Aller au contenu
Zebulon

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

analysé rapport HijackThis

pat21

Par pat21
dans Analyses et éradication malwares

 Partager

Messages recommandés

pat21 Junior Member

pat21

Posté(e)
Posté(e)

Bonjour j'ai été infecté par le trojan medbot.ai ( détecté et non éliminé par trend micro officescan),

j'ai suivi les directives pour nettoyer la base de registre( suppression de la clé .nvsvc="%Windows%\system\smss.exe\w"),

malheureusement la manip n'a pas fonctionné jusqu'au bout et il me semble que je suis toujours infecté alors que le scan avec trend micro et a squarred ne donne rien

 

Cest pourquoi, je me permets de vous envoyé mon rapport HijackThis afin d'obtenir de l'aide

 

merci d'avance

 

Logfile of HijackThis v1.99.1

Scan saved at 09:00:36, on 06/09/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\oodag.exe

C:\WINDOWS\system32\slserv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Program Files\Trend Micro\OfficeScan Client\RAUAgent.exe

C:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe

C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe

C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe

C:\Program Files\Wallpaper\Wallpaper.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Rainlendar\Rainlendar.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe

C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe

C:\Program Files\Trend Micro\OfficeScan Client\ofcdog.exe

C:\Program Files\Trend Micro\OfficeScan Client\PccNTMon.EXE

C:\Program Files\Trend Micro\OfficeScan Client\Pop3Trap.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Lavalys\EVEREST Home Edition\everest.bin

C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: ECarteBleueBrowserHelper Class - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - (no file)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [Moniteur OfficeScanNT] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow

O4 - HKLM\..\Run: [RemoteAgent] C:\Program Files\Trend Micro\OfficeScan Client\RAUAgent.exe

O4 - HKLM\..\Run: [Cloneur Expert Monitor] "C:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe"

O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"

O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

O4 - HKCU\..\Run: [Wallpaper] "C:\Program Files\Wallpaper\Wallpaper.exe" Starter

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {952F9A71-131A-11D5-8404-00500445A7D0} (ActiveMiniplug Class) - https://intranet.unss.org/plugins/mplugax.cab

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab

O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe

O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Scan en temps réel OfficeScanNT (ntrtscan) - Unknown owner - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe

O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe

O23 - Service: OfficeScanNT Listener (tmlisten) - Unknown owner - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

O23 - Service: Windows Log - Unknown owner - C:\WINDOWS\system32\nvsvcd.exe

Lien vers le commentaire
Partager sur d’autres sites

Malekal_morte Godlike Member

Malekal_morte

Posté(e)
Posté(e)

Voici la manipulation à effectuer en entier

Merci de bien vouloir :

- Lire attentivement les instructions demandées et prendre son temps pour les effectuer convenablement, sinon la désinfection ne sera pas complète.

- Si certains éléments ne sont pas trouvés, merci de le signaler mais de poursuivre les manipulations jusqu'au bout.

- A l'issu de la procédure, merci de bien copier/coller TOUS les rapports demandés.

- N'hésitez pas à consulter les liens d'aides, ils sont là pour vous guider !

 

- Demarrer / executer / tape services.msc

- Cherche Windows Log dans la liste

- Double clic dessus, positionne le type de démarrage sur désactiver

 

- Télécharge et installe ewido

- Mets le à jour à partir du menu update en haut, n'hésite pas à consulter l'Aide ewido pour tout problème.

 

-- Redémarre en mode en mode sans échec, si tu sais pas comment on fait lis ceci

 

Supprime ce fichier :

C:\Windows\system\smss.exe

C:\WINDOWS\system32\nvsvcd.exe

 

- Ouvre ewido et clic sur l'onglet Settings, pour How to Act sélèctionne Quarantine.

Reviens a l'onglet Scan cliques Complete system Scan.

Le scan démarre.

A la fin cliquer sur Apply all actions

Puis sur Save report et pour finir Save report as enregistrer sur le Bureau.

 

 

Aide : N'hésite pas à consulter l'Aide ewido pour tout problème.

