Report.txt + log hijackthis suite bocou virus
Résolu
fcnalex
Messages postés
51
Statut
Membre
-
fcnalex Messages postés 51 Statut Membre -
fcnalex Messages postés 51 Statut Membre -
Bonjour,
le fichier report.txt et apres le log hijackthis
j attends de tes nouvelles
merci encore pour ton aide
[b]SDFix: Version 1.161 /b
Run by Compaq_Propri‚taire on 26/03/2008 at 20:24
Microsoft Windows XP [version 5.1.2600]
Running From: C:\DOCUME~1\COMPAQ~1\Bureau\SDFix
[b]Checking Services /b:
Name:
astq
FFI
ldrsvc
msupdate
riode32
symavc32
Path:
\??\C:\WINDOWS\system32\drivers\astq.tga
C:\WINDOWS\system32\svchost.exe:exm.exe
%SystemRoot%\System32\svchost.exe -k netsvcs
c:\windows\system32\mssrv32.exe
\??\C:\WINDOWS\system32\drivers\riode32.sys
\??\C:\WINDOWS\system32\drivers\symavc32.sys
astq - Deleted
FFI - Deleted
ldrsvc - Deleted
msupdate - Deleted
riode32 - Deleted
symavc32 - Deleted
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Default Schedule Service Path
Rebooting
[b]Checking Files /b:
Trojan Files Found:
C:\WINDOWS\SYSTEM32\ADDAX.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDBS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDDC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDDJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDEE.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDFU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDHN.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDIJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDIR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDIY.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDJJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDLY.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDMG.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDNR.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDNZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDOA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDPD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDQF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDRA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDWE.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDWO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDYC.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDZH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDZQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIAZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIBC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIBW.EXE - Deleted
C:\WINDOWS\SYSTEM32\APICL.EXE - Deleted
C:\WINDOWS\SYSTEM32\APICX.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIDO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIDU.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIGT.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIHM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIIC.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIIQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIJS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIKG32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APILN.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIMK.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIMS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APINT.EXE - Deleted
C:\WINDOWS\SYSTEM32\APINV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIPD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIQG.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIQW.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIRA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APISY.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIVS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIWO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIXI.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIYU.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIZS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIZY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPAF.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPAH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPBM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPBO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPDG.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPEB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPER32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPFE.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPGJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPIC.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPIV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPLU.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPQC.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPQQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPRN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPRV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPTO.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPTS.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPVE.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPVI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPXD.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLAO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLAV.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLEG.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLFS.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLGQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLHB.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLHQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLHW.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLJV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLLA.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLLJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLMF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLMR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLNM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLPK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLRB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLRG.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLRH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLRX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLSA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLTL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLUL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLVY.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLWO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLWW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLWX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLXI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRBN.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRDP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRDR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CREN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CREY.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRFQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRFR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRGU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRGV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRHE.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRHJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRHO.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRHX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRIA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRIF.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRKE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRKJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRKJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRKM.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRMU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRNF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRNL.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRNP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRNY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRPI.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRPU.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRPY.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRRV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRTB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRTG.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRUE.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRUS.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRUX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRVP.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRWD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRWE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRWJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRWR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRXN.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRYT.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3AV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3DA.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3DY.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3EV.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3FD.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3GF.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3GJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3IP.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3KH.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3KU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3LH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3MC.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3MD.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3NK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3NW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3PP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3PX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3TV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3UK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3VJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3VU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3WG.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3XE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEDC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEDM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEGX.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEHD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEHO.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEHX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEHY.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEIA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEIG.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEJX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEKP.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEKZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IELC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEMC.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEMH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEMY.EXE - Deleted
C:\WINDOWS\SYSTEM32\IENF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEOU.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEPN.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEQW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEQZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\IESJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IESU.EXE - Deleted
C:\WINDOWS\SYSTEM32\IESV.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEUU.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEVX.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEXB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEYZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPAO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPCO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPGX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPHA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPHF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPHJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPIM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPJW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPMH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPND.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPRH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPRP.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPTD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPTI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPVK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPVP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPVQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPWM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPZE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVABB.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVABH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVADB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVADL.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAGR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAGU.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAHD.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAHK.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAIN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAJH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAJV.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAKQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVALD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVALG.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAMO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVANI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVANW.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAPW.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVARH.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAUF.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAUY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAYM.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCAQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCAZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCCG.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCDA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCDF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCEK.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCES.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCFE.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCFL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCFQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCGU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCHM.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCHX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCIG.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCJK.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCLI.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCLN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCPI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCPR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCPX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCQM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCSH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCSV.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCTK.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCUT32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCWP.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCXC.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCYF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCYJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCZF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCZM.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSAB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSAD.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSAI.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSBW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSBY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSGW.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSHH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSHI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSHK.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSJN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSOD.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSOM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSPM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSRA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSRC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSRE.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSTS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSTW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSUS.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSVR.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSVX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSWE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSXU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSYP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSZB.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETAK.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETBI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETDV.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETFK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETFS.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETHG.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETHV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETIG.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETJR.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETMF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETNY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETOH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETOT.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETOU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETPN.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETQV.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETRO.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETSX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETTA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETTB.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETTM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETUV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETWU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETXF.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETXT.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETZB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETZG.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTAN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTBI.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTDD.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTDY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTFK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTHJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTHT.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTIZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTJF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTJP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTJS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTKJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTKQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTLS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTMA.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTMT.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTNW.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTOF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTQG.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTQG32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTQU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTRL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTRY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTSM.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTSP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTTI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTUA.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTUY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTVA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTVO.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTYE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKAC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKAV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKCB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKDR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKEL.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKGT.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKHD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKHR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKHU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKKN.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKLA.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKMC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKMW.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKNQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKPW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKQC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKQO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKRC.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKRT.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKRX.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKUK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKUP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKYW.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKZC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKZV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSAL.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSAT32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSBC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSBF.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSCT.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSDI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSDL.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSEC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSEG32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSFT.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSHI.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSIB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSIV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSKI.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSKU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSLE.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSMJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSNL.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSNO.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSOO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSOT32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSOY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSPM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSTQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSTU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSTW.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSVI.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSVI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSVV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSXY.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSYD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINBC.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINBK.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINCK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINCO.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINDQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINFY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINGK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINHE.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINIO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINLA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINLI.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINMO.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINNJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINNN.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINOQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINOX.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINPE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINPM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINQM.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINQN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINWP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINXK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINXN.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINYD.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINZD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINZM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDAA.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDAD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCM.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDED32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDFA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDFL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDGE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIG.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDJF.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDJN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDLD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDLG.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDNO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDOC.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDQP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDSO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDVV.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDXY.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDYW.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIAI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIAP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIAZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIBC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIBW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APICV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIDC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIDT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIDX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIET32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIFL.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIIX.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJA.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIKE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIKF.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIKL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APILV.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIMP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIOC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIPN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIQW.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIRP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APISR.DLL - Deleted
C:\WINDOWS\SYSTEM32\APISZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APITK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APITT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIUB.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIVO.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIVR.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIWV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIXM.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIXP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIYE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIZZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPDP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPDS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPEK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPEP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPFB.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPFI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPGX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHF.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPIG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKI.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPLM.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNI.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPRA.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPRI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPSK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPSX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPTH.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPTN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPTT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPUI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPVN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPWI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPXQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPYG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPYP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPZI.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLCL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLEG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLGC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLGT.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLHA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLHO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLHQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIA.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIT.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLJF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLJJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLKE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLKO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLKY.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLLX.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLMZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLNU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLOX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLOZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLPW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLQL.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLQU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLRD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLRL.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLRV.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLRY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLSA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLVN.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLWI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLWW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLWX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLYN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLYV.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLYY.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLZF.DLL - Deleted
