\addef32.exe
C:\WINDOWS\addgy32.exe
C:\WINDOWS\addhr.exe
C:\WINDOWS\addlz.exe
C:\WINDOWS\addoc.exe
C:\WINDOWS\addsj.exe
C:\WINDOWS\addwx.exe
C:\WINDOWS\addzz32.exe
C:\WINDOWS\agrsmdel.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\aolback.exe.lnk
C:\WINDOWS\apiaf32.exe
C:\WINDOWS\apial.exe
C:\WINDOWS\apiea32.exe
C:\WINDOWS\apigh.exe
C:\WINDOWS\apilu.exe
C:\WINDOWS\apimb32.exe
C:\WINDOWS\apimn.exe
C:\WINDOWS\apipn32.exe
C:\WINDOWS\apipz.exe
C:\WINDOWS\apiri.exe
C:\WINDOWS\apirq32.exe
C:\WINDOWS\apiru.exe
C:\WINDOWS\apiuf32.exe
C:\WINDOWS\apiut.exe
C:\WINDOWS\apivq.exe
C:\WINDOWS\apiym32.exe
C:\WINDOWS\apizm.exe
C:\WINDOWS\appak32.exe
C:\WINDOWS\appdk.exe
C:\WINDOWS\appem32.exe
C:\WINDOWS\appeu.exe
C:\WINDOWS\appij.exe
C:\WINDOWS\appis32.exe
C:\WINDOWS\appkj32.exe
C:\WINDOWS\appmu32.exe
C:\WINDOWS\appoy32.exe
C:\WINDOWS\appqs32.exe
C:\WINDOWS\apprq32.exe
C:\WINDOWS\appvl32.exe
C:\WINDOWS\appxr32.exe
C:\WINDOWS\appyh.exe
C:\WINDOWS\atlet32.exe
C:\WINDOWS\atlkm32.exe
C:\WINDOWS\atlky.exe
C:\WINDOWS\atlnd32.exe
C:\WINDOWS\atloe32.exe
C:\WINDOWS\atloz.exe
C:\WINDOWS\atlpm.exe
C:\WINDOWS\atlqd.exe
C:\WINDOWS\atluk32.exe
C:\WINDOWS\atlvd.exe
C:\WINDOWS\atlxk.exe
C:\WINDOWS\atlyq.exe
C:\WINDOWS\Coca Cola.exe
C:\WINDOWS\cram.exe
C:\WINDOWS\crdo.exe
C:\WINDOWS\crel32.exe
C:\WINDOWS\crfa32.exe
C:\WINDOWS\crfv32.exe
C:\WINDOWS\crih.exe
C:\WINDOWS\crim32.exe
C:\WINDOWS\crju32.exe
C:\WINDOWS\crkc32.exe
C:\WINDOWS\crnr32.exe
C:\WINDOWS\crpo.exe
C:\WINDOWS\cruq32.exe
C:\WINDOWS\crxd.exe
C:\WINDOWS\crxg.exe
C:\WINDOWS\cryr.exe
C:\WINDOWS\d3co32.exe
C:\WINDOWS\d3li32.exe
C:\WINDOWS\d3mj32.exe
C:\WINDOWS\d3nq.exe
C:\WINDOWS\d3sk.exe
C:\WINDOWS\flashax.exe
C:\WINDOWS\hh.exe
C:\WINDOWS\iebn.exe
C:\WINDOWS\iebu.exe
C:\WINDOWS\iecs.exe
C:\WINDOWS\ieis.exe
C:\WINDOWS\iels.exe
C:\WINDOWS\iely32.exe
C:\WINDOWS\iemd32.exe
C:\WINDOWS\ietn32.exe
C:\WINDOWS\ietr32.exe
C:\WINDOWS\ieuninst.exe
C:\WINDOWS\iewd32.exe
C:\WINDOWS\Install.exe
C:\WINDOWS\ipgm32.exe
C:\WINDOWS\iphq.exe
C:\WINDOWS\ipjo.exe
C:\WINDOWS\ipou32.exe
C:\WINDOWS\ipse.exe
C:\WINDOWS\ipsn32.exe
C:\WINDOWS\ipui.exe
C:\WINDOWS\ipwl32.exe
C:\WINDOWS\ipzc.exe
C:\WINDOWS\javabr32.exe
C:\WINDOWS\javagb32.exe
C:\WINDOWS\javage.exe
C:\WINDOWS\javahf.exe
C:\WINDOWS\javany.exe
C:\WINDOWS\javaqz32.exe
C:\WINDOWS\javary.exe
C:\WINDOWS\javasb.exe
C:\WINDOWS\javaua.exe
C:\WINDOWS\javawz32.exe
C:\WINDOWS\javaxr.exe
C:\WINDOWS\mfcaa.exe
C:\WINDOWS\mfcbt.exe
C:\WINDOWS\mfccc32.exe
C:\WINDOWS\mfccr32.exe
C:\WINDOWS\mfcix32.exe
C:\WINDOWS\mfckg.exe
C:\WINDOWS\mfcll.exe
C:\WINDOWS\mfclq.exe
C:\WINDOWS\mfcps32.exe
C:\WINDOWS\mfcqz32.exe
C:\WINDOWS\mfcrb32.exe
C:\WINDOWS\mfcru.exe
C:\WINDOWS\mfcsf.exe
C:\WINDOWS\mfcts.exe
C:\WINDOWS\mfcxd32.exe
C:\WINDOWS\mshc.exe
C:\WINDOWS\msky32.exe
C:\WINDOWS\msld32.exe
C:\WINDOWS\msmq.exe
C:\WINDOWS\msnw.exe
C:\WINDOWS\msol32.exe
C:\WINDOWS\mspf32.exe
C:\WINDOWS\msqi.exe
C:\WINDOWS\msxb.exe
C:\WINDOWS\msyy.exe
C:\WINDOWS
etbd.exe
C:\WINDOWS
etbn.exe
C:\WINDOWS
etgn.exe
C:\WINDOWS
etkw32.exe
C:\WINDOWS
etls32.exe
C:\WINDOWS
etpe.exe
C:\WINDOWS
etsv32.exe
C:\WINDOWS
etwg32.exe
C:\WINDOWS
otepad.exe
C:\WINDOWS
tan32.exe
C:\WINDOWS
tcx.exe
C:\WINDOWS
tel32.exe
C:\WINDOWS
tgk32.exe
C:\WINDOWS
tis.exe
C:\WINDOWS
tod32.exe
C:\WINDOWS
tpp32.exe
C:\WINDOWS
tpz32.exe
C:\WINDOWS
tsv32.exe
C:\WINDOWS
tug32.exe
C:\WINDOWS
txv.exe
C:\WINDOWS\NuNinst.exe
C:\WINDOWS\oeuninst.exe
C:\WINDOWS\PATCH.EXE
C:\WINDOWS\Q330994.exe
C:\WINDOWSegedit.exe
C:\WINDOWSuntsckl.exe
C:\WINDOWS\sdkdx.exe
C:\WINDOWS\sdket32.exe
C:\WINDOWS\sdkgm.exe
C:\WINDOWS\sdkmw32.exe
C:\WINDOWS\sdkoo.exe
C:\WINDOWS\sdkow.exe
C:\WINDOWS\sdkpg32.exe
C:\WINDOWS\sdkqx.exe
C:\WINDOWS\sdkvg.exe
C:\WINDOWS\sdkvv.exe
C:\WINDOWS\sdkwj32.exe
C:\WINDOWS\setdebug.exe
C:\WINDOWS\slrundll.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\sysba32.exe
C:\WINDOWS\sysbe.exe
C:\WINDOWS\sysbn32.exe
C:\WINDOWS\syseb32.exe
C:\WINDOWS\syseh.exe
C:\WINDOWS\syseo32.exe
C:\WINDOWS\sysht.exe
C:\WINDOWS\syshz.exe
C:\WINDOWS\sysic.exe
