

pat21
Membres-
Compteur de contenus
5 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par pat21
-
analysé rapport HijackThis
pat21 a répondu à un(e) sujet de pat21 dans Analyses et éradication malwares
je viens à nouveau de t'envoyer le raport kapersky, en esperant que cela marche De plus j'ai bien éliminé en mode sans échec le fichier sms;exe dans system et j'ai effectué un scan avec ewido voici le rapport ewido anti-spyware - Scan Report --------------------------------------------------------- + Created at: 21:53:31 06/09/2006 + Scan result: C:\Documents and Settings\patrice\Cookies\patrice@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@weborama[2].txt -> TrackingCookie.Weborama : Cleaned with backup (quarantined). ::Report end -
analysé rapport HijackThis
pat21 a répondu à un(e) sujet de pat21 dans Analyses et éradication malwares
je viens de l'envoyer, a+ -
analysé rapport HijackThis
pat21 a répondu à un(e) sujet de pat21 dans Analyses et éradication malwares
est ce que j'essaye de supprimer le fichier sms.exe en mode sans échec et je refais un scan avec ewido en attendant voici le rapport hijakThis {\rtf1\ansi\ansicpg1252\deff0\deflang1036{\fonttbl{\f0\fswiss\fcharset0 Arial;}} {\*\generator Msftedit 5.41.15.1507;}\viewkind4\uc1\pard\f0\fs20 Logfile of HijackThis v1.99.1\par Scan saved at 15:51:10, on 06/09/2006\par Platform: Windows XP SP2 (WinNT 5.01.2600)\par MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)\par \par Running processes:\par C:\\WINDOWS\\System32\\smss.exe\par C:\\WINDOWS\\system32\\winlogon.exe\par C:\\WINDOWS\\system32\\services.exe\par C:\\WINDOWS\\system32\\lsass.exe\par C:\\WINDOWS\\system32\\svchost.exe\par C:\\WINDOWS\\System32\\svchost.exe\par C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe\par C:\\WINDOWS\\system32\\spoolsv.exe\par C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedul2.exe\par C:\\Program Files\\ewido anti-spyware 4.0\\guard.exe\par C:\\WINDOWS\\system32\\nvsvc32.exe\par C:\\WINDOWS\\system32\\oodag.exe\par C:\\WINDOWS\\system32\\slserv.exe\par C:\\WINDOWS\\System32\\svchost.exe\par C:\\WINDOWS\\system32\\wscntfy.exe\par C:\\WINDOWS\\Explorer.EXE\par C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\RAUAgent.exe\par C:\\Program Files\\Micro Application\\Cloneur Expert\\TrueImageMonitor.exe\par C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedhlp.exe\par C:\\Program Files\\Wallpaper\\Wallpaper.exe\par C:\\WINDOWS\\system32\\ctfmon.exe\par C:\\Program Files\\Rainlendar\\Rainlendar.exe\par C:\\WINDOWS\\system32\\svchost.exe\par C:\\Program Files\\Internet Explorer\\iexplore.exe\par C:\\WINDOWS\\system32\\freecell.exe\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\tmlisten.exe\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\ntrtscan.exe\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\ofcdog.exe\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\PccNTMon.EXE\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\Pop3Trap.exe\par C:\\Program Files\\Hijackthis Version Fran\'e7aise\\VERSION TRADUITE ORIGINALE.EXE\par \par R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = http://fr.yahoo.com\par R0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://fr.yahoo.com\par R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Liens\par R3 - URLSearchHook: Yahoo! Toolbar - \{EF99BD32-C1FB-11D2-892F-0090271D4F88\} - (no file)\par O2 - BHO: Adobe PDF Reader Link Helper - \{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3\} - C:\\Program Files\\Adobe\\Acrobat 7.0\\ActiveX\\AcroIEHelper.dll\par O2 - BHO: ECarteBleueBrowserHelper Class - \{2E03C0FD-4C48-43A7-9A54-00240C70FF16\} - (no file)\par O2 - BHO: SSVHelper Class - \{761497BB-D6F0-462C-B6EB-D4DAF1D92D43\} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll\par O2 - BHO: Windows Live Sign-in Helper - \{9030D464-4C02-4ABF-8ECC-5164760863C6\} - C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Windows Live\\WindowsLiveLogin.dll\par O4 - HKLM\\..\\Run: [Zone Labs Client] "C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe"\par O4 - HKLM\\..\\Run: [Moniteur OfficeScanNT] "C:\\Program Files\\Trend Micro\\OfficeScan Client\\pccntmon.exe" -HideWindow\par O4 - HKLM\\..\\Run: [RemoteAgent] C:\\Program Files\\Trend Micro\\OfficeScan Client\\RAUAgent.exe\par O4 - HKLM\\..\\Run: [Cloneur Expert Monitor] "C:\\Program Files\\Micro Application\\Cloneur Expert\\TrueImageMonitor.exe"\par O4 - HKLM\\..\\Run: [Acronis Scheduler2 Service] "C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedhlp.exe"\par O4 - HKCU\\..\\Run: [Yahoo! Pager] "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe" -quiet\par O4 - HKCU\\..\\Run: [Wallpaper] "C:\\Program Files\\Wallpaper\\Wallpaper.exe" Starter\par O4 - HKCU\\..\\Run: [MsnMsgr] "C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe" /background\par O4 - HKCU\\..\\Run: [ctfmon.exe] C:\\WINDOWS\\system32\\ctfmon.exe\par O4 - Startup: Rainlendar.lnk = C:\\Program Files\\Rainlendar\\Rainlendar.exe\par O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\\PROGRA~1\\MICROS~3\\Office10\\EXCEL.EXE/3000\par O9 - Extra button: (no name) - \{08B0E5C0-4FCB-11CF-AAA5-00401C608501\} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll\par O9 - Extra 'Tools' menuitem: Console Java (Sun) - \{08B0E5C0-4FCB-11CF-AAA5-00401C608501\} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll\par O9 - Extra button: Messenger - \{4528BBE0-4E08-11D5-AD55-00010333D0AD\} - C:\\PROGRA~1\\Yahoo!\\Common\\yhexbmesfr.dll\par O9 - Extra 'Tools' menuitem: Yahoo! Messenger - \{4528BBE0-4E08-11D5-AD55-00010333D0AD\} - C:\\PROGRA~1\\Yahoo!\\Common\\yhexbmesfr.dll\par O9 - Extra button: Messenger - \{FB5F1910-F110-11d2-BB9E-00C04F795683\} - C:\\Program Files\\Messenger\\msmsgs.exe\par O9 - Extra 'Tools' menuitem: Windows Messenger - \{FB5F1910-F110-11d2-BB9E-00C04F795683\} - C:\\Program Files\\Messenger\\msmsgs.exe\par O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/\par O16 - DPF: \{0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75\} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...de.cab\par O16 - DPF: \{30528230-99f7-4bb4-88d8-fa1d4f56a2ab\} (YInstStarter Class) - C:\\Program Files\\Yahoo!\\Common\\yinsthelper.dll\par O16 - DPF: \{74D05D43-3236-11D4-BDCD-00C04F9A3B61\} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...53.cab\par O16 - DPF: \{8E0D4DE5-3180-4024-A327-4DFAD1796A8D\} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...67.cab\par O16 - DPF: \{952F9A71-131A-11D5-8404-00500445A7D0\} (ActiveMiniplug Class) - https://intranet.unss.org/plugins/mplugax.cab\par O16 - DPF: \{9A9307A0-7DA4-4DAF-B042-5009F29E09E1\} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as...st.cab\par O16 - DPF: \{C5E28B9D-0A68-4B50-94E9-E8F6B4697516\} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx...p3.cab\par O16 - DPF: \{F6BF0D00-0B2A-4A75-BF7B-F385591623AF\} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...67.cab\par O18 - Protocol: livecall - \{828030A1-22C1-4009-854F-8E305202313F\} - C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL\par O18 - Protocol: msnim - \{828030A1-22C1-4009-854F-8E305202313F\} - C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL\par O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedul2.exe\par O23 - Service: Boonty Games - BOONTY - C:\\Program Files\\Fichiers communs\\BOONTY Shared\\Service\\Boonty.exe\par O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\\Program Files\\ewido anti-spyware 4.0\\guard.exe\par O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\\Program Files\\Fichiers communs\\InstallShield\\Driver\\11\\Intel 32\\IDriverT.exe\par O23 - Service: Scan en temps r\'e9el OfficeScanNT (ntrtscan) - Unknown owner - C:\\Program Files\\Trend Micro\\OfficeScan Client\\ntrtscan.exe\par O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\\WINDOWS\\system32\\nvsvc32.exe\par O23 - Service: O&O Defrag - O&O Software GmbH - C:\\WINDOWS\\system32\\oodag.exe\par O23 - Service: SmartLinkService (SLService) - Smart Link - C:\\WINDOWS\\SYSTEM32\\slserv.exe\par O23 - Service: OfficeScanNT Listener (tmlisten) - Unknown owner - C:\\Program Files\\Trend Micro\\OfficeScan Client\\tmlisten.exe\par O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\\Program Files\\TuneUp Utilities 2006\\WinStylerThemeSvc.exe\par O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe\par \par } -
analysé rapport HijackThis
pat21 a répondu à un(e) sujet de pat21 dans Analyses et éradication malwares