C:\WINDOWS\SYSTEM32\BCCRW.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRBD.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRBM.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRCB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CREN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRET32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFR.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRHW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIL.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRJT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKE.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRMB.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRMF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRMG.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRNE.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRNG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CROJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CROW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRPP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRPX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRUC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRUQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRVA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRVB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRVI.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRVL.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRXD.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRXJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRYJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRZS.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRZX.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3AW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3AZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3CY.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3EF.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3EV.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3EW.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3FB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3GO.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3IG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3IY.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3KB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3LE.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3LN.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3MG.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3MN.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3MZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3NE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3NL.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3OM.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3PI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3PP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3PZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3RA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3SG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3VD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3VH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3VK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3VU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3WK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3WU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3XG.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3YA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3YD.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3YF.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3ZU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IECR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDL.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEEC.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEFO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEFR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEHA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEHE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEJM.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEKE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEKX.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEMH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IENR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOK.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEPP.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEPU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEQE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEQX.DLL - Deleted
C:\WINDOWS\SYSTEM32\IERV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IESC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IESU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IESW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IETI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IETN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IETO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEWB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEWH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEYK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEYN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEYW.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPAH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPAR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPBA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPBO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPBZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPCN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPCS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPFM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPHM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPHN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPHT.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPJR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPKE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPKI.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPKU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLK.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLU.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPNC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPNZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOU.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPQA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPQD.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPRR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPRT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPUL.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPUR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPVD.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPWR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPXK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPYE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPZN.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAAE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAAR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAAZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVABD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVABL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVABT.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVACJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVACS.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVADH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAEW.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAFX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAGB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAGD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAGM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAHG.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAHV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAIR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAIV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAJV.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVALD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVALR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAMZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANW.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANY.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAOJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAON32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAPB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAPN.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAQC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVARD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATR.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAUD.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAUP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAUV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXU.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXW.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAYG.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAZH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAZO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAZX.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAZY.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCBK.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCCF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCCW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCDF.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCDS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCDU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCEK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCEN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCFO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCGN.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCIA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCIQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMK.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCNM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCNR.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCNR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPR.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCQJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCRE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCRW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCSD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCSR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCTG.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCUJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCUR.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCVQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCWZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCYT.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCYU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCYX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSAI.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSAP.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSBS.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSCJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSEA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSEO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSER.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSEU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSFJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSGO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSGU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSHQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSHV.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSJN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSMC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSOY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPB.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPL.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSRN.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSSS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSSZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSTG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSUT.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSVH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWF.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWS.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSXG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSXY.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSYV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSZL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSZX.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETAK.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETAS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETBN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETBO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETCN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETEL.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFI.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETGL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETGT.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETIP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETJM.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETJX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETKC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETKM.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLM.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETMA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETMF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETMS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETNG.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETNY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETOR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETQE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETQH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETQX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETSO.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETTS.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETUE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETVA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETWK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETYA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETYC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETZX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTBG.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTBV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTCT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTCU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTCV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTEA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTEQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTFU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTFV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTGQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTHK.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTIO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTLW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTMG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTMM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTNE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTOE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTOH.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSB.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTTE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTUS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTVC.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWO.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWP.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTZC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKBS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKDV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKEH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKFV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKFW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKGI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKHN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKJB.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKJI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKJQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKKN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKMC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKMS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKNB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKPJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKPU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQX.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKRP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKRR.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKRW.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTV.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKWQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKWX.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKWY.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKYJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKYY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZX.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSAE.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSBO.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDG.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDL.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSEA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSEO.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSES.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSFM.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGU.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSHC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSHK.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSHS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSIC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSII.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSLS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSMC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSMV.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSNE.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSOI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSPX.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSPY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSQA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSTQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSTY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSTZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSUU.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSVI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWM.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSYA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSYG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSZN.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSZN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINAB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINAS.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINCD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINDV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINEY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINFY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINGV.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINHL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINHY.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINIH.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINJF.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINLE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINLV.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINMH.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINMW.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINND32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINNJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINNQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINNU.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINNV.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINQB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINQT.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRM.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRW.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINSP.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINSR.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINSV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINTD.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINUE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINVA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINWA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINXU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINYC.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINYY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINZE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIGN.EXE - Deleted
C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Application Data\cftmon.exe - Deleted
C:\Documents and Settings\LocalService\Local Settings\Application Data\cftmon.exe - Deleted
C:\WINDOWS\SYSTEM32\ADDIGN.EXE - Deleted
C:\DOCUME~1\COMPAQ~1\FTPDLL.DLL - Deleted
C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temp\ubi15.tmp.exe - Deleted
C:\WINDOWS\system32\alt.exe.exe - Deleted
C:\WINDOWS\Temp\1156.tmp.lst - Deleted
C:\WINDOWS\Temp\1216.tmp.lst - Deleted
C:\WINDOWS\Temp\12B5.tmp.lst - Deleted
C:\WINDOWS\Temp\1343.tmp.lst - Deleted
C:\WINDOWS\Temp\13FE.tmp.lst - Deleted
C:\WINDOWS\Temp\14CA.tmp.lst - Deleted
C:\WINDOWS\Temp\1642.tmp.lst - Deleted
C:\WINDOWS\Temp\1827.tmp.lst - Deleted
C:\WINDOWS\Temp\1829.tmp.lst - Deleted
C:\WINDOWS\Temp\189D.tmp.lst - Deleted
C:\WINDOWS\Temp\18DD.tmp.lst - Deleted
C:\WINDOWS\Temp\1942.tmp.lst - Deleted
C:\WINDOWS\Temp\19C1.tmp.lst - Deleted
C:\WINDOWS\Temp\19C3.tmp.lst - Deleted
C:\WINDOWS\Temp\1A10.tmp.lst - Deleted
C:\WINDOWS\Temp\1B70.tmp.lst - Deleted
C:\WINDOWS\Temp\1D0B.tmp.lst - Deleted
C:\WINDOWS\Temp\1DA0.tmp.lst - Deleted
C:\WINDOWS\Temp\1DD.tmp.lst - Deleted
C:\WINDOWS\Temp\1F9F.tmp.lst - Deleted
C:\WINDOWS\Temp\1FF4.tmp.lst - Deleted
C:\WINDOWS\Temp\2221.tmp.lst - Deleted
C:\WINDOWS\Temp\22AD.tmp.lst - Deleted
C:\WINDOWS\Temp\23E7.tmp.lst - Deleted
C:\WINDOWS\Temp\25AA.tmp.lst - Deleted
C:\WINDOWS\Temp\26A0.tmp.lst - Deleted
C:\WINDOWS\Temp\2749.tmp.lst - Deleted
C:\WINDOWS\Temp\2776.tmp.lst - Deleted
C:\WINDOWS\Temp\28E8.tmp.lst - Deleted
C:\WINDOWS\Temp\2C3E.tmp.lst - Deleted
C:\WINDOWS\Temp\2CC3.tmp.lst - Deleted
C:\WINDOWS\Temp\2D1A.tmp.lst - Deleted
C:\WINDOWS\Temp\301A.tmp.lst - Deleted
C:\WINDOWS\Temp\3050.tmp.lst - Deleted
C:\WINDOWS\Temp\30D4.tmp.lst - Deleted
C:\WINDOWS\Temp\30D8.tmp.lst - Deleted
C:\WINDOWS\Temp\313D.tmp.lst - Deleted
C:\WINDOWS\Temp\3246.tmp.lst - Deleted
C:\WINDOWS\Temp\3313.tmp.lst - Deleted
C:\WINDOWS\Temp\3481.tmp.lst - Deleted
C:\WINDOWS\Temp\34AF.tmp.lst - Deleted
C:\WINDOWS\Temp\3511.tmp.lst - Deleted
C:\WINDOWS\Temp\3594.tmp.lst - Deleted
C:\WINDOWS\Temp\38BA.tmp.lst - Deleted
C:\WINDOWS\Temp\38FB.tmp.lst - Deleted
C:\WINDOWS\Temp\3920.tmp.lst - Deleted
C:\WINDOWS\Temp\3A17.tmp.lst - Deleted
C:\WINDOWS\Temp\3A56.tmp.lst - Deleted
C:\WINDOWS\Temp\3A69.tmp.lst - Deleted
C:\WINDOWS\Temp\3A6C.tmp.lst - Deleted
C:\WINDOWS\Temp\3C1C.tmp.lst - Deleted
C:\WINDOWS\Temp\3CD.tmp.lst - Deleted
C:\WINDOWS\Temp\3D16.tmp.lst - Deleted
C:\WINDOWS\Temp\3E84.tmp.lst - Deleted
C:\WINDOWS\Temp\3E94.tmp.lst - Deleted
C:\WINDOWS\Temp\3EC7.tmp.lst - Deleted
C:\WINDOWS\Temp\3F0.tmp.lst - Deleted
C:\WINDOWS\Temp\3FE7.tmp.lst - Deleted
C:\WINDOWS\Temp\408F.tmp.lst - Deleted
C:\WINDOWS\Temp\4402.tmp.lst - Deleted
C:\WINDOWS\Temp\4571.tmp.lst - Deleted
C:\WINDOWS\Temp\45D2.tmp.lst - Deleted
C:\WINDOWS\Temp\471D.tmp.lst - Deleted
C:\WINDOWS\Temp\4759.tmp.lst - Deleted
C:\WINDOWS\Temp\48D3.tmp.lst - Deleted
C:\WINDOWS\Temp\4A17.tmp.lst - Deleted
C:\WINDOWS\Temp\4A2F.tmp.lst - Deleted
C:\WINDOWS\Temp\4B1E.tmp.lst - Deleted
C:\WINDOWS\Temp\4BC9.tmp.lst - Deleted
C:\WINDOWS\Temp\4D92.tmp.lst - Deleted
C:\WINDOWS\Temp\4DEE.tmp.lst - Deleted
C:\WINDOWS\Temp\4F19.tmp.lst - Deleted
C:\WINDOWS\Temp\51A8.tmp.lst - Deleted
C:\WINDOWS\Temp\551F.tmp.lst - Deleted
C:\WINDOWS\Temp\572F.tmp.lst - Deleted
C:\WINDOWS\Temp\5756.tmp.lst - Deleted
C:\WINDOWS\Temp\5775.tmp.lst - Deleted
C:\WINDOWS\Temp\5822.tmp.lst - Deleted
C:\WINDOWS\Temp\5834.tmp.lst - Deleted
C:\WINDOWS\Temp\5890.tmp.lst - Deleted
C:\WINDOWS\Temp\5A09.tmp.lst - Deleted
C:\WINDOWS\Temp\5A30.tmp.lst - Deleted
C:\WINDOWS\Temp\5AEB.tmp.lst - Deleted
C:\WINDOWS\Temp\5B58.tmp.lst - Deleted
C:\WINDOWS\Temp\5BE8.tmp.lst - Deleted
C:\WINDOWS\Temp\5C71.tmp.lst - Deleted
C:\WINDOWS\Temp\5C85.tmp.lst - Deleted
C:\WINDOWS\Temp\5CCC.tmp.lst - Deleted
C:\WINDOWS\Temp\5E09.tmp.lst - Deleted
C:\WINDOWS\Temp\5E89.tmp.lst - Deleted
C:\WINDOWS\Temp\5F4.tmp.lst - Deleted
C:\WINDOWS\Temp\607A.tmp.lst - Deleted
C:\WINDOWS\Temp\609D.tmp.lst - Deleted
C:\WINDOWS\Temp\614.tmp.lst - Deleted
C:\WINDOWS\Temp\644B.tmp.lst - Deleted
C:\WINDOWS\Temp\64F0.tmp.lst - Deleted
C:\WINDOWS\Temp\6620.tmp.lst - Deleted
C:\WINDOWS\Temp\6725.tmp.lst - Deleted
C:\WINDOWS\Temp\67E7.tmp.lst - Deleted
C:\WINDOWS\Temp\688D.tmp.lst - Deleted
C:\WINDOWS\Temp\68E9.tmp.lst - Deleted
C:\WINDOWS\Temp\6983.tmp.lst - Deleted
C:\WINDOWS\Temp\6A8F.tmp.lst - Deleted
C:\WINDOWS\Temp\6C02.tmp.lst - Deleted
C:\WINDOWS\Temp\6CB1.tmp.lst - Deleted
C:\WINDOWS\Temp\6D75.tmp.lst - Deleted
C:\WINDOWS\Temp\6E93.tmp.lst - Deleted
C:\WINDOWS\Temp\6E94.tmp.lst - Deleted
C:\WINDOWS\Temp\6F77.tmp.lst - Deleted
C:\WINDOWS\Temp\7038.tmp.lst - Deleted
C:\WINDOWS\Temp\70AE.tmp.lst - Deleted
C:\WINDOWS\Temp\72EE.tmp.lst - Deleted
C:\WINDOWS\Temp\7389.tmp.lst - Deleted
C:\WINDOWS\Temp\73C1.tmp.lst - Deleted
C:\WINDOWS\Temp\7639.tmp.lst - Deleted
C:\WINDOWS\Temp\783A.tmp.lst - Deleted
C:\WINDOWS\Temp\79A0.tmp.lst - Deleted
C:\WINDOWS\Temp\7ADB.tmp.lst - Deleted
C:\WINDOWS\Temp\7D47.tmp.lst - Deleted
C:\WINDOWS\Temp\7DF5.tmp.lst - Deleted
C:\WINDOWS\Temp\7F39.tmp.lst - Deleted
C:\WINDOWS\Temp\919.tmp.lst - Deleted
C:\WINDOWS\Temp\A89.tmp.lst - Deleted
C:\WINDOWS\Temp\CB.tmp.lst - Deleted
C:\WINDOWS\Temp\DA3.tmp.lst - Deleted
C:\WINDOWS\Temp\E0C.tmp.lst - Deleted
C:\WINDOWS\Temp\E65.tmp.lst - Deleted
C:\WINDOWS\Temp\F3D.tmp.lst - Deleted
C:\WINDOWS\Temp\F64.tmp.lst - Deleted
C:\Program Files\Temporary\kernInst.MSNFix - Deleted
C:\WINDOWS\default.htm - Deleted
C:\WINDOWS\msav.exe - Deleted
C:\WINDOWS\msie.dll - Deleted
C:\WINDOWS\system32\diperto.ini - Deleted
C:\WINDOWS\system32\mssrv32.exe - Deleted
C:\WINDOWS\system32\winfrun32.bin - Deleted
C:\WINDOWS\Temp\winlogon.exe - Deleted
C:\WINDOWS\system32\drivers\astq.tga - Deleted
C:\WINDOWS\system32\drivers\spools.exe - Deleted
Folder C:\Program Files\Helper - Removed
Folder C:\Program Files\Temporary - Removed
Removing Temp Files
[b]ADS Check /b:
hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:11:33, on 26/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {00000250-0320-4dd4-be4f-7566d2314352} - (no file)
O2 - BHO: (no name) - {13197ace-6851-45c3-a7ff-c281324d5489} - (no file)
O2 - BHO: (no name) - {15651c7c-e812-44a2-a9ac-b467a2233e7d} - (no file)
O2 - BHO: (no name) - {4e1075f4-eec4-4a86-add7-cd5f52858c31} - (no file)
O2 - BHO: (no name) - {4e7bd74f-2b8d-469e-92c6-ce7eb590a94d} - (no file)
O2 - BHO: (no name) - {5929cd6e-2062-44a4-b2c5-2c7e78fbab38} - (no file)
O2 - BHO: (no name) - {5dafd089-24b1-4c5e-bd42-8ca72550717b} - (no file)
O2 - BHO: (no name) - {5fa6752a-c4a0-4222-88c2-928ae5ab4966} - (no file)
O2 - BHO: (no name) - {622cc208-b014-4fe0-801b-874a5e5e403a} - (no file)
O2 - BHO: (no name) - {8674aea0-9d3d-11d9-99dc-00600f9a01f1} - (no file)
O2 - BHO: (no name) - {965a592f-8efa-4250-8630-7960230792f1} - (no file)
O2 - BHO: (no name) - {9c5b2f29-1f46-4639-a6b4-828942301d3e} - (no file)
O2 - BHO: (no name) - {cf021f40-3e14-23a5-cba2-717765728274} - (no file)
O2 - BHO: (no name) - {fc3a74e5-f281-4f10-ae1e-733078684f3c} - (no file)
O2 - BHO: (no name) - {ffff0001-0002-101a-a3c9-08002b2f49fb} - (no file)
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: (no name) - {A20A76AD-7A29-4756-87FE-70C334CB40C0} - (no file)
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [jmjupelq] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\jmjupelq.dll"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe" -s
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Firewall auto setup] C:\WINDOWS\TEMP\winlogon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Firewall auto setup] C:\WINDOWS\TEMP\winlogon.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {230C3D02-DA27-11D2-8612-00A0C93EEA3C} (SAXFile FileUpload ActiveX Control) - http://www.wistiti.fr/AlbumsPerso/ActiveX/SAXFile.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://chezmaryetalex.spaces.live.com//PhotoUpload/MsnPUpld.cab
--
FCNALEX
le fichier report.txt et apres le log hijackthis
j attends de tes nouvelles
merci encore pour ton aide
[b]SDFix: Version 1.161 /b
Run by Compaq_Propri‚taire on 26/03/2008 at 20:24
Microsoft Windows XP [version 5.1.2600]
Running From: C:\DOCUME~1\COMPAQ~1\Bureau\SDFix
[b]Checking Services /b:
Name:
astq
FFI
ldrsvc
msupdate
riode32
symavc32
Path:
\??\C:\WINDOWS\system32\drivers\astq.tga
C:\WINDOWS\system32\svchost.exe:exm.exe
%SystemRoot%\System32\svchost.exe -k netsvcs
c:\windows\system32\mssrv32.exe
\??\C:\WINDOWS\system32\drivers\riode32.sys
\??\C:\WINDOWS\system32\drivers\symavc32.sys
astq - Deleted
FFI - Deleted
ldrsvc - Deleted
msupdate - Deleted
riode32 - Deleted
symavc32 - Deleted
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Default Schedule Service Path
Rebooting
[b]Checking Files /b:
Trojan Files Found:
C:\WINDOWS\SYSTEM32\ADDAX.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDBS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDDC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDDJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDEE.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDFU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDHN.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDIJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDIR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDIY.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDJJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDLY.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDMG.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDNR.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDNZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDOA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDPD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDQF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDRA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDWE.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDWO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDYC.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDZH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDZQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIAZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIBC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIBW.EXE - Deleted