C:\WINDOWS\syskc32.exe
C:\WINDOWS\sysnw.exe
C:\WINDOWS\sysoi.exe
C:\WINDOWS\sysow32.exe
C:\WINDOWS\sysoy.exe
C:\WINDOWS\syspv.exe
C:\WINDOWS\sysqo32.exe
C:\WINDOWS\sysyl.exe
C:\WINDOWS\sysym.exe
C:\WINDOWS\syszu.exe
C:\WINDOWS\TASKMAN.EXE
C:\WINDOWS	sc.exe
C:\WINDOWS	wunk_16.exe
C:\WINDOWS	wunk_32.exe
C:\WINDOWS\unin040c.exe
C:\WINDOWS\UNNMP.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\wincy.exe
C:\WINDOWS\wineo.exe
C:\WINDOWS\winfs32.exe
C:\WINDOWS\winhelp.exe
C:\WINDOWS\winhlp32.exe
C:\WINDOWS\winhx.exe
C:\WINDOWS\winmo32.exe
C:\WINDOWS\winnl32.exe
C:\WINDOWS\wintj32.exe
C:\WINDOWS\winuw32.exe
C:\WINDOWS\winva32.exe
C:\WINDOWS\winvb32.exe
C:\WINDOWS\winvn.exe
C:\WINDOWS\winxw.exe
C:\WINDOWS\winyi32.exe
C:\WINDOWS\winyk32.exe
C:\WINDOWS\$hf_mig$\KB873333\spuninst.exe
C:\WINDOWS\$hf_mig$\KB873333\update\update.exe
C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe
C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
C:\WINDOWS\$hf_mig$\KB885250\spuninst.exe
C:\WINDOWS\$hf_mig$\KB885250\update\update.exe
C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe
C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe
C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe
C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe
C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe
C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
C:\WINDOWS\$hf_mig$\KB887742\spuninst.exe
C:\WINDOWS\$hf_mig$\KB887742\update\update.exe
C:\WINDOWS\$hf_mig$\KB888113\spuninst.exe
C:\WINDOWS\$hf_mig$\KB888113\update\update.exe
C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe
C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe
C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
C:\WINDOWS\$hf_mig$\KB890047\spuninst.exe
C:\WINDOWS\$hf_mig$\KB890047\update\update.exe
C:\WINDOWS\$hf_mig$\KB890175\spuninst.exe
C:\WINDOWS\$hf_mig$\KB890175\update\update.exe
C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
C:\WINDOWS\$hf_mig$\KB890859\SP2GDR
tkrnlmp.exe
C:\WINDOWS\$hf_mig$\KB890859\SP2GDR
tkrnlpa.exe
C:\WINDOWS\$hf_mig$\KB890859\SP2GDR
tkrpamp.exe
C:\WINDOWS\$hf_mig$\KB890859\SP2GDR
toskrnl.exe
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE
tkrnlmp.exe
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE
tkrnlpa.exe
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE
tkrpamp.exe
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE
toskrnl.exe
C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
C:\WINDOWS\$hf_mig$\KB890923\spuninst.exe
C:\WINDOWS\$hf_mig$\KB890923\update\update.exe
C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe
C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
C:\WINDOWS\$hf_mig$\KB893066\spuninst.exe
C:\WINDOWS\$hf_mig$\KB893066\update\update.exe
C:\WINDOWS\$hf_mig$\KB893086\spuninst.exe
C:\WINDOWS\$hf_mig$\KB893086\update\update.exe
C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe
C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
C:\WINDOWS\$hf_mig$\KB896422\spuninst.exe
C:\WINDOWS\$hf_mig$\KB896422\update\update.exe
C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe
C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe
C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
C:\WINDOWS\$hf_mig$\KB896428\SP2QFE	elnet.exe
C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
C:\WINDOWS\$hf_mig$\KB896727\spuninst.exe
C:\WINDOWS\$hf_mig$\KB896727\SP2QFE\iedw.exe
C:\WINDOWS\$hf_mig$\KB896727\update\arpidfix.exe
C:\WINDOWS\$hf_mig$\KB896727\update\update.exe
C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe
C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe
C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
C:\WINDOWS\$hf_mig$\KB899588\spuninst.exe
C:\WINDOWS\$hf_mig$\KB899588\update\arpidfix.exe
C:\WINDOWS\$hf_mig$\KB899588\update\update.exe
C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe
C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe
C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
C:\WINDOWS\$MSI31Uninstall_KB893803$\msiexec.exe
