Pc infectée

jul1 -  
Country Man Messages postés 209 Statut Membre -
je voudrais un petit peu d'aide svp
je n'y connais pas grand chose
voici le raport
Logfile of HijackThis v1.99.1
Scan saved at 22:00:38, on 15/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\S3Trayp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\vVX1000.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.ircfast2.com/index.php?rvs=hompag
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [S3Trayp] S3Trayp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [fqhvxwyz] c:\windows\system32\fqhvxwyz.exe fqhvxwyz
O4 - HKCU\..\Run: [goftukt] c:\windows\system32\goftukt.exe goftukt
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase2895.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
Configuration: Windows XP
Internet Explorer 6.0

27 réponses

  • 1
  • 2
  1. Country Man Messages postés 209 Statut Membre 16
     
    Bonsoir,
    PC infecté par quoi ? Poste le scan anti-virus.
    @+ Country Man
    0
  2. jul1
     
    quel raport celui de nod32 c'est celui la Analyse exécutée le: 15/10/2007 22:12:54
    Rapport de l'analyse
    NOD32 version 2591 (20071014) NT
    Mémoire - est OK

    Date: 15.10.2007 Heure: 22:13:09
    La technologie Anti-furtif est activée.
    Disques, répertoires et fichiers analysés: C:
    C:\pagefile.sys - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\LocalService\NTUSER.DAT - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\LocalService\ntuser.dat.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\NetworkService\NTUSER.DAT - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\NTUSER.DAT - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\ntuser.dat.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\Local Settings\Application Data\Microsoft\Messenger\juljul1@hotmail.fr\SharingMetadata\pending.dat - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\Local Settings\Application Data\Microsoft\Messenger\juljul1@hotmail.fr\SharingMetadata\Working\database_A014_776B_1477_42F8\dfsr.db - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\Local Settings\Application Data\Microsoft\Messenger\juljul1@hotmail.fr\SharingMetadata\Working\database_A014_776B_1477_42F8\fsr.log - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\Local Settings\Application Data\Microsoft\Messenger\juljul1@hotmail.fr\SharingMetadata\Working\database_A014_776B_1477_42F8\fsrtmp.log - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\Local Settings\Application Data\Microsoft\Messenger\juljul1@hotmail.fr\SharingMetadata\Working\database_A014_776B_1477_42F8\tmp.edb - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\Local Settings\Temp\IH37.tmp - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\Documents and Settings\ORDI\Local Settings\Temporary Internet Files\Content.IE5\Z0JB3VEF\forumcss[1].htm - erreur à l'ouverture [4]
    C:\System Volume Information\MountPointManagerRemoteDatabase - erreur à l'ouverture (accès refusé) [4]
    C:\WINDOWS\system32\config\default - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\WINDOWS\system32\config\default.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\WINDOWS\system32\config\SAM - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\WINDOWS\system32\config\SAM.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\WINDOWS\system32\config\SECURITY - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\WINDOWS\system32\config\SECURITY.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\WINDOWS\system32\config\software - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\WINDOWS\system32\config\software.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\WINDOWS\system32\config\system - erreur à l'ouverture (le fichier est verrouillé) [4]
    C:\WINDOWS\system32\config\system.LOG - erreur à l'ouverture (le fichier est verrouillé) [4]
    Nombre de fichiers analysés: 34936
    Nombre de menaces détectées: 0
    Heure d'achèvement: 22:21:47 Temps total d'analyse : 518 sec (00:08:38)

    Notes:
    [4] Ouverture du fichier impossible. Il est utilisé exclusivement par une autre application ou le système d'exploitation.

    mon pc me demande de telecharger spyware secure et me dit que je suis infecter de logiciel espion c'est pour ça je ne comprend pas trop
    0
  3. Country Man Messages postés 209 Statut Membre 16
     
    Télécharge AD AWARE et fait un scan.
    @+ Country MAn
    ad aware 2007 free
    0
  4. jul1
     
    Scan Results
    Ad-Aware 2007 Free Edition
    Log File Created on:2007-10-1522:57:39
    Using Definitions File:C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\core.aawdef
    Computer name:ORDI-72F0C5A64C
    Name of user performing scan:SYSTEM
    Name of user ordering scan:ORDI
    Scan completed successfully

    System Information
    File Version Information
    Ad-Aware 2007 Settings
    Extended Ad-Aware 2007 Settings
    Database Information
    Scan Statistics
    Scan Detailed Statistics
    Infections Found
    Listing of running processes
    System Information
    Number of processors:1
    Processor type:AMD Sempron(tm) Processor 3400+
    Memory Available:26%
    Total Physical Memory:468942848 Bytes
    Available Physical Memory:118403072 Bytes
    Total Page File Size:1105747968 Bytes
    Available On Page File:604053504 Bytes
    Total Virtual Memory:2147352576 Bytes
    Available Virtual Memory:2001338368 Bytes
    OS:Microsoft Windows XP 5.1 (Build 2600)
    [to top]
    File Verion Information
    File Version
    CEAPI.dll 7, 0, 1, 5
    aawservice.exe 7, 0, 1, 5
    Ad-Aware2007.exe 7.0.1.5
    [to top]
    Ad-Aware 2007 Settings
    Skipping files larger than:1048576 Bytes
    Ignoring infections with lower TAI than:3
    Safe Mode:False
    [to top]
    Extended Ad-Aware 2007 Settings
    Unload malicious processes and modules
    Unload Modules
    Let Windows remove files at Start-Up
    Deactivate Ad-Watch
    Re-analyze Scan Result
    Update Definitions on startup
    Delete Restored Items
    Permanent Archive Caching
    Write Protect System Files
    Create Log file
    Include basic settings
    Include advanced settings
    Include user and computer name
    Environment information
    Running processes
    Running processes and modules
    Include info about ignored objects in log file
    Consider definitions File Outdated after x days
    Proxy URL
    Proxy Port
    [to top]
    Database Info
    Version number:7
    Build Number:0
    Build Date and Time:2007/07/0507:55:33
    [to top]
    Scan Statistics
    Method:Smart

    Items Scanned:85010
    Infections Detected:29
    Infections Removed:0
    Infections Quarantined:0
    Infections Ignored:0
    [to top]
    Scan Detailed Statistics
    Type Critical Total
    Process Scan 0 0
    Registry Scan 0 0
    Registry PE Scan 0 0
    Hosts Scan 0 0
    File Scan 0 0
    Folder Scan 0 0
    LSP Scan 0 0
    ADS Scan 0 0
    Cookie Scan 28 28
    File Hash Scan 0 0
    [to top]
    Infections Found
    Family Id Name Category TAI
    725 Tracking Cookie DataMiner 3
    [600000173] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat bluestreak.com id /
    [600000000] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat zedo.com geo /
    [600000144] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat doubleclick.net id /
    [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat smartadserver.com TestIfCookieP /
    [600000179] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat atdmt.com AA002 /
    [600000295] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat adtech.de JEB2 /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRID /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRimp /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRca /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRcp /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRpl /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRcr /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRpc /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com F1COm7 /
    [600000171] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat bs.serving-sys.com eyeblaster /
    [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat serving-sys.com A2 /
    [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat serving-sys.com B2 /
    [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat serving-sys.com C3 /
    [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat serving-sys.com D3 /
    [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat serving-sys.com E2 /
    [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat adserver.aol.fr JEB2 /
    [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat weborama.fr oo136131 /
    [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat weborama.fr AFFICHE_W /
    [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat weborama.fr wbo_temps_reel /
    [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat advertising.com ACID /
    [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat advertising.com BASE /
    [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat advertising.com F1 /
    [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat advertising.com ROLL /

