Aller au contenu

pat21

Membres
  • Compteur de contenus

    5
  • Inscription

  • Dernière visite

Tout ce qui a été posté par pat21

  1. je viens à nouveau de t'envoyer le raport kapersky, en esperant que cela marche De plus j'ai bien éliminé en mode sans échec le fichier sms;exe dans system et j'ai effectué un scan avec ewido voici le rapport ewido anti-spyware - Scan Report --------------------------------------------------------- + Created at: 21:53:31 06/09/2006 + Scan result: C:\Documents and Settings\patrice\Cookies\patrice@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@weborama[2].txt -> TrackingCookie.Weborama : Cleaned with backup (quarantined). ::Report end
  2. je viens de l'envoyer, a+
  3. est ce que j'essaye de supprimer le fichier sms.exe en mode sans échec et je refais un scan avec ewido en attendant voici le rapport hijakThis {\rtf1\ansi\ansicpg1252\deff0\deflang1036{\fonttbl{\f0\fswiss\fcharset0 Arial;}} {\*\generator Msftedit 5.41.15.1507;}\viewkind4\uc1\pard\f0\fs20 Logfile of HijackThis v1.99.1\par Scan saved at 15:51:10, on 06/09/2006\par Platform: Windows XP SP2 (WinNT 5.01.2600)\par MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)\par \par Running processes:\par C:\\WINDOWS\\System32\\smss.exe\par C:\\WINDOWS\\system32\\winlogon.exe\par C:\\WINDOWS\\system32\\services.exe\par C:\\WINDOWS\\system32\\lsass.exe\par C:\\WINDOWS\\system32\\svchost.exe\par C:\\WINDOWS\\System32\\svchost.exe\par C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe\par C:\\WINDOWS\\system32\\spoolsv.exe\par C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedul2.exe\par C:\\Program Files\\ewido anti-spyware 4.0\\guard.exe\par C:\\WINDOWS\\system32\\nvsvc32.exe\par C:\\WINDOWS\\system32\\oodag.exe\par C:\\WINDOWS\\system32\\slserv.exe\par C:\\WINDOWS\\System32\\svchost.exe\par C:\\WINDOWS\\system32\\wscntfy.exe\par C:\\WINDOWS\\Explorer.EXE\par C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\RAUAgent.exe\par C:\\Program Files\\Micro Application\\Cloneur Expert\\TrueImageMonitor.exe\par C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedhlp.exe\par C:\\Program Files\\Wallpaper\\Wallpaper.exe\par C:\\WINDOWS\\system32\\ctfmon.exe\par C:\\Program Files\\Rainlendar\\Rainlendar.exe\par C:\\WINDOWS\\system32\\svchost.exe\par C:\\Program Files\\Internet Explorer\\iexplore.exe\par C:\\WINDOWS\\system32\\freecell.exe\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\tmlisten.exe\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\ntrtscan.exe\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\ofcdog.exe\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\PccNTMon.EXE\par C:\\Program Files\\Trend Micro\\OfficeScan Client\\Pop3Trap.exe\par C:\\Program Files\\Hijackthis Version Fran\'e7aise\\VERSION TRADUITE ORIGINALE.EXE\par \par R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = http://fr.yahoo.com\par R0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://fr.yahoo.com\par R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Liens\par R3 - URLSearchHook: Yahoo! Toolbar - \{EF99BD32-C1FB-11D2-892F-0090271D4F88\} - (no file)\par O2 - BHO: Adobe PDF Reader Link Helper - \{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3\} - C:\\Program Files\\Adobe\\Acrobat 7.0\\ActiveX\\AcroIEHelper.dll\par O2 - BHO: ECarteBleueBrowserHelper Class - \{2E03C0FD-4C48-43A7-9A54-00240C70FF16\} - (no file)\par O2 - BHO: SSVHelper Class - \{761497BB-D6F0-462C-B6EB-D4DAF1D92D43\} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll\par O2 - BHO: Windows Live Sign-in Helper - \{9030D464-4C02-4ABF-8ECC-5164760863C6\} - C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Windows Live\\WindowsLiveLogin.dll\par O4 - HKLM\\..\\Run: [Zone Labs Client] "C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe"\par O4 - HKLM\\..\\Run: [Moniteur OfficeScanNT] "C:\\Program Files\\Trend Micro\\OfficeScan Client\\pccntmon.exe" -HideWindow\par O4 - HKLM\\..\\Run: [RemoteAgent] C:\\Program Files\\Trend Micro\\OfficeScan Client\\RAUAgent.exe\par O4 - HKLM\\..\\Run: [Cloneur Expert Monitor] "C:\\Program Files\\Micro Application\\Cloneur Expert\\TrueImageMonitor.exe"\par O4 - HKLM\\..\\Run: [Acronis Scheduler2 Service] "C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedhlp.exe"\par O4 - HKCU\\..\\Run: [Yahoo! Pager] "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe" -quiet\par O4 - HKCU\\..\\Run: [Wallpaper] "C:\\Program Files\\Wallpaper\\Wallpaper.exe" Starter\par O4 - HKCU\\..\\Run: [MsnMsgr] "C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe" /background\par O4 - HKCU\\..\\Run: [ctfmon.exe] C:\\WINDOWS\\system32\\ctfmon.exe\par O4 - Startup: Rainlendar.lnk = C:\\Program Files\\Rainlendar\\Rainlendar.exe\par O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\\PROGRA~1\\MICROS~3\\Office10\\EXCEL.EXE/3000\par O9 - Extra button: (no name) - \{08B0E5C0-4FCB-11CF-AAA5-00401C608501\} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll\par O9 - Extra 'Tools' menuitem: Console Java (Sun) - \{08B0E5C0-4FCB-11CF-AAA5-00401C608501\} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll\par O9 - Extra button: Messenger - \{4528BBE0-4E08-11D5-AD55-00010333D0AD\} - C:\\PROGRA~1\\Yahoo!\\Common\\yhexbmesfr.dll\par O9 - Extra 'Tools' menuitem: Yahoo! Messenger - \{4528BBE0-4E08-11D5-AD55-00010333D0AD\} - C:\\PROGRA~1\\Yahoo!\\Common\\yhexbmesfr.dll\par O9 - Extra button: Messenger - \{FB5F1910-F110-11d2-BB9E-00C04F795683\} - C:\\Program Files\\Messenger\\msmsgs.exe\par O9 - Extra 'Tools' menuitem: Windows Messenger - \{FB5F1910-F110-11d2-BB9E-00C04F795683\} - C:\\Program Files\\Messenger\\msmsgs.exe\par O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/\par O16 - DPF: \{0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75\} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...de.cab\par O16 - DPF: \{30528230-99f7-4bb4-88d8-fa1d4f56a2ab\} (YInstStarter Class) - C:\\Program Files\\Yahoo!\\Common\\yinsthelper.dll\par O16 - DPF: \{74D05D43-3236-11D4-BDCD-00C04F9A3B61\} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...53.cab\par O16 - DPF: \{8E0D4DE5-3180-4024-A327-4DFAD1796A8D\} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...67.cab\par O16 - DPF: \{952F9A71-131A-11D5-8404-00500445A7D0\} (ActiveMiniplug Class) - https://intranet.unss.org/plugins/mplugax.cab\par O16 - DPF: \{9A9307A0-7DA4-4DAF-B042-5009F29E09E1\} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as...st.cab\par O16 - DPF: \{C5E28B9D-0A68-4B50-94E9-E8F6B4697516\} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx...p3.cab\par O16 - DPF: \{F6BF0D00-0B2A-4A75-BF7B-F385591623AF\} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...67.cab\par O18 - Protocol: livecall - \{828030A1-22C1-4009-854F-8E305202313F\} - C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL\par O18 - Protocol: msnim - \{828030A1-22C1-4009-854F-8E305202313F\} - C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL\par O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedul2.exe\par O23 - Service: Boonty Games - BOONTY - C:\\Program Files\\Fichiers communs\\BOONTY Shared\\Service\\Boonty.exe\par O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\\Program Files\\ewido anti-spyware 4.0\\guard.exe\par O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\\Program Files\\Fichiers communs\\InstallShield\\Driver\\11\\Intel 32\\IDriverT.exe\par O23 - Service: Scan en temps r\'e9el OfficeScanNT (ntrtscan) - Unknown owner - C:\\Program Files\\Trend Micro\\OfficeScan Client\\ntrtscan.exe\par O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\\WINDOWS\\system32\\nvsvc32.exe\par O23 - Service: O&O Defrag - O&O Software GmbH - C:\\WINDOWS\\system32\\oodag.exe\par O23 - Service: SmartLinkService (SLService) - Smart Link - C:\\WINDOWS\\SYSTEM32\\slserv.exe\par O23 - Service: OfficeScanNT Listener (tmlisten) - Unknown owner - C:\\Program Files\\Trend Micro\\OfficeScan Client\\tmlisten.exe\par O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\\Program Files\\TuneUp Utilities 2006\\WinStylerThemeSvc.exe\par O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe\par \par }