C:\WINDOWS\SYSTEM32\APICL.EXE - Deleted
C:\WINDOWS\SYSTEM32\APICX.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIDO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIDU.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIGT.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIHM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIIC.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIIQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIJS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIKG32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APILN.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIMK.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIMS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APINT.EXE - Deleted
C:\WINDOWS\SYSTEM32\APINV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIPD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIQG.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIQW.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIRA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APISY.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIVS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIWO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIXI.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIYU.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIZS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIZY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPAF.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPAH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPBM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPBO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPDG.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPEB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPER32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPFE.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPGJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPIC.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPIV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPLU.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPQC.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPQQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPRN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPRV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPTO.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPTS.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPVE.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPVI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPXD.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLAO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLAV.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLEG.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLFS.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLGQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLHB.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLHQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLHW.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLJV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLLA.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLLJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLMF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLMR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLNM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLPK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLRB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLRG.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLRH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLRX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLSA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLTL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLUL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLVY.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLWO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLWW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLWX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLXI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRBN.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRDP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRDR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CREN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CREY.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRFQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRFR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRGU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRGV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRHE.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRHJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRHO.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRHX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRIA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRIF.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRKE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRKJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRKJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRKM.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRMU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRNF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRNL.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRNP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRNY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRPI.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRPU.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRPY.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRRV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRTB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRTG.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRUE.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRUS.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRUX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRVP.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRWD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRWE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRWJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRWR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRXN.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRYT.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3AV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3DA.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3DY.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3EV.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3FD.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3GF.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3GJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3IP.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3KH.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3KU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3LH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3MC.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3MD.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3NK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3NW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3PP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3PX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3TV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3UK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3VJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3VU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3WG.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3XE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEDC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEDM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEGX.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEHD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEHO.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEHX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEHY.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEIA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEIG.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEJX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEKP.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEKZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IELC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEMC.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEMH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEMY.EXE - Deleted
C:\WINDOWS\SYSTEM32\IENF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEOU.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEPN.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEQW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEQZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\IESJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IESU.EXE - Deleted
C:\WINDOWS\SYSTEM32\IESV.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEUU.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEVX.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEXB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEYZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPAO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPCO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPGX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPHA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPHF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPHJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPIM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPJW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPMH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPND.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPRH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPRP.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPTD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPTI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPVK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPVP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPVQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPWM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPZE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVABB.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVABH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVADB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVADL.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAGR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAGU.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAHD.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAHK.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAIN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAJH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAJV.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAKQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVALD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVALG.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAMO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVANI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVANW.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAPW.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVARH.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAUF.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAUY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAYM.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCAQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCAZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCCG.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCDA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCDF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCEK.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCES.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCFE.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCFL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCFQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCGU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCHM.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCHX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCIG.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCJK.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCLI.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCLN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCPI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCPR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCPX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCQM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCSH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCSV.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCTK.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCUT32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCWP.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCXC.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCYF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCYJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCZF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCZM.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSAB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSAD.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSAI.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSBW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSBY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSGW.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSHH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSHI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSHK.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSJN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSOD.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSOM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSPM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSRA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSRC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSRE.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSTS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSTW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSUS.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSVR.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSVX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSWE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSXU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSYP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSZB.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETAK.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETBI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETDV.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETFK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETFS.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETHG.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETHV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETIG.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETJR.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETMF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETNY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETOH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETOT.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETOU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETPN.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETQV.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETRO.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETSX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETTA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETTB.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETTM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETUV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETWU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETXF.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETXT.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETZB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETZG.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTAN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTBI.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTDD.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTDY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTFK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTHJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTHT.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTIZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTJF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTJP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTJS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTKJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTKQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTLS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTMA.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTMT.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTNW.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTOF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTQG.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTQG32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTQU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTRL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTRY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTSM.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTSP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTTI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTUA.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTUY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTVA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTVO.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTYE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKAC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKAV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKCB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKDR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKEL.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKGT.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKHD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKHR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKHU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKKN.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKLA.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKMC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKMW.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKNQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKPW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKQC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKQO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKRC.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKRT.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKRX.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKUK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKUP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKYW.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKZC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKZV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSAL.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSAT32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSBC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSBF.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSCT.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSDI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSDL.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSEC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSEG32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSFT.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSHI.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSIB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSIV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSKI.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSKU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSLE.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSMJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSNL.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSNO.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSOO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSOT32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSOY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSPM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSTQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSTU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSTW.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSVI.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSVI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSVV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSXY.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSYD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINBC.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINBK.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINCK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINCO.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINDQ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINFY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINGK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINHE.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINIO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINLA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINLI.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINMO.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINNJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINNN.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINOQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINOX.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINPE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINPM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINQM.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINQN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINWP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINXK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINXN.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINYD.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINZD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINZM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDAA.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDAD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCM.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDED32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDFA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDFL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDGE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIG.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDJF.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDJN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDLD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDLG.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDNO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDOC.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDQP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDSO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDVV.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDXY.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDYW.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIAI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIAP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIAZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIBC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIBW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APICV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIDC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIDT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIDX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIET32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIFL.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIIX.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJA.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIKE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIKF.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIKL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APILV.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIMP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIOC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIPN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIQW.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIRP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APISR.DLL - Deleted
C:\WINDOWS\SYSTEM32\APISZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APITK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APITT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIUB.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIVO.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIVR.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIWV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIXM.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIXP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIYE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIZZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPDP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPDS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPEK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPEP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPFB.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPFI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPGX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHF.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPIG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKI.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPLM.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNI.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPRA.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPRI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPSK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPSX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPTH.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPTN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPTT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPUI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPVN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPWI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPXQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPYG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPYP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPZI.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLCL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLEG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLGC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLGT.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLHA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLHO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLHQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIA.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIT.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLJF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLJJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLKE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLKO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLKY.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLLX.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLMZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLNU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLOX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLOZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLPW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLQL.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLQU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLRD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLRL.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLRV.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLRY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLSA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLVN.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLWI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLWW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLWX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLYN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLYV.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLYY.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLZF.DLL - Deleted
C:\WINDOWS\SYSTEM32\BCCRW.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRBD.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRBM.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRCB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CREN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRET32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFR.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRHW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIL.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRJT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKE.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRMB.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRMF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRMG.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRNE.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRNG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CROJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CROW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRPP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRPX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRUC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRUQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRVA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRVB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRVI.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRVL.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRXD.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRXJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRYJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRZS.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRZX.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3AW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3AZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3CY.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3EF.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3EV.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3EW.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3FB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3GO.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3IG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3IY.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3KB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3LE.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3LN.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3MG.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3MN.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3MZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3NE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3NL.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3OM.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3PI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3PP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3PZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3RA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3SG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3VD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3VH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3VK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3VU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3WK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3WU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3XG.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3YA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3YD.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3YF.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3ZU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IECR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDL.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEEC.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEFO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEFR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEHA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEHE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEJM.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEKE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEKX.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEMH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IENR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOK.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEPP.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEPU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEQE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEQX.DLL - Deleted