    9999 MRU Object MRU Object 0
    [1] MRU Path: C:\Documents and Settings\ORDI\Recent Count: 4

    Quarantined Objects
    Family Id Name Category TAI

    Removed Objects
    Family Id Name Category TAI
    [to top]
    Listing of Running Processes
    C:\WINDOWS\SYSTEM32\SMSS.EXE
    c:\windows\system32\smss.exe
    c:\windows\system32\ntdll.dll
    C:\WINDOWS\SYSTEM32\CSRSS.EXE
    c:\windows\system32\csrss.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\csrsrv.dll
    c:\windows\system32\basesrv.dll
    c:\windows\system32\winsrv.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\sxs.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\ole32.dll
    C:\WINDOWS\SYSTEM32\WINLOGON.EXE
    c:\windows\system32\winlogon.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\authz.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\nddeapi.dll
    c:\windows\system32\profmap.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\psapi.dll
    c:\windows\system32\regapi.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\version.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\msgina.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\odbc32.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\odbcint.dll
    c:\windows\system32\shsvcs.dll
    c:\windows\system32\sfc.dll
    c:\windows\system32\sfc_os.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\winscard.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\sxs.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\cscdll.dll
    c:\windows\system32\wlnotify.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\mpr.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\cscui.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\mprapi.dll
    c:\windows\system32\activeds.dll
    c:\windows\system32\adsldpc.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\wdmaud.drv
    c:\windows\system32\msacm32.drv
    c:\windows\system32\msacm32.dll
    c:\windows\system32\midimap.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\xpsp2res.dll
    C:\WINDOWS\SYSTEM32\SERVICES.EXE
    c:\windows\system32\services.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\scesrv.dll
    c:\windows\system32\authz.dll
    c:\windows\system32\umpnpmgr.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\ncobjapi.dll
    c:\windows\system32\msvcp60.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\eventlog.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\psapi.dll
    c:\windows\system32\wtsapi32.dll
    C:\WINDOWS\SYSTEM32\LSASS.EXE
    c:\windows\system32\lsass.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\lsasrv.dll
    c:\windows\system32\mpr.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\ntdsapi.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\samsrv.dll
    c:\windows\system32\cryptdll.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\msprivs.dll
    c:\windows\system32\kerberos.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\netlogon.dll
    c:\windows\system32\w32time.dll
    c:\windows\system32\msvcp60.dll
    c:\windows\system32\schannel.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\wdigest.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\scecli.dll
    c:\windows\system32\ipsecsvc.dll
    c:\windows\system32\authz.dll
    c:\windows\system32\oakley.dll
    c:\windows\system32\winipsec.dll
    c:\windows\system32\pstorsvc.dll
    c:\windows\system32\psbase.dll
    c:\windows\system32\imon.dll
    c:\windows\system32\wsock32.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\dssenh.dll
    c:\windows\system32\xpsp2res.dll
    C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    c:\windows\system32\svchost.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\rpcss.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\termsrv.dll
    c:\windows\system32\icaapi.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\authz.dll
    c:\windows\system32\mstlsapi.dll
    c:\windows\system32\activeds.dll
    c:\windows\system32\adsldpc.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\regapi.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\svchost.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\rpcss.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\imon.dll
    c:\windows\system32\wsock32.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\winrnr.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\rasadhlp.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\svchost.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\shsvcs.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\dhcpcsvc.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\imon.dll
    c:\windows\system32\wsock32.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\wzcsvc.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\wmi.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\esent.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\rastls.dll
    c:\windows\system32\cryptui.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\mprapi.dll
    c:\windows\system32\activeds.dll
    c:\windows\system32\adsldpc.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\rasapi32.dll
    c:\windows\system32\rasman.dll
    c:\windows\system32\tapi32.dll
    c:\windows\system32\schannel.dll
    c:\windows\system32\winscard.dll
    c:\windows\system32\raschap.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\schedsvc.dll
    c:\windows\system32\ntdsapi.dll
    c:\windows\system32\msidle.dll
    c:\windows\system32\audiosrv.dll
    c:\windows\system32\wkssvc.dll
    c:\windows\system32\cryptsvc.dll
    c:\windows\system32\certcli.dll
    c:\windows\system32\ersvc.dll
    c:\windows\system32\es.dll
    c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    c:\windows\system32\srvsvc.dll
    c:\windows\system32\hidserv.dll
    c:\windows\system32\hid.dll
    c:\windows\system32\netman.dll
    c:\windows\system32\netshell.dll
    c:\windows\system32\credui.dll
    c:\windows\system32\wzcsapi.dll
    c:\windows\system32\upnp.dll
    c:\windows\system32\winhttp.dll
    c:\windows\system32\ssdpapi.dll
    c:\windows\system32\browser.dll
    c:\windows\system32\wuauserv.dll
    c:\windows\system32\wbem\wmisvc.dll
    c:\windows\system32\vssapi.dll
    c:\windows\system32\wuaueng.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\cabinet.dll
    c:\windows\system32\mspatcha.dll
    c:\windows\system32\w32time.dll
    c:\windows\system32\msvcp60.dll
    c:\windows\system32\trkwks.dll
    c:\windows\system32\srsvc.dll
    c:\windows\system32\powrprof.dll
    c:\windows\system32\sens.dll
    c:\windows\system32\seclogon.dll
    c:\windows\system32\netcfgx.dll
    c:\windows\system32\clusapi.dll
    c:\windows\system32\wscsvc.dll
    c:\windows\system32\msi.dll
    c:\windows\system32\wbem\wbemcore.dll
    c:\windows\system32\wbem\esscli.dll
    c:\windows\system32\wbem\wbemcomn.dll
    c:\windows\system32\wbem\fastprox.dll
    c:\windows\system32\sxs.dll
    c:\windows\system32\sfc.dll
    c:\windows\system32\sfc_os.dll
    c:\windows\system32\ipnathlp.dll
    c:\windows\system32\authz.dll
    c:\windows\system32\comsvcs.dll
    c:\windows\system32\colbact.dll
    c:\windows\system32\mtxclu.dll
    c:\windows\system32\resutils.dll
    c:\windows\system32\wbem\wmiutils.dll
    c:\windows\system32\wbem\repdrvfs.dll
    c:\windows\system32\wbem\wmiprvsd.dll
    c:\windows\system32\ncobjapi.dll
    c:\windows\system32\tapisrv.dll
    c:\windows\system32\psapi.dll
    c:\windows\system32\wbem\wbemess.dll
    c:\windows\system32\unimdm.tsp
    c:\windows\system32\uniplat.dll
    c:\windows\system32\kmddsp.tsp
    c:\windows\system32\rasadhlp.dll
    c:\windows\system32\ndptsp.tsp
    c:\windows\system32\ipconf.tsp
    c:\windows\system32\h323.tsp
    c:\windows\system32\rasdlg.dll
    c:\windows\system32\hidphone.tsp
    c:\windows\system32\wbem\ncprov.dll
    c:\windows\system32\rasmans.dll
    c:\windows\system32\winipsec.dll
    c:\windows\system32\rastapi.dll
    c:\windows\system32\rasppp.dll
    c:\windows\system32\ntlsapi.dll
    c:\windows\system32\kerberos.dll
    c:\windows\system32\cryptdll.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\wbem\wbemcons.dll
    c:\windows\system32\catsrvut.dll
    c:\windows\system32\catsrv.dll
    c:\windows\system32\mfcsubs.dll
    c:\windows\system32\mpr.dll
    c:\windows\system32\urlmon.dll
    c:\windows\system32\svchost.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\dnsrslvr.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\imon.dll
    c:\windows\system32\wsock32.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\svchost.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\lmhsvc.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\webclnt.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\ssdpsrv.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\wshtcpip.dll
    C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
    c:\windows\system32\spoolsv.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\spoolss.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\rasadhlp.dll
    c:\windows\system32\localspl.dll
    c:\windows\system32\sfc_os.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\netapi32.dll
    c:\windows\system32\cnbjmon.dll
    c:\windows\system32\pjlmon.dll
    c:\windows\system32\tcpmon.dll
    c:\windows\system32\usbmon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\winrnr.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\win32spl.dll
    c:\windows\system32\netrap.dll
    c:\windows\system32\ntdsapi.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\inetpp.dll
    c:\windows\system32\xpsp2res.dll
    C:\WINDOWS\EXPLORER.EXE
    c:\windows\explorer.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\browseui.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\shdocvw.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\cryptui.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\userenv.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\cscui.dll
    c:\windows\system32\cscdll.dll
    c:\windows\system32\themeui.dll
    c:\windows\system32\msimg32.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\actxprxy.dll
    c:\windows\system32\msutb.dll
    c:\windows\system32\msctf.dll
    c:\program files\fichiers communs\ahead\lib\nerosearchbar.dll
    c:\program files\fichiers communs\ahead\lib\msvcr71.dll
    c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
    c:\program files\fichiers communs\ahead\lib\mfc71u.dll
    c:\program files\fichiers communs\ahead\lib\msvcp71.dll
    c:\program files\fichiers communs\ahead\lib\bcgcbpro800u.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\system32\odbc32.dll
    c:\windows\system32\odbcint.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\ntshrui.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\linkinfo.dll
    c:\windows\system32\urlmon.dll
    c:\windows\system32\netshell.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\credui.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\iphlpapi.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\stobject.dll
    c:\windows\system32\batmeter.dll
    c:\windows\system32\powrprof.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\wpdshserviceobj.dll
    c:\windows\system32\winhttp.dll
    c:\windows\system32\mydocs.dll
    c:\windows\system32\portabledevicetypes.dll
    c:\windows\system32\portabledeviceapi.dll
    c:\windows\system32\wdmaud.drv
    c:\windows\system32\msacm32.drv
    c:\windows\system32\midimap.dll
    c:\windows\system32\sxs.dll
    c:\progra~1\wanadoo\inactivity.dll
    c:\windows\system32\mpr.dll
    c:\windows\system32\drprov.dll
    c:\windows\system32\ntlanman.dll
    c:\windows\system32\netui0.dll
    c:\windows\system32\netui1.dll
    c:\windows\system32\netrap.dll
    c:\windows\system32\davclnt.dll
    c:\program files\grisoft\avg anti-spyware 7.5\shellexecutehook.dll
    c:\windows\system32\browselc.dll
    c:\windows\system32\duser.dll
    c:\windows\system32\mlang.dll
    c:\windows\system32\msgina.dll
    c:\windows\system32\wiashext.dll
    c:\windows\system32\shdoclc.dll
    C:\WINDOWS\RTHDCPL.EXE
    c:\windows\rthdcpl.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\dsound.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\version.dll
    c:\windows\system32\hhctrl.ocx
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\mpr.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\comdlg32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\mui\000c\hhctrlui.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\wdmaud.drv
    c:\windows\system32\msacm32.drv
    c:\windows\system32\msacm32.dll
    c:\windows\system32\midimap.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\ksuser.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    C:\WINDOWS\SYSTEM32\VTTIMER.EXE
    c:\windows\system32\vttimer.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\powrprof.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\oleaut32.dll
    C:\WINDOWS\SYSTEM32\S3TRAYP.EXE
    c:\windows\system32\s3trayp.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\s3cfg3d.dll
    c:\windows\system32\s3disply.dll
    c:\windows\system32\s3gamma2.dll
    c:\windows\system32\s3info2.dll
    c:\windows\system32\s3ovrlay.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\oleaut32.dll
    C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE
    c:\program files\cyberlink\powerdvd\pdvdserv.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\ole32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\version.dll
    c:\program files\cyberlink\powerdvd\clrcengine3.dll
    c:\program files\cyberlink\powerdvd\msvcr71.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    C:\WINDOWS\SYSTEM32\RUNDLL32.EXE
    c:\windows\system32\rundll32.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\bthprops.cpl
    c:\windows\system32\devmgr.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\wmi.dll
    c:\windows\system32\mpr.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    C:\WINDOWS\VVX1000.EXE
    c:\windows\vvx1000.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\oledlg.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    C:\PROGRA~1\WANADOO\TASKBARICON.EXE
    c:\progra~1\wanadoo\taskbaricon.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\progra~1\wanadoo\outilsft.dll