merci de m'avoir répondu aussi vite, voici les résultats et rapports je n'ai pas réussi à supprimer le fichier c:\Windows\system32\smss.exe en mode sans échec le rapport ewido est le suivant --------------------------------------------------------- ewido anti-spyware - Scan Report --------------------------------------------------------- + Created at: 13:39:57 06/09/2006 + Scan result: :mozilla.6:C:\Documents and Settings\patrice\Application Data\Pioneers of the Inevitable\Songbird\Profiles\evv93bem.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.7:C:\Documents and Settings\patrice\Application Data\Pioneers of the Inevitable\Songbird\Profiles\evv93bem.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined). :mozilla.8:C:\Documents and Settings\patrice\Application Data\Pioneers of the Inevitable\Songbird\Profiles\evv93bem.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@weborama[2].txt -> TrackingCookie.Weborama : Cleaned with backup (quarantined). ::Report end puis le rapport de Kaspersky ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Wednesday, September 06, 2006 3:42:53 PM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 6/09/2006 Kaspersky Anti-Virus database records: 208298 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: standard Scan Archives: true Scan Mail Bases: true Scan Target - Folders: C:\ Scan Statistics: Total number of scanned objects: 96189 Number of viruses found: 3 Number of infected objects: 7 / 0 Number of suspicious objects: 0 Duration of the scan process: 01:42:35 Infected Object Name / Virus Name / Last Action C:\ca91c6bdccc53e6aa12c64\$shtdwn$.req Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\1394bus.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\4mmdat.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\61883.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\6to4svc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ac97ali.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ac97via.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\access.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\accwiz.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\acgenral.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aclayers.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aclua.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aclui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\acpi.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\acspecfc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\activ.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\activeds.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\activsvc.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\actlan.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\actmovie.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\actshell.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\actxprxy.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\acxtrnal.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adcjavas.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adcvbs.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adeskerr.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admexs.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admin.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admin.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admjoy.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admparse.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admwprox.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adojavas.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adovbs.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adsiis51.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adsldp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adsldpc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adsmsext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adsnt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv01nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv02nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv05nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv07nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv08nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv09nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv11nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\advapi32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\advpack.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aec.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\afd.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentanm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentctl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentdp2.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentdpv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentmpx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentpsh.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentsr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentsvr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agp440.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agpcpq.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agtctl15.tl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agtintl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agtscrp2.js_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agtscrpt.js_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ahui.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\alg.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\alim1541.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\alrsvc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\amdagp.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\amdk6.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\amdk7.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\amstream.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\an983.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\appconf.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\apphelp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\apphelp.sd_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\apph_sp.sd_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\appmgmts.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\appmgr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\apps.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\apps_sp.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\appwiz.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aqueue.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\arial.tt_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\arialbd.tt_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\arp1394.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asctrls.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asferror.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\10\msft\windows\gdiplus\gdiplus.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\10\msft\windows\gdiplus\gdiplus.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\10\msft\windows\gdiplus\gdiplus.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\10\policy\msft\windows\gdiplus\gdiplus.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\10\policy\msft\windows\gdiplus\gdiplus.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\51\msft\windows\system\default\default.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\51\msft\windows\system\default\default.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\51\policy\msft\windows\system\default\default.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\51\policy\msft\windows\system\default\default.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\dxmrtp\dxmrtp.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\dxmrtp\dxmrtp.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\dxmrtp\dxmrtp.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcdll\rtcdll.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcdll\rtcdll.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcdll\rtcdll.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcres\rtcres.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcres\rtcres.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcres\rtcres.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\dxmrtp\dxmrtp.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\dxmrtp\dxmrtp.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\rtcdll\rtcdll.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\rtcdll\rtcdll.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\60\msft\windows\common\controls\comctl32.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\60\msft\windows\common\controls\controls.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\60\msft\windows\common\controls\controls.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\60\policy\60\comctl\comctl.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\60\policy\60\comctl\comctl.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\msvcirt.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\msvcrt.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\mswincrt.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\mswincrt.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\policy\msft\mswincrt\mswincrt.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\policy\msft\mswincrt\mswincrt.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asp51.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_isapi.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_perf.h Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_perf.ini Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_perf2.ini Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_regiis.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_wp.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asr_fmt.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asycfilt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asyncmac.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\at.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atapi.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1btxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1mdxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1pdxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1raxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1rvxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1snxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1ttxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1tuxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1xbxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1xsxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1xwdm.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati2cqag.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati2dvaa.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati2dvag.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati2mtaa.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati2mtag.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati3d1ag.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati3d2ag.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati3duag.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atiixpaa.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atiixpag.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinbtxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinmdxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinpdxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinraxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinrvxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinsnxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinttxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atintuxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinxbxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinxsxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ativdaxx.ax_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ativmc20.co_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ativmvxx.ax_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ativtmxx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ativvaxx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atixpwdm.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atm.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atmadm.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atmarpc.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atmfd.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atmlane.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atmlib.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atv01nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atv02nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atv04nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atv06nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atv10nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\audiosrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\auditusr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\author.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\author.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\authz.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\autochk.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\autoconv.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\autofmt.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\autolfn.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\autoupdt.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\au_plcy.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\avc.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\avcstrm.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\avifil32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\basesrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\batmeter.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\batt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bdaplgin.ax_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bdasup.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bidispl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bitsprx2.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bitsprx3.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\blackbox.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\blank.txt Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\blastcln.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\blutooth.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bridge.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\browselc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\browser.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\browseui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\browsewm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bth.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthci.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthenum.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthmodem.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthpan.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthpan.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthport.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthprint.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthprint.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthprops.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthserv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthspp.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthusb.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\btpanui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cabinet.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cabview.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\callcont.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\camocx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\caspol.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\catsrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\catsrvps.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\catsrvut.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ccdecode.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cdfs.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cdfview.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cdm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cdosys.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cdrom.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\certcli.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\certmgr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\certwiz.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cewmdm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cfgbkend.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cfgmgr32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cfgwiz.