Message d'erreur Dll au démarrage après virusRésolu/Fermé

Question

Bonjour,
j'ai deux messages d'erreur qui s'affiche au démarrage concernant 2 fichiers .dll
Je précise que j'avais des pages internet pour des jeux vidéos qui se lançaient toutes seules et que j'ai fait une analyse Norton qui m'a supprimé le virus W32.rajump et un tracking Cookie,
Ensuite lorsque je faisais une recherche sur google, la page restait en chargement mais ne s'affichait jamais alors que d'autres sites fonctionnaient.
Depuis j'ai fait le FixRajump pris sur le site norton mais qui n'a détecté aucune trace du virus (j'ai fait le fix après l'analyse norton qui avait déja supprimé le virus)
Les deux messages d'erreur sont identiques et concernent 2 dll : opnnmLBs.dll et bOYfdaYr.dll
les messages me disent que ces Dll sont introuvables dans mon fichiers : C:\Users\Julien\AppData\Local\Temp
je pensais que les Dll avaient été effacés alors j'ai essayé de les télécharger sur un site fournissant des Dll mais ils n'existent pas!
je voudrais savoir si quelqu'un a une piste
je précise que google refonctionne normalement depuis sans avoir fait quelquechose(mise à part le FixRajump mais je vois pas trop le rapport puisqu'il n'a rien trouvé)
merci pour vos réponses

Utilisateur anonyme · Accepted Answer

Dlcox 

fais ça :


Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 


-> Double clique combofix.exe. 
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

Avant d'utiliser ComboFix : 

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. 

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message. 

-> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

Utilisateur anonyme · Answer

salut 

A mon avis tu avais un programme infecté 

norton a supprimé les fichiés infecté du rogrammes mais le dit programme est present et veut demarrer d ou le message

faudrait donc virer ce programme

totobetourne · Answer

telecharge cela

http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

installe le dans c\programme file	rend micro\scanner.exe mais avant renomme le scanner au lieu de hijack this pour contrer infection vundo.
lance le clique sur do a san and save a logfile(si il te met qu il ne peut pas tout effectuer pour une certaine raison alors relance le avec un clique droit et donne lui les proprietes d administrateurs)
tu vas obtenir un rapport que tu colles.

ne cherche pas a telecharger les dll.

DjCoX59 · Answer

voici le rapport (au passage google ne remarche plus)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:10:36, on 29/05/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Windows\System32undll32.exe
C:\Windows\System32undll32.exe
C:\Windows\System32undll32.exe
C:\Windows\System32undll32.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\scanner.exe\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Afficher Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [MSPService] C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\Julien\AppData\Local\Temp\bYOfdaYr.dll,#1
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\Julien\AppData\Local\Temp\opnnmLBs.dll,c
O4 - HKCU\..\Run: [7ce6383e] rundll32.exe "C:\Users\Julien\AppData\Local\Temp\mxaanvdj.dll",b
O4 - HKCU\..\Run: [BM7fd50ba2] Rundll32.exe "C:\Users\Julien\AppData\Local\Temp	uubxmlu.dll",s
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix: 
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ccEvtMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: ccSetMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Start BT in service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

DjCoX59 · Answer

si ça peut aider, j'ai remarqué que les 2dll apaaraissent sur le rapport

O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\Julien\AppData\Local\Temp\bYOfdaYr.dll,#1 
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\Julien\AppData\Local\Temp\opnnmLBs.dll,c

Utilisateur anonyme · Answer

on ne fixe pas les lignes lignes infecté ..........!!!!!!!!!