 

 

-- Redémarre en mode normal : Menu Démarrer / Arreter / Redémarre l'ordinateur

Attention : dans le cas où l'ordinateur redémarre en boucle en mode sans échec, faire la manipulation inverse en décochant l'option /SAFEBOOT à l'aide de msconfig : voir à nouveau cette page : cliquez-ici

 

-- Fais un scan en ligne avec Internet Explorer : Scan Kaspersky et colle le rapport ici. Si tu es perdu, tu peux suivre cette aide pour les scans en ligne

-- Copie/Colle ici les rapports :

- ewido

- ainsi qu'un nouveau log HijackThis

Lien vers le commentaire
Partager sur d’autres sites
pat21 Junior Member

pat21

Posté(e)
  • Auteur
Posté(e)

Voici la manipulation à effectuer en entier

Merci de bien vouloir :

- Lire attentivement les instructions demandées et prendre son temps pour les effectuer convenablement, sinon la désinfection ne sera pas complète.

- Si certains éléments ne sont pas trouvés, merci de le signaler mais de poursuivre les manipulations jusqu'au bout.

- A l'issu de la procédure, merci de bien copier/coller TOUS les rapports demandés.

- N'hésitez pas à consulter les liens d'aides, ils sont là pour vous guider !

 

- Demarrer / executer / tape services.msc

- Cherche Windows Log dans la liste

- Double clic dessus, positionne le type de démarrage sur désactiver

 

- Télécharge et installe ewido

- Mets le à jour à partir du menu update en haut, n'hésite pas à consulter l'Aide ewido pour tout problème.

 

-- Redémarre en mode en mode sans échec, si tu sais pas comment on fait lis ceci

 

Supprime ce fichier :

C:\Windows\system32\smss.exe

C:\WINDOWS\system32\nvsvcd.exe

 

- Ouvre ewido et clic sur l'onglet Settings, pour How to Act sélèctionne Quarantine.

Reviens a l'onglet Scan cliques Complete system Scan.

Le scan démarre.

A la fin cliquer sur Apply all actions

Puis sur Save report et pour finir Save report as enregistrer sur le Bureau.

Aide : N'hésite pas à consulter l'Aide ewido pour tout problème.

-- Redémarre en mode normal : Menu Démarrer / Arreter / Redémarre l'ordinateur

Attention : dans le cas où l'ordinateur redémarre en boucle en mode sans échec, faire la manipulation inverse en décochant l'option /SAFEBOOT à l'aide de msconfig : voir à nouveau cette page : cliquez-ici

 

-- Fais un scan en ligne avec Internet Explorer : Scan Kaspersky et colle le rapport ici. Si tu es perdu, tu peux suivre cette aide pour les scans en ligne

-- Copie/Colle ici les rapports :

- ewido

- ainsi qu'un nouveau log HijackThis

merci de m'avoir répondu aussi vite, voici les résultats et rapports

je n'ai pas réussi à supprimer le fichier c:\Windows\system32\smss.exe en mode sans échec

le rapport ewido est le suivant

---------------------------------------------------------

ewido anti-spyware - Scan Report

---------------------------------------------------------

 

+ Created at: 13:39:57 06/09/2006

 

+ Scan result:

 

 

 

:mozilla.6:C:\Documents and Settings\patrice\Application Data\Pioneers of the Inevitable\Songbird\Profiles\evv93bem.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).

:mozilla.7:C:\Documents and Settings\patrice\Application Data\Pioneers of the Inevitable\Songbird\Profiles\evv93bem.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).

C:\Documents and Settings\patrice\Cookies\patrice@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).

C:\Documents and Settings\patrice\Cookies\patrice@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined).

:mozilla.8:C:\Documents and Settings\patrice\Application Data\Pioneers of the Inevitable\Songbird\Profiles\evv93bem.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).

C:\Documents and Settings\patrice\Cookies\patrice@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).

C:\Documents and Settings\patrice\Cookies\patrice@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).

C:\Documents and Settings\patrice\Cookies\[email protected][2].txt -> TrackingCookie.Smartadserver : Cleaned with backup (quarantined).

C:\Documents and Settings\patrice\Cookies\patrice@weborama[2].txt -> TrackingCookie.Weborama : Cleaned with backup (quarantined).