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ch7xxnt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\changer.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cimwin32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cimwin32.mf_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cimwin32.mo_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cinfo.xm_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ciodm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cipher.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cisvc.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\classpnp.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\clbcatex.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\clbcatq.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cleanmgr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cli.mo_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cliconfg.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cliconfg.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cliconfg.rl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cliegali.mf_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cliegali.mo_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\clipbrd.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\clipsrv.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\clusapi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmbatt.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmcfg32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmd.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmdial32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmdl32.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmmon32.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmprops.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmsetacl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmstp.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmutil.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cnbjmon.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cnbjmon2.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cnfgprts.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\coadmin.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\colbact.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comadmin.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comctl32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comdlg32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comexp.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comic.tt_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compact.wm_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compatui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\drvmain.chm Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\drvmain.inf Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\krnlchk.htm Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\krnlchk.txt Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\nv_agp.htm Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\nv_agp.txt Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compfilt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compstui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comrepl.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comres.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comsvcs.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comuid.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conf.ad_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conf.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conf.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conf.hl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conf1.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\confmrsl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conime.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\connect.cn_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\connect.hl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\corperfmonext.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\corperfmonsymbols.ini Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\corpol.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\courtney.ac_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cpanel_p.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cpanel_w.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\credui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\crusoe.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\crypt32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptdlg.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptdll.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptnet.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptsvc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\csc.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cscdll.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cscomp.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cscript.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cscui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\csrsrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\csrss.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\csv.xs_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ctfmon.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ctmasetp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cu52178.nlp Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\custsat.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cwrwdm.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cxthsfs2.ct_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\c_28603.nl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\d3d8.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\d3d8thk.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\d3d9.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\d3dim700.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\danim.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dao360.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dataclen.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dataspec.xm_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\datetime.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\davcdata.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\davclnt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\daxctle.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dbghelp.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dbmsrpcn.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dbnetlib.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dbnmpntw.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dcache.bi_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dcap32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dciman32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ddeshare.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ddraw.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ddrawex.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\defrag.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\desk.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\devenum.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\devmgr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dfrgfat.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dfrgntfs.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dfrgsnap.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dfrgui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dfsshlex.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dgnet.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dhcpcsvc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dhtmled.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dialer.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\diantz.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\digcore.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\digest.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\digopt.ms_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\digreqex.ms_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dinput.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dinput8.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\directdb.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\disk.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\diskdump.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\diskpart.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dlimport.