    c:\progra~1\wanadoo\mfc42.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\progra~1\wanadoo\styleihm.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\msvfw32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\progra~1\wanadoo\skin\default\main\resourcestyle.dll
    c:\progra~1\wanadoo\wooihmf.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\oleaut32.dll
    C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
    c:\program files\grisoft\avg anti-spyware 7.5\avgas.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\psapi.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\msvcrt.dll
    c:\program files\grisoft\avg anti-spyware 7.5\engine.dll
    c:\windows\system32\shfolder.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\msimg32.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\version.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\cscui.dll
    c:\windows\system32\cscdll.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\shdocvw.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\cryptui.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\winrnr.dll
    c:\windows\system32\rasadhlp.dll
    C:\PROGRAM FILES\ESET\NOD32KUI.EXE
    c:\program files\eset\nod32kui.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\mfc42u.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\mfc42loc.dll
    c:\program files\eset\nod32rui.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\samlib.dll
    c:\program files\eset\pu_amon.dll
    c:\program files\eset\pr_amon.dll
    c:\program files\eset\pu_dmon.dll
    c:\program files\eset\pr_dmon.dll
    c:\program files\eset\pu_emon.dll
    c:\program files\eset\pr_emon.dll
    c:\program files\eset\pu_imon.dll
    c:\program files\eset\pr_imon.dll
    c:\program files\eset\pu_nod32.dll
    c:\program files\eset\pr_nod32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\oleaut32.dll
    c:\program files\eset\pu_upd.dll
    c:\program files\eset\pr_upd.dll
    c:\progra~1\wanadoo\inactivity.dll
    c:\windows\system32\apphelp.dll
    C:\WINDOWS\SYSTEM32\CTFMON.EXE
    c:\windows\system32\ctfmon.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\msutb.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    C:\PROGRAM FILES\FICHIERS COMMUNS\AHEAD\LIB\NMBGMONITOR.EXE
    c:\program files\fichiers communs\ahead\lib\nmbgmonitor.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\shlwapi.dll
    c:\program files\fichiers communs\ahead\lib\msvcp71.dll
    c:\program files\fichiers communs\ahead\lib\msvcr71.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\version.dll
    c:\windows\system32\xpsp2res.dll
    c:\program files\fichiers communs\ahead\lib\advrcntr2.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\winspool.drv
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\faultrep.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\msctf.dll
    c:\program files\fichiers communs\ahead\lib\nmindexstoresvrps.dll
    c:\program files\fichiers communs\ahead\lib\nmdataservices.dll
    c:\windows\system32\iprop.dll
    C:\PROGRAM FILES\MACROGAMING\SWEETIM\SWEETIM.EXE
    c:\program files\macrogaming\sweetim\sweetim.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\program files\macrogaming\sweetim\mgupdatesupport.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\program files\macrogaming\sweetim\mgcommunication.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\urlmon.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\program files\macrogaming\sweetim\mgieplayer.dll
    c:\program files\macrogaming\sweetim\mgcommon.dll
    c:\program files\macrogaming\sweetim\msvcp71.dll
    c:\program files\macrogaming\sweetim\mghooking.dll
    c:\program files\macrogaming\sweetim\mgxml_wrapper.dll
    c:\program files\macrogaming\sweetim\mgconfig.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\rasapi32.dll
    c:\windows\system32\rasman.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\tapi32.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\sensapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\winrnr.dll
    c:\windows\system32\rasadhlp.dll
    C:\PROGRAM FILES\FICHIERS COMMUNS\AHEAD\LIB\NMINDEXSTORESVR.EXE
    c:\program files\fichiers communs\ahead\lib\nmindexstoresvr.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\shfolder.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\program files\fichiers communs\ahead\lib\nmsqldb.dll
    c:\program files\fichiers communs\ahead\lib\msvcp71.dll
    c:\program files\fichiers communs\ahead\lib\msvcr71.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\version.dll
    c:\program files\fichiers communs\ahead\lib\nmlogcxx.dll
    c:\program files\fichiers communs\ahead\lib\log4cxx.dll
    c:\windows\system32\odbc32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\odbcint.dll
    c:\windows\system32\xpsp2res.dll
    c:\program files\fichiers communs\ahead\lib\nmcofoundation.dll
    c:\program files\fichiers communs\ahead\lib\nmpluginbase.dll
    c:\program files\fichiers communs\ahead\lib\nmfulltextextraction.dll
    c:\windows\system32\urlmon.dll
    c:\windows\system32\query.dll
    c:\program files\fichiers communs\ahead\lib\nmsearchpluginsimilarimages.dll
    c:\program files\fichiers communs\ahead\lib\neroipp.dll
    c:\program files\fichiers communs\ahead\lib\nmdataservices.dll
    c:\windows\system32\iprop.dll
    c:\windows\system32\msctf.dll
    c:\program files\fichiers communs\ahead\lib\nmindexingserviceps.dll
    c:\program files\fichiers communs\ahead\lib\nmindexstoresvrps.dll
    C:\PROGRA~1\WANADOO\GESTIONNAIREINTERNET.EXE
    c:\progra~1\wanadoo\gestionnaireinternet.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\progra~1\wanadoo\outilsft.dll
    c:\progra~1\wanadoo\mfc42.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\progra~1\wanadoo\styleihm.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\msvfw32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\version.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\progra~1\wanadoo\wooihmf.dll
    c:\windows\system32\apphelp.dll
    c:\progra~1\wanadoo\inactivity.dll
    c:\progra~1\wanadoo\skin\default\main\resourcestyle.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\alertm~1\alertc~1.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\sxs.dll
    c:\progra~1\wanadoo\detectcomponent.dll
    c:\progra~1\wanadoo\synchrodll.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\rasapi32.dll
    c:\windows\system32\rasman.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\tapi32.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\sensapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\urlmon.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\rasadhlp.dll
    C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
    c:\program files\msn messenger\msnmsgr.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcr80.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msimg32.dll
    c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
    c:\program files\msn messenger\msncore.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\imm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\msacm32.dll
    c:\program files\msn messenger\msidcrl40.dll
    c:\windows\system32\sensapi.dll
    c:\windows\system32\psapi.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\program files\msn messenger\contactsux.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\cryptnet.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\winhttp.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\program files\macrogaming\sweetim\mgupdatesupport.dll
    c:\program files\macrogaming\sweetim\mgcommunication.dll
    c:\windows\system32\urlmon.dll
    c:\program files\macrogaming\sweetim\mgieplayer.dll
    c:\program files\macrogaming\sweetim\mgcommon.dll
    c:\program files\macrogaming\sweetim\msvcp71.dll
    c:\program files\macrogaming\sweetim\mghooking.dll
    c:\program files\macrogaming\sweetim\mgxml_wrapper.dll
    c:\program files\macrogaming\sweetim\mgconfig.dll
    c:\program files\macrogaming\sweetim\mgmsnmessengeradapter.dll
    c:\windows\system32\oleacc.dll
    c:\windows\system32\msvcp60.dll
    c:\program files\macrogaming\sweetim\mgmsnauto.dll
    c:\program files\macrogaming\sweetim\mgsweetim.dll
    c:\program files\macrogaming\sweetim\mgflashplayer.dll
    c:\program files\macrogaming\sweetim\mgarchive.dll
    c:\windows\system32\cabinet.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\shdocvw.dll
    c:\windows\system32\cryptui.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\system32\inetcomm.dll
    c:\windows\system32\msoert2.dll
    c:\windows\system32\inetres.dll
    c:\windows\system32\mlang.dll
    c:\program files\msn messenger\msgslang.8.1.0178.00.dll
    c:\program files\msn messenger\msgsres.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\es.dll
    c:\program files\msn messenger\lcapi.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\dsound.dll
    c:\windows\system32\rasapi32.dll
    c:\windows\system32\rasman.dll
    c:\windows\system32\tapi32.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\msdmo.dll
    c:\program files\msn messenger\lcres.dll
    c:\program files\msn messenger\rtmpltfm.dll
    c:\windows\system32\wdmaud.drv
    c:\windows\system32\msacm32.drv
    c:\windows\system32\midimap.dll
    c:\windows\system32\devenum.dll
    c:\windows\system32\quartz.dll
    c:\windows\system32\ddraw.dll
    c:\windows\system32\dciman32.dll
    c:\windows\system32\d3dim700.dll
    c:\windows\system32\dpnhupnp.dll
    c:\windows\system32\schannel.dll
    c:\windows\system32\msxml3.dll
    c:\windows\system32\sxs.dll
    c:\program files\msn messenger\msgswcam.dll
    c:\windows\system32\sirenacm.dll
    c:\windows\system32\ksproxy.ax
    c:\windows\system32\ksuser.dll
    c:\windows\system32\kswdmcap.ax
    c:\windows\system32\mfc42.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\vvx1000.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\winrnr.dll
    c:\windows\system32\rasadhlp.dll
    c:\program files\msn messenger\lmcdata.dll
    c:\program files\msn messenger\contact.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\dssenh.dll
    c:\windows\system32\riched20.dll
    c:\program files\msn messenger\dfsr.dll
    c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcp80.dll
    c:\windows\system32\esent.dll
    c:\windows\system32\shdoclc.dll
    c:\program files\msn messenger\custsat.dll
    c:\program files\msn messenger\abssm.dll
    c:\windows\system32\mshtml.dll
    c:\windows\system32\msls31.dll
    c:\program files\msn messenger\usnsvcps.dll
    c:\program files\msn messenger\softphoneps.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\linkinfo.dll
    c:\windows\system32\ntshrui.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\jscript.dll
    c:\progra~1\wanadoo\inactivity.dll
    c:\windows\system32\vbscript.dll
    c:\windows\system32\macromed\flash\flash9d.ocx
    c:\windows\system32\mscoree.dll
    c:\windows\microsoft.net\framework\v2.0.50727\mscorie.dll
    c:\windows\system32\ddrawex.dll
    c:\windows\system32\wmvcore.dll
    c:\windows\system32\wmasf.dll
    c:\windows\system32\wmadmod.dll
    c:\windows\system32\mfplat.dll
    C:\PROGRA~1\WANADOO\COMCOMP.EXE
    c:\progra~1\wanadoo\comcomp.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\progra~1\wanadoo\outilsft.dll
    c:\progra~1\wanadoo\mfc42.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\progra~1\wanadoo\wlanmanager.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\progra~1\wanadoo\msvcp60.dll
    c:\progra~1\wanadoo\ifhelper.dll
    c:\windows\system32\w32n50.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\windows\system32\shlwapi.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\progra~1\wanadoo\gestappft.dll
    c:\progra~1\wanadoo\modifft.dll
    c:\progra~1\wanadoo\pmstub.dll
    c:\progra~1\wanadoo\phonemanager.dll
    c:\progra~1\wanadoo\detectcomponent.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\tapi3.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\confmsp.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\termmgr.dll
    c:\windows\system32\h323msp.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\tapi32.dll
    c:\windows\system32\inetmib1.dll
    c:\windows\system32\snmpapi.dll
    c:\windows\system32\mprapi.dll
    c:\windows\system32\activeds.dll
    c:\windows\system32\adsldpc.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\rasapi32.dll
    c:\windows\system32\rasman.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\apphelp.dll
    c:\progra~1\wanadoo\ndis_gen.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\icmp.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\dhcpcsvc.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\winrnr.dll
    c:\windows\system32\rasadhlp.dll
    C:\PROGRA~1\WANADOO\TOASTER.EXE
    c:\progra~1\wanadoo\toaster.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\progra~1\wanadoo\styleihm.dll
    c:\windows\system32\msvfw32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\comctl32.dll
    c:\progra~1\wanadoo\mfc42.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\progra~1\wanadoo\msvcp60.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\version.dll
    c:\windows\system32\alertm~1\alertc~1.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\sxs.dll
    c:\progra~1\wanadoo\skin\default\main\resourcestyle.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\wdmaud.drv
    c:\windows\system32\wintrust.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\msacm32.drv
    c:\windows\system32\msacm32.dll
    c:\windows\system32\midimap.dll
    c:\windows\system32\msadp32.acm
    C:\PROGRA~1\WANADOO\INACTIVITY.EXE
    c:\progra~1\wanadoo\inactivity.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\progra~1\wanadoo\mfc42.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\oleaut32.dll
    c:\progra~1\wanadoo\msvcp60.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\windows\system32\shlwapi.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\version.dll
    c:\windows\system32\alertm~1\alertc~1.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\sxs.dll
    c:\progra~1\wanadoo\inactivity.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2hel
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. jul1
     