  4. merci de m'avoir répondu aussi vite, voici les résultats et rapports je n'ai pas réussi à supprimer le fichier c:\Windows\system32\smss.exe en mode sans échec le rapport ewido est le suivant --------------------------------------------------------- ewido anti-spyware - Scan Report --------------------------------------------------------- + Created at: 13:39:57 06/09/2006 + Scan result: :mozilla.6:C:\Documents and Settings\patrice\Application Data\Pioneers of the Inevitable\Songbird\Profiles\evv93bem.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.7:C:\Documents and Settings\patrice\Application Data\Pioneers of the Inevitable\Songbird\Profiles\evv93bem.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined). :mozilla.8:C:\Documents and Settings\patrice\Application Data\Pioneers of the Inevitable\Songbird\Profiles\evv93bem.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Cleaned with backup (quarantined). C:\Documents and Settings\patrice\Cookies\patrice@weborama[2].txt -> TrackingCookie.Weborama : Cleaned with backup (quarantined). ::Report end puis le rapport de Kaspersky ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Wednesday, September 06, 2006 3:42:53 PM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 6/09/2006 Kaspersky Anti-Virus database records: 208298 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: standard Scan Archives: true Scan Mail Bases: true Scan Target - Folders: C:\ Scan Statistics: Total number of scanned objects: 96189 Number of viruses found: 3 Number of infected objects: 7 / 0 Number of suspicious objects: 0 Duration of the scan process: 01:42:35 Infected Object Name / Virus Name / Last Action C:\ca91c6bdccc53e6aa12c64\$shtdwn$.req Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\1394bus.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\4mmdat.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\61883.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\6to4svc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ac97ali.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ac97via.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\access.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\accwiz.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\acgenral.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aclayers.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aclua.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aclui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\acpi.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\acspecfc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\activ.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\activeds.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\activsvc.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\actlan.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\actmovie.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\actshell.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\actxprxy.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\acxtrnal.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adcjavas.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adcvbs.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adeskerr.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admexs.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admin.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admin.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admjoy.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admparse.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\admwprox.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adojavas.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adovbs.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adsiis51.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adsldp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adsldpc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adsmsext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adsnt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv01nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv02nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv05nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv07nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv08nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv09nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\adv11nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\advapi32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\advpack.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aec.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\afd.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentanm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentctl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentdp2.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentdpv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentmpx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentpsh.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentsr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agentsvr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agp440.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agpcpq.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agtctl15.tl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agtintl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agtscrp2.js_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\agtscrpt.js_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ahui.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\alg.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\alim1541.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\alrsvc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\amdagp.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\amdk6.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\amdk7.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\amstream.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\an983.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\appconf.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\apphelp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\apphelp.sd_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\apph_sp.sd_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\appmgmts.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\appmgr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\apps.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\apps_sp.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\appwiz.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aqueue.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\arial.tt_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\arialbd.tt_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\arp1394.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asctrls.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asferror.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\10\msft\windows\gdiplus\gdiplus.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\10\msft\windows\gdiplus\gdiplus.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\10\msft\windows\gdiplus\gdiplus.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\10\policy\msft\windows\gdiplus\gdiplus.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\10\policy\msft\windows\gdiplus\gdiplus.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\51\msft\windows\system\default\default.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\51\msft\windows\system\default\default.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\51\policy\msft\windows\system\default\default.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\51\policy\msft\windows\system\default\default.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\dxmrtp\dxmrtp.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\dxmrtp\dxmrtp.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\dxmrtp\dxmrtp.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcdll\rtcdll.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcdll\rtcdll.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcdll\rtcdll.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcres\rtcres.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcres\rtcres.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcres\rtcres.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\dxmrtp\dxmrtp.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\dxmrtp\dxmrtp.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\rtcdll\rtcdll.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\rtcdll\rtcdll.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\60\msft\windows\common\controls\comctl32.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\60\msft\windows\common\controls\controls.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\60\msft\windows\common\controls\controls.