Rapport HijackThis,

davidtitus · le 29 octobre 2006

Bonjour,

J'ai eu sur mon pc il y à quelque temps un spyware nommé spysherif

et depuis j'ai des fenetres de pub intenpestives malgré une analyse avec Spybot et adaware.

je ne sais plus trop comment faire pour supprimer ce malware ou spyware

Je post donc le rapport de HijackThis,

Merci d'avance pour votre aide.

Logfile of HijackThis v1.99.1

Scan saved at 14:30:19, on 29/10/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\System32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE

C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe

C:\Program Files\Norton Utilities\NPROTECT.EXE

C:\Program Files\Speed Disk\nopdb.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Inventel\Gateway\wlancfg.exe

C:\WINDOWS\system32\MsPMSPSv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe

C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\MSI\Live Update 3\LMonitor.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSI\Core Center\CoreCenter.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe

O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"

O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [LiveMonitor] C:\Program Files\MSI\Live Update 3\LMonitor.exe

O4 - HKLM\..\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u

O4 - HKCU\..\Run: [sTYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: CoreCenter.lnk = C:\Program Files\MSI\Core Center\CoreCenter.exe

O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html

O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html

O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html

O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html

O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html

O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html

O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html

O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll

O9 - Extra button: (no name) - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\system32\mscoree.DLL

O9 - Extra 'Tools' menuitem: Tri&xie Options... - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\system32\mscoree.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/telecharger.php?id=2&version=

O20 - Winlogon Notify: H323TSP - C:\WINDOWS\system32\dn2401fqe.dll

O20 - Winlogon Notify: SharedDLLs - C:\WINDOWS\system32\o248lchu1f48.dll (file missing)

O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton Utilities\NPROTECT.EXE

O23 - Service: Speed Disk service - Symantec Corporation - C:\Program Files\Speed Disk\nopdb.exe

O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\Sptisrv.exe

O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

bruce lee · le 29 octobre 2006

bonjour davidtitus et bienvenue sur zebulon

Tes pubs provienent surement du fait que tu es look2me.

Pour spysheriff:

1/Télécharger http://siri.urz.free.fr/Fix/SmitfraudFix.zip

2/ Dézipper la totalité de l'archive sur ton bureau.

Double cliquer sur smitfraudfix.cmd

Sélectionner 1 dans le menu pour créer un rapport des fichiers responsables de l'infection.

sauvegarde ce rapport et poste le

davidtitus · le 29 octobre 2006

Bonjour Bruce lee,

Ou vois tu look2me et comment le supprimer ?

sinon ci-joint le rapport de smitfraudfix

Merci pour votre aide.

SmitFraudFix v2.115

Rapport fait à 15:24:22,65, 29/10/2006

Executé à partir de C:\Documents and Settings\Administrateur\Bureau\SmitfraudFix\SmitfraudFix

OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT

Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» C:\

C:\secure32.html PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

C:\WINDOWS\timessquare1.dat PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]

"Source"="About:Home"

"SubscribedURL"="About:Home"

"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler

!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri

Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs

!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

bruce lee · le 29 octobre 2006

re,

3/* Redemarrer l'ordinateur en mode sans echec http://www.sosordi.net/Faq/Faq.2.html

* Double cliquer sur smitfraudfix.cmd

* Sélectionner 2 dans le menu pour supprimer les fichiers respondables de l'infection.

* A la question: Voulez-vous nettoyer le registre ? répondre O (oui)

sauvegarde le rapport.

redemarre en mode normal

Prière d'imprimer ces instructions, ou de les coller dans un fichier texte, pour lecture durant ce fix. Regarde bien la note au bas, avant de débuter.

Télécharge Look2Me-Destroyer.exe (par Atribune) sur ton Bureau.

Ferme toutes les fenêtres actives avant de passer à l'étape suivante.
Double-clique Look2Me-Destroyer.exe afin de lancer l'outil.
Coche Run this program as a task
Un message s'affichera, te disant ceci : "Look2Me-Destroyer will close and re-open in approximately 1 minute". Clique OK
Il se relancera après la minute, puis clique sur le bouton Scan for L2M; les icônes de ton Bureau vont disparaître : c'est normal.
Lorsque le scan termine, clique sur le bouton Remove L2M
Un message Done Scanning apparaîtra, clique OK.
Un nouveau message s'affichera : Done removing infected files! Look2Me-Destroyer will now shutdown your computer; clique OK.
Ton PC va maintenant s'éteindre.
Démarre ton PC normalement.
Colle le rapport généré (Look2Me-Destroyer.txt), situé sur le Bureau, ainsi qu'un nouveau rapport HijackThis! dans ta prochaine réponse.

*Si Look2Me-Destroyer ne se relance pas automatiquement après la minute, redémarre et essaie à nouveau.

davidtitus · le 29 octobre 2006

Merci encore pour ton aide et la precision des manips à effectuer.

Voici le rapport de SmitFraudFix v2.115

Rapport fait à 15:53:41,40, 29/10/2006

Executé à partir de C:\Documents and Settings\Administrateur\Bureau\SmitfraudFix\SmitfraudFix

OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT

Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix

!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri

Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\secure32.html supprimé

C:\WINDOWS\timessquare1.dat supprimé

C:\Program Files\Common Files\VCClient supprimé

»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix

!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri

Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

et le rapport de Look2Me-Destroyer V1.0.12

Scanning for infected files.....

Scan started at 29/10/2006 15:59:06

Infected! C:\WINDOWS\system32\hpl0233mg.dll

Infected! C:\WINDOWS\system32\o248lchu1f48.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP239\A0049227.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP239\A0053239.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP239\A0053253.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP240\A0053299.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP240\A0053366.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP241\A0053380.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP241\A0053402.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP241\A0053415.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP242\A0053443.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP242\A0053461.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053480.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053513.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053526.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053548.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053560.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053582.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053596.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053608.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP245\A0053622.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP245\A0053643.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP246\A0054664.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP246\A0054687.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP246\A0054699.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP247\A0054778.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP248\A0054806.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP248\A0055830.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP248\A0055936.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP249\A0056147.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP249\A0056184.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP251\A0056623.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP251\A0056705.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP252\A0056736.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP252\A0056752.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP252\A0056987.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0058000.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0058009.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059019.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059044.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059161.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059173.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP254\A0059385.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP254\A0059435.dll

Infected! C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP254\A0059444.dll