 

 

::Report end

 

puis le rapport de Kaspersky

-------------------------------------------------------------------------------

KASPERSKY ONLINE SCANNER REPORT

Wednesday, September 06, 2006 3:42:53 PM

Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)

Kaspersky Online Scanner version: 5.0.83.0

Kaspersky Anti-Virus database last update: 6/09/2006

Kaspersky Anti-Virus database records: 208298

-------------------------------------------------------------------------------

 

Scan Settings:

Scan using the following antivirus database: standard

Scan Archives: true

Scan Mail Bases: true

 

Scan Target - Folders:

C:\

 

Scan Statistics:

Total number of scanned objects: 96189

Number of viruses found: 3

Number of infected objects: 7 / 0

Number of suspicious objects: 0

Duration of the scan process: 01:42:35

 

Infected Object Name / Virus Name / Last Action

C:\ca91c6bdccc53e6aa12c64\$shtdwn$.req Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\1394bus.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\4mmdat.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\61883.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\6to4svc.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ac97ali.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ac97via.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\access.cp_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\accwiz.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\acgenral.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aclayers.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aclua.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aclui.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\acpi.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\acspecfc.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\activ.ht_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\activeds.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\activsvc.ht_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\actlan.ht_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\actmovie.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\actshell.ht_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\actxprxy.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\acxtrnal.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adcjavas.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adcvbs.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adeskerr.ht_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\admexs.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\admin.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\admin.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\admjoy.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\admparse.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\admwprox.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adojavas.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adovbs.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adsiis51.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adsldp.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adsldpc.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adsmsext.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adsnt.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adv01nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adv02nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adv05nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adv07nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adv08nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adv09nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\adv11nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\advapi32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\advpack.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aec.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\afd.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agentanm.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agentctl.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agentdp2.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agentdpv.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agentmpx.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agentpsh.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agentsr.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agentsvr.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agp440.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agpcpq.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agtctl15.tl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agtintl.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agtscrp2.js_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\agtscrpt.js_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ahui.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\alg.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\alim1541.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\alrsvc.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\amdagp.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\amdk6.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\amdk7.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\amstream.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\an983.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\appconf.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\apphelp.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\apphelp.sd_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\apph_sp.sd_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\appmgmts.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\appmgr.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\apps.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\apps_sp.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\appwiz.cp_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aqueue.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\arial.tt_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\arialbd.tt_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\arp1394.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asctrls.oc_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asferror.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\10\msft\windows\gdiplus\gdiplus.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\10\msft\windows\gdiplus\gdiplus.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\10\msft\windows\gdiplus\gdiplus.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\10\policy\msft\windows\gdiplus\gdiplus.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\10\policy\msft\windows\gdiplus\gdiplus.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\51\msft\windows\system\default\default.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\51\msft\windows\system\default\default.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\51\policy\msft\windows\system\default\default.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\51\policy\msft\windows\system\default\default.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\dxmrtp\dxmrtp.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\dxmrtp\dxmrtp.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\dxmrtp\dxmrtp.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcdll\rtcdll.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcdll\rtcdll.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcdll\rtcdll.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcres\rtcres.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcres\rtcres.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\msft\windows\net\rtcres\rtcres.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\dxmrtp\dxmrtp.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\dxmrtp\dxmrtp.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\rtcdll\rtcdll.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\52\policy\msft\windows\networking\rtcdll\rtcdll.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\60\msft\windows\common\controls\comctl32.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\60\msft\windows\common\controls\controls.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\60\msft\windows\common\controls\controls.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\60\policy\60\comctl\comctl.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\60\policy\60\comctl\comctl.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\msvcirt.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\msvcrt.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\mswincrt.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\70\msft\windows\mswincrt\mswincrt.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\70\policy\msft\mswincrt\mswincrt.cat Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asms\70\policy\msft\mswincrt\mswincrt.man Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asp51.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aspnet_isapi.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aspnet_perf.h Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aspnet_perf.ini Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aspnet_perf2.ini Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aspnet_regiis.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\aspnet_wp.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asr_fmt.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asycfilt.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\asyncmac.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\at.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atapi.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1btxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1mdxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1pdxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1raxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1rvxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1snxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1ttxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1tuxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1xbxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1xsxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati1xwdm.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati2cqag.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati2dvaa.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati2dvag.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati2mtaa.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati2mtag.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati3d1ag.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati3d2ag.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ati3duag.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atiixpaa.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atiixpag.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atinbtxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atinmdxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atinpdxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atinraxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atinrvxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atinsnxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atinttxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atintuxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atinxbxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atinxsxx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ativdaxx.ax_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ativmc20.co_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ativmvxx.ax_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ativtmxx.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ativvaxx.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atixpwdm.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atl.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atm.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atmadm.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atmarpc.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atmfd.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atmlane.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atmlib.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atv01nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atv02nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atv04nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atv06nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\atv10nt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\audiosrv.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\auditusr.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\author.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\author.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\authz.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\autochk.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\autoconv.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\autofmt.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\autolfn.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\autoupdt.ht_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\au_plcy.ht_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\avc.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\avcstrm.