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\60\policy\60\comctl\comctl.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\60\policy\60\comctl\comctl.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\msvcirt.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\msvcrt.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\mswincrt.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\mswincrt.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\policy\msft\mswincrt\mswincrt.cat Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asms\70\policy\msft\mswincrt\mswincrt.man Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asp51.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_isapi.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_perf.h Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_perf.ini Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_perf2.ini Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_regiis.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\aspnet_wp.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asr_fmt.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asycfilt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\asyncmac.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\at.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atapi.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1btxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1mdxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1pdxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1raxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1rvxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1snxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1ttxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1tuxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1xbxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1xsxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati1xwdm.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati2cqag.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati2dvaa.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati2dvag.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati2mtaa.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati2mtag.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati3d1ag.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati3d2ag.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ati3duag.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atiixpaa.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atiixpag.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinbtxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinmdxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinpdxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinraxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinrvxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinsnxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinttxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atintuxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinxbxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atinxsxx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ativdaxx.ax_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ativmc20.co_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ativmvxx.ax_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ativtmxx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ativvaxx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atixpwdm.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atm.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atmadm.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atmarpc.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atmfd.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atmlane.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atmlib.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atv01nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atv02nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atv04nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atv06nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\atv10nt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\audiosrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\auditusr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\author.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\author.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\authz.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\autochk.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\autoconv.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\autofmt.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\autolfn.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\autoupdt.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\au_plcy.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\avc.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\avcstrm.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\avifil32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\basesrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\batmeter.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\batt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bdaplgin.ax_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bdasup.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bidispl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bitsprx2.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bitsprx3.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\blackbox.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\blank.txt Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\blastcln.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\blutooth.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bridge.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\browselc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\browser.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\browseui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\browsewm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bth.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthci.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthenum.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthmodem.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthpan.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthpan.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthport.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthprint.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthprint.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthprops.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthserv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthspp.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\bthusb.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\btpanui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cabinet.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cabview.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\callcont.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\camocx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\caspol.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\catsrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\catsrvps.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\catsrvut.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ccdecode.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cdfs.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cdfview.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cdm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cdosys.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cdrom.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\certcli.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\certmgr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\certwiz.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cewmdm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cfgbkend.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cfgmgr32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cfgwiz.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ch7xxnt5.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\changer.