    Scan Results
    Ad-Aware 2007 Free Edition
    Log File Created on:2007-10-1522:57:39
    Using Definitions File:C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\core.aawdef
    Computer name:ORDI-72F0C5A64C
    Name of user performing scan:SYSTEM
    Name of user ordering scan:ORDI
    Scan completed successfully

    System Information
    File Version Information
    Ad-Aware 2007 Settings
    Extended Ad-Aware 2007 Settings
    Database Information
    Scan Statistics
    Scan Detailed Statistics
    Infections Found
    Listing of running processes
    System Information
    Number of processors:1
    Processor type:AMD Sempron(tm) Processor 3400+
    Memory Available:26%
    Total Physical Memory:468942848 Bytes
    Available Physical Memory:118403072 Bytes
    Total Page File Size:1105747968 Bytes
    Available On Page File:604053504 Bytes
    Total Virtual Memory:2147352576 Bytes
    Available Virtual Memory:2001338368 Bytes
    OS:Microsoft Windows XP 5.1 (Build 2600)
    [to top]
    File Verion Information
    File Version
    CEAPI.dll 7, 0, 1, 5
    aawservice.exe 7, 0, 1, 5
    Ad-Aware2007.exe 7.0.1.5
    [to top]
    Ad-Aware 2007 Settings
    Skipping files larger than:1048576 Bytes
    Ignoring infections with lower TAI than:3
    Safe Mode:False
    [to top]
    Extended Ad-Aware 2007 Settings
    Unload malicious processes and modules
    Unload Modules
    Let Windows remove files at Start-Up
    Deactivate Ad-Watch
    Re-analyze Scan Result
    Update Definitions on startup
    Delete Restored Items
    Permanent Archive Caching
    Write Protect System Files
    Create Log file
    Include basic settings
    Include advanced settings
    Include user and computer name
    Environment information
    Running processes
    Running processes and modules
    Include info about ignored objects in log file
    Consider definitions File Outdated after x days
    Proxy URL
    Proxy Port
    [to top]
    Database Info
    Version number:7
    Build Number:0
    Build Date and Time:2007/07/0507:55:33
    [to top]
    Scan Statistics
    Method:Smart

    Items Scanned:85010
    Infections Detected:29
    Infections Removed:0
    Infections Quarantined:0
    Infections Ignored:0
    [to top]
    Scan Detailed Statistics
    Type Critical Total
    Process Scan 0 0
    Registry Scan 0 0
    Registry PE Scan 0 0
    Hosts Scan 0 0
    File Scan 0 0
    Folder Scan 0 0
    LSP Scan 0 0
    ADS Scan 0 0
    Cookie Scan 28 28
    File Hash Scan 0 0
    [to top]
    Infections Found
    Family Id Name Category TAI
    725 Tracking Cookie DataMiner 3
    [600000173] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat bluestreak.com id /
    [600000000] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat zedo.com geo /
    [600000144] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat doubleclick.net id /
    [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat smartadserver.com TestIfCookieP /
    [600000179] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat atdmt.com AA002 /
    [600000295] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat adtech.de JEB2 /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRID /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRimp /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRca /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRcp /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRpl /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRcr /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com PRpc /
    [600000093] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat ads.pointroll.com F1COm7 /
    [600000171] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat bs.serving-sys.com eyeblaster /
    [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat serving-sys.com A2 /
    [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat serving-sys.com B2 /
    [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat serving-sys.com C3 /
    [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat serving-sys.com D3 /
    [600000408] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat serving-sys.com E2 /
    [600000001] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat adserver.aol.fr JEB2 /
    [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat weborama.fr oo136131 /
    [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat weborama.fr AFFICHE_W /
    [600000225] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat weborama.fr wbo_temps_reel /
    [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat advertising.com ACID /
    [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat advertising.com BASE /
    [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat advertising.com F1 /
    [600000187] Browser: Internet Explorer Cookie: C:\Documents and Settings\ORDI\Cookies\index.dat advertising.com ROLL /