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\avifil32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\basesrv.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\batmeter.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\batt.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bdaplgin.ax_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bdasup.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bidispl.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bitsprx2.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bitsprx3.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\blackbox.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\blank.txt Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\blastcln.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\blutooth.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bridge.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\browselc.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\browser.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\browseui.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\browsewm.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bth.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthci.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthenum.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthmodem.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthpan.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthpan.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthport.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthprint.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthprint.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthprops.cp_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthserv.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthspp.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\bthusb.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\btpanui.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cabinet.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cabview.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\callcont.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\camocx.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\caspol.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\catsrv.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\catsrvps.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\catsrvut.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ccdecode.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cdfs.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cdfview.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cdm.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cdosys.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cdrom.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\certcli.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\certmgr.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\certwiz.oc_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cewmdm.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cfgbkend.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cfgmgr32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cfgwiz.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ch7xxnt5.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\changer.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cimwin32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cimwin32.mf_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cimwin32.mo_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cinfo.xm_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ciodm.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cipher.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cisvc.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\classpnp.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\clbcatex.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\clbcatq.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cleanmgr.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cli.mo_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cliconfg.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cliconfg.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cliconfg.rl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cliegali.mf_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cliegali.mo_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\clipbrd.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\clipsrv.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\clusapi.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cmbatt.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cmcfg32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cmd.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cmdial32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cmdl32.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cmmon32.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cmprops.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cmsetacl.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cmstp.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cmutil.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cnbjmon.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cnbjmon2.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cnfgprts.oc_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\coadmin.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\colbact.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\comadmin.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\comctl32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\comdlg32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\comexp.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\comic.tt_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\compact.wm_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\compatui.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\compdata\drvmain.chm Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\compdata\drvmain.inf Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\compdata\krnlchk.htm Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\compdata\krnlchk.txt Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\compdata\nv_agp.htm Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\compdata\nv_agp.txt Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\compfilt.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\compstui.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\comrepl.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\comres.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\comsvcs.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\comuid.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\conf.ad_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\conf.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\conf.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\conf.hl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\conf1.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\confmrsl.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\conime.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\connect.cn_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\connect.hl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\corperfmonext.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\corperfmonsymbols.ini Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\corpol.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\courtney.ac_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cpanel_p.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cpanel_w.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\credui.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\crusoe.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\crypt32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cryptdlg.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cryptdll.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cryptext.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cryptnet.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cryptsvc.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cryptui.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\csc.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cscdll.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cscomp.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cscript.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cscui.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\csrsrv.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\csrss.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\csv.xs_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ctfmon.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ctmasetp.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cu52178.nlp Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\custsat.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cwrwdm.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\cxthsfs2.ct_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\c_28603.nl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\d3d8.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\d3d8thk.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\d3d9.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\d3dim700.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\danim.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dao360.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dataclen.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dataspec.xm_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\datetime.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\davcdata.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\davclnt.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\daxctle.oc_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dbghelp.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dbmsrpcn.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dbnetlib.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dbnmpntw.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dcache.bi_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dcap32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dciman32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ddeshare.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ddraw.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ddrawex.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\defrag.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\desk.cp_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\devenum.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\devmgr.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dfrgfat.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dfrgntfs.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dfrgsnap.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dfrgui.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dfsshlex.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dgnet.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dhcpcsvc.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dhtmled.oc_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dialer.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\diantz.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\digcore.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\digest.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\digopt.ms_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\digreqex.ms_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dinput.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dinput8.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\directdb.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\disk.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\diskdump.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\diskpart.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dlimport.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dllhost.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dlttape.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmadmin.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmband.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmboot.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmcompos.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmdskmgr.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmime.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmio.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmloader.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmremote.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmscript.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmserver.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmstyle.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmsynth.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmusic.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmusic.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dmutil.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dnsapi.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dnsrslvr.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\docprop2.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dosx.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dot4.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dplaysvr.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dplayx.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpmodemx.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpnaddr.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpnet.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpnhpast.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpnhupnp.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpnlobby.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpnsvr.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpvacm.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpvoice.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpvsetup.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpvvox.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dpwsockx.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\drm.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\drmclien.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\drmk.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\drmkaud.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\drmstor.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\drmv2clt.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\drprov.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\drvmain.sdb Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\drw\dwwin.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ds16gt.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ds32gt.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dsdmo.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dsdmoprp.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dshowext.ax_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dskquop.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dskquota.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dsound.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dsound3d.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dsprop.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dsprpres.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dsquery.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dssec.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dssenh.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dsuiext.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dswave.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dtsgnup.ht_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dumprep.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\duser.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dvdupgrd.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dwwin.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dx7vb.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dx8vb.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dxdiag.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dxdiag.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dxdiagn.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dxg.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dxmasf.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dxtmsft.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\dxtrans.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\earl.ac_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\efsadu.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\els.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\empty.txt Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\encapi.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\encdec.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ep9res.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\epcl5res.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\epn1600.gp_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\error.js_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ersvc.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\es.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\esent.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\esscli.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\essm2e.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\eudcedit.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\evcon.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\evcreate.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\eventlog.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\eventlogmessages.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\evntagnt.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\evntcmd.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\evntrprv.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\evntwin.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\evtgprov.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\explorer.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\expsrv.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\exstrace.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\extmgr.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\extrac32.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\faq.htm Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fastfat.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fastprox.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\faultrep.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\faxpatch.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fdc.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fdeploy.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\feclient.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\filefldp.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\filefldw.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\filelist.xm_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\filemgmt.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\file_srv.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\filters.xm_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\findstr.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\firewall.cp_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\flash.oc_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fldrclnr.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\flpydisk.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fltlib.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fltmc.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fltmgr.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fontext.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fontview.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\forehe.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4.ca_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp40ext.cab Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp40ext.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp40ext.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4amsft.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4anscp.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4apws.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4areg.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4atxt.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4autl.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4avnb.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4avss.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4awebs.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp4awel.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp98sadm.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fp98swin.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fpadmcgi.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fpadmdll.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fpcount.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fpencode.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fpexedll.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fpmmc.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fpmmcsat.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fpremadm.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fpsrvadm.exe Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\framebuf.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\framedyn.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fsquirt.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ftp.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ftpmib.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\ftpsv251.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fusion.dll Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fwcfg.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsapi.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsclnt.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxscom.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxscomex.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxscover.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsdrv.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsevent.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsext32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsmon.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsocm.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsocm.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsperf.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsres.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsst.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxssvc.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxst30.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxstiff.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsui.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxswzrd.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\fxsxp32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\g400.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\gagp30kx.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\gameenum.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\gckernel.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\gdi32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\georgia.tt_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\glu32.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\gpedit.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\gpkcsp.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\gpkrsrc.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\gprslt.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\gptext.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\greenshd.gi_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\grpconv.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\grserial.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\guitrn.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\guitrn_a.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\gzip.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\h323.ts_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\h323cc.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\h323msp.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hal.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\halaacpi.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\halacpi.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\halapic.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\halmacpi.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\halmps.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\halsp.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hardware.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hardware.hl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hccoin.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hdwwiz.cp_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\helpctr.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\helpsvc.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hform.xs_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hh.ex_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hhctrl.oc_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hhsetup.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hid.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hidbth.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hidbth.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hidclass.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hidir.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hidparse.sy_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hidphone.ts_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hidserv.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hmmapi.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hnetcfg.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hnetwiz.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\homepage.in_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hostmib.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hotplug.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\howtop.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\howtow.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hp5000_7.pp_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hpcjrr.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hpcjrrps.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hpfud50.dl_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hpwm5250.gp_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hschelpp.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\i386\hschelpw.ch_ Object is locked skipped