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cimwin32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cimwin32.mf_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cimwin32.mo_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cinfo.xm_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ciodm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cipher.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cisvc.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\classpnp.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\clbcatex.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\clbcatq.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cleanmgr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cli.mo_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cliconfg.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cliconfg.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cliconfg.rl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cliegali.mf_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cliegali.mo_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\clipbrd.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\clipsrv.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\clusapi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmbatt.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmcfg32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmd.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmdial32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmdl32.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmmon32.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmprops.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmsetacl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmstp.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cmutil.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cnbjmon.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cnbjmon2.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cnfgprts.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\coadmin.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\colbact.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comadmin.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comctl32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comdlg32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comexp.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comic.tt_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compact.wm_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compatui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\drvmain.chm Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\drvmain.inf Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\krnlchk.htm Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\krnlchk.txt Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\nv_agp.htm Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compdata\nv_agp.txt Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compfilt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\compstui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comrepl.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comres.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comsvcs.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\comuid.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conf.ad_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conf.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conf.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conf.hl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conf1.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\confmrsl.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\conime.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\connect.cn_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\connect.hl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\corperfmonext.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\corperfmonsymbols.ini Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\corpol.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\courtney.ac_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cpanel_p.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cpanel_w.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\credui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\crusoe.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\crypt32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptdlg.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptdll.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptnet.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptsvc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cryptui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\csc.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cscdll.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cscomp.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cscript.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cscui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\csrsrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\csrss.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\csv.xs_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ctfmon.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ctmasetp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cu52178.nlp Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\custsat.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cwrwdm.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\cxthsfs2.ct_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\c_28603.nl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\d3d8.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\d3d8thk.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\d3d9.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\d3dim700.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\danim.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dao360.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dataclen.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dataspec.xm_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\datetime.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\davcdata.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\davclnt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\daxctle.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dbghelp.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dbmsrpcn.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dbnetlib.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dbnmpntw.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dcache.bi_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dcap32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dciman32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ddeshare.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ddraw.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ddrawex.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\defrag.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\desk.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\devenum.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\devmgr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dfrgfat.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dfrgntfs.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dfrgsnap.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dfrgui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dfsshlex.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dgnet.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dhcpcsvc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dhtmled.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dialer.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\diantz.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\digcore.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\digest.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\digopt.ms_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\digreqex.ms_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dinput.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dinput8.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\directdb.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\disk.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\diskdump.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\diskpart.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dlimport.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dllhost.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dlttape.