DjCoX59 · Answer

t'inquiète j'ai rien touché
merci pour votre aide

DjCoX59 · Answer

voici le rapport (j'ai oublié de désactivé norton mais apparement ça a fonctionné) ComboFix 08-05-28.4 - Julien 2008-05-29 2:27:26.1 - NTFSx86 Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.2050 [GMT 2:00] Endroit: C:\Users\Julien\Documents\Logiciels\ComboFix.exe * Création d'un nouveau point de restauration . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat ----- BITS: Possible sites infectés ----- hxxp://rad.msn.com hxxp://ads.msn.com hxxp://ads1.msn.com . ((((((((((((((((((((((((((((( Fichiers créés 2008-04-28 to 2008-05-29 )))))))))))))))))))))))))))))))))))) . 2008-05-29 02:09 . 2008-05-29 02:09 d-------- C:\Program Files\Trend Micro 2008-05-29 00:01 . 2008-05-29 00:01 d-------- C:\PerfLogs 2008-05-28 23:17 . 2008-01-19 09:43 3,600,440 --a------ C:\Windows\System32 tkrnlpa.exe 2008-05-28 23:17 . 2008-01-19 09:43 3,548,728 --a------ C:\Windows\System32 toskrnl.exe 2008-05-28 23:17 . 2008-01-19 09:33 2,623,488 --a------ C:\Windows\System32\SLsvc.exe 2008-05-28 23:17 . 2008-01-19 09:36 1,541,120 --a------ C:\Windows\System32\onex.dll 2008-05-28 23:17 . 2008-01-19 09:29 705,536 --a------ C:\Windows\System32\imagesp1.dll 2008-05-28 23:17 . 2008-01-19 09:42 51,768 --a------ C:\Windows\System32\PSHED.DLL 2008-05-28 23:15 . 2008-01-19 05:12 3,662,296 --a------ C:\Windows\System32\locale.nls 2008-05-28 23:14 . 2008-01-19 09:35 9,847,296 --a------ C:\Windows\System32\NlsData000a.dll 2008-05-28 23:13 . 2008-01-19 09:33 8,139,264 --a------ C:\Windows\System32\ssBranded.scr 2008-05-28 23:12 . 2008-01-19 09:35 3,072,000 --a------ C:\Windows\System32 etworkmap.dll 2008-05-28 23:11 . 2008-01-19 09:34 6,103,040 --a------ C:\Windows\System32\chtbrkr.dll 2008-05-28 23:10 . 2008-01-19 08:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL 2008-05-28 23:08 . 2008-01-19 09:36 357,888 --a------ C:\Windows\System32\wbemcomn.dll 2008-05-28 23:07 . 2008-01-19 09:36 704,512 --a------ C:\Windows\System32\SmiEngine.dll 2008-05-28 23:07 . 2008-01-19 09:36 218,624 --a------ C:\Windows\System32\wdscore.dll 2008-05-28 23:07 . 2008-01-19 09:36 139,264 --a------ C:\Windows\System32\SmiInstaller.dll 2008-05-28 23:07 . 2008-01-19 09:33 130,560 --a------ C:\Windows\System32\PkgMgr.exe 2008-05-28 23:05 . 2008-01-19 09:34 305,152 --a------ C:\Windows\System32\msdelta.dll 2008-05-28 23:05 . 2008-01-19 09:34 258,560 --a------ C:\Windows\System32\dpx.dll 2008-05-28 23:05 . 2008-01-19 09:34 246,784 --a------ C:\Windows\System32\drvstore.dll 2008-05-28 23:05 . 2008-01-19 09:35 35,328 --a------ C:\Windows\System32\mspatcha.dll 2008-05-28 23:04 . 2006-11-02 11:39 6,656 --a------ C:\Windows\System32\kbd106.dll 2008-05-28 22:08 . 2008-03-08 04:08 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll 2008-05-28 22:08 . 2008-03-08 06:21 1,695,744 --a------ C:\Windows\System32\gameux.dll 2008-05-10 22:13 . 2008-05-26 23:24 d-------- C:\Users\Julien\Zero G Registry 2008-05-10 22:01 . 2008-05-10 22:02 d-a------ C:\Users\All Users\TEMP 2008-05-10 22:01 . 2008-05-10 22:02 d-a------ C:\ProgramData\TEMP 2008-05-10 22:01 . 2008-05-10 22:04 d-------- C:\Program Files\Any Video Converter Professional 2008-05-10 21:46 . 2008-05-10 21:46 d-------- C:\3gptemp 2008-05-10 21:45 . 2008-05-10 21:45 d-------- C:\Program Files\MIKSOFT 2008-05-10 21:33 . 2008-05-10 21:54 d-------- C:\Users\Julien\.smplayer 2008-05-09 21:45 . 2008-05-09 21:45 d-------- C:\Program Files\VstPlugins 2008-05-09 21:45 . 2002-07-08 00:14 1,294,336 --a------ C:\Windows\System32\vorbis.acm 2008-05-09 21:45 . 2006-06-20 10:56 225,280 --a------ C:\Windows\System32 ewire.dll 2008-05-09 21:44 . 2008-05-09 21:45 d-------- C:\Program Files\Image-Line . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-05-28 22:12 174 --sha-w C:\Program Files\desktop.ini 2008-05-28 22:03 --------- d-----w C:\Program Files\Windows Sidebar 2008-05-28 22:03 --------- d-----w C:\Program Files\Windows Photo Gallery 2008-05-28 22:03 --------- d-----w C:\Program Files\Windows Mail 2008-05-28 22:03 --------- d-----w C:\Program Files\Windows Journal 2008-05-28 22:03 --------- d-----w C:\Program Files\Windows Defender 2008-05-28 22:03 --------- d-----w C:\Program Files\Windows Collaboration 2008-05-28 22:03 --------- d-----w C:\Program Files\Windows Calendar 2008-05-28 21:58 --------- d-----w C:\ProgramData\NVIDIA 2008-05-28 21:44 101,888 ----a-w C:\Windows\System32\ifxcardm.dll 2008-05-28 21:43 82,432 ----a-w C:\Windows\System32\axaltocm.dll 2008-05-26 23:00 --------- d-----w C:\ProgramData\Microsoft Help 2008-05-26 22:41 --------- d-----w C:\ProgramData\Symantec 2008-05-25 22:45 27,430 ----a-w C:\Users\Julien\AppData\Roaming vModes.dat 2008-05-05 08:23 --------- d-----w C:\Program Files\CONEXANT 2008-04-16 00:05 --------- d-----w C:\ProgramData\Bluetooth 2008-04-12 11:44 --------- d-----w C:\ProgramData\Roxio 2008-04-02 00:38 --------- d-----w C:\Program Files\GOA 2008-04-01 23:57 --------- d-----w C:\Program Files\Common Files\INCA Shared 2008-04-01 23:47 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-03-31 13:43 --------- d-----w C:\Program Files\Audacity 2008-03-28 22:35 --------- d-----w C:\Program Files\eMule 2008-03-17 23:44 0 ----a-w C:\Users\Julien\AppData\Roaming\wklnhst.dat 2008-03-08 04:19 540,672 ----a-w C:\Windows\AppPatch\AcLayers.dll 2008-03-08 04:19 458,752 ----a-w C:\Windows\AppPatch\AcSpecfc.dll 2008-03-08 04:19 2,153,984 ----a-w C:\Windows\AppPatch\AcGenral.dll 2008-03-08 04:19 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll 2008-03-08 01:58 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll 2008-03-04 00:34 2,125,312 ----a-w C:\Windows\System32\CnxtAp32.dll 2008-02-29 07:14 19,000 ----a-w C:\Windows\System32\kd1394.dll 2008-02-29 07:11 988,216 ----a-w C:\Windows\System32\winload.exe 2008-02-29 07:11 927,288 ----a-w C:\Windows\System32\winresume.exe 2008-02-29 06:53 46,592 ----a-w C:\Windows\System32\setbcdlocale.dll 2008-02-29 06:53 40,960 ----a-w C:\Windows\System32\srclient.dll 2008-02-29 06:53 378,368 ----a-w C:\Windows\System32\srcore.dll 2008-02-29 06:35 6,656 ----a-w C:\Windows\System32\kbd106n.dll 2008-02-29 04:21 2,032,128 ----a-w C:\Windows\System32\win32k.sys 2008-02-29 04:12 318,464 ----a-w C:\Windows\System32 strui.exe 2008-02-29 04:12 14,848 ----a-w C:\Windows\System32\srdelayed.exe . ------- Sigcheck ------- . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "JMB36X IDE Setup"="C:\Windows\RaidTool\xInsIDE.exe" [2007-03-20 23:36 36864] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-24 00:40 857648] "RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2007-01-11 11:40 232184] "MSPService"="C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe" [2007-06-12 23:36 102400] "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 23:59 115816] "toolbar_eula_launcher"="C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-02-20 18:20 28672] "IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 14:00 174872] "Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 18:38 583048] "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB ealsched.exe" [2008-03-15 14:04 185896] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792] "NvSvc"="C:\Windows\system32 vsvc.dll" [2007-08-16 22:19 86016] "NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-08-16 22:19 8478720] "NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-08-16 22:19 81920] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.mkdmp3enc"= C:\PROGRA~1\CYBERL~1\MAGICS~1\Kernel\Burner\MKDMP3Enc.ACM [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{81A4C2FB-17A9-4AC1-A24B-DC4CA25B219F}"= C:\Program Files\CyberLink\MagicSports\MagicSports.exe:CyberLink MagicSports "{8CFAF2DD-D6B4-41E9-B373-1C6B49139173}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{E49364BE-2EBE-4F8B-B6E0-32A40E432BA8}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{929C4C3D-F3AA-406F-AE11-B4813673C390}"= UDP:C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:BlueSoleil "{744002B6-31D5-41D5-BC68-7EFDD9B17D83}"= TCP:C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:BlueSoleil "{14AA4B1F-0F42-4523-8C25-B3570F840809}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile] "EnableFirewall"= 0 (0x0) R1 IDSvix86;Symantec Intrusion Prevention Driver;C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20080528.003\IDSvix86.sys [2008-03-11 23:36] R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service;C:\Windows\system32\drivers\CHDRT32.sys [2008-03-04 02:32] R3 itecir;ITECIR Infrared Receiver;C:\Windows\system32\DRIVERS\itecir.sys [2007-01-08 13:38] R3 SYMNDISV;SYMNDISV;C:\Windows\system32\Drivers\SYMNDISV.SYS [2007-01-09 23:32] R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk60x86.sys [2007-12-06 10:51] S3 Start BT in service;Start BT in service;C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [2007-04-26 09:22] *Newly Created Service* - CATCHME *Newly Created Service* - COMHOST . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-05-28 20:05:22 C:\Windows\Tasks\User_Feed_Synchronization-{A5EEE394-80C9-447C-9E76-85D37FE47A9F}.job" - C:\Windows\system32\msfeedssync.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-05-29 02:29:40 Windows 6.0.6001 Service Pack 1 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-05-29 2:30:27 ComboFix-quarantined-files.txt 2008-05-29 00:30:22 Pre-Run: 80,722,632,704 octets libres Post-Run: 80,690,638,848 octets libres 168 --- E O F --- 2008-05-28 21:46:17