C:\ca91c6bdccc53e6aa12c64\

Lien vers le commentaire
Partager sur d’autres sites
Malekal_morte Godlike Member

Malekal_morte

Posté(e)
Posté(e)

J'avais fait une erreur, c'est C:\Windows\system sans le 32 que le fichier sms.exe est à supprimer.

Merci de copier/coller un nouveau rapport Hijackthis.

 

Ton rapport Kaspersky est tronqué, envoie le là : [email protected]

dis moi quand c'est fait.

Lien vers le commentaire
Partager sur d’autres sites
pat21 Junior Member

pat21

Posté(e)
  • Auteur
Posté(e)

J'avais fait une erreur, c'est C:\Windows\system sans le 32 que le fichier sms.exe est à supprimer.

Merci de copier/coller un nouveau rapport Hijackthis.

est ce que j'essaye de supprimer le fichier sms.exe en mode sans échec et je refais un scan avec ewido

en attendant voici le rapport hijakThis

{\rtf1\ansi\ansicpg1252\deff0\deflang1036{\fonttbl{\f0\fswiss\fcharset0 Arial;}}

{\*\generator Msftedit 5.41.15.1507;}\viewkind4\uc1\pard\f0\fs20 Logfile of HijackThis v1.99.1\par

Scan saved at 15:51:10, on 06/09/2006\par

Platform: Windows XP SP2 (WinNT 5.01.2600)\par

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)\par

\par

Running processes:\par

C:\\WINDOWS\\System32\\smss.exe\par

C:\\WINDOWS\\system32\\winlogon.exe\par

C:\\WINDOWS\\system32\\services.exe\par

C:\\WINDOWS\\system32\\lsass.exe\par

C:\\WINDOWS\\system32\\svchost.exe\par

C:\\WINDOWS\\System32\\svchost.exe\par

C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe\par

C:\\WINDOWS\\system32\\spoolsv.exe\par

C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedul2.exe\par

C:\\Program Files\\ewido anti-spyware 4.0\\guard.exe\par

C:\\WINDOWS\\system32\\nvsvc32.exe\par

C:\\WINDOWS\\system32\\oodag.exe\par

C:\\WINDOWS\\system32\\slserv.exe\par

C:\\WINDOWS\\System32\\svchost.exe\par

C:\\WINDOWS\\system32\\wscntfy.exe\par

C:\\WINDOWS\\Explorer.EXE\par

C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\par

C:\\Program Files\\Trend Micro\\OfficeScan Client\\RAUAgent.exe\par

C:\\Program Files\\Micro Application\\Cloneur Expert\\TrueImageMonitor.exe\par

C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedhlp.exe\par

C:\\Program Files\\Wallpaper\\Wallpaper.exe\par

C:\\WINDOWS\\system32\\ctfmon.exe\par

C:\\Program Files\\Rainlendar\\Rainlendar.exe\par

C:\\WINDOWS\\system32\\svchost.exe\par

C:\\Program Files\\Internet Explorer\\iexplore.exe\par

C:\\WINDOWS\\system32\\freecell.exe\par

C:\\Program Files\\Trend Micro\\OfficeScan Client\\tmlisten.exe\par

C:\\Program Files\\Trend Micro\\OfficeScan Client\\ntrtscan.exe\par

C:\\Program Files\\Trend Micro\\OfficeScan Client\\ofcdog.exe\par

C:\\Program Files\\Trend Micro\\OfficeScan Client\\PccNTMon.EXE\par

C:\\Program Files\\Trend Micro\\OfficeScan Client\\Pop3Trap.exe\par

C:\\Program Files\\Hijackthis Version Fran\'e7aise\\VERSION TRADUITE ORIGINALE.EXE\par

\par

R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = http://fr.yahoo.com\par

R0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://fr.yahoo.com\par

R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Liens\par

R3 - URLSearchHook: Yahoo! Toolbar - \{EF99BD32-C1FB-11D2-892F-0090271D4F88\} - (no file)\par

O2 - BHO: Adobe PDF Reader Link Helper - \{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3\} - C:\\Program Files\\Adobe\\Acrobat 7.0\\ActiveX\\AcroIEHelper.dll\par

O2 - BHO: ECarteBleueBrowserHelper Class - \{2E03C0FD-4C48-43A7-9A54-00240C70FF16\} - (no file)\par

O2 - BHO: SSVHelper Class - \{761497BB-D6F0-462C-B6EB-D4DAF1D92D43\} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll\par

O2 - BHO: Windows Live Sign-in Helper - \{9030D464-4C02-4ABF-8ECC-5164760863C6\} - C:\\Program Files\\Fichiers communs\\Microsoft Shared\\Windows Live\\WindowsLiveLogin.dll\par

O4 - HKLM\\..\\Run: [Zone Labs Client] "C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe"\par

O4 - HKLM\\..\\Run: [Moniteur OfficeScanNT] "C:\\Program Files\\Trend Micro\\OfficeScan Client\\pccntmon.exe" -HideWindow\par

O4 - HKLM\\..\\Run: [RemoteAgent] C:\\Program Files\\Trend Micro\\OfficeScan Client\\RAUAgent.exe\par

O4 - HKLM\\..\\Run: [Cloneur Expert Monitor] "C:\\Program Files\\Micro Application\\Cloneur Expert\\TrueImageMonitor.exe"\par