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dllhost.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dlttape.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmadmin.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmband.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmboot.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmcompos.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmdskmgr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmime.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmio.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmloader.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmremote.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmscript.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmserver.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmstyle.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmsynth.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmusic.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmusic.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmutil.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dnsapi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dnsrslvr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\docprop2.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dosx.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dot4.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dplaysvr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dplayx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpmodemx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnaddr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnet.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnhpast.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnhupnp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnlobby.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnsvr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpvacm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpvoice.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpvsetup.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpvvox.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpwsockx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drm.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drmclien.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drmk.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drmkaud.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drmstor.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drmv2clt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drprov.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drvmain.sdb Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drw\dwwin.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ds16gt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ds32gt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsdmo.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsdmoprp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dshowext.ax_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dskquop.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dskquota.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsound.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsound3d.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsprop.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsprpres.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsquery.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dssec.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dssenh.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsuiext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dswave.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dtsgnup.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dumprep.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\duser.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dvdupgrd.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dwwin.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dx7vb.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dx8vb.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxdiag.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxdiag.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxdiagn.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxg.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxmasf.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxtmsft.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxtrans.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\earl.ac_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\efsadu.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\els.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\empty.txt Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\encapi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\encdec.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ep9res.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\epcl5res.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\epn1600.gp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\error.js_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ersvc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\es.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\esent.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\esscli.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\essm2e.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\eudcedit.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evcon.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evcreate.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\eventlog.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\eventlogmessages.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evntagnt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evntcmd.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evntrprv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evntwin.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evtgprov.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\explorer.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\expsrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\exstrace.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\extmgr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\extrac32.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\faq.htm Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fastfat.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fastprox.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\faultrep.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\faxpatch.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fdc.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fdeploy.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\feclient.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\filefldp.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\filefldw.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\filelist.xm_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\filemgmt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\file_srv.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\filters.xm_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\findstr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\firewall.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\flash.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fldrclnr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\flpydisk.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fltlib.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fltmc.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fltmgr.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fontext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fontview.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\forehe.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4.ca_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp40ext.cab Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp40ext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp40ext.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4amsft.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4anscp.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4apws.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4areg.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4atxt.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4autl.