Infected! C:\WINDOWS\system32\3qvxVfWCodec.dll

Infected! C:\WINDOWS\system32\aastream.dll

Infected! C:\WINDOWS\system32\abivcoxx.dll

Infected! C:\WINDOWS\system32\adi2evxx.dll

Infected! C:\WINDOWS\system32\amferror.dll

Infected! C:\WINDOWS\system32\ami2dvag.dll

Infected! C:\WINDOWS\system32\anifile.dll

Infected! C:\WINDOWS\system32\aosnt.dll

Infected! C:\WINDOWS\system32\Aqdiodev.dll

Infected! C:\WINDOWS\system32\aqi3d1ag.dll

Infected! C:\WINDOWS\system32\ari2dvag.dll

Infected! C:\WINDOWS\system32\aricap.dll

Infected! C:\WINDOWS\system32\asiiiexx.dll

Infected! C:\WINDOWS\system32\aymlib.dll

Infected! C:\WINDOWS\system32\cbypt32.dll

Infected! C:\WINDOWS\system32\chsetacl.dll

Infected! C:\WINDOWS\system32\CkMp3Lib.dll

Infected! C:\WINDOWS\system32\cmb.dll

Infected! C:\WINDOWS\system32\cMtsrvut.dll

Infected! C:\WINDOWS\system32\cPtsrvut.dll

Infected! C:\WINDOWS\system32\cucdll.dll

Infected! C:\WINDOWS\system32\cucui.dll

Infected! C:\WINDOWS\system32\cumodem.dll

Infected! C:\WINDOWS\system32\cuprops.dll

Infected! C:\WINDOWS\system32\cuyptnet.dll

Infected! C:\WINDOWS\system32\cvypt32.dll

Infected! C:\WINDOWS\system32\cwusapi.dll

Infected! C:\WINDOWS\system32\da8vb.dll

Infected! C:\WINDOWS\system32\ddskmon.dll

Infected! C:\WINDOWS\system32\dhound3d.dll

Infected! C:\WINDOWS\system32\dhutil.dll

Infected! C:\WINDOWS\system32\djcprop.dll

Infected! C:\WINDOWS\system32\djdmo.dll

Infected! C:\WINDOWS\system32\dkconfig.dll

Infected! C:\WINDOWS\system32\dnvacm.dll

Infected! C:\WINDOWS\system32\dpprov.dll

Infected! C:\WINDOWS\system32\dqskperf.dll

Infected! C:\WINDOWS\system32\dqwave.dll

Infected! C:\WINDOWS\system32\dRdim700.dll

Infected! C:\WINDOWS\system32\dvlayx.dll

Infected! C:\WINDOWS\system32\dvskmon.dll

Infected! C:\WINDOWS\system32\dvsrslvr.dll

Infected! C:\WINDOWS\system32\dzdiagn.dll

Infected! C:\WINDOWS\system32\dzghelp.dll

Infected! C:\WINDOWS\system32\ehrgg.dll

Infected! C:\WINDOWS\system32\en4ml1h11.dll

Infected! C:\WINDOWS\system32\enjml1111.dll

Infected! C:\WINDOWS\system32\eocapi.dll

Infected! C:\WINDOWS\system32\escapi.dll

Infected! C:\WINDOWS\system32\fa_vfw.dll

Infected! C:\WINDOWS\system32\fetlib.dll

Infected! C:\WINDOWS\system32\fp0403dqe.dll

Infected! C:\WINDOWS\system32\fpco1.dll

Infected! C:\WINDOWS\system32\fxtlib.dll

Infected! C:\WINDOWS\system32\g6jolg1316.dll

Infected! C:\WINDOWS\system32\hkui.dll

Infected! C:\WINDOWS\system32\hrj0051me.dll

Infected! C:\WINDOWS\system32\hvetmon.dll

Infected! C:\WINDOWS\system32\IcagXpr5.dll

Infected! C:\WINDOWS\system32\iDshlpr.dll

Infected! C:\WINDOWS\system32\iem32.dll

Infected! C:\WINDOWS\system32\ifv6mon.dll

Infected! C:\WINDOWS\system32\ifxrip.dll

Infected! C:\WINDOWS\system32\igrnonce.dll

Infected! C:\WINDOWS\system32\ihq.dll

Infected! C:\WINDOWS\system32\ihs.dll

Infected! C:\WINDOWS\system32\iIshlpr.dll

Infected! C:\WINDOWS\system32\ijagehlp.dll

Infected! C:\WINDOWS\system32\ijm32.dll

Infected! C:\WINDOWS\system32\iJsacct.dll

Infected! C:\WINDOWS\system32\ikrnonce.dll

Infected! C:\WINDOWS\system32\il41_qcx.dll

Infected! C:\WINDOWS\system32\im50_qc.dll

Infected! C:\WINDOWS\system32\imxrtmgr.dll

Infected! C:\WINDOWS\system32\iouv_32.dll

Infected! C:\WINDOWS\system32\isecoi.dll

Infected! C:\WINDOWS\system32\itpromon.dll

Infected! C:\WINDOWS\system32\ixecoi.dll

Infected! C:\WINDOWS\system32\iXsnap.dll

Infected! C:\WINDOWS\system32\iyaksie.dll

Infected! C:\WINDOWS\system32\iyengine.dll

Infected! C:\WINDOWS\system32\j62qlgf5162.dll

Infected! C:\WINDOWS\system32\jcsh400.dll

Infected! C:\WINDOWS\system32\jlt500.dll

Infected! C:\WINDOWS\system32\jt8407lqe.dll

Infected! C:\WINDOWS\system32\jzpl400.dll

Infected! C:\WINDOWS\system32\k2lq0c35ef.dll

Infected! C:\WINDOWS\system32\kcdcan.dll

Infected! C:\WINDOWS\system32\kedcr.dll

Infected! C:\WINDOWS\system32\kedfr.dll

Infected! C:\WINDOWS\system32\kfdir.dll

Infected! C:\WINDOWS\system32\kfdit142.dll

Infected! C:\WINDOWS\system32\kldhela2.dll

Infected! C:\WINDOWS\system32\kmdes.dll

Infected! C:\WINDOWS\system32\kmdfi1.dll

Infected! C:\WINDOWS\system32\kmdsp.dll

Infected! C:\WINDOWS\system32\kndaze.dll

Infected! C:\WINDOWS\system32\kndazel.dll

Infected! C:\WINDOWS\system32\kndbene.dll

Infected! C:\WINDOWS\system32\kqdru.dll

Infected! C:\WINDOWS\system32\ksduk.dll