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmadmin.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmband.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmboot.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmcompos.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmdskmgr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmime.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmio.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmloader.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmremote.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmscript.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmserver.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmstyle.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmsynth.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmusic.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmusic.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dmutil.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dnsapi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dnsrslvr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\docprop2.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dosx.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dot4.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dplaysvr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dplayx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpmodemx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnaddr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnet.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnhpast.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnhupnp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnlobby.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpnsvr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpvacm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpvoice.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpvsetup.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpvvox.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dpwsockx.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drm.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drmclien.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drmk.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drmkaud.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drmstor.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drmv2clt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drprov.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drvmain.sdb Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\drw\dwwin.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ds16gt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ds32gt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsdmo.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsdmoprp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dshowext.ax_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dskquop.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dskquota.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsound.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsound3d.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsprop.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsprpres.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsquery.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dssec.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dssenh.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dsuiext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dswave.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dtsgnup.ht_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dumprep.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\duser.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dvdupgrd.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dwwin.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dx7vb.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dx8vb.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxdiag.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxdiag.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxdiagn.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxg.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxmasf.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxtmsft.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\dxtrans.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\earl.ac_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\efsadu.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\els.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\empty.txt Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\encapi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\encdec.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ep9res.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\epcl5res.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\epn1600.gp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\error.js_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ersvc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\es.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\esent.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\esscli.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\essm2e.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\eudcedit.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evcon.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evcreate.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\eventlog.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\eventlogmessages.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evntagnt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evntcmd.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evntrprv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evntwin.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\evtgprov.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\explorer.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\expsrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\exstrace.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\extmgr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\extrac32.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\faq.htm Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fastfat.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fastprox.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\faultrep.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\faxpatch.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fdc.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fdeploy.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\feclient.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\filefldp.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\filefldw.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\filelist.xm_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\filemgmt.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\file_srv.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\filters.xm_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\findstr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\firewall.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\flash.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fldrclnr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\flpydisk.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fltlib.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fltmc.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fltmgr.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fontext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fontview.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\forehe.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4.ca_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp40ext.cab Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp40ext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp40ext.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4amsft.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4anscp.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4apws.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4areg.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4atxt.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4autl.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4avnb.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4avss.