    9999 MRU Object MRU Object 0
    [1] MRU Path: C:\Documents and Settings\ORDI\Recent Count: 4

    Quarantined Objects
    Family Id Name Category TAI

    Removed Objects
    Family Id Name Category TAI
    [to top]
    Listing of Running Processes
    C:\WINDOWS\SYSTEM32\SMSS.EXE
    c:\windows\system32\smss.exe
    c:\windows\system32\ntdll.dll
    C:\WINDOWS\SYSTEM32\CSRSS.EXE
    c:\windows\system32\csrss.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\csrsrv.dll
    c:\windows\system32\basesrv.dll
    c:\windows\system32\winsrv.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\sxs.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\ole32.dll
    C:\WINDOWS\SYSTEM32\WINLOGON.EXE
    c:\windows\system32\winlogon.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\authz.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\nddeapi.dll
    c:\windows\system32\profmap.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\psapi.dll
    c:\windows\system32\regapi.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\version.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\msgina.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\odbc32.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\odbcint.dll
    c:\windows\system32\shsvcs.dll
    c:\windows\system32\sfc.dll
    c:\windows\system32\sfc_os.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\winscard.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\sxs.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\cscdll.dll
    c:\windows\system32\wlnotify.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\mpr.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\cscui.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\mprapi.dll
    c:\windows\system32\activeds.dll
    c:\windows\system32\adsldpc.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\wdmaud.drv
    c:\windows\system32\msacm32.drv
    c:\windows\system32\msacm32.dll
    c:\windows\system32\midimap.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\xpsp2res.dll
    C:\WINDOWS\SYSTEM32\SERVICES.EXE
    c:\windows\system32\services.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\scesrv.dll
    c:\windows\system32\authz.dll
    c:\windows\system32\umpnpmgr.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\ncobjapi.dll
    c:\windows\system32\msvcp60.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\eventlog.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\psapi.dll
    c:\windows\system32\wtsapi32.dll
    C:\WINDOWS\SYSTEM32\LSASS.EXE
    c:\windows\system32\lsass.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\lsasrv.dll
    c:\windows\system32\mpr.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\ntdsapi.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\samsrv.dll
    c:\windows\system32\cryptdll.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\msprivs.dll
    c:\windows\system32\kerberos.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\netlogon.dll
    c:\windows\system32\w32time.dll
    c:\windows\system32\msvcp60.dll
    c:\windows\system32\schannel.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\wdigest.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\scecli.dll
    c:\windows\system32\ipsecsvc.dll
    c:\windows\system32\authz.dll
    c:\windows\system32\oakley.dll
    c:\windows\system32\winipsec.dll
    c:\windows\system32\pstorsvc.dll
    c:\windows\system32\psbase.dll
    c:\windows\system32\imon.dll
    c:\windows\system32\wsock32.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\dssenh.dll
    c:\windows\system32\xpsp2res.dll
    C:\WINDOWS\SYSTEM32\SVCHOST.EXE
    c:\windows\system32\svchost.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\rpcss.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\termsrv.dll
    c:\windows\system32\icaapi.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\authz.dll
    c:\windows\system32\mstlsapi.dll
    c:\windows\system32\activeds.dll
    c:\windows\system32\adsldpc.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\regapi.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\svchost.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\rpcss.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\imon.dll
    c:\windows\system32\wsock32.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\winrnr.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\rasadhlp.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\svchost.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\shsvcs.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\dhcpcsvc.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\imon.dll
    c:\windows\system32\wsock32.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\wzcsvc.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\wmi.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\esent.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\rastls.dll
    c:\windows\system32\cryptui.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\mprapi.dll
    c:\windows\system32\activeds.dll
    c:\windows\system32\adsldpc.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\rasapi32.dll
    c:\windows\system32\rasman.dll
    c:\windows\system32\tapi32.dll
    c:\windows\system32\schannel.dll
    c:\windows\system32\winscard.dll
    c:\windows\system32\raschap.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\schedsvc.dll
    c:\windows\system32\ntdsapi.dll
    c:\windows\system32\msidle.dll
    c:\windows\system32\audiosrv.dll
    c:\windows\system32\wkssvc.dll
    c:\windows\system32\cryptsvc.dll
    c:\windows\system32\certcli.dll
    c:\windows\system32\ersvc.dll
    c:\windows\system32\es.dll
    c:\windows\pchealth\helpctr\binaries\pchsvc.dll
    c:\windows\system32\srvsvc.dll
    c:\windows\system32\hidserv.dll
    c:\windows\system32\hid.dll
    c:\windows\system32\netman.dll
    c:\windows\system32\netshell.dll
    c:\windows\system32\credui.dll
    c:\windows\system32\wzcsapi.dll
    c:\windows\system32\upnp.dll
    c:\windows\system32\winhttp.dll
    c:\windows\system32\ssdpapi.dll
    c:\windows\system32\browser.dll
    c:\windows\system32\wuauserv.dll
    c:\windows\system32\wbem\wmisvc.dll
    c:\windows\system32\vssapi.dll
    c:\windows\system32\wuaueng.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\cabinet.dll
    c:\windows\system32\mspatcha.dll
    c:\windows\system32\w32time.dll
    c:\windows\system32\msvcp60.dll
    c:\windows\system32\trkwks.dll
    c:\windows\system32\srsvc.dll
    c:\windows\system32\powrprof.dll
    c:\windows\system32\sens.dll
    c:\windows\system32\seclogon.dll
    c:\windows\system32\netcfgx.dll
    c:\windows\system32\clusapi.dll
    c:\windows\system32\wscsvc.dll
    c:\windows\system32\msi.dll
    c:\windows\system32\wbem\wbemcore.dll
    c:\windows\system32\wbem\esscli.dll
    c:\windows\system32\wbem\wbemcomn.dll
    c:\windows\system32\wbem\fastprox.dll
    c:\windows\system32\sxs.dll
    c:\windows\system32\sfc.dll
    c:\windows\system32\sfc_os.dll
    c:\windows\system32\ipnathlp.dll
    c:\windows\system32\authz.dll
    c:\windows\system32\comsvcs.dll
    c:\windows\system32\colbact.dll
    c:\windows\system32\mtxclu.dll
    c:\windows\system32\resutils.dll
    c:\windows\system32\wbem\wmiutils.dll
    c:\windows\system32\wbem\repdrvfs.dll
    c:\windows\system32\wbem\wmiprvsd.dll
    c:\windows\system32\ncobjapi.dll
    c:\windows\system32\tapisrv.dll
    c:\windows\system32\psapi.dll
    c:\windows\system32\wbem\wbemess.dll
    c:\windows\system32\unimdm.tsp
    c:\windows\system32\uniplat.dll
    c:\windows\system32\kmddsp.tsp
    c:\windows\system32\rasadhlp.dll
    c:\windows\system32\ndptsp.tsp
    c:\windows\system32\ipconf.tsp
    c:\windows\system32\h323.tsp
    c:\windows\system32\rasdlg.dll
    c:\windows\system32\hidphone.tsp
    c:\windows\system32\wbem\ncprov.dll
    c:\windows\system32\rasmans.dll
    c:\windows\system32\winipsec.dll
    c:\windows\system32\rastapi.dll
    c:\windows\system32\rasppp.dll
    c:\windows\system32\ntlsapi.dll
    c:\windows\system32\kerberos.dll
    c:\windows\system32\cryptdll.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\wbem\wbemcons.dll
    c:\windows\system32\catsrvut.dll
    c:\windows\system32\catsrv.dll
    c:\windows\system32\mfcsubs.dll
    c:\windows\system32\mpr.dll
    c:\windows\system32\urlmon.dll
    c:\windows\system32\svchost.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\dnsrslvr.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\imon.dll
    c:\windows\system32\wsock32.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\svchost.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\lmhsvc.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\webclnt.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\ssdpsrv.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\wshtcpip.dll
    C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
    c:\windows\system32\spoolsv.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\spoolss.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\rasadhlp.dll
    c:\windows\system32\localspl.dll
    c:\windows\system32\sfc_os.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\netapi32.dll
    c:\windows\system32\cnbjmon.dll
    c:\windows\system32\pjlmon.dll
    c:\windows\system32\tcpmon.dll
    c:\windows\system32\usbmon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\winrnr.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\win32spl.dll
    c:\windows\system32\netrap.dll
    c:\windows\system32\ntdsapi.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\inetpp.dll
    c:\windows\system32\xpsp2res.dll
    C:\WINDOWS\EXPLORER.EXE
    c:\windows\explorer.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\browseui.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\shdocvw.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\cryptui.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\userenv.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\cscui.dll
    c:\windows\system32\cscdll.dll
    c:\windows\system32\themeui.dll
    c:\windows\system32\msimg32.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\actxprxy.dll