Utilisateur anonyme · Answer

ok 

1) ton fichier host est infecté :


telecharge zeb retore : 

http://telechargement.zebulon.fr/zeb-restore.html 

dezippe le 

fais un clic droit sur zeb retore (la roue dentelé) 

choisi executer en tant qu administrateur 

coches fichier hosts 

clic sur retaurer 

ensuite refais un scan hijackthis et envoi le moi stp

j en ai besoin pour la suite de combofix

DjCoX59 · Answer

voici le rapport hijackthis 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:43:07, on 29/05/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Windows\system32\conime.exe
C:\Windows\system32
otepad.exe
C:\Windows\Explorer.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\scanner.exe\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [MSPService] C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix: 
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ccEvtMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: ccSetMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Start BT in service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

Utilisateur anonyme · Answer

ok j eregarde tout et je e dis la suite soit patient

Utilisateur anonyme · Answer

bon combofix a fais du bon boulot 

tu connais ce programmes :

C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe

????

DjCoX59 · Answer

oui, c'était un truc installé d'origine sur le pc quand je l'ai acheté, c'est des logiciels qu'on te bourre d'office sur ton pc comme ça t'a plus qu'à faire le nettoyage une fois arrivé chez toi la première fois que tu démarre l'ordi, il me semble l'avoir désinstallé mais si ya moyen de le virer complétement , fais signe

Utilisateur anonyme · Answer

OK je ragarde ça

SPAGGIARIDZ · Answer

salam 
panique pas trop 
 écoute va o menu demmaré +executé  apres tape  :sfc /scannow
n oublie pas  espace entre sfc é slash    
bonne chance 
SPAGGIARIDZ

DjCoX59 · Answer

est-ce que je peux essayer de redémarrer l'ordi pour voir si j'ai encore les messages ou y-a-t-il encore des manips à faire?
un grand UP pour toi chiquitine29  ;-)

DjCoX59 · Answer

à quoi va servir cette manip

               salam 
               panique pas trop 
               écoute va o menu demmaré +executé apres tape :sfc /scannow 
               n oublie pas espace entre sfc é slash

SPAGGIARIDZ · Answer

NON EXECUTE SEUL LA COMMANDE COM J T2 DIT APRES LAISSE LE SCAN JUSQU A LA FIN APRES SI YA DES DLL MANQUANT IL VA TE DEMAND2 D INSéré LE CD WINXP TU LE MET APRES TOUTES é BON.

Utilisateur anonyme · Answer

Copie le texte ci-dessous : 

File:: 
C:\3gptemp 
C:\Users\Julien\AppData\Roaming\wklnhst.dat 
C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe


Folder:: 
C:\Program Files\CyberLink\MagicSports
C:\Program Files\Packard Bell\GOOGLE_EULA


Registry:: 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
"JMB36X IDE Setup"=-
"SynTPEnh"=-
"RoxWatchTray"=-
"MSPService"=- 
"ccApp"=-
"toolbar_eula_launcher"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] 
"EnableUIADesktopToggle"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] 
"msacm.mkdmp3enc"=-
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] 
"DisableMonitoring"=-
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] 
"DisableMonitoring"=-
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] 
"DisableMonitoring"=-
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile] 
"EnableFirewall"=-





Ouvre le Bloc-Notes puis colle le texte copié. 
(Démarrer\Tous les programmes\Accessoires\Bloc notes.) 
Sauvegarde ce fichier sous le nom de CFScript.txt. 

Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous : 

http://sd-1.archive-host.com/membres/up/1366464061/CFScript.gif 

Cela va relancer Combofix, 

Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide. 

Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal! 

Ne touche à rien tant que le scan n'est pas terminé. 

Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis. 

S'il n'y a pas de rédémarrage, poste quand même les rapports.

DjCoX59 · Answer

apparement les Dll appartenaient au logiciel frauduleux donc je n'ai pas de Dll manquant si j'ai bien compris donc je n'ai pas besoin de faire le scan pour savoir s'il en manque?
(enfin je dis ça mais si je suis là ç'est que j'y connais rien .... non?)

Utilisateur anonyme · Answer

fai sce qui est expliqué post 19 

sauvegarde le rapport 

redémarre le pc

envoi moi les rapport et dis moi ce que ça donne

DjCoX59 · Answer

j'ai pas le logo de combofix , où puis-je le retrouver?