C:\WINDOWS\$MSI31Uninstall_KB893803$\spuninst\spuninst.exe
C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe
C:\WINDOWS\$NtServicePackUninstall$\accwiz.exe
C:\WINDOWS\$NtServicePackUninstall$\actmovie.exe
C:\WINDOWS\$NtServicePackUninstall$\admin.exe
C:\WINDOWS\$NtServicePackUninstall$\agentsvr.exe
C:\WINDOWS\$NtServicePackUninstall$\ahui.exe
C:\WINDOWS\$NtServicePackUninstall$\alg.exe
C:\WINDOWS\$NtServicePackUninstall$\at.exe
C:\WINDOWS\$NtServicePackUninstall$\atmadm.exe
C:\WINDOWS\$NtServicePackUninstall$\author.exe
C:\WINDOWS\$NtServicePackUninstall$\autochk.exe
C:\WINDOWS\$NtServicePackUninstall$\autoconv.exe
C:\WINDOWS\$NtServicePackUninstall$\autofmt.exe
C:\WINDOWS\$NtServicePackUninstall$\autolfn.exe
C:\WINDOWS\$NtServicePackUninstall$\cfgwiz.exe
C:\WINDOWS\$NtServicePackUninstall$\cintsetp.exe
C:\WINDOWS\$NtServicePackUninstall$\cisvc.exe
C:\WINDOWS\$NtServicePackUninstall$\cleanmgr.exe
C:\WINDOWS\$NtServicePackUninstall$\cliconfg.exe
C:\WINDOWS\$NtServicePackUninstall$\clipbrd.exe
C:\WINDOWS\$NtServicePackUninstall$\clipsrv.exe
C:\WINDOWS\$NtServicePackUninstall$\cmd.exe
C:\WINDOWS\$NtServicePackUninstall$\cmdl32.exe
C:\WINDOWS\$NtServicePackUninstall$\cmmon32.exe
C:\WINDOWS\$NtServicePackUninstall$\cmstp.exe
C:\WINDOWS\$NtServicePackUninstall$\comrepl.exe
C:\WINDOWS\$NtServicePackUninstall$\conf.exe
C:\WINDOWS\$NtServicePackUninstall$\conime.exe
C:\WINDOWS\$NtServicePackUninstall$\cplexe.exe
C:\WINDOWS\$NtServicePackUninstall$\cscript.exe
C:\WINDOWS\$NtServicePackUninstall$\csrss.exe
C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe
C:\WINDOWS\$NtServicePackUninstall$\ddeshare.exe
C:\WINDOWS\$NtServicePackUninstall$\defrag.exe
C:\WINDOWS\$NtServicePackUninstall$\dfrgfat.exe
C:\WINDOWS\$NtServicePackUninstall$\dfrgntfs.exe
C:\WINDOWS\$NtServicePackUninstall$\dialer.exe
C:\WINDOWS\$NtServicePackUninstall$\diantz.exe
C:\WINDOWS\$NtServicePackUninstall$\diskpart.exe
C:\WINDOWS\$NtServicePackUninstall$\dlimport.exe
C:\WINDOWS\$NtServicePackUninstall$\dllhost.exe
C:\WINDOWS\$NtServicePackUninstall$\dmadmin.exe
C:\WINDOWS\$NtServicePackUninstall$\dmremote.exe
C:\WINDOWS\$NtServicePackUninstall$\dosx.exe
C:\WINDOWS\$NtServicePackUninstall$\dplaysvr.exe
C:\WINDOWS\$NtServicePackUninstall$\dpnsvr.exe
C:\WINDOWS\$NtServicePackUninstall$\dpvsetup.exe
C:\WINDOWS\$NtServicePackUninstall$\dumprep.exe
C:\WINDOWS\$NtServicePackUninstall$\dvdupgrd.exe
C:\WINDOWS\$NtServicePackUninstall$\dwwin.exe
C:\WINDOWS\$NtServicePackUninstall$\dxdiag.exe
C:\WINDOWS\$NtServicePackUninstall$\eudcedit.exe
C:\WINDOWS\$NtServicePackUninstall$\evntcmd.exe
C:\WINDOWS\$NtServicePackUninstall$\evntwin.exe
C:\WINDOWS\$NtServicePackUninstall$\extrac32.exe
C:\WINDOWS\$NtServicePackUninstall$\findstr.exe
C:\WINDOWS\$NtServicePackUninstall$\fontview.exe
C:\WINDOWS\$NtServicePackUninstall$\fp98sadm.exe
C:\WINDOWS\$NtServicePackUninstall$\fp98swin.exe
C:\WINDOWS\$NtServicePackUninstall$\fpadmcgi.exe
C:\WINDOWS\$NtServicePackUninstall$\fpcount.exe
C:\WINDOWS\$NtServicePackUninstall$\fpremadm.exe
C:\WINDOWS\$NtServicePackUninstall$\ftp.exe
C:\WINDOWS\$NtServicePackUninstall$\fxsclnt.exe
C:\WINDOWS\$NtServicePackUninstall$\fxscover.exe
C:\WINDOWS\$NtServicePackUninstall$\fxssvc.exe
C:\WINDOWS\$NtServicePackUninstall$\grpconv.exe
C:\WINDOWS\$NtServicePackUninstall$\helpctr.exe
C:\WINDOWS\$NtServicePackUninstall$\helpsvc.exe
C:\WINDOWS\$NtServicePackUninstall$\hh.exe
C:\WINDOWS\$NtServicePackUninstall$\hscupd.exe
C:\WINDOWS\$NtServicePackUninstall$\icwconn1.exe
C:\WINDOWS\$NtServicePackUninstall$\icwconn2.exe
C:\WINDOWS\$NtServicePackUninstall$\icwrmind.exe
C:\WINDOWS\$NtServicePackUninstall$\ie4uinit.exe
C:\WINDOWS\$NtServicePackUninstall$\iexplore.exe
C:\WINDOWS\$NtServicePackUninstall$\iexpress.exe
C:\WINDOWS\$NtServicePackUninstall$\imapi.exe
C:\WINDOWS\$NtServicePackUninstall$\imjpdct.exe
C:\WINDOWS\$NtServicePackUninstall$\imjpdsvr.exe
C:\WINDOWS\$NtServicePackUninstall$\imjpinst.exe
C:\WINDOWS\$NtServicePackUninstall$\imjpmig.exe