C:\WINDOWS\SYSTEM32\IERV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IESC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IESU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IESW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IETI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IETN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IETO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEWB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEWH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEYK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEYN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEYW.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPAH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPAR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPBA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPBO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPBZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPCN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPCS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPFM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPHM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPHN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPHT.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPJR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPKE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPKI.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPKU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLK.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLU.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPNC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPNZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOU.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPQA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPQD.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPRR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPRT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPUL.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPUR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPVD.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPWR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPXK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPYE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPZN.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAAE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAAR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAAZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVABD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVABL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVABT.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVACJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVACS.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVADH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAEW.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAFX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAGB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAGD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAGM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAHG.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAHV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAIR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAIV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAJV.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVALD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVALR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAMZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANW.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANY.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAOJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAON32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAPB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAPN.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAQC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVARD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATR.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAUD.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAUP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAUV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXU.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXW.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAYG.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAZH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAZO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAZX.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAZY.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCBK.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCCF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCCW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCDF.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCDS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCDU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCEK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCEN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCFO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCGN.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCIA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCIQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMK.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCNM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCNR.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCNR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPR.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCQJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCRE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCRW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCSD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCSR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCTG.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCUJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCUR.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCVQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCWZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCYT.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCYU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCYX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSAI.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSAP.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSBS.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSCJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSEA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSEO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSER.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSEU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSFJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSGO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSGU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSHQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSHV.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSJN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSMC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSOY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPB.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPL.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSRN.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSSS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSSZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSTG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSUT.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSVH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWF.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWS.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSXG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSXY.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSYV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSZL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSZX.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETAK.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETAS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETBN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETBO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETCN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETEL.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFI.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETGL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETGT.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETIP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETJM.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETJX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETKC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETKM.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLM.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETMA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETMF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETMS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETNG.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETNY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETOR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETQE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETQH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETQX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETSO.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETTS.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETUE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETVA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETWK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETYA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETYC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETZX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTBG.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTBV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTCT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTCU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTCV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTEA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTEQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTFU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTFV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTGQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTHK.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTIO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTLW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTMG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTMM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTNE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTOE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTOH.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSB.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTTE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTUS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTVC.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWO.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWP.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTZC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKBS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKDV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKEH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKFV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKFW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKGI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKHN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKJB.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKJI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKJQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKKN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKMC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKMS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKNB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKPJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKPU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQX.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKRP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKRR.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKRW.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTV.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKWQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKWX.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKWY.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKYJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKYY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZX.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSAE.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSBO.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDG.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDL.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSEA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSEO.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSES.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSFM.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGU.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSHC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSHK.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSHS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSIC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSII.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSLS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSMC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSMV.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSNE.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSOI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSPX.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSPY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSQA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSTQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSTY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSTZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSUU.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSVI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWM.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSYA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSYG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSZN.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSZN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINAB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINAS.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINCD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINDV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINEY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINFY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINGV.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINHL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINHY.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINIH.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINJF.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINLE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINLV.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINMH.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINMW.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINND32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINNJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINNQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINNU.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINNV.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINQB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINQT.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRM.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRW.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINSP.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINSR.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINSV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINTD.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINUE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINVA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINWA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINXU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINYC.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINYY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINZE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIGN.EXE - Deleted
C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Application Data\cftmon.exe - Deleted
C:\Documents and Settings\LocalService\Local Settings\Application Data\cftmon.exe - Deleted
C:\WINDOWS\SYSTEM32\ADDIGN.EXE - Deleted
C:\DOCUME~1\COMPAQ~1\FTPDLL.DLL - Deleted
C:\Documents and Settings\Compaq_Propri‚taire\Local Settings\Temp\ubi15.tmp.exe - Deleted
C:\WINDOWS\system32\alt.exe.exe - Deleted
C:\WINDOWS\Temp\1156.tmp.lst - Deleted
C:\WINDOWS\Temp\1216.tmp.lst - Deleted
C:\WINDOWS\Temp\12B5.tmp.lst - Deleted
C:\WINDOWS\Temp\1343.tmp.lst - Deleted
C:\WINDOWS\Temp\13FE.tmp.lst - Deleted
C:\WINDOWS\Temp\14CA.tmp.lst - Deleted
C:\WINDOWS\Temp\1642.tmp.lst - Deleted
C:\WINDOWS\Temp\1827.tmp.lst - Deleted
C:\WINDOWS\Temp\1829.tmp.lst - Deleted
C:\WINDOWS\Temp\189D.tmp.lst - Deleted
C:\WINDOWS\Temp\18DD.tmp.lst - Deleted
C:\WINDOWS\Temp\1942.tmp.lst - Deleted
C:\WINDOWS\Temp\19C1.tmp.lst - Deleted
C:\WINDOWS\Temp\19C3.tmp.lst - Deleted
C:\WINDOWS\Temp\1A10.tmp.lst - Deleted
C:\WINDOWS\Temp\1B70.tmp.lst - Deleted
C:\WINDOWS\Temp\1D0B.tmp.lst - Deleted
C:\WINDOWS\Temp\1DA0.tmp.lst - Deleted
C:\WINDOWS\Temp\1DD.tmp.lst - Deleted
C:\WINDOWS\Temp\1F9F.tmp.lst - Deleted
C:\WINDOWS\Temp\1FF4.tmp.lst - Deleted
C:\WINDOWS\Temp\2221.tmp.lst - Deleted
C:\WINDOWS\Temp\22AD.tmp.lst - Deleted
C:\WINDOWS\Temp\23E7.tmp.lst - Deleted
C:\WINDOWS\Temp\25AA.tmp.lst - Deleted
C:\WINDOWS\Temp\26A0.tmp.lst - Deleted
C:\WINDOWS\Temp\2749.tmp.lst - Deleted
C:\WINDOWS\Temp\2776.tmp.lst - Deleted
C:\WINDOWS\Temp\28E8.tmp.lst - Deleted
C:\WINDOWS\Temp\2C3E.tmp.lst - Deleted
C:\WINDOWS\Temp\2CC3.tmp.lst - Deleted
C:\WINDOWS\Temp\2D1A.tmp.lst - Deleted
C:\WINDOWS\Temp\301A.tmp.lst - Deleted
C:\WINDOWS\Temp\3050.tmp.lst - Deleted
C:\WINDOWS\Temp\30D4.tmp.lst - Deleted
C:\WINDOWS\Temp\30D8.tmp.lst - Deleted
C:\WINDOWS\Temp\313D.tmp.lst - Deleted
C:\WINDOWS\Temp\3246.tmp.lst - Deleted
C:\WINDOWS\Temp\3313.tmp.lst - Deleted
C:\WINDOWS\Temp\3481.tmp.lst - Deleted
C:\WINDOWS\Temp\34AF.tmp.lst - Deleted
C:\WINDOWS\Temp\3511.tmp.lst - Deleted
C:\WINDOWS\Temp\3594.tmp.lst - Deleted
C:\WINDOWS\Temp\38BA.tmp.lst - Deleted
C:\WINDOWS\Temp\38FB.tmp.lst - Deleted
C:\WINDOWS\Temp\3920.tmp.lst - Deleted
C:\WINDOWS\Temp\3A17.tmp.lst - Deleted
C:\WINDOWS\Temp\3A56.tmp.lst - Deleted
C:\WINDOWS\Temp\3A69.tmp.lst - Deleted
C:\WINDOWS\Temp\3A6C.tmp.lst - Deleted
C:\WINDOWS\Temp\3C1C.tmp.lst - Deleted
C:\WINDOWS\Temp\3CD.tmp.lst - Deleted
C:\WINDOWS\Temp\3D16.tmp.lst - Deleted
C:\WINDOWS\Temp\3E84.tmp.lst - Deleted
C:\WINDOWS\Temp\3E94.tmp.lst - Deleted
C:\WINDOWS\Temp\3EC7.tmp.lst - Deleted
C:\WINDOWS\Temp\3F0.tmp.lst - Deleted
C:\WINDOWS\Temp\3FE7.tmp.lst - Deleted
C:\WINDOWS\Temp\408F.tmp.lst - Deleted
C:\WINDOWS\Temp\4402.tmp.lst - Deleted
C:\WINDOWS\Temp\4571.tmp.lst - Deleted
C:\WINDOWS\Temp\45D2.tmp.lst - Deleted
C:\WINDOWS\Temp\471D.tmp.lst - Deleted
C:\WINDOWS\Temp\4759.tmp.lst - Deleted
C:\WINDOWS\Temp\48D3.tmp.lst - Deleted
C:\WINDOWS\Temp\4A17.tmp.lst - Deleted
C:\WINDOWS\Temp\4A2F.tmp.lst - Deleted
C:\WINDOWS\Temp\4B1E.tmp.lst - Deleted
C:\WINDOWS\Temp\4BC9.tmp.lst - Deleted
C:\WINDOWS\Temp\4D92.tmp.lst - Deleted
C:\WINDOWS\Temp\4DEE.tmp.lst - Deleted
C:\WINDOWS\Temp\4F19.tmp.lst - Deleted
C:\WINDOWS\Temp\51A8.tmp.lst - Deleted
C:\WINDOWS\Temp\551F.tmp.lst - Deleted
C:\WINDOWS\Temp\572F.tmp.lst - Deleted
C:\WINDOWS\Temp\5756.tmp.lst - Deleted
C:\WINDOWS\Temp\5775.tmp.lst - Deleted
C:\WINDOWS\Temp\5822.tmp.lst - Deleted
C:\WINDOWS\Temp\5834.tmp.lst - Deleted
C:\WINDOWS\Temp\5890.tmp.lst - Deleted
C:\WINDOWS\Temp\5A09.tmp.lst - Deleted
C:\WINDOWS\Temp\5A30.tmp.lst - Deleted
C:\WINDOWS\Temp\5AEB.tmp.lst - Deleted
C:\WINDOWS\Temp\5B58.tmp.lst - Deleted
C:\WINDOWS\Temp\5BE8.tmp.lst - Deleted
C:\WINDOWS\Temp\5C71.tmp.lst - Deleted
C:\WINDOWS\Temp\5C85.tmp.lst - Deleted
C:\WINDOWS\Temp\5CCC.tmp.lst - Deleted
C:\WINDOWS\Temp\5E09.tmp.lst - Deleted
C:\WINDOWS\Temp\5E89.tmp.lst - Deleted
C:\WINDOWS\Temp\5F4.tmp.lst - Deleted
C:\WINDOWS\Temp\607A.tmp.lst - Deleted
C:\WINDOWS\Temp\609D.tmp.lst - Deleted
C:\WINDOWS\Temp\614.tmp.lst - Deleted
C:\WINDOWS\Temp\644B.tmp.lst - Deleted
C:\WINDOWS\Temp\64F0.tmp.lst - Deleted
C:\WINDOWS\Temp\6620.tmp.lst - Deleted
C:\WINDOWS\Temp\6725.tmp.lst - Deleted
C:\WINDOWS\Temp\67E7.tmp.lst - Deleted
C:\WINDOWS\Temp\688D.tmp.lst - Deleted
C:\WINDOWS\Temp\68E9.tmp.lst - Deleted
C:\WINDOWS\Temp\6983.tmp.lst - Deleted
C:\WINDOWS\Temp\6A8F.tmp.lst - Deleted
C:\WINDOWS\Temp\6C02.tmp.lst - Deleted
C:\WINDOWS\Temp\6CB1.tmp.lst - Deleted
C:\WINDOWS\Temp\6D75.tmp.lst - Deleted
C:\WINDOWS\Temp\6E93.tmp.lst - Deleted
C:\WINDOWS\Temp\6E94.tmp.lst - Deleted
C:\WINDOWS\Temp\6F77.tmp.lst - Deleted
C:\WINDOWS\Temp\7038.tmp.lst - Deleted
C:\WINDOWS\Temp\70AE.tmp.lst - Deleted
C:\WINDOWS\Temp\72EE.tmp.lst - Deleted
C:\WINDOWS\Temp\7389.tmp.lst - Deleted
C:\WINDOWS\Temp\73C1.tmp.lst - Deleted
C:\WINDOWS\Temp\7639.tmp.lst - Deleted
C:\WINDOWS\Temp\783A.tmp.lst - Deleted
C:\WINDOWS\Temp\79A0.tmp.lst - Deleted
C:\WINDOWS\Temp\7ADB.tmp.lst - Deleted
C:\WINDOWS\Temp\7D47.tmp.lst - Deleted
C:\WINDOWS\Temp\7DF5.tmp.lst - Deleted
C:\WINDOWS\Temp\7F39.tmp.lst - Deleted
C:\WINDOWS\Temp\919.tmp.lst - Deleted
C:\WINDOWS\Temp\A89.tmp.lst - Deleted
C:\WINDOWS\Temp\CB.tmp.lst - Deleted
C:\WINDOWS\Temp\DA3.tmp.lst - Deleted
C:\WINDOWS\Temp\E0C.tmp.lst - Deleted
C:\WINDOWS\Temp\E65.tmp.lst - Deleted
C:\WINDOWS\Temp\F3D.tmp.lst - Deleted
C:\WINDOWS\Temp\F64.tmp.lst - Deleted
C:\Program Files\Temporary\kernInst.MSNFix - Deleted
C:\WINDOWS\default.htm - Deleted
C:\WINDOWS\msav.exe - Deleted
C:\WINDOWS\msie.dll - Deleted
C:\WINDOWS\system32\diperto.ini - Deleted
C:\WINDOWS\system32\mssrv32.exe - Deleted
C:\WINDOWS\system32\winfrun32.bin - Deleted
C:\WINDOWS\Temp\winlogon.exe - Deleted
C:\WINDOWS\system32\drivers\astq.tga - Deleted
C:\WINDOWS\system32\drivers\spools.exe - Deleted
Folder C:\Program Files\Helper - Removed
Folder C:\Program Files\Temporary - Removed
Removing Temp Files
[b]ADS Check /b:
hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:11:33, on 26/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {00000250-0320-4dd4-be4f-7566d2314352} - (no file)
O2 - BHO: (no name) - {13197ace-6851-45c3-a7ff-c281324d5489} - (no file)
O2 - BHO: (no name) - {15651c7c-e812-44a2-a9ac-b467a2233e7d} - (no file)
O2 - BHO: (no name) - {4e1075f4-eec4-4a86-add7-cd5f52858c31} - (no file)
O2 - BHO: (no name) - {4e7bd74f-2b8d-469e-92c6-ce7eb590a94d} - (no file)
O2 - BHO: (no name) - {5929cd6e-2062-44a4-b2c5-2c7e78fbab38} - (no file)
O2 - BHO: (no name) - {5dafd089-24b1-4c5e-bd42-8ca72550717b} - (no file)
O2 - BHO: (no name) - {5fa6752a-c4a0-4222-88c2-928ae5ab4966} - (no file)
O2 - BHO: (no name) - {622cc208-b014-4fe0-801b-874a5e5e403a} - (no file)
O2 - BHO: (no name) - {8674aea0-9d3d-11d9-99dc-00600f9a01f1} - (no file)
O2 - BHO: (no name) - {965a592f-8efa-4250-8630-7960230792f1} - (no file)
O2 - BHO: (no name) - {9c5b2f29-1f46-4639-a6b4-828942301d3e} - (no file)
O2 - BHO: (no name) - {cf021f40-3e14-23a5-cba2-717765728274} - (no file)
O2 - BHO: (no name) - {fc3a74e5-f281-4f10-ae1e-733078684f3c} - (no file)
O2 - BHO: (no name) - {ffff0001-0002-101a-a3c9-08002b2f49fb} - (no file)
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: (no name) - {A20A76AD-7A29-4756-87FE-70C334CB40C0} - (no file)
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [jmjupelq] regsvr32 /u "C:\Documents and Settings\All Users\Application Data\jmjupelq.dll"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe" -s
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Firewall auto setup] C:\WINDOWS\TEMP\winlogon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Firewall auto setup] C:\WINDOWS\TEMP\winlogon.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {230C3D02-DA27-11D2-8612-00A0C93EEA3C} (SAXFile FileUpload ActiveX Control) - http://www.wistiti.fr/AlbumsPerso/ActiveX/SAXFile.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://chezmaryetalex.spaces.live.com//PhotoUpload/MsnPUpld.cab
--
FCNALEX
Configuration: Windows XP Firefox 2.0.0.13
6 réponses
-
slt,
effectivement tu as le record avec sdfix!!!
__________
ton rapport hijakchits n'est pas bon , il doit finir par des ligne superieures a 23 , remets en un en entier
____________
mets a jour internet explorer ici:
http://www.01net.com/windows/Internet/navigateur/fiches/13759.html
___________
colle un rapport bitdefender que tu as -
tu mets quand meme a jour internet explorer car il est utilisé pour mettre a jour windows meme si tu ne navigue pas avec
____________
puis
ton rapport hijakchits n'est pas bon , il doit finir par des ligne superieures a 23 , remets en un en entier
regarde ici
http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
_________________
colle moi un rapport bitdefender et explique bien tes soucis actuel-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:20:46, on 26/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: (no name) - {A20A76AD-7A29-4756-87FE-70C334CB40C0} - (no file)
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe" -s
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Firewall auto setup] C:\WINDOWS\TEMP\winlogon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Firewall auto setup] C:\WINDOWS\TEMP\winlogon.exe (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09CC593B-E8A9-4491-927D-A3E33534DDD4} (InstallerObj Class) - http://mm.tf1.fr/superdistribution/installer2.cab
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/importer/MypixUploader.cab
O16 - DPF: {230C3D02-DA27-11D2-8612-00A0C93EEA3C} (SAXFile FileUpload ActiveX Control) - http://www.wistiti.fr/AlbumsPerso/ActiveX/SAXFile.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://chezmaryetalex.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mypix.com/importer/ImageUploader4.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://chezmaryetalex.spaces.live.com/PhotoUpload/MsnPUpld.cab?10,0,916,0
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game02.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Gestionnaire de comptes de sécurité SamSsNtLmSsp (SamSsNtLmSsp) - Unknown owner - C:\WINDOWS\system32\addign.exe (file missing)
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: Infrastructure de gestion Windows winmgmtNetDDEdsdm (winmgmtNetDDEdsdm) - Unknown owner - C:\WINDOWS\system32\addaad.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
-
-
PWaaa... mais ouaahhh ...
Félicitation c'set la 1ere fois que je vois ca !!
Ps : juste coup d'oeil : O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: (no name) - {A20A76AD-7A29-4756-87FE-70C334CB40C0} - (no file) -
Télécharge MSNFix de Laurent
http://sosvirus.changelog.fr/MSNFix.zip
Décompresse-le et double clic sur le fichier MSNFix.bat.
- Exécute l'option R.
--Si l'infection est détectée, exécute l'option N
- Sauvegarde ce rapport puis fais un copier/coller de ce rapport sur le forum.
Note :
Si une erreur de suppression est détectée un message s'affichera demandant de redémarrer l'ordinateur afin de terminer les opérations. Dans ce cas il suffit de redémarrer l'ordinateur en mode normal
Sauvegarder et fermer le rapport pour que Windows termine de se lancer normalement.
envoyer le fichier [b] C:\DOCUME~1\florian\Bureau\Upload_Me.zip [/b] sur http://upload.changelog.fr pour faire evoluer msnfix
_______________
scan avec
MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
_____________
colle moi un rapport bitdefender-
MSNFix 1.690
C:\Documents and Settings\Compaq_Propri‚taire\Bureau\MSNFix
Fix exécuté le 26/03/2008 - 21:35:53,75 By Compaq_Propri‚taire
mode normal
************************ Recherche les fichiers présents
Aucun Fichier trouvé
************************ Recherche les dossiers présents
Aucun dossier trouvé
************************ Fichiers suspects
Aucun Fichier trouvé
************************ HKLM\...\Winlogon\Userinit
Userinit = C:\WINDOWS\system32\userinit.exe,
------------------------------------------------------------------------
Auteur : !aur3n7 Contact: https://www.ionos.fr/
------------------------------------------------------------------------
--------------------------------------------- END ---------------------------------------------
et comment fait on un rapport bitdefender?
-
-
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
scan avec
MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
_____________
pour bitdefender tu scannes avec ton antivirus bitdefender et tu me colle le rapport obtenu
ou alors
colle le rapport d'un scan en ligne
avec un des suivants:
Panda en ligne :
http://pandasoftware.fr
Kaspersky en ligne
https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr -