Internet antivirus 2011
Bonjour,
Mon pc infecté par ce virus, aidez-moi à m'en débarrasser svp... Merci beaucoup.
Mon pc infecté par ce virus, aidez-moi à m'en débarrasser svp... Merci beaucoup.
37 réponses
Résumé de la discussion
Configuration Windows XP et Firefox 3.6.13 ; le poste est infecté par un virus et les utilisateurs échangent des méthodes de désinfection et des outils recommandés. Plusieurs conseils privilégient des outils de nettoyage tels que RogueKiller et Malwarebytes, avec instructions précises d'installation, de lancement en mode administrateur, puis d'analyse complète et de collecte de rapports. Des recommandations additionnelles évoquent DelFix, ZHPDiag et Combofix, avec des ajustements comme ignorer le redémarrage précautionneusement, corriger le fichier hosts et enregistrer les rapports pour analyse ultérieure. En cas de blocage ou d'échec des outils, certains intervenants recommandent de réessayer sans redémarrer, puis de collecter et partager un rapport consolidé pour poursuivre le diagnostic.
-
Contributeur sécuritébon
tente ces combofix là renommé ou avec une extension modifiée
http://sd-2.archive-host.com/membres/up/135518691112296573/ENDONE.exe
http://dl.free.fr/getfile.pl?file=/TirBgUW4 -
ça me dit qu'il y a un fichier manquant
-
Contributeur sécurité
-
j'ai essayé le scan plusieurs fois et à chaque fois il se bloque à 95 %
-
Contributeur sécuriténon
combofix coince avec ton windows et c'est bien dommage
DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection)
Télécharge ici :List_Kill'em et enregistre le sur ton bureau
http://sd-4.archive-host.com/membres/up/829108531491024/Mes_Tools/List_Killem_Install.exe
si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."
sur le raccourci sur ton bureau pour lancer l'installation
Laisse coché :
Executer List_Kill'em
une fois terminée lance le programmeà l'aide du raccourci sur le bureau (clic droit executer en tant qu'administrateur pour VISTA ou SEVEN )
choisis l'option Search
laisse travailler l'outil
il se peut qu'une boite de dialogue s'ouvre , dans ce cas clique sur "ok" ou "Agree"
à l'apparition de la fenetre blanche , c'est un peu long , c'est normal ,c'est une recherche supplementaire de fichiers cachés , le programme n'est pas bloqué.
Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"
NE LE POSTE PAS SUR LE FORUM
Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/
Clique sur Parcourir et cherche le fichier ci-dessus.
Clique sur Ouvrir.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=265368/cijSKAP5fU.txt
est ajouté dans la page.
Copie ce lien dans ta réponse.
Fais de même avec more.txt qui se trouve sur ton bureau
-
ZHPdiag :
http://www.cijoint.fr/cjlink.php?file=cj201012/cijkvucfud.txt
-
Contributeur sécuritéok
voyons si ca tiens
Fais un nouveau rapport ZHPdiag stp
Rend toi sur Cjoint : http://www.cijoint.fr/
Clique sur "Parcourir " dans la partie " Joindre un fichier[...] "
Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau
Clique ensuite sur "Cliquez ici pour déposer le fichier " et copie/colle le lien dans ton prochain message
-
ProxyFix :
http://www.cijoint.fr/cjlink.php?file=cj201012/cijFpMykDz.txt
HOSTFix :
http://www.cijoint.fr/cjlink.php?file=cj201012/cijLtO1kg1.txt
-
Contributeur sécuritéok
1)
Lances ZHPFix depuis le raccourci du Bureau (en mode administrateur si Vista/W7),
Cliques sur le bouton 'ProxyFix' situé dans la partie droite de l'écran,
Cliques sur 'Non' au message qui s'affiche à l'écran,
Laisses travailler l'outil,
A la fin du traitement, un rapport s'affiche
Copie ce rapport
Redémarre le pc pour prendre en compte les modifications.
________
2)
puis même opération avec le bouton HOSTFix -
rapport ZHPdiag :
http://www.cijoint.fr/cjlink.php?file=cj201012/cijRJA8ECf.txt
-
Contributeur sécuritéok
on refait ZHP qui a été modifié depuis
Télécharge ZHPDiag ( de Nicolas coolman ).
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
(outil de diagnostic)
Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut ( N'oublie pas de cocher " Créer une icône sur le bureau " )
Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau (Clique droit -> Executer en tant qu'admin ( vista )
Clique sur la loupe en haut à gauche, puis laisse l'outil scanner.
Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau.
Rend toi sur Cjoint : http://www.cijoint.fr/
Clique sur "Parcourir " dans la partie " Joindre un fichier[...] "
Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau
Clique ensuite sur "Cliquez ici pour déposer le fichier " et copie/colle le lien dans ton prochain message
-
voila le rapport delfix :
http://www.cijoint.fr/cjlink.php?file=cj201012/cijKGxnERc.txt
pour combofix, ça a de nouveau planté au moment du de l'autoscan. -
Contributeur sécuritérien...
on supprime les outils puis on recommence
1)
Télécharge DelFix sur ton bureau.
http://sd-1.archive-host.com/membres/up/17959594961240255/DelFix.exe
1. Lance le, choisis le bouton SUPPRESSION
2. Patiente pendant le scan jusqu'à l'ouverture du rapport.
3. Copie/Colle le contenu du rapport dans ta prochaine réponse.
Note : Le rapport se trouve également sous C:\DelFixSearch
...................
2)
on recommence ensuite combofix mais renomme le ENDONE.exe avant de l'enregistrer sur le bureau
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
-
C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegQueryInfoKeyA] [77DFC1B5] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegEnumKeyExA] [77DFC8C1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegEnumValueA] [77DECF4A] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegOpenKeyExA] [77DD761B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegQueryValueExA] [77DD7883] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegCloseKey] [77DD6BF0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!GetUserNameA] [77DFD4C9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!OpenSCManagerA] [77DEADA7] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!EnumServicesStatusA] [77DEAF3F] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!CloseServiceHandle] [77DE5E4D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WININET.dll [ADVAPI32.dll!RegCreateKeyExW] [77DD7535] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!RegOpenKeyExA] [77DD761B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!RegOpenKeyExW] [77DD6A78] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!RegCloseKey] [77DD6BF0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!RegQueryValueExA] [77DD7883] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!OpenSCManagerA] [77DEADA7] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!CloseServiceHandle] [77DE5E4D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!OpenProcessToken] [77DD7753] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!LookupPrivilegeValueA] [77DFD11B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!AdjustTokenPrivileges] [77DFC534] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!RegSetValueExA] [77DDEBE7] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!OpenServiceA] [77DEB88C] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!StartServiceA] [77DF3238] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\iphlpapi.dll [ADVAPI32.dll!RegQueryValueExW] [77DD6FC8] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegNotifyChangeKeyValue] [77DDD966] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegDeleteKeyA] [77DFC123] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegSetValueExA] [77DDEBE7] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegQueryValueExA] [77DD7883] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegOpenKeyExA] [77DD761B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegCreateKeyExA] [77DDEAF4] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegCloseKey] [77DD6BF0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2_32.dll [ADVAPI32.dll!RegEnumKeyExA] [77DFC8C1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!AllocateAndInitializeSid] [77DD7A91] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!FreeSid] [77DD7A80] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!GetLengthSid] [77DD7B24] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!GetAclInformation] [77DE6FEC] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!GetAce] [77DFCF54] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!EqualSid] [77DD7EE4] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!InitializeSecurityDescriptor] [77DD778E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!InitializeAcl] [77DD7AD1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!AddAccessDeniedAce] [77DE73CF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!AddAccessAllowedAce] [77DD7AF9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!SetSecurityDescriptorDacl] [77DD77B3] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!RegGetKeySecurity] [77DEC6F1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!RegOpenKeyExA] [77DD761B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!RegQueryValueExA] [77DD7883] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!RegCloseKey] [77DD6BF0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!CreateServiceA] [77E37071] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!ChangeServiceConfigA] [77E36CC9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!RevertToSelf] [77DD7BA9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!OpenSCManagerA] [77DEADA7] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!QueryServiceStatus] [77DE5EB8] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!StartServiceA] [77DF3238] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!CloseServiceHandle] [77DE5E4D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!OpenServiceA] [77DEB88C] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\WS2HELP.dll [ADVAPI32.dll!GetSecurityDescriptorDacl] [77DD7C58] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6113A40D] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6113A33F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [61139C3F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6113A37F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\USER32.dll [GDI32.dll!GetStockObject] [6113909F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6113A40D] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6113A33F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [61139C3F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6113A37F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [GDI32.dll!GetStockObject] [6113909F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [6113A3BF] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6113A40D] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6113A37F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6113A33F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [61139C3F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!DefWindowProcA] [61139856] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!DefWindowProcW] [61139856] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!GetSysColor] [61138FE2] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [61138F66] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [61138FA4] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [GDI32.dll!GetStockObject] [6113909F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6113A33F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6113A37F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] [61139C3F] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6113A40D] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [6113A3BF] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!AnimateWindow] [611390DD] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [61138FA4] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!DefWindowProcA] [61139856] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetSysColor] [61138FE2] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!DefWindowProcW] [61139856] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetSysColorBrush] [611390A5] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[2448] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [61138F66] C:\Program Files\Yahoo!\Messenger\yui.dll
---- Devices - GMER 1.0.15 ----
Device \Driver\BTHUSB \Device\0000007a bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)
Device \Driver\BTHUSB \Device\0000007a bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)
Device \Driver\BTHUSB \Device\0000007c bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)
Device \Driver\BTHUSB \Device\0000007c bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\0010c63a2a07
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\0010c63a2a07@80501bfcef2e 0xBF 0xE3 0x65 0x8D ...
Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\0010c63a2a07 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\0010c63a2a07@80501bfcef2e 0xBF 0xE3 0x65 0x8D ...
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@DeviceNotSelectedTimeout 15
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@GDIProcessHandleQuota 10000
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@Spooler yes
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@swapdisk
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@TransmissionRetryTimeout 90
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows@USERProcessHandleQuota 10000
---- EOF - GMER 1.0.15 ---- -
GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2010-12-23 21:01:06
Windows 5.1.2600 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 FUJITSU_MHT2040AH rev.006C
Running: 71dfsq8f.exe; Driver: C:\DOCUME~1\user\LOCALS~1\Temp\awdyqpow.sys
---- Kernel code sections - GMER 1.0.15 ----
pnidata C:\WINDOWS\system32\DRIVERS\secdrv.sys unknown last section [0xF2508F00, 0x24000, 0x48000000]
---- User code sections - GMER 1.0.15 ----
.text C:\Program Files\Mozilla Firefox\firefox.exe[2436] ntdll.dll!LdrLoadDll 7C9161CA 5 Bytes JMP 004013F0 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)
---- User IAT/EAT - GMER 1.0.15 ----
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!InitializeAcl] [77DD7AD1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!GetSecurityDescriptorLength] [77DDDA6E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!GetSecurityDescriptorControl] [77DFCEDA] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!IsValidSecurityDescriptor] [77DFCF32] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!ImpersonateNamedPipeClient] [77DD7C97] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegOpenKeyW] [77DD770F] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegDeleteKeyA] [77DFC123] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegCreateKeyExA] [77DDEAF4] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegSetValueExA] [77DDEBE7] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!OpenSCManagerW] [77DE60BD] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!OpenServiceW] [77DE6165] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!QueryServiceStatus] [77DE5EB8] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!StartServiceW] [77DEBBAC] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!CloseServiceHandle] [77DE5E4D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!IsValidSid] [77DFD48E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!EqualSid] [77DD7EE4] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!GetLengthSid] [77DD7B24] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!CopySid] [77DFC304] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!SystemFunction040] [77DF8DEA] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!SystemFunction041] [77DF13DD] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!GetSecurityDescriptorDacl] [77DD7C58] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!InitializeSecurityDescriptor] [77DD778E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!MakeSelfRelativeSD] [77DD7CCF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