Utilisateur anonyme · Answer

la ou tu as deposé combofix quand tu l a telecharger 

sinon retelecharge le et fais  enregistrer

DjCoX59 · Answer

voici le rapport combofix 

ComboFix 08-05-28.4 - Julien 2008-05-29  3:26:54.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium   6.0.6001.1.1252.1.1036.18.2009 [GMT 2:00]
Endroit: C:\Users\Julien\Documents\Logiciels\ComboFix.exe
Command switches used :: C:\Users\Julien\Desktop\CFScript.txt
 * Création d'un nouveau point de restauration

FILE ::
C:\3gptemp
C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
C:\Users\Julien\AppData\Roaming\wklnhst.dat
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\CyberLink\MagicSports
C:\Program Files\CyberLink\MagicSports\APREG.url
C:\Program Files\CyberLink\MagicSports\atl71.dll
C:\Program Files\CyberLink\MagicSports\CLAuMixer.dll
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\APREG.url
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\EditMovieSetting.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\EditMovieSetting_AC3.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHS\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHS\Intro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHS\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHS\Movie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHS\Music.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHS\Photo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHS\Radio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHS\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHS\Video.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHT\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHT\Intro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHT\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHT\Movie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHT\Music.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHT\Photo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHT\Radio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHT\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\CHT\Video.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\DAN\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\DEU\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\DEU\Intro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\DEU\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\DEU\Movie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\DEU\Music.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\DEU\Photo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\DEU\Radio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\DEU\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\DEU\Video.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\Intro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\MakeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\Movie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\Music.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\Photo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\Radio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ENU\Video.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ESP\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ESP\Intro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ESP\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ESP\Movie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ESP\Music.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ESP\Photo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ESP\Radio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ESP\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ESP\Video.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\FRA\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\FRA\Intro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\FRA\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\FRA\Movie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\FRA\Music.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\FRA\Photo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\FRA\Radio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\FRA\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\FRA\Video.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ITA\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ITA\Intro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ITA\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ITA\Movie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ITA\Music.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ITA\Photo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ITA\Radio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ITA\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\ITA\Video.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\JPN\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\JPN\Intro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\JPN\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\JPN\Movie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\JPN\Music.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\JPN\Photo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\JPN\Radio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\JPN\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\JPN\Video.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\KOR\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\KOR\Intro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\KOR\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\KOR\Movie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\KOR\Music.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\KOR\Photo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\KOR\Radio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\KOR\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\KOR\Video.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\NLD\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\PTB\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\PTB\Intro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\PTB\Movie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\PTB\Music.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\PTB\Photo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\PTB\Radio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\PTB\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\PTB\Video.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Help\PTG\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\IPService2Setting.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\keymap.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\KeyTable.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\__init__.kc
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHS\BaseBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHS\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHS\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHS\FootBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHS\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHS\makeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHS\Sumo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHS\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHT\BaseBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHT\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHT\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHT\FootBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHT\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHT\makeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHT\Sumo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\CHT\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\DAN\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\DAN\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\DEU\BaseBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\DEU\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\DEU\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\DEU\FootBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\DEU\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\DEU\makeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\DEU\Sumo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\DEU\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\BaseBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\FootBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\IPService2.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\Language.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\Layout.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\makeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\News.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\Sumo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ENU\Weather.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ESP\BaseBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ESP\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ESP\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ESP\FootBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ESP\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ESP\makeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ESP\Sumo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ESP\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\FRA\BaseBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\FRA\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\FRA\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\FRA\FootBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\FRA\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\FRA\makeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\FRA\Sumo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\FRA\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ITA\BaseBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ITA\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ITA\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ITA\FootBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ITA\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ITA\makeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ITA\Sumo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\ITA\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\JPN\BaseBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\JPN\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\JPN\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\JPN\FootBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\JPN\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\JPN\makeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\JPN\Sumo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\JPN\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\KOR\BaseBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\KOR\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\KOR\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\KOR\FootBall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\KOR\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\KOR\makeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\KOR\Sumo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\KOR\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\NLD\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\NLD\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\NLD\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\PTB\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\PTG\Common.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\PTG\EditMovie.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\PTG\MagicSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\PTG\makeDVD.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Language\PTG\TV.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\MagicSports.pcm
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\MagicSportsSetting.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Moviesetting.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\NewsSetting.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\PowerCinema.sim
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\setting.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\settingux.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditBrowsingMusic.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditBrowsingMusicMore.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditBrowsingPhoto.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditBrowsingPhotoMore.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditBrowsingSource.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditBrowsingVideo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditBrowsingVideoMore.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditMain.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditMovieTitle.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditOutput.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditPreview.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditSelectScene.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditSelectStyle.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditToolbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie\EditToolbar2.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EditMovie	emplate.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EFZone\EFSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\EFZone\EFZone.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Extend\BrowserBox.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Extra\Extra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Extra\L_PicBanner.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Extra\R_PicBanner.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Game\Game.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Help\help.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Help\HelpXML.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\IPService\IPServiceBrowsing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\IPService2\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\IPService2\IPService2Main.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicScene\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicScene\MagicAddFile.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicScene\MagicBrowsing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicScene\MagicProgress.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\Baseball\CtrlToolBarManualLocate.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\Baseball\PageAutoConfirm.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\Baseball\PageManualLocate.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\Baseball\PageSemiAutoSelectPosition.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\Baseball\PageSemiAutoSelectSB.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageAbout.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageExtra.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageMain.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageRCHint.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageSetting_Panel2.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageSetting2.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageShareCustDuration.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageShareDuration.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageShareMakeSports.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageShareOutputFile.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageSharePreview.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageShareSelectScene.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageShareZone.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageWatchAddGame.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageWatchMoreVideo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageWatchPlayGame.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicPageWatchZone.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\MagicProgress.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\SceneToolBar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports	emplate.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\VideoProgress.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\WatchGameToolbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MagicSports\WatchGameToolbar_Baseball.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Mainmenu\background.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Mainmenu\captionbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Mainmenu\mainmenu.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Mainmenu\mainmenu_16x9.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Mainmenu\mainmenu_4x3.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Mainmenu\mainmenu_arc.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Mainmenu\mainmenu_circle.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Mainmenu\PicBanner.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MorePrograms\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MorePrograms\MoreProgramsMain.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MorePrograms\MoreProgramsSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\MorePrograms\MoreProgramsSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\MovieLangSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\MovieLangSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\moviemain.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\MoviePlaybackDlg.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\MovieProgress.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\MovieToolbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\MovieToolbarXPe.