C:\WINDOWS\$NtServicePackUninstall$\imjprw.exe
C:\WINDOWS\$NtServicePackUninstall$\imjputy.exe
C:\WINDOWS\$NtServicePackUninstall$\inetwiz.exe
C:\WINDOWS\$NtServicePackUninstall$\ipconfig.exe
C:\WINDOWS\$NtServicePackUninstall$\ipv6.exe
C:\WINDOWS\$NtServicePackUninstall$\ipxroute.exe
C:\WINDOWS\$NtServicePackUninstall$\krnl386.exe
C:\WINDOWS\$NtServicePackUninstall$\locator.exe
C:\WINDOWS\$NtServicePackUninstall$\logonui.exe
C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
C:\WINDOWS\$NtServicePackUninstall$\magnify.exe
C:\WINDOWS\$NtServicePackUninstall$\makecab.exe
C:\WINDOWS\$NtServicePackUninstall$\migload.exe
C:\WINDOWS\$NtServicePackUninstall$\migregdb.exe
C:\WINDOWS\$NtServicePackUninstall$\migwiz.exe
C:\WINDOWS\$NtServicePackUninstall$\migwiz_a.exe
C:\WINDOWS\$NtServicePackUninstall$\mmc.exe
C:\WINDOWS\_default.pif
C:\WINDOWS\$hf_mig$\KB885250\SP2GDR\mrxsmb.sys
C:\WINDOWS\$hf_mig$\KB885250\SP2QFE\mrxsmb.sys
C:\WINDOWS\$hf_mig$\KB885835\SP2GDR\mrxsmb.sys
C:\WINDOWS\$hf_mig$\KB885835\SP2GDRdbss.sys
C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys
C:\WINDOWS\$hf_mig$\KB885835\SP2QFEdbss.sys
C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys
C:\WINDOWS\$hf_mig$\KB887742\SP2QFE\http.sys
C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\win32k.sys
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
C:\WINDOWS\$hf_mig$\KB893066\SP2GDR	cpip.sys
C:\WINDOWS\$hf_mig$\KB893066\SP2QFE	cpip.sys
C:\WINDOWS\$hf_mig$\KB896422\SP2QFE\srv.sys
C:\WINDOWS\$hf_mig$\KB899591\SP2QFEdpwd.sys
C:\WINDOWS\$NtServicePackUninstall$\acpi.sys
C:\WINDOWS\$NtServicePackUninstall$\aec.sys
C:\WINDOWS\$NtServicePackUninstall$\afd.sys
C:\WINDOWS\$NtServicePackUninstall$\amdk6.sys
C:\WINDOWS\$NtServicePackUninstall$\amdk7.sys
C:\WINDOWS\$NtServicePackUninstall$\arp1394.sys
C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys
C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
C:\WINDOWS\$NtServicePackUninstall$\atmarpc.sys
C:\WINDOWS\$NtServicePackUninstall$\atmlane.sys
C:\WINDOWS\$NtServicePackUninstall$\bdasup.sys
C:\WINDOWS\$NtServicePackUninstall$\bridge.sys
C:\WINDOWS\$NtServicePackUninstall$\bthenum.sys
C:\WINDOWS\$NtServicePackUninstall$\bthmodem.sys
C:\WINDOWS\$NtServicePackUninstall$\bthport.sys
C:\WINDOWS\$NtServicePackUninstall$\bthprint.sys
C:\WINDOWS\$NtServicePackUninstall$\bthusb.sys
C:\WINDOWS\$NtServicePackUninstall$\ccdecode.sys
C:\WINDOWS\$NtServicePackUninstall$\cdfs.sys
C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys
C:\WINDOWS\$NtServicePackUninstall$\classpnp.sys
C:\WINDOWS\$NtServicePackUninstall$\crusoe.sys
C:\WINDOWS\$NtServicePackUninstall$\disk.sys
C:\WINDOWS\$NtServicePackUninstall$\diskdump.sys
C:\WINDOWS\$NtServicePackUninstall$\dmboot.sys
C:\WINDOWS\$NtServicePackUninstall$\dmusic.sys
C:\WINDOWS\$NtServicePackUninstall$\drmk.sys
C:\WINDOWS\$NtServicePackUninstall$\drmkaud.sys
C:\WINDOWS\$NtServicePackUninstall$\dxg.sys
C:\WINDOWS\$NtServicePackUninstall$\fastfat.sys
C:\WINDOWS\$NtServicePackUninstall$\fdc.sys
C:\WINDOWS\$NtServicePackUninstall$\flpydisk.sys
C:\WINDOWS\$NtServicePackUninstall$\gameenum.sys
C:\WINDOWS\$NtServicePackUninstall$\hidbth.sys
C:\WINDOWS\$NtServicePackUninstall$\hidclass.sys
C:\WINDOWS\$NtServicePackUninstall$\hidparse.sys
C:\WINDOWS\$NtServicePackUninstall$\i8042prt.sys
C:\WINDOWS\$NtServicePackUninstall$\imapi.sys
C:\WINDOWS\$NtServicePackUninstall$\ipinip.sys
C:\WINDOWS\$NtServicePackUninstall$\ipnat.sys
C:\WINDOWS\$NtServicePackUninstall$\ipsec.sys
C:\WINDOWS\$NtServicePackUninstall$\irenum.sys
C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys
C:\WINDOWS\$NtServicePackUninstall$\kmixer.sys
C:\WINDOWS\$NtServicePackUninstall$\ks.sys
C:\WINDOWS\$NtServicePackUninstall$\ksecdd.sys
C:\WINDOWS\$NtServicePackUninstall$\mf.sys
C:\WINDOWS\$NtServicePackUninstall$\13j9f33t.zip
C:\WINDOWS\$NtServicePackUninstall$\31njfdvf.zip
C:\WINDOWS\$NtServicePackUninstall$\g5bbxntb.zip
C:\WINDOWS\$NtServicePackUninstall$\k5rf3f1j.zip
C:\WINDOWS\$NtServicePackUninstall$\kvndrrrf.zip