Infected! C:\WINDOWS\system32\ktn2l75o1.dll

Infected! C:\WINDOWS\system32\ktp2l77o1.dll

Infected! C:\WINDOWS\system32\ktpol7731.dll

Infected! C:\WINDOWS\system32\kvcom.dll

Infected! C:\WINDOWS\system32\kydazel.dll

Infected! C:\WINDOWS\system32\kzdaze.dll

Infected! C:\WINDOWS\system32\l0l6la3s1d.dll

Infected! C:\WINDOWS\system32\l0p2la7o1d.dll

Infected! C:\WINDOWS\system32\l22slcf71f2.dll

Infected! C:\WINDOWS\system32\l8r00i9me8.dll

Infected! C:\WINDOWS\system32\lj32.dll

Infected! C:\WINDOWS\system32\lscmgr10.dll

Infected! C:\WINDOWS\system32\lucalsec.dll

Infected! C:\WINDOWS\system32\lv0409dqe.dll

Infected! C:\WINDOWS\system32\lvp8097ue.dll

Infected! C:\WINDOWS\system32\lwexpand.dll

Infected! C:\WINDOWS\system32\m082lalo1dqc.dll

Infected! C:\WINDOWS\system32\mavfw32.dll

Infected! C:\WINDOWS\system32\mbcoree.dll

Infected! C:\WINDOWS\system32\mbgsvc.dll

Infected! C:\WINDOWS\system32\mbvcrt20.dll

Infected! C:\WINDOWS\system32\mccms.dll

Infected! C:\WINDOWS\system32\mcdart.dll

Infected! C:\WINDOWS\system32\mcl_qic.dll

Infected! C:\WINDOWS\system32\mcrmsg.dll

Infected! C:\WINDOWS\system32\mddemui.dll

Infected! C:\WINDOWS\system32\mdr2c.dll

Infected! C:\WINDOWS\system32\mdrd2x40.dll

Infected! C:\WINDOWS\system32\mdrmsg.dll

Infected! C:\WINDOWS\system32\mdsip32.dll

Infected! C:\WINDOWS\system32\mermsg.dll

Infected! C:\WINDOWS\system32\mexml.dll

Infected! C:\WINDOWS\system32\mFpistub.dll

Infected! C:\WINDOWS\system32\mfxparhd.dll

Infected! C:\WINDOWS\system32\mgsap.dll

Infected! C:\WINDOWS\system32\midrv.dll

Infected! C:\WINDOWS\system32\miexch40.dll

Infected! C:\WINDOWS\system32\mkexcl40.dll

Infected! C:\WINDOWS\system32\mkgsvc.dll

Infected! C:\WINDOWS\system32\mkxml2r.dll

Infected! C:\WINDOWS\system32\mlc40.dll

Infected! C:\WINDOWS\system32\mltext35.dll

Infected! C:\WINDOWS\system32\mmrd3x40.dll

Infected! C:\WINDOWS\system32\mmtask.dll

Infected! C:\WINDOWS\system32\mnl_hp.dll

Infected! C:\WINDOWS\system32\MnPMSNSv.dll

Infected! C:\WINDOWS\system32\MOWMDM.dll

Infected! C:\WINDOWS\system32\mpdsrv32.dll

Infected! C:\WINDOWS\system32\MPSCP.dll

Infected! C:\WINDOWS\system32\mptlsapi.dll

Infected! C:\WINDOWS\system32\mqdsrv32.dll

Infected! C:\WINDOWS\system32\msiqtz32.dll

Infected! C:\WINDOWS\system32\murdim.dll

Infected! C:\WINDOWS\system32\musip32.dll

Infected! C:\WINDOWS\system32\muxex.dll

Infected! C:\WINDOWS\system32\mvimtf.dll

Infected! C:\WINDOWS\system32\mvp8l97u1.dll

Infected! C:\WINDOWS\system32\mvvcp60.dll

Infected! C:\WINDOWS\system32\mvxmlr.dll

Infected! C:\WINDOWS\system32\mwxex.dll

Infected! C:\WINDOWS\system32\mziqtz32.dll

Infected! C:\WINDOWS\system32\mzr2cenu.dll

Infected! C:\WINDOWS\system32\nbdenb32.dll

Infected! C:\WINDOWS\system32\nemkcert.dll

Infected! C:\WINDOWS\system32\nhapi16.dll

Infected! C:\WINDOWS\system32\njtrap.dll

Infected! C:\WINDOWS\system32\nltcfgx.dll

Infected! C:\WINDOWS\system32\nuobjapi.dll

Infected! C:\WINDOWS\system32\Nwindeo.dll

Infected! C:\WINDOWS\system32\o0660ajsedo60.dll

Attempting to delete infected files...

Attempting to delete: C:\WINDOWS\system32\hpl0233mg.dll

C:\WINDOWS\system32\hpl0233mg.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP239\A0049227.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP239\A0049227.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP239\A0053239.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP239\A0053239.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP239\A0053253.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP239\A0053253.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP240\A0053299.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP240\A0053299.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP240\A0053366.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP240\A0053366.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP241\A0053380.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP241\A0053380.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP241\A0053402.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP241\A0053402.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP241\A0053415.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP241\A0053415.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP242\A0053443.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP242\A0053443.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP242\A0053461.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP242\A0053461.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053480.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053480.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053513.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053513.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053526.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053526.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053548.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP243\A0053548.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053560.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053560.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053582.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053582.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053596.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053596.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053608.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP244\A0053608.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP245\A0053622.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP245\A0053622.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP245\A0053643.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP245\A0053643.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP246\A0054664.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP246\A0054664.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP246\A0054687.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP246\A0054687.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP246\A0054699.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP246\A0054699.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP247\A0054778.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP247\A0054778.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP248\A0054806.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP248\A0054806.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP248\A0055830.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP248\A0055830.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP248\A0055936.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP248\A0055936.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP249\A0056147.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP249\A0056147.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP249\A0056184.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP249\A0056184.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP251\A0056623.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP251\A0056623.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP251\A0056705.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP251\A0056705.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP252\A0056736.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP252\A0056736.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP252\A0056752.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP252\A0056752.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP252\A0056987.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP252\A0056987.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0058000.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0058000.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0058009.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0058009.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059019.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059019.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059044.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059044.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059161.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059161.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059173.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP253\A0059173.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP254\A0059385.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP254\A0059385.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP254\A0059435.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP254\A0059435.dll could not be deleted!

Attempting to delete: C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP254\A0059444.dll

C:\System Volume Information\_restore{2F20A22B-B8B9-4BC5-B9E8-CF8BF2ECC2DF}\RP254\A0059444.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\3qvxVfWCodec.dll

C:\WINDOWS\system32\3qvxVfWCodec.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\aastream.dll

C:\WINDOWS\system32\aastream.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\abivcoxx.dll

C:\WINDOWS\system32\abivcoxx.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\adi2evxx.dll

C:\WINDOWS\system32\adi2evxx.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\amferror.dll

C:\WINDOWS\system32\amferror.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ami2dvag.dll

C:\WINDOWS\system32\ami2dvag.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\anifile.dll

C:\WINDOWS\system32\anifile.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\aosnt.dll

C:\WINDOWS\system32\aosnt.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\Aqdiodev.dll

C:\WINDOWS\system32\Aqdiodev.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\aqi3d1ag.dll

C:\WINDOWS\system32\aqi3d1ag.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ari2dvag.dll

C:\WINDOWS\system32\ari2dvag.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\aricap.dll

C:\WINDOWS\system32\aricap.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\asiiiexx.dll

C:\WINDOWS\system32\asiiiexx.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\aymlib.dll

C:\WINDOWS\system32\aymlib.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cbypt32.dll

C:\WINDOWS\system32\cbypt32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\chsetacl.dll

C:\WINDOWS\system32\chsetacl.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\CkMp3Lib.dll

C:\WINDOWS\system32\CkMp3Lib.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cmb.dll

C:\WINDOWS\system32\cmb.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cMtsrvut.dll

C:\WINDOWS\system32\cMtsrvut.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cPtsrvut.dll

C:\WINDOWS\system32\cPtsrvut.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cucdll.dll

C:\WINDOWS\system32\cucdll.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cucui.dll

C:\WINDOWS\system32\cucui.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cumodem.dll

C:\WINDOWS\system32\cumodem.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cuprops.dll

C:\WINDOWS\system32\cuprops.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cuyptnet.dll

C:\WINDOWS\system32\cuyptnet.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cvypt32.dll

C:\WINDOWS\system32\cvypt32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\cwusapi.dll

C:\WINDOWS\system32\cwusapi.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\da8vb.dll

C:\WINDOWS\system32\da8vb.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ddskmon.dll

C:\WINDOWS\system32\ddskmon.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dhound3d.dll

C:\WINDOWS\system32\dhound3d.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dhutil.dll

C:\WINDOWS\system32\dhutil.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\djcprop.dll

C:\WINDOWS\system32\djcprop.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\djdmo.dll

C:\WINDOWS\system32\djdmo.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dkconfig.dll

C:\WINDOWS\system32\dkconfig.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dnvacm.dll

C:\WINDOWS\system32\dnvacm.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dpprov.dll

C:\WINDOWS\system32\dpprov.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dqskperf.dll

C:\WINDOWS\system32\dqskperf.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dqwave.dll

C:\WINDOWS\system32\dqwave.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dRdim700.dll

C:\WINDOWS\system32\dRdim700.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dvlayx.dll

C:\WINDOWS\system32\dvlayx.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dvskmon.dll

C:\WINDOWS\system32\dvskmon.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dvsrslvr.dll

C:\WINDOWS\system32\dvsrslvr.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dzdiagn.dll

C:\WINDOWS\system32\dzdiagn.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\dzghelp.dll

C:\WINDOWS\system32\dzghelp.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ehrgg.dll

C:\WINDOWS\system32\ehrgg.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\en4ml1h11.dll

C:\WINDOWS\system32\en4ml1h11.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\enjml1111.dll

C:\WINDOWS\system32\enjml1111.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\eocapi.dll

C:\WINDOWS\system32\eocapi.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\escapi.dll

C:\WINDOWS\system32\escapi.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\fa_vfw.dll

C:\WINDOWS\system32\fa_vfw.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\fetlib.dll

C:\WINDOWS\system32\fetlib.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\fp0403dqe.dll

C:\WINDOWS\system32\fp0403dqe.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\fpco1.dll