O4 - HKLM\\..\\Run: [Acronis Scheduler2 Service] "C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedhlp.exe"\par

O4 - HKCU\\..\\Run: [Yahoo! Pager] "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe" -quiet\par

O4 - HKCU\\..\\Run: [Wallpaper] "C:\\Program Files\\Wallpaper\\Wallpaper.exe" Starter\par

O4 - HKCU\\..\\Run: [MsnMsgr] "C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe" /background\par

O4 - HKCU\\..\\Run: [ctfmon.exe] C:\\WINDOWS\\system32\\ctfmon.exe\par

O4 - Startup: Rainlendar.lnk = C:\\Program Files\\Rainlendar\\Rainlendar.exe\par

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\\PROGRA~1\\MICROS~3\\Office10\\EXCEL.EXE/3000\par

O9 - Extra button: (no name) - \{08B0E5C0-4FCB-11CF-AAA5-00401C608501\} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll\par

O9 - Extra 'Tools' menuitem: Console Java (Sun) - \{08B0E5C0-4FCB-11CF-AAA5-00401C608501\} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll\par

O9 - Extra button: Messenger - \{4528BBE0-4E08-11D5-AD55-00010333D0AD\} - C:\\PROGRA~1\\Yahoo!\\Common\\yhexbmesfr.dll\par

O9 - Extra 'Tools' menuitem: Yahoo! Messenger - \{4528BBE0-4E08-11D5-AD55-00010333D0AD\} - C:\\PROGRA~1\\Yahoo!\\Common\\yhexbmesfr.dll\par

O9 - Extra button: Messenger - \{FB5F1910-F110-11d2-BB9E-00C04F795683\} - C:\\Program Files\\Messenger\\msmsgs.exe\par

O9 - Extra 'Tools' menuitem: Windows Messenger - \{FB5F1910-F110-11d2-BB9E-00C04F795683\} - C:\\Program Files\\Messenger\\msmsgs.exe\par

O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/\par

O16 - DPF: \{0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75\} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...de.cab\par

O16 - DPF: \{30528230-99f7-4bb4-88d8-fa1d4f56a2ab\} (YInstStarter Class) - C:\\Program Files\\Yahoo!\\Common\\yinsthelper.dll\par

O16 - DPF: \{74D05D43-3236-11D4-BDCD-00C04F9A3B61\} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...53.cab\par

O16 - DPF: \{8E0D4DE5-3180-4024-A327-4DFAD1796A8D\} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...67.cab\par

O16 - DPF: \{952F9A71-131A-11D5-8404-00500445A7D0\} (ActiveMiniplug Class) - https://intranet.unss.org/plugins/mplugax.cab\par

O16 - DPF: \{9A9307A0-7DA4-4DAF-B042-5009F29E09E1\} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as...st.cab\par

O16 - DPF: \{C5E28B9D-0A68-4B50-94E9-E8F6B4697516\} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx...p3.cab\par

O16 - DPF: \{F6BF0D00-0B2A-4A75-BF7B-F385591623AF\} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...67.cab\par

O18 - Protocol: livecall - \{828030A1-22C1-4009-854F-8E305202313F\} - C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL\par

O18 - Protocol: msnim - \{828030A1-22C1-4009-854F-8E305202313F\} - C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL\par

O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\\Program Files\\Fichiers communs\\Acronis\\Schedule2\\schedul2.exe\par

O23 - Service: Boonty Games - BOONTY - C:\\Program Files\\Fichiers communs\\BOONTY Shared\\Service\\Boonty.exe\par

O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\\Program Files\\ewido anti-spyware 4.0\\guard.exe\par

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\\Program Files\\Fichiers communs\\InstallShield\\Driver\\11\\Intel 32\\IDriverT.exe\par

O23 - Service: Scan en temps r\'e9el OfficeScanNT (ntrtscan) - Unknown owner - C:\\Program Files\\Trend Micro\\OfficeScan Client\\ntrtscan.exe\par

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\\WINDOWS\\system32\\nvsvc32.exe\par

O23 - Service: O&O Defrag - O&O Software GmbH - C:\\WINDOWS\\system32\\oodag.exe\par

O23 - Service: SmartLinkService (SLService) - Smart Link - C:\\WINDOWS\\SYSTEM32\\slserv.exe\par