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\RegionChange.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\RegionFail.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Movie\RegionLimited.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicBrowsing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicBrowsingArtistAlbum.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicBrowsingMore.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicBrowsingUPnP.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicEditPlaylist.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicFilelist.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicFilesInPlaylist.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicFullscreen.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicListPage.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicPlaylist.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicPlaylistMgr.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicRemovePlaylist.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicRipping.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicSavePlaylist.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicSelectPlaylist.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicSetting_PanelXPe.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicShowPlaylistContent.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicSyncDriveList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicSyncFileList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicSyncRuleList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Music\MusicToolbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsCreateCategory.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsCreateCategory_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsCreateFeed.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsCreateFeed_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsFeedList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsMain.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsNewsList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsOPMLFileBrowsing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsOPMLImport.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsSavedNewsList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsSettingFeedList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\News\NewsWebSmallView.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\OnlineService\url.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoBrowsing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoBrowsingUPnP.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoDefaultFolder.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoEditing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoEditMain.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoEntry.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoProgress.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoSettingXPe.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Photo\PhotoToolbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Radio\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Radio\RadioBrowsing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Radio\RadioManage.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Radio\RadioScan.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Radio\RadioSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Radio\RadioSettings.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Radio\RadioToolbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Radio\RadioToolbarXPe.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Schedule\NewSchedule.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Schedule\NewSchedule_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Schedule\ScheduleConflict.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Schedule\ScheduleRecord.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Schedule\SeriesEpisode.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\FileChooser.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\FolderBrowser.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingAbout.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingAudio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingAudio_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingAudio_Panel_Sub.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingAudio_Panel_Sub2.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingDisplay.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingDisplay_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingDisplay_PanelXPe.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingGeneral.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingGeneral_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingInternet.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingInternet_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingRCChannel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingShare.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings\SettingShare_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Settings	emplate.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\CheckUpdate.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\HardwareTesting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\MusicSearching.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\PostalCode.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\RadioAutoScan.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\RadioChannelList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\RadioRecodedPath.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\RadioScanning.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\RadioScanResult.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\Register.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\RemoteChannel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\SearchMusic.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\SetAudio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\SetDisplayRatio.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\Template.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\Template2.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\Thanks.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVCountry.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVDetection.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVDVBSDeviceScan.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVDVBSScan.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVEPGNextView.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVEPGNextViewScan.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVEPGSelProvider.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVEPGSources.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVRecodedPath.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVSatelliteCount.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVSatelliteSelection.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVScan.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVScanning.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVScanResult.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVSetEPGSource.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVSignalType.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\TVTunerCards.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Setup\Welcome.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Style\font\font.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Style\style.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVEPGProgramSearch.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVEPGSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVEPGSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGChannelMapping.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGInfoProgramGistLight.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGInfoProgramGistMedium.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGInfoProgramGistQuality.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGUpgrade.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardActivate.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardEntry.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardIntro.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardProcessing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardProviderList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardReg.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardReport.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardResult.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardSonyProcessing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardSonyProviderList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardSonyResult.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardTemplate.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardTemplateInfo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardTvtvAccount.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardTvtvProcessing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardTvtvReport.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardTvtvUserPass.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardUUID.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TViEPGWizardZipcode.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVTemplateEPGInfoProgram.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVtEPGFindProgram.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVtEPGInfo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVtEPGInfoProgram.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVtEPGListByCategory.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVtEPGListByChannel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVtEPGListByGenre.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVtEPGProgramGuide.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVtEPGScanProvider.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVtEPGSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\EPG\TVWizardTemplate.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\RecordedTV\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\RecordedTV\CategoryView.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\RecordedTV\ChannelView.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\RecordedTV\FileView.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\RecordedTV\InfoView.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\RecordedTV\ProgramView.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVAddChannel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVAddChannelStep2.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVAddChannelStep3.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVAddChannelStep4.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVBrowsing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVBrowsing_Twin.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVChannelList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVChannelScan.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVFileBrowser.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVFullScreen.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVRecorderSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVRecorderSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVSatelliteSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVSatelliteSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVSignalSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVSignalSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVSignalSetting_Panel_N.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVTeletextToolbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVTeletextToolbarXPe.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVToolbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVToolbarXPe.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\TV\TVWall.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\CaptureEntry.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\DVProgress.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\DVToolbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoBrowsing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoBrowsingUPnP.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoCommCut.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoEditing.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\videoEntry.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoManualCut.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoPlaybackDlg.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoProgress.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoSettingXPe.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoToolbar.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Video\VideoToolbarXPe.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\__init__.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\WeatherAddNewCity.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\WeatherAddNewCity_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\WeatherCityList.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\WeatherInfo.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\WeatherInfo_CurrentPanel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\WeatherInfo_ForecastPanel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\WeatherInforPanel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\WeatherOneDayForecast.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\WeatherSetting.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Layout\Weather\WeatherSetting_Panel.xml
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\PCM.ico
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\AUDIO_CD.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\AUDIO_MP3.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\AUDIO_MP3WMA.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\AUDIO_WMA.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\Data.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\DATA_CD.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\DATA_DISC.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\DVD_CD.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\menu_folder_bg.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\MoreTemplate.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\Music.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\Pictures.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\SVCD_CD.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\VCD_CD.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Burner\Video.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_back_D.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_back_G.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_back_N.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_back_S.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_close_d.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_close_g.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_close_n.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_close_s.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_help_d.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_help_g.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_help_n.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_help_s.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_home_D.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_home_G.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_home_N.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_home_S.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_max_d.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_max_g.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_max_n.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_max_s.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_min_d.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_min_g.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_min_n.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_min_s.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_restore_d.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_restore_g.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_restore_n.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\btn_restore_s.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\CaptionbarLeft.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\CaptionBar\CaptionbarRemain.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Color.ini
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Common\Channel_check.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Common\check_h.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Common\light.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Common\logo.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Common\pop_icon.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Common\setting_POPICON.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Common\Settingbg_line.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\Common	ittle.PNG
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\DVD\CLEV.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\DVD\CLEV_2.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\DVD\CLHP.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\DVD\CLMEI.png
C:\Program Files\CyberLink\MagicSports\Customizations\Cyberlink\Style\Standard\Media\Standard\DVD\CLMEI_2.png
C:\Program Files\CyberLink\MagicSpo

SPAGGIARIDZ · Answer

suprimre le fichié ou le program   MagicSports avec tou c sous dossiers

Utilisateur anonyme · Answer

wouhh 

refais un scan hijackthis et poste le rapport stp

DjCoX59 · Answer

je sais pas si t'as eu tout le rapport combofix dis moi s'il te faut la fin
voila le rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 03:38:57, on 29/05/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Windows\system32\conime.exe
C:\Windows\system32
otepad.exe
C:\Windows\Explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\scanner.exe\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [MSPService] C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix: 
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ccEvtMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: ccSetMgr - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Start BT in service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

DjCoX59 · Answer

sur le rapport combofix ; il y en a 3 fois plus que ce que j'ai posté donc ça fait vraiment beaucoup

Utilisateur anonyme · Answer

on va faire une verif ;

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. 
double-clique sur OTMoveIt.exe pour le lancer. 
copie la ligne qui se trouve ci-dessous, 
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved. 


C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe


clique sur MoveIt! pour lancer la suppression. 
le résultat apparaitra dans le cadre "Results". 
clique sur Exit pour fermer. 
poste le rapport situé dans C:\_OTMoveIt\MovedFiles. 

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

DjCoX59 · Answer

File/Folder C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe not found.
 
OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 05292008_034724

DjCoX59 · Answer

t'es plus là chiquitine?

Utilisateur anonyme · Answer

ok il est viré 

fais un clic droit sur hijackthis 
choisi executer en tant qu administrateur

coche cette ligne :

O4 - HKLM\..\Run: [MSPService] C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe 


et clic sur fix checked 

ensuite suis cette procédure :




Maintenant , nous allons supprimer les logiciels de désinfection que je t'ai fait téléchargé. 
En effet , s'en servir est dangereux pour le pc si l'on ne s'y connais pas. 
De plus ils sont mis régulièrement à jours. 


? Ferme toutes les applications en cours, puis télécharge ToolsCleaner2 sur ton Bureau. 


http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

? Double clique sur ToolsCleaner2.exe > 
? Clique sur .Recherche 
? puis sur Suppression quand la liste est trouvée. 
? Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 


(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 

Note : ton bureau RISQUE de disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante : 

CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches. 
Puis rends toi à l'onglet "Processus". Clique en haut à gauche sur Fichiers et choisis "Exécuter" 

Tape explorer.exe et valide. Cela fera re-apparaître le Bureau 

Tuto : https://www.commentcamarche.net/list 8341 toolscleaner suppression des fix de force brute ( merci espion3004 )

Utilisateur anonyme · Answer

cf post 33 si suis la

SPAGGIARIDZ · Answer

je suis tjrs la chiquitine

Utilisateur anonyme · Answer

et ??

DjCoX59 · Answer

ya pas de rapport de tcleaner

Utilisateur anonyme · Answer

spaggiarridz,

t en penses quoi de ça :

C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe 

installé sur un pc neuf ???

https://fr.cyberlink.com/products/magicsports/overview_fr_FR.html

Utilisateur anonyme · Answer

CF POST 38

DjCoX59 · Answer

moi j'en pense que ça sert à rien
y 'en a marre des ordis pollués de merde de ce genre!!!

Utilisateur anonyme · Answer

T as passé toolcleaner ??

Comment va le pc ??

T as redémarré ??

DjCoX59 · Answer

est-ce que mon problème est réglé?
c'est pas que je veuille pas rester mais l'horloge a bien tourné et demain je boss (je sais pas vous?)
je redémarre et je vous dis koi

Utilisateur anonyme · Answer

OK redémarre

DjCoX59 · Answer

je sais pas comment le dire mais un grand grand merci!!!!
plus de message d'erreurs!!!
je sais pas si tu es une femme, un homme , si t'as 10 ou 70 ans et quel métier tu fais mais je t'aurais bien pris dans mes bras!!!
si seulement tout le monde pouvait etre si patient et si calé en info!!!
dernière petite question : tous les dossiers en rapport avec notre problème peuvent être supprimés?
j'ai un dossier QooBox qui se trouve à la racine, dedans ya 2 autres dossiers ( backEnv et Quarantine) un fichier text Combofix

Utilisateur anonyme · Answer

oui supprme tout ça 

bye @+ 

content de t avoir rendu service 

bonne nuit sans alertes dll lol

DjCoX59 · Answer

encore merci et bonne nuit (courte mais bonne quand même!!!)

peps91 · Answer

Bonjour,

il me manque un fichier dll au demarrage de norton serait il possible de remedier a mon probleme svp ^^'.
AlertEng.dll manquant...
J'ai réalisé la manip avec combofix et voila rapport :