Finished!

duflox · Answer

ok bon c est deja pas mal

remet nous un rapport hijackthis

merci

zinko · Answer

voila..

Logfile of HijackThis v1.99.1
Scan saved at 13:44:27, on 12/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\AOL Compagnon\companion.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1	ools\iesdsg.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll (file missing)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O2 - BHO: Class - {F4A41C9A-A713-9C96-601E-1966003429F8} - C:\WINDOWS\addke.dll (file missing)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: AOL Compagnon.lnk = C:\Program Files\AOL Compagnon\companion.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: ServerPushBox - http://www.turismodoalgarve.pt/meteo/rta/faroport/servp14.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {4BA12BBE-A1CD-4E13-85E4-A05E3FF6F658} (Pygmy Productions - Installer of Bluedot Game Object) - http://www.bluedotproject.com/BlueInstaller.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/10497be59b7623c58915/netzip/RdxIE601.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/2.0.0.33/player.virtools.com/downloads/player/Install2.0/Installer.exe
O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} (NPKCX Control) - http://guard.gunbound.net/nProtect/keyCrypt/npkcx.cab
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - http://runonce.msn.com/setacceptlang.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\Program Files\Fichiers communs\AOL\AOL Spyware Protection\aolserv.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: npkcsvc - INCA Internet Co., Ltd. - C:\WINDOWS\System32
pkcsvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

duflox · Answer

ton antivirus c est avast ou antivir?????

desinstalle l un des 2 puis

¤ Désactive le pare-feu de Windows (SP2) puis installe celui-ci pour plus de sécurité 

Kerio (pare-feu) : reste gratuit après la période d'essai en français 
----> http://www.infos-du-net.com/telecharger/Firewall-Kerio-Personal,0301-390.html 

Regarde ce tutoriel si tu as besoin d'aide pour l'installation, la configuration et compréhension de Kerio 
http://www.malekal.com/kerio_firewall.php 
Plus d'info : 
->https://kerio.probb.fr/


quand c est fais dis le nous!!

a+

zinko · Answer

Bin en fait je pensais avoir supprimer antivir parce que je trouve plus aucune trace de lui dans l'ordi !?

duflox · Answer

cela appartient a antivir:

C:\Program Files\AVPersonal\AVWUPSRV.EXE

C:\Program Files\AVPersonal\AVGUARD.EXE

alors retrouve les et supprimes les.....

a+

zinko · Answer

bin ouai j'ai été mais il y a 2 trucs que je peux pas supprimer dedans..mais ces 2 là j'ai réussi a les supprimer.

duflox · Answer

ok alors essaye de les supprimer en mode sans echec:

Démarre en mode sans échec : 
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter 
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée. 
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal ! 
(Si F8 ne marche pas utilise la touche F5). 


puis relance ton pc normalement et refais moi un rapport hijackthis

merci

zinko · Answer

ouai ok par contre j'ai un problème avec Kerio firewall.. il arrête pas de me mettre "tentative d'intrusion bloquée" pour toujours le même programme :  c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe(new line)

Jo30 · Answer

Bonjour, 

Depuis ce matin je bataille avec un vers ambulant sur windows live messenger un fichier zip envoyé et ouvert....
J'ai essayé msn fix et Hijackthis mais je ne m'en sors pas, à présent des messages instantanés sont envoyés par je ne sais qui à mes contacts c'est plutôt flipant.

Merci de bien vouloir me donner un coup de main!!

zinko · Answer

Je dois partir Duflox.. Je redemarrerai mon PC en mode sans échec ce soir pour supprimer antivir et je te referai un rapport Hijackthis !

Merci de ton aide !

Puis si tu pouvais m'aider pour que Kerio arrete de m'envoyer toujours la même alerte aussi :P

Merci a plus tard !!

duflox · Answer

alors Jo30

Il serait préférable que tu fasses ton message personnel, cela rendra les postes plus compréhensibles et la réponse à ton problème sera plus efficace 
Procèdes comme ceci : 


http://perso.orange.fr/rginformatique/section%20virus/demofairesontmessage.htm 
@+ 


puis pour zinko

la tentative d intrusion de ce fichier c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe(new line)

n en est pas une laisse passer ce fichier pour tous probleme lis le tuto que je t ai donné!

a+

Jo30 · Answer

Ok merci mais ça m'avance pas ..

zinko · Answer

Tiens, ma dernière analyse Hijackthis après avoir essayé de supprimé les restes d'Antivir.. J'ai réussi a supprimé un fichier mais pas l'autre..
Puis pour l'intrusion je veux bien la laisser passer mais elle revient a chaque fois..
Je vais rejeter un oeil aux tutos.

Logfile of HijackThis v1.99.1
Scan saved at 18:40:21, on 12/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\AOL Compagnon\companion.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1	ools\iesdsg.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll (file missing)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O2 - BHO: Class - {F4A41C9A-A713-9C96-601E-1966003429F8} - C:\WINDOWS\addke.dll (file missing)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: AOL Compagnon.lnk = C:\Program Files\AOL Compagnon\companion.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: ServerPushBox - http://www.turismodoalgarve.pt/meteo/rta/faroport/servp14.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {4BA12BBE-A1CD-4E13-85E4-A05E3FF6F658} (Pygmy Productions - Installer of Bluedot Game Object) - http://www.bluedotproject.com/BlueInstaller.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/10497be59b7623c58915/netzip/RdxIE601.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/2.0.0.33/player.virtools.com/downloads/player/Install2.0/Installer.exe
O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} (NPKCX Control) - http://guard.gunbound.net/nProtect/keyCrypt/npkcx.cab
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - http://runonce.msn.com/setacceptlang.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir Service (AntiVirService) - Unknown owner - C:\Program Files\AVPersonal\AVGUARD.EXE (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\Program Files\Fichiers communs\AOL\AOL Spyware Protection\aolserv.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AntiVir Update (AVWUpSrv) - Unknown owner - C:\Program Files\AVPersonal\AVWUPSRV.EXE (file missing)
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: npkcsvc - INCA Internet Co., Ltd. - C:\WINDOWS\System32
pkcsvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

duflox · Answer

fais ceci:

Étape 1: 
Télécharge eScan Antivirus Toolkit ici: 

http://www.spywareinfo.dk/download/mwav.exe 

Sauvegarde-le sur ton Bureau. 
Avant de lancer le programme, il faut le mettre à jour tel qu'indiqué à l'étape 2. 

Étape 2: 
Voici comment mettre l'outil à jour : 

1.) Double-clique le fichier mwav.exe qui se trouve sur le Bureau ; dézippe les fichiers dans le nouveau dossier suggéré (C:\Kaspersky). Le programme va se lancer, et tu dois le quitter (clique sur "Exit" puis "Exit"). 

2.) Double-clique sur le Poste de travail, puis double-clique sur le lecteur principal (habituellement C:\), double-clique sur le dossier Kaspersky ; ensuite, double-clique sur le fichier kavupd.exe. Tu verras maintenant une fenêtre DOS apparaître, et la mise à jour se complètera en quelques minutes. 

3.) Lorsque la mise à jour sera complétée, tu verras "Press any key to continue" ; tape sur une clé pour continuer. Deux nouveaux répertoires (dossiers) ont été créés lors de la mise à jour (C:\Bases et C:\Downloads). 

4.) Sélectionne/copie tous les fichiers présents dans le dossier C:\Downloads, puis colle-les dans le dossier C:\Kaspersky. Accepte à l'invite de remplacer les fichiers existants. 

Ne pas lancer le scan tout de suite ! 

Étape 3: 
Redémarre en mode Sans Échec : 
1) Redémarre ton ordi 
2) Tapote la touche F8 immédiatement, juste après le "Bip" 
3) Tu verras un écran avec options de démarrage apparaître 
4) Choisi la première option : Sans Échec, et valide avec "Entrée" 
5) Choisi ton compte régulier, et non Administrateur 


Étape 4: 
Du mode Sans Échec, voici comment utiliser le programme : 

1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\Kaspersky 

2.) Double-clique sur mwavscan.com ; l'interface d'eScan va apparaître à l'écran. 

3.) Il est très important de bien cocher ces boîtes sous Scan Option : Memory, Registry, Startup Folders, System Folders, Services. 

4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous ; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\. 

5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files. 

6.) Clique sur Scan Clean et laisse le tool vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed. Ne pas quitter tout de suite ! 

7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre Virus Log Information (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum. 

Ferme le programme. Redémarre ton PC en mode Normal. Poste (copie/colle) le rapport que tu as sauvegardé dans ta prochaine réponse. 

Tutoriel : 

http://www.malekal.com/tutorial_eScan_antivirus_toolkit.php

zinko · Answer

voila c'est fait !

File C:\WINDOWS\lsbeuutbdn.exe tagged as not-a-virus:AdWare.Win32.Bestofer.d. No Action Taken.

File C:\WINDOWS\xmnjhcg.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.ai. No Action Taken.

File C:\WINDOWS\system32\winsdrv.dll tagged as not-a-virus:AdWare.Win32.BHO.ba. No Action Taken.

File C:\WINDOWS\system32\wmidext.dll tagged as not-a-virus:AdWare.Win32.VB.y. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051209212833.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051209220807.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051209222422.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051211153820.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051214195425.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051214201036.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051215185634.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051216182556.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051218113049.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051225202549.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051225204145.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051226090817.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051226180547.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051227091944.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051227115833.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060115200924.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060115202630.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060115234012.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060116133017.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060116134805.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060116144348.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060117183300.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060117184902.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060118123717.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060118125314.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060120184157.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060120185954.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060121193623.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060131205536.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060201123607.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060201173412.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060201181400.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060201205031.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060202160954.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060202205916.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060203183604.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060204190835.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060204192401.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060213120532.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060214090259.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060214092031.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060216190215.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\WINDOWS\lsbeuutbdn.exe tagged as not-a-virus:AdWare.Win32.Bestofer.d. No Action Taken.