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4awebs.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp4awel.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp98sadm.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fp98swin.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpadmcgi.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpadmdll.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpcount.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpencode.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpexedll.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpmmc.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpmmcsat.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpremadm.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fpsrvadm.exe Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\framebuf.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\framedyn.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fsquirt.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ftp.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ftpmib.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\ftpsv251.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fusion.dll Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fwcfg.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsapi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsclnt.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxscom.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxscomex.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxscover.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsdrv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsevent.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsext32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsmon.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsocm.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsocm.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsperf.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsres.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsst.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxssvc.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxst30.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxstiff.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsui.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxswzrd.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\fxsxp32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\g400.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gagp30kx.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gameenum.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gckernel.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gdi32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\georgia.tt_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\glu32.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gpedit.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gpkcsp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gpkrsrc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gprslt.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gptext.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\greenshd.gi_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\grpconv.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\grserial.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\guitrn.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\guitrn_a.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\gzip.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\h323.ts_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\h323cc.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\h323msp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hal.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halaacpi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halacpi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halapic.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halmacpi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halmps.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\halsp.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hardware.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hardware.hl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hccoin.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hdwwiz.cp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\helpctr.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\helpsvc.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hform.xs_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hh.ex_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hhctrl.oc_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hhsetup.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hid.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidbth.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidbth.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidclass.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidir.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidparse.sy_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidphone.ts_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hidserv.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hmmapi.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hnetcfg.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hnetwiz.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\homepage.in_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hostmib.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hotplug.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\howtop.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\howtow.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hp5000_7.pp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hpcjrr.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hpcjrrps.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hpfud50.dl_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hpwm5250.gp_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hschelpp.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\i386\hschelpw.ch_ Object is locked skipped C:\ca91c6bdccc53e6aa12c64\
  5. Bonjour j'ai été infecté par le trojan medbot.ai ( détecté et non éliminé par trend micro officescan), j'ai suivi les directives pour nettoyer la base de registre( suppression de la clé .nvsvc="%Windows%\system\smss.exe\w"), malheureusement la manip n'a pas fonctionné jusqu'au bout et il me semble que je suis toujours infecté alors que le scan avec trend micro et a squarred ne donne rien Cest pourquoi, je me permets de vous envoyé mon rapport HijackThis afin d'obtenir de l'aide merci d'avance Logfile of HijackThis v1.99.1 Scan saved at 09:00:36, on 06/09/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\oodag.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Trend Micro\OfficeScan Client\RAUAgent.exe C:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe C:\Program Files\Wallpaper\Wallpaper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Rainlendar\Rainlendar.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe C:\Program Files\Trend Micro\OfficeScan Client\ofcdog.exe C:\Program Files\Trend Micro\OfficeScan Client\PccNTMon.EXE C:\Program Files\Trend Micro\OfficeScan Client\Pop3Trap.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Lavalys\EVEREST Home Edition\everest.bin C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: ECarteBleueBrowserHelper Class - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [Moniteur OfficeScanNT] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow O4 - HKLM\..\Run: [RemoteAgent] C:\Program Files\Trend Micro\OfficeScan Client\RAUAgent.exe O4 - HKLM\..\Run: [Cloneur Expert Monitor] "C:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe" O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe" O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/ O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {952F9A71-131A-11D5-8404-00500445A7D0} (ActiveMiniplug Class) - https://intranet.unss.org/plugins/mplugax.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Scan en temps réel OfficeScanNT (ntrtscan) - Unknown owner - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: OfficeScanNT Listener (tmlisten) - Unknown owner - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe O23 - Service: Windows Log - Unknown owner - C:\WINDOWS\system32\nvsvcd.exe
×
×
  • Créer...