2008-08-16 01:07 . 2008-08-16 01:07	244	--ah-----	C:\sqmnoopt06.sqm

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-09 15:37	27,620	----a-w	C:\Users\Patricia\AppData\Roaming\nvModes.dat
2008-09-09 15:30	---------	d-----w	C:\ProgramData\Symantec
2008-09-02 17:50	---------	d-----w	C:\ProgramData\Microsoft Help
2008-08-21 19:19	---------	d-----w	C:\ProgramData\CyberLink
2008-08-19 18:26	---------	d-----w	C:\Program Files\Windows Mail
2008-08-18 10:53	---------	d-----w	C:\Program Files\Common Files\Symantec Shared
2008-08-05 08:09	---------	d-----w	C:\Users\Patricia\AppData\Roaming\Icone
2008-07-31 19:50	---------	d--h--w	C:\Program Files\InstallShield Installation Information
2008-07-31 19:50	---------	d-----w	C:\Program Files\SAGEM
2008-07-31 19:49	---------	d-----w	C:\Users\Patricia\AppData\Roaming\InstallShield
2008-07-31 19:49	---------	d-----w	C:\Program Files\Securitoo
2008-07-24 16:11	---------	d-----w	C:\Program Files\NETGEAR
2008-07-24 15:58	---------	d-----w	C:\ProgramData\NtiDvdCopy
2008-07-22 09:32	---------	d-----w	C:\Program Files\Windows Calendar
2008-07-22 09:22	---------	d-----w	C:\Program Files\Windows Live
2008-07-18 18:39	587,264	----a-w	C:\Windows\WLXPGSS.SCR
2008-07-14 08:01	174	--sha-w	C:\Program Files\desktop.ini
2008-07-13 19:44	858,112	----a-w	C:\Windows\System32\RacEngn.dll
2008-07-13 19:42	41,984	----a-w	C:\Windows\system32\drivers\monitor.sys
2008-07-13 19:42	1,060,920	----a-w	C:\Windows\system32\drivers\ntfs.sys
2008-07-13 19:41	803,328	----a-w	C:\Windows\system32\drivers\tcpip.sys
2008-07-13 19:41	8,147,968	----a-w	C:\Windows\System32\wmploc.DLL
2008-07-13 19:41	7,680	----a-w	C:\Windows\System32\spwmp.dll
2008-07-13 19:41	4,096	----a-w	C:\Windows\System32\dxmasf.dll
2008-07-13 19:41	356,864	----a-w	C:\Windows\System32\MediaMetadataHandler.dll
2008-07-13 19:41	24,064	----a-w	C:\Windows\System32\netcfg.exe
2008-07-13 19:41	22,016	----a-w	C:\Windows\System32\netiougc.exe
2008-07-13 19:41	216,632	----a-w	C:\Windows\system32\drivers\netio.sys
2008-07-13 19:41	167,424	----a-w	C:\Windows\System32\tcpipcfg.dll
2008-07-13 18:07	---------	d-----w	C:\Program Files\GOlive
2008-07-11 15:22	45,112	----a-w	C:\Windows\system32\drivers\pciidex.sys
2008-07-11 15:22	3,504,696	----a-w	C:\Windows\System32\ntkrnlpa.exe
2008-07-11 15:22	3,470,392	----a-w	C:\Windows\System32\ntoskrnl.exe
2008-07-11 15:22	211,000	----a-w	C:\Windows\system32\drivers\volsnap.sys
2008-07-11 15:22	21,560	----a-w	C:\Windows\system32\drivers\atapi.sys
2008-07-11 15:22	2,048	----a-w	C:\Windows\System32\msxml3r.dll
2008-07-11 15:22	154,624	----a-w	C:\Windows\system32\drivers\nwifi.sys
2008-07-11 15:22	15,928	----a-w	C:\Windows\system32\drivers\pciide.sys
2008-07-11 15:22	109,624	----a-w	C:\Windows\system32\drivers\ataport.sys
2008-07-11 15:22	1,191,936	----a-w	C:\Windows\System32\msxml3.dll
2008-07-11 15:18	7,168	----a-w	C:\Windows\System32\f3ahvoas.dll
2008-07-11 15:17	449,536	----a-w	C:\Windows\AppPatch\AcSpecfc.dll
2008-07-11 15:17	4,247,552	----a-w	C:\Windows\System32\GameUXLegacyGDFs.dll
2008-07-11 15:17	2,144,256	----a-w	C:\Windows\AppPatch\AcGenral.dll
2008-07-11 15:17	1,686,528	----a-w	C:\Windows\System32\gameux.dll
2008-07-11 15:16	750,080	----a-w	C:\Windows\System32\qmgr.dll
2008-07-11 08:12	---------	d-----w	C:\ProgramData\Forge of Games
2008-07-11 08:02	---------	d-----w	C:\Program Files\Norton Internet Security
2008-07-10 21:19	805	----a-w	C:\Windows\system32\drivers\SYMEVENT.INF
2008-07-10 21:19	123,952	----a-w	C:\Windows\system32\drivers\SYMEVENT.SYS
2008-07-10 21:19	10,671	----a-w	C:\Windows\system32\drivers\SYMEVENT.CAT
2008-07-10 21:19	---------	d-----w	C:\Program Files\Symantec
2008-07-10 18:11	---------	d-----w	C:\Program Files\Windows Sidebar
2008-07-10 18:07	2,027,008	----a-w	C:\Windows\System32\win32k.sys
2008-07-10 18:06	9,728	----a-w	C:\Windows\System32\LAPRXY.DLL
2008-07-10 18:06	296,448	----a-w	C:\Windows\System32\gdi32.dll
2008-07-10 18:06	223,232	----a-w	C:\Windows\System32\WMASF.DLL
2008-07-10 18:06	2,048	----a-w	C:\Windows\System32\msxml6r.dll
2008-07-10 18:06	2,048	----a-w	C:\Windows\System32\asferror.dll
2008-07-10 18:06	1,335,296	----a-w	C:\Windows\System32\msxml6.dll
2008-07-10 18:05	14,848	----a-w	C:\Windows\System32\wshrm.dll
2008-07-10 18:05	113,664	----a-w	C:\Windows\system32\drivers\rmcast.sys
2008-07-10 18:05	11,776	----a-w	C:\Windows\System32\sbunattend.exe
2008-07-10 18:04	83,968	----a-w	C:\Windows\System32\dnsrslvr.dll
2008-07-10 18:04	24,576	----a-w	C:\Windows\System32\dnscacheugc.exe
2008-07-10 18:03	84,992	----a-w	C:\Windows\system32\drivers\srvnet.sys
2008-07-10 18:03	788,992	----a-w	C:\Windows\System32\rpcrt4.dll
2008-07-10 18:03	58,368	----a-w	C:\Windows\system32\drivers\mrxsmb20.sys
2008-07-10 18:03	130,048	----a-w	C:\Windows\system32\drivers\srv2.sys
2008-07-10 18:03	101,888	----a-w	C:\Windows\system32\drivers\mrxsmb.sys
2008-07-10 18:02	1,327,104	----a-w	C:\Windows\System32\quartz.dll
2008-07-10 18:02	---------	d-----w	C:\Program Files\MSXML 4.0
2008-07-10 17:47	---------	d-----w	C:\Program Files\Microsoft SQL Server Compact Edition
2008-07-10 17:42	---------	d-----w	C:\Program Files\Windows Live Toolbar
2008-07-10 17:42	---------	d-----w	C:\Program Files\Windows Live Favorites
2008-07-10 17:35	---------	d-----w	C:\ProgramData\Yahoo! Companion
2008-07-10 17:26	---------	dcsh--w	C:\Program Files\Common Files\WindowsLiveInstaller
2008-07-10 17:03	---------	d-----w	C:\ProgramData\WLInstaller
2008-07-09 19:44	53,080	----a-w	C:\Windows\System32\wuauclt.exe
2008-07-09 19:44	43,352	----a-w	C:\Windows\System32\wups2.dll
2008-07-09 19:44	1,712,984	----a-w	C:\Windows\System32\wuaueng.dll
2008-07-09 19:44	1,524,224	----a-w	C:\Windows\System32\wucltux.dll
2008-07-09 19:43	80,896	----a-w	C:\Windows\System32\wudriver.dll
2008-07-09 19:43	549,720	----a-w	C:\Windows\System32\wuapi.dll
2008-07-09 19:43	33,624	----a-w	C:\Windows\System32\wups.dll
2008-07-09 19:43	31,232	----a-w	C:\Windows\System32\wuapp.exe
2008-07-09 19:43	163,000	----a-w	C:\Windows\System32\wuwebv.dll
2008-06-27 03:54	826,368	----a-w	C:\Windows\System32\wininet.dll
2008-06-27 03:54	56,320	----a-w	C:\Windows\System32\iesetup.dll
2008-06-27 03:54	52,736	----a-w	C:\Windows\AppPatch\iebrshim.dll
2008-06-27 03:54	26,624	----a-w	C:\Windows\System32\ieUnatt.exe
2008-06-26 00:34	7,964,672	----a-w	C:\Windows\System32\NlsLexicons0024.dll
2008-06-26 00:33	9,892,864	----a-w	C:\Windows\System32\NlsLexicons000a.dll
2008-06-19 03:25	61,440	----a-w	C:\Windows\System32\winipsec.dll
2008-06-19 03:25	361,984	----a-w	C:\Windows\System32\IPSECSVC.DLL
2008-06-19 03:25	28,672	----a-w	C:\Windows\System32\FwRemoteSvr.dll
2008-06-19 03:25	272,896	----a-w	C:\Windows\System32\polstore.dll
2008-06-12 18:36	7,680	----a-w	C:\Windows\System32\ff_vfw.dll
2008-06-12 06:54	537,600	----a-w	C:\Windows\AppPatch\AcLayers.dll
2008-06-12 06:54	173,056	----a-w	C:\Windows\AppPatch\AcXtrnal.dll
.