    c:\windows\system32\msutb.dll
    c:\windows\system32\msctf.dll
    c:\program files\fichiers communs\ahead\lib\nerosearchbar.dll
    c:\program files\fichiers communs\ahead\lib\msvcr71.dll
    c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
    c:\program files\fichiers communs\ahead\lib\mfc71u.dll
    c:\program files\fichiers communs\ahead\lib\msvcp71.dll
    c:\program files\fichiers communs\ahead\lib\bcgcbpro800u.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\system32\odbc32.dll
    c:\windows\system32\odbcint.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\ntshrui.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\linkinfo.dll
    c:\windows\system32\urlmon.dll
    c:\windows\system32\netshell.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\credui.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\iphlpapi.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\stobject.dll
    c:\windows\system32\batmeter.dll
    c:\windows\system32\powrprof.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\wpdshserviceobj.dll
    c:\windows\system32\winhttp.dll
    c:\windows\system32\mydocs.dll
    c:\windows\system32\portabledevicetypes.dll
    c:\windows\system32\portabledeviceapi.dll
    c:\windows\system32\wdmaud.drv
    c:\windows\system32\msacm32.drv
    c:\windows\system32\midimap.dll
    c:\windows\system32\sxs.dll
    c:\progra~1\wanadoo\inactivity.dll
    c:\windows\system32\mpr.dll
    c:\windows\system32\drprov.dll
    c:\windows\system32\ntlanman.dll
    c:\windows\system32\netui0.dll
    c:\windows\system32\netui1.dll
    c:\windows\system32\netrap.dll
    c:\windows\system32\davclnt.dll
    c:\program files\grisoft\avg anti-spyware 7.5\shellexecutehook.dll
    c:\windows\system32\browselc.dll
    c:\windows\system32\duser.dll
    c:\windows\system32\mlang.dll
    c:\windows\system32\msgina.dll
    c:\windows\system32\wiashext.dll
    c:\windows\system32\shdoclc.dll
    C:\WINDOWS\RTHDCPL.EXE
    c:\windows\rthdcpl.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\dsound.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\version.dll
    c:\windows\system32\hhctrl.ocx
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\mpr.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\comdlg32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\mui\000c\hhctrlui.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\wdmaud.drv
    c:\windows\system32\msacm32.drv
    c:\windows\system32\msacm32.dll
    c:\windows\system32\midimap.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\ksuser.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    C:\WINDOWS\SYSTEM32\VTTIMER.EXE
    c:\windows\system32\vttimer.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\powrprof.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\oleaut32.dll
    C:\WINDOWS\SYSTEM32\S3TRAYP.EXE
    c:\windows\system32\s3trayp.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\s3cfg3d.dll
    c:\windows\system32\s3disply.dll
    c:\windows\system32\s3gamma2.dll
    c:\windows\system32\s3info2.dll
    c:\windows\system32\s3ovrlay.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\oleaut32.dll
    C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE
    c:\program files\cyberlink\powerdvd\pdvdserv.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\ole32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\version.dll
    c:\program files\cyberlink\powerdvd\clrcengine3.dll
    c:\program files\cyberlink\powerdvd\msvcr71.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    C:\WINDOWS\SYSTEM32\RUNDLL32.EXE
    c:\windows\system32\rundll32.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\bthprops.cpl
    c:\windows\system32\devmgr.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\wmi.dll
    c:\windows\system32\mpr.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    C:\WINDOWS\VVX1000.EXE
    c:\windows\vvx1000.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\oledlg.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    C:\PROGRA~1\WANADOO\TASKBARICON.EXE
    c:\progra~1\wanadoo\taskbaricon.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\progra~1\wanadoo\outilsft.dll
    c:\progra~1\wanadoo\mfc42.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\progra~1\wanadoo\styleihm.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\msvfw32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\progra~1\wanadoo\skin\default\main\resourcestyle.dll
    c:\progra~1\wanadoo\wooihmf.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\oleaut32.dll
    C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
    c:\program files\grisoft\avg anti-spyware 7.5\avgas.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\psapi.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\msvcrt.dll
    c:\program files\grisoft\avg anti-spyware 7.5\engine.dll
    c:\windows\system32\shfolder.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\msimg32.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\version.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\cscui.dll
    c:\windows\system32\cscdll.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\shdocvw.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\cryptui.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\winrnr.dll
    c:\windows\system32\rasadhlp.dll
    C:\PROGRAM FILES\ESET\NOD32KUI.EXE
    c:\program files\eset\nod32kui.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\mfc42u.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\mfc42loc.dll
    c:\program files\eset\nod32rui.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\samlib.dll
    c:\program files\eset\pu_amon.dll
    c:\program files\eset\pr_amon.dll
    c:\program files\eset\pu_dmon.dll
    c:\program files\eset\pr_dmon.dll
    c:\program files\eset\pu_emon.dll
    c:\program files\eset\pr_emon.dll
    c:\program files\eset\pu_imon.dll
    c:\program files\eset\pr_imon.dll
    c:\program files\eset\pu_nod32.dll
    c:\program files\eset\pr_nod32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\oleaut32.dll
    c:\program files\eset\pu_upd.dll
    c:\program files\eset\pr_upd.dll
    c:\progra~1\wanadoo\inactivity.dll
    c:\windows\system32\apphelp.dll
    C:\WINDOWS\SYSTEM32\CTFMON.EXE
    c:\windows\system32\ctfmon.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\msutb.dll
    c:\windows\system32\shimeng.dll
    c:\windows\apppatch\acgenral.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msacm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    C:\PROGRAM FILES\FICHIERS COMMUNS\AHEAD\LIB\NMBGMONITOR.EXE
    c:\program files\fichiers communs\ahead\lib\nmbgmonitor.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\shlwapi.dll
    c:\program files\fichiers communs\ahead\lib\msvcp71.dll
    c:\program files\fichiers communs\ahead\lib\msvcr71.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\version.dll
    c:\windows\system32\xpsp2res.dll
    c:\program files\fichiers communs\ahead\lib\advrcntr2.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\winspool.drv
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\faultrep.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\msctf.dll
    c:\program files\fichiers communs\ahead\lib\nmindexstoresvrps.dll
    c:\program files\fichiers communs\ahead\lib\nmdataservices.dll
    c:\windows\system32\iprop.dll
    C:\PROGRAM FILES\MACROGAMING\SWEETIM\SWEETIM.EXE
    c:\program files\macrogaming\sweetim\sweetim.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\program files\macrogaming\sweetim\mgupdatesupport.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\version.dll
    c:\windows\system32\shell32.dll
    c:\program files\macrogaming\sweetim\mgcommunication.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\urlmon.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\program files\macrogaming\sweetim\mgieplayer.dll
    c:\program files\macrogaming\sweetim\mgcommon.dll
    c:\program files\macrogaming\sweetim\msvcp71.dll
    c:\program files\macrogaming\sweetim\mghooking.dll
    c:\program files\macrogaming\sweetim\mgxml_wrapper.dll
    c:\program files\macrogaming\sweetim\mgconfig.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\ntmarta.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\msctf.dll
    c:\windows\system32\rasapi32.dll
    c:\windows\system32\rasman.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\tapi32.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\sensapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\winrnr.dll
    c:\windows\system32\rasadhlp.dll
    C:\PROGRAM FILES\FICHIERS COMMUNS\AHEAD\LIB\NMINDEXSTORESVR.EXE
    c:\program files\fichiers communs\ahead\lib\nmindexstoresvr.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\shfolder.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\program files\fichiers communs\ahead\lib\nmsqldb.dll
    c:\program files\fichiers communs\ahead\lib\msvcp71.dll
    c:\program files\fichiers communs\ahead\lib\msvcr71.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\version.dll
    c:\program files\fichiers communs\ahead\lib\nmlogcxx.dll
    c:\program files\fichiers communs\ahead\lib\log4cxx.dll
    c:\windows\system32\odbc32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\odbcint.dll
    c:\windows\system32\xpsp2res.dll
    c:\program files\fichiers communs\ahead\lib\nmcofoundation.dll
    c:\program files\fichiers communs\ahead\lib\nmpluginbase.dll
    c:\program files\fichiers communs\ahead\lib\nmfulltextextraction.dll
    c:\windows\system32\urlmon.dll
    c:\windows\system32\query.dll
    c:\program files\fichiers communs\ahead\lib\nmsearchpluginsimilarimages.dll
    c:\program files\fichiers communs\ahead\lib\neroipp.dll
    c:\program files\fichiers communs\ahead\lib\nmdataservices.dll
    c:\windows\system32\iprop.dll
    c:\windows\system32\msctf.dll
    c:\program files\fichiers communs\ahead\lib\nmindexingserviceps.dll
    c:\program files\fichiers communs\ahead\lib\nmindexstoresvrps.dll
    C:\PROGRA~1\WANADOO\GESTIONNAIREINTERNET.EXE
    c:\progra~1\wanadoo\gestionnaireinternet.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\progra~1\wanadoo\outilsft.dll