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4avnb.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4avss.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4awebs.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4awel.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp98sadm.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp98swin.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpadmcgi.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpadmdll.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpcount.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpencode.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpexedll.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpmmc.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpmmcsat.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpremadm.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpsrvadm.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\framebuf.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\framedyn.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fsquirt.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ftp.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ftpmib.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ftpsv251.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fusion.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fwcfg.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsapi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsclnt.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxscom.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxscomex.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxscover.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsdrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsevent.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsext32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsmon.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsocm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsocm.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsperf.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsres.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsst.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxssvc.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxst30.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxstiff.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxswzrd.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsxp32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\g400.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gagp30kx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gameenum.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gckernel.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gdi32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\georgia.tt_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\glu32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gpedit.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gpkcsp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gpkrsrc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gprslt.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gptext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\greenshd.gi_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\grpconv.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\grserial.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\guitrn.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\guitrn_a.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gzip.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\h323.ts_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\h323cc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\h323msp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hal.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halaacpi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halacpi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halapic.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halmacpi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halmps.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halsp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hardware.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hardware.hl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hccoin.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hdwwiz.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\helpctr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\helpsvc.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hform.xs_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hh.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hhctrl.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hhsetup.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hid.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidbth.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidbth.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidclass.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidir.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidparse.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidphone.ts_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidserv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hmmapi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hnetcfg.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hnetwiz.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\homepage.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hostmib.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hotplug.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\howtop.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\howtow.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hp5000_7.pp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hpcjrr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hpcjrrps.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hpfud50.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hpwm5250.gp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hschelpp.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hschelpw.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\ -
Bonjour j'ai été infecté par le trojan medbot.ai ( détecté et non éliminé par trend micro officescan), j'ai suivi les directives pour nettoyer la base de registre( suppression de la clé .nvsvc="%Windows%\system\smss.exe\w"), malheureusement la manip n'a pas fonctionné jusqu'au bout et il me semble que je suis toujours infecté alors que le scan avec trend micro et a squarred ne donne rien Cest pourquoi, je me permets de vous envoyé mon rapport HijackThis afin d'obtenir de l'aide merci d'avance Logfile of HijackThis v1.99.1 Scan saved at 09:00:36, on 06/09/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\oodag.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Trend Micro\OfficeScan Client\RAUAgent.exe C:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe C:\Program Files\Wallpaper\Wallpaper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Rainlendar\Rainlendar.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe C:\Program Files\Trend Micro\OfficeScan Client\ofcdog.exe C:\Program Files\Trend Micro\OfficeScan Client\PccNTMon.EXE C:\Program Files\Trend Micro\OfficeScan Client\Pop3Trap.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Lavalys\EVEREST Home Edition\everest.bin C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: ECarteBleueBrowserHelper Class - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [Moniteur OfficeScanNT] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow O4 - HKLM\..\Run: [RemoteAgent] C:\Program Files\Trend Micro\OfficeScan Client\RAUAgent.exe O4 - HKLM\..\Run: [Cloneur Expert Monitor] "C:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe" O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe" O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/ O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {952F9A71-131A-11D5-8404-00500445A7D0} (ActiveMiniplug Class) - https://intranet.unss.org/plugins/mplugax.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Scan en temps réel OfficeScanNT (ntrtscan) - Unknown owner - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: OfficeScanNT Listener (tmlisten) - Unknown owner - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe O23 - Service: Windows Log - Unknown owner - C:\WINDOWS\system32\nvsvcd.exe