(((((((((((((((((((((((((((((((((   Point de chargement Reg   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-07-10 1232896]
"Acer Tour Reminder"="C:\Acer\AcerTour\Reminder.exe" [2007-05-22 151552]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 125440]
"WindowsWelcomeCenter"="oobefldr.dll" [2006-11-02 C:\Windows\System32\oobefldr.dll]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-04-25 457216]
"eAudio"="C:\Acer\Empowering Technology\eAudio\eAudio.exe" [2007-06-11 1286144]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2006-11-21 107112]
"osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2006-11-21 22696]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-07-25 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-07-25 8433664]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-07-25 81920]
"LManager"="C:\PROGRA~1\LAUNCH~1\LManager.exe" [2007-08-15 772616]
"PlayMovie"="C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe" [2007-05-24 206952]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2007-06-06 159744]
"Acer Tour Reminder"="C:\Acer\AcerTour\Reminder.exe" [2007-05-22 151552]
"WarReg_PopUp"="C:\Acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]
"CardDetectorICON225"="C:\Program Files\CardDetector\ICON225\CardDetector.exe" [2007-11-14 278528]
"BEWINTERNET-FR-DMGP-V2SessionManager"="C:\Program Files\Orange\IEWInternet\SessionManager\SessionManager.exe" [2008-02-13 102400]
"GOlive"="C:\PROGRA~1\GOlive\GOlive.exe" [2006-12-19 827392]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 C:\Windows\RtHDVCpl.exe]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - C:\Acer\Empowering Technology\eAPLauncher.exe [2007-07-26 535336]
NETGEAR WG111v3 Smart Wizard.lnk - C:\Program Files\NETGEAR\WG111v3\WG111v3.exe [2007-09-14 1695744]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiSpywareOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{C0B4CECA-9415-4C07-B5D9-AFA36EF6EFCA}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{5B8A61E7-A297-4725-86E2-940DDAD57A48}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{59DE5281-D76E-4158-8705-CF329C4E4652}"= C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe:Acer Arcade Deluxe
"{F7BE5145-CFB9-4EF6-B59F-1DE503F9CE8D}"= C:\Program Files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe:VideoMagician
"{C86DBA55-A3E3-4F9D-96E7-A08610EB6934}"= C:\Program Files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe:HomeMedia
"{C65B0CFD-D277-4C74-BB3B-50A605A73447}"= C:\Program Files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe:DV Wizard
"{41812D33-7F2B-4217-ACE8-48A2BDEFD312}"= C:\Program Files\Acer Arcade Deluxe\DVDivine\DVDivine.exe:DVDivine
"{62BB5800-0A2B-417D-8AA7-C9D1E2EBE35D}"= C:\Program Files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe:Play Movie
"{838D6E48-11BC-4284-9F3E-B70BFB692147}"= C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe:Play Movie Resident Program
"{76E6A633-B1B4-46D5-8310-4DDB39AC9B7B}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Orange\IEWInternet\Connectivity\ConnectivityManager.exe"= C:\Program Files\Orange\IEWInternet\Connectivity\ConnectivityManager.exe:*:enabled:CSS

R1 IDSvix86;Symantec Intrusion Prevention Driver;C:\PROGRA~2\Symantec\DEFINI~1\SymcData\idsdefs\20080905.002\IDSvix86.sys [2008-06-03 261680]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};C:\Program Files\Acer Arcade Deluxe\Play Movie\[u]0/u00.fcl [2006-11-02 17:51 13560]
R2 ALaunchService;ALaunch Service;C:\Acer\ALaunch\ALaunchSvc.exe [2007-01-26 50688]
R3 enecir;ENE CIR Receiver;C:\Windows\system32\DRIVERS\enecir.sys [2007-05-16 32256]
R3 SYMNDISV;SYMNDISV;C:\Windows\system32\Drivers\SYMNDISV.SYS [2006-11-21 37008]
S3 athrusb6;Atheros Wireless LAN USB device driver 6 Series;C:\Windows\system32\DRIVERS\athru6.sys [2007-05-16 871936]
S3 GT72NDISIPXP;GT 72 IP NDIS;C:\Windows\system32\DRIVERS\Gt51Ip.sys [2007-11-13 95744]
S3 GT72UBUS;GT 72 U BUS;C:\Windows\system32\DRIVERS\gt72ubus.sys [2007-11-13 51968]
S3 GTPTSER;GT PT SER;C:\Windows\system32\DRIVERS\gtptser.sys [2007-11-13 8064]
S3 PCAMp50;PCAMp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCAMp50.sys [2006-11-28 28224]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCASp50.sys [2006-11-28 27072]
S3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver;C:\Windows\system32\DRIVERS\wg111v3.sys [2007-04-23 227328]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{03b2226e-9ee7-11dc-abc8-806e6f6e6963}]
\shell\AutoRun\command - E:\setup.exe
\shell\livebox\command - E:\setup.exe
\shell\liveboxpro\command - E:\HSS8\SetupHSSPRO.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cfbc6276-4d48-11dd-8e9c-001b3870db5d}]
\shell\AutoRun\command - F:\AutoRunCardDetector.exe

*Newly Created Service* - CATCHME
*Newly Created Service* - COMHOST
*Newly Created Service* - PROCEXP90
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-ALaunch - C:\Acer\ALaunch\AlaunchClient.exe
HKLM-Run-SetPanel - C:\Acer\APanel\APanel.cmd
HKLM-Run-Acer Tour - (no file)
HKLM-Run-eRecoveryService - (no file)


.
------- Supplementary Scan -------
.
R0 -: HKCU-Main,Start Page = about:blank
R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
R0 -: HKLM-Main,Start Page = hxxp://fr.fr.acer.yahoo.com
O8 -: &Windows Live Search - C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 -: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 -: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-09 17:48:00
Windows 6.0.6000  NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-09-09 17:49:59
ComboFix-quarantined-files.txt  2008-09-09 15:49:46

Pre-Run: 42,940,944,384 octets libres
Post-Run: 43,230,760,960 octets libres

243	--- E O F ---	2008-09-04 17:45:26

Message d'erreur Dll au démarrage après virus

46 réponses

Discussions similaires

Newsletters