!AddAccessAllowedAce] [77DD7AF9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!SetSecurityDescriptorDacl] [77DD77B3] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!LookupAccountNameW] [77DF9174] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!SystemFunction036] [77DD857E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegEnumValueW] [77DD8081] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegEnumValueA] [77DECF4A] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegQueryInfoKeyA] [77DFC1B5] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegQueryValueExW] [77DD6FC8] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegOpenKeyExA] [77DD761B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegQueryValueExA] [77DD7883] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegCloseKey] [77DD6BF0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RegOpenKeyExW] [77DD6A78] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!TraceMessage] [77E2B205] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!LookupAccountSidW] [77DF87CB] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!RevertToSelf] [77DD7BA9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!OpenProcessToken] [77DD7753] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!SetThreadToken] [77DD7E3D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!GetTokenInformation] [77DD7B76] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\RPCRT4.dll [ADVAPI32.dll!OpenThreadToken] [77DD7B3D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegQueryValueExA] [77DD7883] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegQueryValueA] [77DFCC10] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!AccessCheck] [77DD7C11] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!LookupAccountNameW] [77DF9174] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExA] [77DD761B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegCreateKeyExW] [77DD7535] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegEnumValueW] [77DD8081] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyA] [77DFCAC3] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegDeleteKeyA] [77DFC123] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!DuplicateEncryptionInfoFile] [77E131D2] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!AllocateLocallyUniqueId] [77DDDA3F] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegSetValueExW] [77DDD7CC] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegDeleteKeyW] [77DF9884] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegSetValueW] [77E35FC2] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegQueryValueExW] [77DD6FC8] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegQueryValueW] [77DDD8E2] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegCloseKey] [77DD6BF0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExW] [77DD6A78] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!InstallApplication] [77E1D4AF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyA] [77DFC41B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyW] [77DD770F] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!SetThreadToken] [77DD7E3D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!OpenThreadToken] [77DD7B3D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!AccessCheckByType] [77DD7E73] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!GetSecurityDescriptorDacl] [77DD7C58] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!EqualSid] [77DD7EE4] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!GetTokenInformation] [77DD7B76] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RevertToSelf] [77DD7BA9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!ImpersonateAnonymousToken] [77DFCF7C] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!GetSecurityDescriptorLength] [77DDDA6E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!DuplicateToken] [77DD8322] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!OpenProcessToken] [77DD7753] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!CryptReleaseContext] [77DE8546] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!CryptAcquireContextW] [77DE85F1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!IsValidSecurityDescriptor] [77DFCF32] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!GetLengthSid] [77DD7B24] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!LookupAccountSidW] [77DF87CB] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!LsaClose] [77DE1CDC] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!LsaFreeMemory] [77DE2BB6] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!LsaQueryInformationPolicy] [77DE2BDF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!LsaOpenPolicy] [77DE1C0F] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!MakeSelfRelativeSD] [77DD7CCF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!SetServiceStatus] [77DEB193] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegisterServiceCtrlHandlerW] [77DEBB8F] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!StartServiceCtrlDispatcherW] [77DEB4DD] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!CopySid] [77DFC304] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!SetSecurityDescriptorDacl] [77DD77B3] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!FreeSid] [77DD7A80] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!AddAccessAllowedAce] [77DD7AF9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!InitializeAcl] [77DD7AD1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!AllocateAndInitializeSid] [77DD7A91] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!InitializeSecurityDescriptor] [77DD778E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!DeregisterEventSource] [77DE6943] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!ReportEventW] [77DE74AC] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegisterEventSourceW] [77DE72B9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyW] [77DDD649] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!GetAce] [77DFCF54] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!GetSidSubAuthority] [77DF9839] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!GetSidSubAuthorityCount] [77DF986B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!GetSidIdentifierAuthority] [77DFD4B0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!IsValidSid] [77DFD48E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegOpenUserClassesRoot] [77DFAF8C] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!CommandLineFromMsiDescriptor] [77DFB966] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegNotifyChangeKeyValue] [77DDD966] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [77DFCCEF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegSetValueA] [77DE6F49] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegDeleteValueW] [77DDEEF1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\ole32.dll [ADVAPI32.dll!RegQueryInfoKeyA] [77DFC1B5] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [77DD6BF0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!GetCurrentHwProfileA] [77E0C6A2] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!OpenThreadToken] [77DD7B3D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [77DD8081] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegSetValueExW] [77DDD7CC] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegSetValueW] [77E35FC2] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegSetValueA] [77DE6F49] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [77DD6FC8] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [77DDD8E2] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueA] [77DFCC10] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [77DFCCEF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [77DD6A78] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyW] [77DD770F] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [77DFC123] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [77DFC1B5] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteValueA] [77DDEDE5] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [77DECF4A] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [77DFCAC3] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegSetValueExA] [77DDEBE7] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [77DDEAF4] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [77DFC8C1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [77DD7883] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!GetTokenInformation] [77DD7B76] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!OpenProcessToken] [77DD7753] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!GetAce] [77DFCF54] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!FreeSid] [77DD7A80] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!SetSecurityDescriptorDacl] [77DD77B3] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!InitializeSecurityDescriptor] [77DD778E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!AddAccessDeniedAce] [77DE73CF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!AddAccessAllowedAce] [77DD7AF9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!InitializeAcl] [77DD7AD1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!GetLengthSid] [77DD7B24] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!AllocateAndInitializeSid] [77DD7A91] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!GetUserNameA] [77DFD4C9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!GetUserNameW] [77DFC4D3] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyA] [77DFD5BB] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyW] [77DF8F7D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [77DD7535] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [77DF9884] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteValueW] [77DDEEF1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [77DDD649] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [77DD79A1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyA] [77DFC41B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [77DD761B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegCloseKey] [77DD6BF0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!AllocateAndInitializeSid] [77DD7A91] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueExW] [77DD6FC8] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegDeleteValueW] [77DDEEF1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegSetValueExW] [77DDD7CC] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!MakeSelfRelativeSD] [77DD7CCF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!GetSecurityDescriptorLength] [77DDDA6E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!EqualSid] [77DD7EE4] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!GetSecurityDescriptorDacl] [77DD7C58] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!GetSecurityDescriptorOwner] [77DFCE76] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!GetFileSecurityW] [77DFBCDE] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegCreateKeyExW] [77DD7535] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExW] [77DD6A78] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!FreeSid] [77DD7A80] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!GetAce] [77DFCF54] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!AddAccessAllowedAce] [77DD7AF9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!InitializeAcl] [77DD7AD1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegNotifyChangeKeyValue] [77DDD966] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegCreateKeyW] [77DF8F7D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!GetSecurityDescriptorControl] [77DFCEDA] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!EncryptFileW] [77E12F78] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!DecryptFileW] [77E12FB7] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!ChangeServiceConfigW] [77E36E61] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!StartServiceW] [77DEBBAC] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!ControlService] [77DEB635] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!OpenSCManagerW] [77DE60BD] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!OpenServiceW] [77DE6165] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!QueryServiceStatus] [77DE5EB8] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!CloseServiceHandle] [77DE5E4D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!GetNamedSecurityInfoW] [77DFD078] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!ConvertSidToStringSidW] [77DFC32C] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegOpenCurrentUser] [77DD83B3] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!LookupAccountNameW] [77DF9174] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!SetNamedSecurityInfoW] [77DF1285] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!CreateProcessWithLogonW] [77E15C9D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!CreateProcessAsUserW] [77DF7775] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!SaferGetPolicyInformation] [77DFB745] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!SaferiIsExecutableFileType] [77DFB613] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!SaferIdentifyLevel] [77DD9DC5] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!SaferRecordEventLogEntry] [77E1F3ED] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!SaferGetLevelInformation] [77DF33D0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!InstallApplication] [77E1D4AF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!SaferCreateLevel] [77E1E6BD] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!SaferComputeTokenFromLevel] [77DDAD55] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!SaferCloseLevel] [77DDACAF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueW] [77DDD8E2] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!OpenThreadToken] [77DD7B3D] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!CheckTokenMembership] [77DD815E] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!LookupPrivilegeValueW] [77DFCAF6] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!AdjustTokenPrivileges] [77DFC534] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!CommandLineFromMsiDescriptor] [77DFB966] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegSetKeySecurity] [77DEC8D6] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [77DFCCEF] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!GetUserNameW] [77DFC4D3] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegEnumKeyExW] [77DD79A1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegDeleteKeyW] [77DF9884] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegEnumValueW] [77DD8081] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!SetFileSecurityW] [77DEAA69] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!TreeResetNamedSecurityInfoW] [77E2203F] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegEnumKeyW] [77DDD649] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyW] [77DD770F] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegSetValueW] [77E35FC2] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!LookupAccountSidW] [77DF87CB] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!GetTokenInformation] [77DD7B76] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!OpenProcessToken] [77DD7753] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueExA] [77DD7883] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExA] [77DD761B] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\SHELL32.dll [ADVAPI32.dll!GetLengthSid] [77DD7B24] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!CryptAcquireContextA] [77DE7F96] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!CryptSignHashA] [77E11C49] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!CryptVerifySignatureA] [77DEAB80] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!CryptSetProviderA] [77E11DC9] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegCloseKey] [77DD6BF0] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegQueryInfoKeyA] [77DFC1B5] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegCreateKeyExA] [77DDEAF4] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegCreateKeyExW] [77DD7535] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegDeleteKeyA] [77DFC123] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegDeleteKeyW] [77DF9884] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegEnumKeyExA] [77DFC8C1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegEnumKeyExW] [77DD79A1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegEnumValueA] [77DECF4A] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegEnumValueW] [77DD8081] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegDeleteValueA] [77DDEDE5] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegDeleteValueW] [77DDEEF1] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegQueryValueExA] [77DD7883] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegQueryValueExW] [77DD6FC8] C:\WINDOWS\system32\ADVAPI32.dll (Advanced Windows 32 Base API/Microsoft Corporation)
IAT C:\Program Files\Windows Sidebar\sidebar.exe[1816] @ C:\WINDOWS\system32\CRYPT32.dll [ADVAPI32.dll!RegSetValueExA] [77DDEBE7] -
Contributeur sécuritéca coince
fais un copier coller sur le site -
désolé, voilà là c'est bon.
rapport Gmer :http://www.cijoint.fr/cjlink.php?file=cj201012/cijHIkMMQp.odt
-
rapport Gmer :
http://www.cijoint.fr/cjlink.php?file=cj201012/cijHIkMMQp.odt
-
Contributeur sécuritérien
Les logiciels d'émulation de CD comme Daemon Tools peuvent gêner les outils de désinfection. Utilise Defogger pour les désactiver temporairement :
* Télécharge sur ton bureau Defogger
http://www.jpshortstuff.247fixes.com/Defogger.exe
* Lance le
* Une fenêtre apparait : clique sur "Disable"
* Fais redémarrer l'ordinateur si l'outil te le demande
* Quand nous aurons terminé la désinfection, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"
puis
/!\ Il faut impérativement désactiver tous tes logiciels de protection pour utiliser ce programme/!\
? Télécharge : Gmer (by Przemyslaw Gmerek)
http://www.gmer.net/
? Dezippe gmer ,cliques sur l'onglet rootkit,lances le scan,des lignes rouges vont apparaitre.
? Les lignes rouges indiquent la presence d'un rootkit.Postes moi le rapport gmer (cliques sur copy,puis vas dans demarrer ,puis ouvres le bloc note,vas dans edition et cliques sur coller,le rapport gmer va apparaitre,postes moi le)
-
- 1
- 2
Suivant