    c:\progra~1\wanadoo\mfc42.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\progra~1\wanadoo\styleihm.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\msvfw32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\version.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\progra~1\wanadoo\wooihmf.dll
    c:\windows\system32\apphelp.dll
    c:\progra~1\wanadoo\inactivity.dll
    c:\progra~1\wanadoo\skin\default\main\resourcestyle.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\alertm~1\alertc~1.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\sxs.dll
    c:\progra~1\wanadoo\detectcomponent.dll
    c:\progra~1\wanadoo\synchrodll.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\rasapi32.dll
    c:\windows\system32\rasman.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\tapi32.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\sensapi.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\urlmon.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\rasadhlp.dll
    C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
    c:\program files\msn messenger\msnmsgr.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcr80.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\msimg32.dll
    c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
    c:\program files\msn messenger\msncore.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\imm32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\msacm32.dll
    c:\program files\msn messenger\msidcrl40.dll
    c:\windows\system32\sensapi.dll
    c:\windows\system32\psapi.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\program files\msn messenger\contactsux.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\cryptnet.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\winhttp.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\program files\macrogaming\sweetim\mgupdatesupport.dll
    c:\program files\macrogaming\sweetim\mgcommunication.dll
    c:\windows\system32\urlmon.dll
    c:\program files\macrogaming\sweetim\mgieplayer.dll
    c:\program files\macrogaming\sweetim\mgcommon.dll
    c:\program files\macrogaming\sweetim\msvcp71.dll
    c:\program files\macrogaming\sweetim\mghooking.dll
    c:\program files\macrogaming\sweetim\mgxml_wrapper.dll
    c:\program files\macrogaming\sweetim\mgconfig.dll
    c:\program files\macrogaming\sweetim\mgmsnmessengeradapter.dll
    c:\windows\system32\oleacc.dll
    c:\windows\system32\msvcp60.dll
    c:\program files\macrogaming\sweetim\mgmsnauto.dll
    c:\program files\macrogaming\sweetim\mgsweetim.dll
    c:\program files\macrogaming\sweetim\mgflashplayer.dll
    c:\program files\macrogaming\sweetim\mgarchive.dll
    c:\windows\system32\cabinet.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\shdocvw.dll
    c:\windows\system32\cryptui.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\rsaenh.dll
    c:\windows\system32\comdlg32.dll
    c:\windows\system32\inetcomm.dll
    c:\windows\system32\msoert2.dll
    c:\windows\system32\inetres.dll
    c:\windows\system32\mlang.dll
    c:\program files\msn messenger\msgslang.8.1.0178.00.dll
    c:\program files\msn messenger\msgsres.dll
    c:\windows\system32\wtsapi32.dll
    c:\windows\system32\winsta.dll
    c:\windows\system32\es.dll
    c:\program files\msn messenger\lcapi.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\dsound.dll
    c:\windows\system32\rasapi32.dll
    c:\windows\system32\rasman.dll
    c:\windows\system32\tapi32.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\msdmo.dll
    c:\program files\msn messenger\lcres.dll
    c:\program files\msn messenger\rtmpltfm.dll
    c:\windows\system32\wdmaud.drv
    c:\windows\system32\msacm32.drv
    c:\windows\system32\midimap.dll
    c:\windows\system32\devenum.dll
    c:\windows\system32\quartz.dll
    c:\windows\system32\ddraw.dll
    c:\windows\system32\dciman32.dll
    c:\windows\system32\d3dim700.dll
    c:\windows\system32\dpnhupnp.dll
    c:\windows\system32\schannel.dll
    c:\windows\system32\msxml3.dll
    c:\windows\system32\sxs.dll
    c:\program files\msn messenger\msgswcam.dll
    c:\windows\system32\sirenacm.dll
    c:\windows\system32\ksproxy.ax
    c:\windows\system32\ksuser.dll
    c:\windows\system32\kswdmcap.ax
    c:\windows\system32\mfc42.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\vvx1000.dll
    c:\windows\system32\winspool.drv
    c:\windows\system32\winrnr.dll
    c:\windows\system32\rasadhlp.dll
    c:\program files\msn messenger\lmcdata.dll
    c:\program files\msn messenger\contact.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\dssenh.dll
    c:\windows\system32\riched20.dll
    c:\program files\msn messenger\dfsr.dll
    c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcp80.dll
    c:\windows\system32\esent.dll
    c:\windows\system32\shdoclc.dll
    c:\program files\msn messenger\custsat.dll
    c:\program files\msn messenger\abssm.dll
    c:\windows\system32\mshtml.dll
    c:\windows\system32\msls31.dll
    c:\program files\msn messenger\usnsvcps.dll
    c:\program files\msn messenger\softphoneps.dll
    c:\windows\system32\apphelp.dll
    c:\windows\system32\linkinfo.dll
    c:\windows\system32\ntshrui.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\jscript.dll
    c:\progra~1\wanadoo\inactivity.dll
    c:\windows\system32\vbscript.dll
    c:\windows\system32\macromed\flash\flash9d.ocx
    c:\windows\system32\mscoree.dll
    c:\windows\microsoft.net\framework\v2.0.50727\mscorie.dll
    c:\windows\system32\ddrawex.dll
    c:\windows\system32\wmvcore.dll
    c:\windows\system32\wmasf.dll
    c:\windows\system32\wmadmod.dll
    c:\windows\system32\mfplat.dll
    C:\PROGRA~1\WANADOO\COMCOMP.EXE
    c:\progra~1\wanadoo\comcomp.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\progra~1\wanadoo\outilsft.dll
    c:\progra~1\wanadoo\mfc42.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\progra~1\wanadoo\wlanmanager.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\progra~1\wanadoo\msvcp60.dll
    c:\progra~1\wanadoo\ifhelper.dll
    c:\windows\system32\w32n50.dll
    c:\windows\system32\wsock32.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\windows\system32\version.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\windows\system32\shlwapi.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\progra~1\wanadoo\gestappft.dll
    c:\progra~1\wanadoo\modifft.dll
    c:\progra~1\wanadoo\pmstub.dll
    c:\progra~1\wanadoo\phonemanager.dll
    c:\progra~1\wanadoo\detectcomponent.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\tapi3.dll
    c:\windows\system32\atl.dll
    c:\windows\system32\wininet.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\rtutils.dll
    c:\windows\system32\confmsp.dll
    c:\windows\system32\imon.dll
    c:\program files\eset\pr_imon.dll
    c:\windows\system32\mswsock.dll
    c:\windows\system32\hnetcfg.dll
    c:\windows\system32\wshtcpip.dll
    c:\windows\system32\termmgr.dll
    c:\windows\system32\h323msp.dll
    c:\windows\system32\iphlpapi.dll
    c:\windows\system32\tapi32.dll
    c:\windows\system32\inetmib1.dll
    c:\windows\system32\snmpapi.dll
    c:\windows\system32\mprapi.dll
    c:\windows\system32\activeds.dll
    c:\windows\system32\adsldpc.dll
    c:\windows\system32\netapi32.dll
    c:\windows\system32\wldap32.dll
    c:\windows\system32\samlib.dll
    c:\windows\system32\setupapi.dll
    c:\windows\system32\rasapi32.dll
    c:\windows\system32\rasman.dll
    c:\windows\system32\msv1_0.dll
    c:\windows\system32\apphelp.dll
    c:\progra~1\wanadoo\ndis_gen.dll
    c:\windows\system32\wintrust.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\icmp.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\userenv.dll
    c:\windows\system32\dhcpcsvc.dll
    c:\windows\system32\dnsapi.dll
    c:\windows\system32\winrnr.dll
    c:\windows\system32\rasadhlp.dll
    C:\PROGRA~1\WANADOO\TOASTER.EXE
    c:\progra~1\wanadoo\toaster.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\windows\system32\winmm.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\progra~1\wanadoo\styleihm.dll
    c:\windows\system32\msvfw32.dll
    c:\windows\system32\shell32.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\shlwapi.dll
    c:\windows\system32\comctl32.dll
    c:\progra~1\wanadoo\mfc42.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\oleaut32.dll
    c:\progra~1\wanadoo\msvcp60.dll
    c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\version.dll
    c:\windows\system32\alertm~1\alertc~1.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\sxs.dll
    c:\progra~1\wanadoo\skin\default\main\resourcestyle.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2help.dll
    c:\windows\system32\wdmaud.drv
    c:\windows\system32\wintrust.dll
    c:\windows\system32\crypt32.dll
    c:\windows\system32\msasn1.dll
    c:\windows\system32\imagehlp.dll
    c:\windows\system32\msacm32.drv
    c:\windows\system32\msacm32.dll
    c:\windows\system32\midimap.dll
    c:\windows\system32\msadp32.acm
    C:\PROGRA~1\WANADOO\INACTIVITY.EXE
    c:\progra~1\wanadoo\inactivity.exe
    c:\windows\system32\ntdll.dll
    c:\windows\system32\kernel32.dll
    c:\progra~1\wanadoo\mfc42.dll
    c:\windows\system32\msvcrt.dll
    c:\windows\system32\gdi32.dll
    c:\windows\system32\user32.dll
    c:\windows\system32\ole32.dll
    c:\windows\system32\advapi32.dll
    c:\windows\system32\rpcrt4.dll
    c:\windows\system32\secur32.dll
    c:\windows\system32\oleaut32.dll
    c:\progra~1\wanadoo\msvcp60.dll
    c:\windows\system32\mfc42loc.dll
    c:\windows\system32\uxtheme.dll
    c:\windows\system32\msctf.dll
    c:\program files\macrogaming\sweetim\mgadaptersproxy.dll
    c:\windows\system32\shlwapi.dll
    c:\program files\macrogaming\sweetim\msvcr71.dll
    c:\windows\system32\comctl32.dll
    c:\windows\system32\clbcatq.dll
    c:\windows\system32\comres.dll
    c:\windows\system32\version.dll
    c:\windows\system32\alertm~1\alertc~1.dll
    c:\windows\system32\xpsp2res.dll
    c:\windows\system32\sxs.dll
    c:\progra~1\wanadoo\inactivity.dll
    c:\windows\system32\ws2_32.dll
    c:\windows\system32\ws2hel
    0
  7. Country Man Messages postés 209 Statut Membre 16
     