File C:\WINDOWS\system32\winsdrv.dll tagged as not-a-virus:AdWare.Win32.BHO.ba. No Action Taken.

File C:\WINDOWS\system32\wmidext.dll tagged as not-a-virus:AdWare.Win32.VB.y. No Action Taken.

File C:\WINDOWS\xmnjhcg.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.ai. No Action Taken.

duflox · Answer

No Action Taken  tu ne les a pas supprimé????????

zinko · Answer

comment ?  T-T j'me disais bien aussi que c'était bizarre :S

duflox · Answer

va falloir que tu refasse le scan et que tu les supprimes car il ya du beau rootkit sur le pc!!

si tu as un souci  regarde le tutoriel : 

http://www.malekal.com/tutorial_eScan_antivirus_toolkit.php

zinko · Answer

j'ai fais comme tu m'a dis.. et comme c'est marqué sur le tutoriel pourtant !

duflox · Answer

refais le comme meme!!!pour voir si il ne les a pas supprimé au redemarrage!!

a+

zinko · Answer

okay ! Toujours en mode sans échec ?

duflox · Answer

oui tjrs!!

zinko · Answer

ok ! let's go alors j'y retourne !

duflox · Answer

ok a toute!!!

et redonne moi le nouveau rapport

merci

zinko · Answer

voilà c'est fait ! toujours " No Action Taken :S

File C:\WINDOWS\lsbeuutbdn.exe tagged as not-a-virus:AdWare.Win32.Bestofer.d. No Action Taken.

File C:\WINDOWS\xmnjhcg.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.ai. No Action Taken.

File C:\WINDOWS\system32\winsdrv.dll tagged as not-a-virus:AdWare.Win32.BHO.ba. No Action Taken.

File C:\WINDOWS\system32\wmidext.dll tagged as not-a-virus:AdWare.Win32.VB.y. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051209212833.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051209220807.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051209222422.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051211153820.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051214195425.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051214201036.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051215185634.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051216182556.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051218113049.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051225202549.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051225204145.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051226090817.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051226180547.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051227091944.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051227115833.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060115200924.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060115202630.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060115234012.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060116133017.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060116134805.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060116144348.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060117183300.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060117184902.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060118123717.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060118125314.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060120184157.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060120185954.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060121193623.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060131205536.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060201123607.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060201173412.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060201181400.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060201205031.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060202160954.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060202205916.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060203183604.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060204190835.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060204192401.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060213120532.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060214090259.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060214092031.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20060216190215.zip tagged as not-a-virus:AdWare.Win32.BetterInternet.b. No Action Taken.

File C:\WINDOWS\lsbeuutbdn.exe tagged as not-a-virus:AdWare.Win32.Bestofer.d. No Action Taken.

File C:\WINDOWS\system32\winsdrv.dll tagged as not-a-virus:AdWare.Win32.BHO.ba. No Action Taken.

File C:\WINDOWS\system32\wmidext.dll tagged as not-a-virus:AdWare.Win32.VB.y. No Action Taken.

File C:\WINDOWS\xmnjhcg.exe tagged as not-a-virus:AdWare.Win32.BetterInternet.ai. No Action Taken.

kris6943 · Answer

Supprimes les manuellement

C:\WINDOWS\lsbeuutbdn.exe

C:\WINDOWS\system32\winsdrv.dll 

C:\WINDOWS\system32\wmidext.dll 

C:\WINDOWS\xmnjhcg.exe 


Tous les autres sont en quarantaine donc inactivés

zinko · Answer

c'est fait ! y'en a un que j'ai pas réussi a supprimer.

kris6943 · Answer

et pourquoi? il refuse de s'effacer?

zinko · Answer

oui.

duflox · Answer

ok bon on va prendre le taureau par les cornes:

Télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.


double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.


Citation : 

C:\WINDOWS\lsbeuutbdn.exe 

C:\WINDOWS\xmnjhcg.exe 

C:\WINDOWS\system32\winsdrv.dll 

C:\WINDOWS\system32\wmidext.dll 


clique sur MoveIt! pour lancer la suppression.
le résultat apparaîtra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes. 

puis remets moi un rapport hijackthis

a+

zinko · Answer

le rappor de OTMoveIt !

File/Folder C:\WINDOWS\lsbeuutbdn.exe not found.
File/Folder  not found.
File/Folder C:\WINDOWS\xmnjhcg.exe not found.
File/Folder  not found.
C:\WINDOWS\system32\winsdrv.dll unregistered successfully.
C:\WINDOWS\system32\winsdrv.dll moved successfully.
File/Folder  not found.
File/Folder C:\WINDOWS\system32\wmidext.dll not found.
 
Created on 09/14/2007 10:25:13

Ceux marqué "not found" c'est ceux que j'ai déja réussi a supprimer.

zinko · Answer

Et le rapport Hijackthis !