O23 - Service: OfficeScanNT Listener (tmlisten) - Unknown owner - C:\\Program Files\\Trend Micro\\OfficeScan Client\\tmlisten.exe\par

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\\Program Files\\TuneUp Utilities 2006\\WinStylerThemeSvc.exe\par

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe\par

\par

}

Lien vers le commentaire
Partager sur d’autres sites
pat21 Junior Member

pat21

Posté(e)
  • Auteur
Posté(e)

Le rapport que tu as envoyé semble vide.

je viens à nouveau de t'envoyer le raport kapersky, en esperant que cela marche

De plus j'ai bien éliminé en mode sans échec le fichier sms;exe dans system et j'ai effectué un scan avec ewido

voici le rapport

ewido anti-spyware - Scan Report

---------------------------------------------------------

 

+ Created at: 21:53:31 06/09/2006

 

+ Scan result:

 

 

 

C:\Documents and Settings\patrice\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).

C:\Documents and Settings\patrice\Cookies\patrice@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).

C:\Documents and Settings\patrice\Cookies\patrice@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).

C:\Documents and Settings\patrice\Cookies\patrice@weborama[2].txt -> TrackingCookie.Weborama : Cleaned with backup (quarantined).

 

 

::Report end

Lien vers le commentaire
Partager sur d’autres sites
Malekal_morte Godlike Member

Malekal_morte

Posté(e)
Posté(e)

J'ai reçu, le fichier texte était vide.

Par contre, t'avais mis en PDF et otd :P

Fiouf 50 pages le rapport :P

 

 

Supprime :

C:\Documents and Settings\patrice\Mes documents\Jeux_vidéos\Galactic_civilizations\Crack France Galactic Civilizations 2 crack by Team France.zip/install.exe/wupdtmngr.exe

C:\Documents and Settings\patrice\Mes documents\Jeux_vidéos\Galactic_civilizations\Crack France Galactic Civilizations 2 crack by Team France.zip/install.exe/drsmartload261a.exe

C:\Documents and Settings\patrice\Mes documents\Jeux_vidéos\Galactic_civilizations\Crack France Galactic Civilizations 2 crack by Team France.zip

C:\Documents and Settings\patrice\Mes documents\Jeux_vidéos\Galactic_civilizations\Crack France Galactic Civilizations 2 crack by Team France.zip

 

 

Pour ton information, c'es tle crack de Cvilizations qui est à l'origine de ton infection.

Je t'invite à éviter les cracks qui sont sources d'infections.

 

Après

C'est OK :P

 

Essaye de rapporter ton infection sur le site que je te donne ci-dessous, ce serait super cool :P

 

 

- Nettoye ton ordinateur avec CCleaner : http://www.malekal.com/tutorial_CCleaner.html

- Désactive puis réactive la restauration du système :

- Mode d'emploi Windows XP

 

Tu peux ensuite désinstaller tous les programmes que l'on a utilisé.

 

je t'invite à jeter un coup d'oeil à ces liens dans la mesure du possible, essaye de rapporter ton infection :

 

Comment se protéger des virus : - Tout ceci est résume sur cette page : Sécuriser son ordinateur et connaître les menaces

 

Rapporte ton infection pour faire condamner les auteurs sur Malware-Complaints. Pour faire entendre notre voix, nous devons être le plus nombreux possibles, alors rapport ton infection :

- Voir les règles de Malware-Complaints

- Enregistre sur le forum à partir du bouton register en haut :

Si tu as plus de 13 ans, choisir : I Agree to these terms and am over or exactly 13 years of age

Si tu as moins, clic sur : I Agree to these terms and am under 13 years of age

 

Après t'être enregistré, tu as sous forme de liste les types d'infection (Look2Me, Smitfraud, SpywareQuake etc..) : http://www.malwarecomplaints.info/viewforu...e115fda8cee41a4

 

Si le malware que tu as eu n'apparaît pas dans la liste, ou si tu ne sais pas quelle infection tu as eu, créé un message dans le sujet "Autres infections" conforme au règle du forum (age, ville, département etc..) : http://www.malwarecomplaints.info/viewforum.php?f=10

 

Pour poster un message, clics sur le bouton "post reply" et remplir les informations.

 

Si tu as des questions ou des problèmes, n'hésites pas à me demander ici ou à contacter un des modérateurs du forum : Kimberly, AgnesD ou ipl_001.

Lien vers le commentaire
Partager sur d’autres sites

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...