    Bonsor,
    Ok, un coup de CC cleaner que tu télécharge içi : ccleaner
    -->Nettoyage
    Ensuite un post Hijackthis,
    Merci
    Je ne suis pas sûr de te répondre ce soir, mais demain sans faute !
    @+ Country Man
    0
  8. jul1
     
    Logfile of HijackThis v1.99.1
    Scan saved at 23:19:01, on 15/10/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\system32\S3Trayp.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\vVX1000.exe
    C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Eset\nod32kui.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
    C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
    C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
    C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\PROGRA~1\Wanadoo\ComComp.exe
    C:\PROGRA~1\Wanadoo\Toaster.exe
    C:\PROGRA~1\Wanadoo\Inactivity.exe
    C:\PROGRA~1\Wanadoo\PollingModule.exe
    C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\System32\FTRTSVC.exe
    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    C:\Program Files\Eset\nod32krn.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
    C:\PROGRA~1\Wanadoo\Watch.exe
    C:\Program Files\MSN Messenger\livecall.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\PROGRA~1\Wanadoo\WOOBRO~1\DownloadManager.exe
    C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.ircfast2.com/index.php?rvs=hompag
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: (no name) - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [S3Trayp] S3Trayp.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
    O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
    O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
    O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
    O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [fqhvxwyz] c:\windows\system32\fqhvxwyz.exe fqhvxwyz
    O4 - HKCU\..\Run: [goftukt] c:\windows\system32\goftukt.exe goftukt
    O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase2895.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
    O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

    voila le raport et pas de probleme a demain et merci encore
    0
  9. jul1
     
    me revoila si vous voulez nous pouvons continuer
    merci
    0
  10. Country Man Messages postés 209 Statut Membre 16
     
    Bonsoir,

    Relancer le PC en mode sans echec (F8 pendant le démarrage).
    Lancer un log Hyjackthis et cocher les lignes ci-dessous. Ensuite choisir l'option fix checked.

    O2 - BHO: (no name) - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - (no file)
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O4 - HKCU\..\Run: [fqhvxwyz] c:\windows\system32\fqhvxwyz.exe fqhvxwyz

    @+ Country Man
    0
  11. jul1
     
    j'ai fait ce que vous m'avez demandez
    et quand je rallume mon ordi il me dit que suis infecter
    je ne comprends pas de trop
    0
  12. Country Man Messages postés 209 Statut Membre 16
     
    Bonsoir,
    Alors on continue : télécharge avast.
    Une fois installé, ouvrir aller sur l'onglet menu en haut à gauche et choisir "planifier un scan au démarrage"
    Me tenir informé
    @+ Country

    Ps. As-tu supprimé les objets trouvés lors du scan AD Aware ? (option remove all)
    0
  13. jul1
     
    j'ai refais un scann le voici

    Logfile of HijackThis v1.99.1
    Scan saved at 23:06:45, on 16/10/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\system32\S3Trayp.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\vVX1000.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Eset\nod32kui.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
    C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
    C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
    C:\PROGRA~1\Wanadoo\ComComp.exe
    C:\PROGRA~1\Wanadoo\Toaster.exe
    C:\PROGRA~1\Wanadoo\Inactivity.exe
    C:\PROGRA~1\Wanadoo\PollingModule.exe
    C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
    C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\System32\FTRTSVC.exe
    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    C:\Program Files\Eset\nod32krn.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
    C:\PROGRA~1\Wanadoo\Watch.exe
    C:\Program Files\MSN Messenger\livecall.exe
    C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.ircfast2.com/index.php?rvs=hompag
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [S3Trayp] S3Trayp.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
    O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
    O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
    O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
    O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [goftukt] c:\windows\system32\goftukt.exe goftukt
    O4 - HKCU\..\Run: [ldnspybuo] c:\windows\system32\ldnspybuo.exe ldnspybuo
    O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase2895.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
    O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    0
  14. Country Man Messages postés 209 Statut Membre 16
     
    La dernière entrée 04 me parraît louche.
    Alors on continue : télécharge avast.
    Une fois installé, ouvrir aller sur l'onglet menu en haut à gauche et choisir "planifier un scan au démarrage"
    Me tenir informé
    @+ Country

    Ps. As-tu supprimé les objets trouvés lors du scan AD Aware ? (option remove all)
    0
  15. jul1
     
    j'ai bien supprimer les objet de AD Aware
    j'ai fait un scan au démarage avec avast et j'ai suprimer deux lignes je ne sais pas du tous ce que c'est en fait!!
    et apres le scann il me dit toujours que je suis infecter
    0
  16. jul1
     
    on reprendra demais si sa vous derange pas
    merci
    0
  18. Country Man Messages postés 209 Statut Membre 16
     
    Bonsoir,

    * Télécharge SDFix sur ton bureau
    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

    * Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.

    * Redémarre ton ordinateur en mode sans échec

    * Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.bat pour lancer le script.

    * Appuie sur Y pour commencer le processus de nettoyage.

    Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.

    * Appuie sur une touche pour redémarrer le PC.

    Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.

    Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.

    * Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.

    Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.

    + post hijackthis

    (Merci à Philae83)

    @+ Country
    0
  19. jul1
     
    voici le 1er

    SDFix: Version 1.109

    Run by ORDI on 17/10/2007 at 22:44

    Microsoft Windows XP [version 5.1.2600]

    Running From: C:\DOCUME~1\ORDI\Bureau\SDFix

    Safe Mode:
    Checking Services:

    Restoring Windows Registry Values
    Restoring Windows Default Hosts File

    Rebooting...

    Normal Mode:
    Checking Files:

    No Trojan Files Found

    Removing Temp Files...

    ADS Check:

    C:\WINDOWS
    No streams found.

    C:\WINDOWS\system32
    No streams found.

    C:\WINDOWS\system32\svchost.exe
    No streams found.

    C:\WINDOWS\system32\ntoskrnl.exe
    No streams found.

    Final Check:

    Remaining Services:
    ------------------

    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
    "C:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"="C:\\Program Files\\Microsoft LifeCam\\LifeCam.exe:*:Enabled:LifeCam.exe"
    "C:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"="C:\\Program Files\\Microsoft LifeCam\\LifeExp.exe:*:Enabled:LifeExp.exe"
    "C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Disabled:eMule"
    "C:\\Documents and Settings\\ORDI\\Mes documents\\juljul\\incredimail_install.exe"="C:\\Documents and Settings\\ORDI\\Mes documents\\juljul\\incredimail_install.exe:*:Enabled:IncrediMail Installer"
    "C:\\Program Files\\IncrediMail\\bin\\ImApp.exe"="C:\\Program Files\\IncrediMail\\bin\\ImApp.exe:*:Enabled:IncrediMail"
    "C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"="C:\\Program Files\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
    "C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

    Remaining Files:
    ---------------

    Files with Hidden Attributes:

    Sat 29 Sep 2007 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
    Sat 6 Oct 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
    Tue 16 Oct 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\5c703fe0947475848e966b61999878d1\BIT2C.tmp"

    Finished!

    et le 2em

    Logfile of HijackThis v1.99.1
    Scan saved at 22:57:59, on 17/10/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\System32\FTRTSVC.exe
    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
    C:\Program Files\Eset\nod32krn.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\system32\S3Trayp.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
    C:\WINDOWS\vVX1000.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Eset\nod32kui.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
    C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
    C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
    C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
    C:\PROGRA~1\Wanadoo\ComComp.exe
    C:\PROGRA~1\Wanadoo\Toaster.exe
    C:\PROGRA~1\Wanadoo\Inactivity.exe
    C:\PROGRA~1\Wanadoo\PollingModule.exe
    C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
    C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
    C:\PROGRA~1\Wanadoo\Watch.exe
    C:\PROGRA~1\Wanadoo\WOOBrowser\WOOBrowser.exe
    C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://french.icrfast.com/index.php?rvs=hompag
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [S3Trayp] S3Trayp.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
    O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
    O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
    O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
    O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
    O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ldnspybuo] c:\windows\system32\ldnspybuo.exe ldnspybuo
    O4 - HKCU\..\Run: [obtxfde] c:\windows\system32\obtxfde.exe obtxfde
    O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase2895.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
    O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

    et merci encore!!
    0
  20. Country Man Messages postés 209 Statut Membre 16
     
    Bonsoir,
    Un dernier log hijack pour fixerles lignes suivantes :
    O4 - HKCU\..\Run: [ldnspybuo] c:\windows\system32\ldnspybuo.exe ldnspybuo
    O4 - HKCU\..\Run: [obtxfde] c:\windows\system32\obtxfde.exe obtxfde

    Que donne un scan avec AVG anti-spyware ?
    Avec les traitements que nous avons fait, il ne devrait plus y avoir de spyware. Les anti virus n'ont rien détecté, mais ces entrées 04 avec des extensions.exe me semblent louches...
    @+ Country Man
    0
  21. jul1
     
    j'ai fait un scann avec avg et il a rien trouver a part des cookies que j'ai supprimer

    faut il faire quelque chose encore? ou cela est terminer

    faut il faire un autre scann avec hitja....?
    0
  • 1
  • 2