Logfile of HijackThis v1.99.1
Scan saved at 10:36:01, on 14/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\lexpps.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\AOL Compagnon\companion.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: AOL Compagnon.lnk = C:\Program Files\AOL Compagnon\companion.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: ServerPushBox - http://www.turismodoalgarve.pt/meteo/rta/faroport/servp14.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {4BA12BBE-A1CD-4E13-85E4-A05E3FF6F658} (Pygmy Productions - Installer of Bluedot Game Object) - http://www.bluedotproject.com/BlueInstaller.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/10497be59b7623c58915/netzip/RdxIE601.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/2.0.0.33/player.virtools.com/downloads/player/Install2.0/Installer.exe
O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} (NPKCX Control) - http://guard.gunbound.net/nProtect/keyCrypt/npkcx.cab
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - http://runonce.msn.com/setacceptlang.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir Service (AntiVirService) - Unknown owner - C:\Program Files\AVPersonal\AVGUARD.EXE (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\Program Files\Fichiers communs\AOL\AOL Spyware Protection\aolserv.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AntiVir Update (AVWUpSrv) - Unknown owner - C:\Program Files\AVPersonal\AVWUPSRV.EXE (file missing)
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: npkcsvc - INCA Internet Co., Ltd. - C:\WINDOWS\System32
pkcsvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

duflox · Answer

relance hijackthis puis clic sur "do a system scan only"

apres le scan coche ces lignes et seulement celles ci !!

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll (file missing)

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O16 - DPF: ServerPushBox - http://www.turismodoalgarve.pt/meteo/rta/faroport/servp14.cab

O16 - DPF: {4BA12BBE-A1CD-4E13-85E4-A05E3FF6F658} (Pygmy Productions - Installer of Bluedot Game Object) - http://www.bluedotproject.com/BlueInstaller.cab

O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/

O16 - DPF: {D6FCA8ED-4715-43DE-9BD2-2789778A5B09} (NPKCX Control) - http://guard.gunbound.net/nProtect/keyCrypt/npkcx.cab

O23 - Service: AntiVir Service (AntiVirService) - Unknown owner - C:\Program Files\AVPersonal\AVGUARD.EXE (file missing)

O23 - Service: AntiVir Update (AVWUpSrv) - Unknown owner - C:\Program Files\AVPersonal\AVWUPSRV.EXE (file missing)


referme ton navigateur (internet explorer ) puis clic sur " fix check"


ensuite a tu encore des problemes?

zinko · Answer

non mon pc marche déjà un peu mieux merci !
Par contre c'est normal que les rapport Hijackthis ne soit pas les même suivant la session où l'on est ?
Et j'arrive pas a supprimer internet explorer de l'ordinateur.. Je voudrais garder que Mozilla Firefox.

duflox · Answer

comment ca?

en tous cas ne supprime pas I.E il pourra toujours te servir......

kris6943 · Answer

Oui les rapports peuvent etre différents selon la session.
Chaque session n'a pas forcement les mêmes programmes en lancement automatique.
IE (que j'exècre..) ne doit et ne peut pas être désinstallé. Il est partie intégrante de windows.
Et en supposant que ce soit possible, tu n'aurais plus accès à winupdate ni à certains sites conçus (mal conçus d'ailleurs...) en ne se basant que sur IE (lequel ne respecte pas les standards)

exemple: les antivirus en ligne

pendant que tu y es, va dans 
C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\

et supprimes tout ce qui est dedans
A quoi bon garder en quarantaine des fichiers foireux...
*****************************************
un sourire pour finir

Q de Duflox:  as tu encore des problemes?

R de Zinko: non mon pc marche déjà un peu mieux merci ! 


Ca me fait un peu penser à un type qui aurait à la fois la lèpre, le cancer et le sida et qui dirait à son sauveur: "oui docteur ça va un peu mieux..."   
MDR

zinko · Answer

Lol :P
Non mais c'est vrai il est déja plus réactif !!
Merci de votre aide !! Je peux maintenant mettre problème résolu !!
Merci !! A plus !!

duflox · Answer

attend encore 2 petites manips

Télécharge et installe CCleaner (n'installe pas la barre d'outil Yahoo) 
---> http://www.infos-du-net.com/telecharger/CCleaner,0301-1039.html 

- Dans la colonne de gauche clic sur "registre" coches toutes les cases, puis clic en bas sur "chercher des erreurs" une fois terminé, clic sur "réparer les erreurs" et tu auras un message pour sauvegarder ta base de registre tu clic "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs. 
Les sauvegardes que tu aura faites, tu pourras les supprimer si ton ordinateur n'a plus de problèmes. 

- Relance Ccleaner, vas dans l'onglet "nettoyeur" présent sur la gauche, décoches la dernière case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage" 

Si tu as besoin d'aide avec Ccleaner, regarde ce tutorial : 
https://www.malekal.com/tutoriel-ccleaner/

Et suis les instructions donnée dans ce lien : 
http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm 

puis



¤Désactive ta restauration système (uniquement si tu es sous XP): 
Clic droit sur poste de travail puis, 
propriété, tu cliques sur onglet restauration système 
tu coches la case « désactiver la restauration » et applique. 

Puis, redemarre le pc

¤Réactive ta restauration système (uniquement si tu es sous XP): 
Clic droit sur poste de travail puis, 
propriété, tu cliques sur onglet restauration système 
tu décoches la case « désactiver la restauration » et applique.

a+++

zinko · Answer

Oki! Sa sert a quoi de désactiver et réactiver la restauration système ?

duflox · Answer

salut

ca sert a eliminer tous tes anciens points de restauration qui sont peux etre infecté et en creer un sain car ton pc est propre!!

a+

zinko · Answer

Ah ouai ok !!
J'avais laisser un autre rapport pour mon autre PC, tu peux y jeter un oeil stp ? 

analyse de rapport hijackthis#dernier

duflox · Answer

il est pas trop mal!!!!

le seul hic c est boonty games!!!!!c est un nid a merde.......

a+

zinko · Answer

ouai je sais c'est mon père qu'à téléchargé ca.. :S
Je l'avais supprimé mais il l'a re-téléchargé, je vais le re-supprimer :P

duflox · Answer

oui c est mieux

a+++

zinko · Answer

Ok ! Merci pour tout ! 
A++

duflox · Answer

mais de rien

@++++

Analyse Hijackthis ^^

53 réponses

Discussions similaires