C:\WINDOWS\system32\fpco1.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\fxtlib.dll

C:\WINDOWS\system32\fxtlib.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\g6jolg1316.dll

C:\WINDOWS\system32\g6jolg1316.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\hkui.dll

C:\WINDOWS\system32\hkui.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\hrj0051me.dll

C:\WINDOWS\system32\hrj0051me.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\hvetmon.dll

C:\WINDOWS\system32\hvetmon.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\IcagXpr5.dll

C:\WINDOWS\system32\IcagXpr5.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\iDshlpr.dll

C:\WINDOWS\system32\iDshlpr.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\iem32.dll

C:\WINDOWS\system32\iem32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ifv6mon.dll

C:\WINDOWS\system32\ifv6mon.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ifxrip.dll

C:\WINDOWS\system32\ifxrip.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\igrnonce.dll

C:\WINDOWS\system32\igrnonce.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ihq.dll

C:\WINDOWS\system32\ihq.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ihs.dll

C:\WINDOWS\system32\ihs.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\iIshlpr.dll

C:\WINDOWS\system32\iIshlpr.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ijagehlp.dll

C:\WINDOWS\system32\ijagehlp.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ijm32.dll

C:\WINDOWS\system32\ijm32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\iJsacct.dll

C:\WINDOWS\system32\iJsacct.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ikrnonce.dll

C:\WINDOWS\system32\ikrnonce.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\il41_qcx.dll

C:\WINDOWS\system32\il41_qcx.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\im50_qc.dll

C:\WINDOWS\system32\im50_qc.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\imxrtmgr.dll

C:\WINDOWS\system32\imxrtmgr.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\iouv_32.dll

C:\WINDOWS\system32\iouv_32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\isecoi.dll

C:\WINDOWS\system32\isecoi.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\itpromon.dll

C:\WINDOWS\system32\itpromon.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ixecoi.dll

C:\WINDOWS\system32\ixecoi.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\iXsnap.dll

C:\WINDOWS\system32\iXsnap.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\iyaksie.dll

C:\WINDOWS\system32\iyaksie.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\iyengine.dll

C:\WINDOWS\system32\iyengine.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\j62qlgf5162.dll

C:\WINDOWS\system32\j62qlgf5162.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\jcsh400.dll

C:\WINDOWS\system32\jcsh400.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\jlt500.dll

C:\WINDOWS\system32\jlt500.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\jt8407lqe.dll

C:\WINDOWS\system32\jt8407lqe.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\jzpl400.dll

C:\WINDOWS\system32\jzpl400.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\k2lq0c35ef.dll

C:\WINDOWS\system32\k2lq0c35ef.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kcdcan.dll

C:\WINDOWS\system32\kcdcan.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kedcr.dll

C:\WINDOWS\system32\kedcr.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kedfr.dll

C:\WINDOWS\system32\kedfr.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kfdir.dll

C:\WINDOWS\system32\kfdir.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kfdit142.dll

C:\WINDOWS\system32\kfdit142.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kldhela2.dll

C:\WINDOWS\system32\kldhela2.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kmdes.dll

C:\WINDOWS\system32\kmdes.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kmdfi1.dll

C:\WINDOWS\system32\kmdfi1.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kmdsp.dll

C:\WINDOWS\system32\kmdsp.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kndaze.dll

C:\WINDOWS\system32\kndaze.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kndazel.dll

C:\WINDOWS\system32\kndazel.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kndbene.dll

C:\WINDOWS\system32\kndbene.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kqdru.dll

C:\WINDOWS\system32\kqdru.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ksduk.dll

C:\WINDOWS\system32\ksduk.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ktn2l75o1.dll

C:\WINDOWS\system32\ktn2l75o1.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ktp2l77o1.dll

C:\WINDOWS\system32\ktp2l77o1.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\ktpol7731.dll

C:\WINDOWS\system32\ktpol7731.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kvcom.dll

C:\WINDOWS\system32\kvcom.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kydazel.dll

C:\WINDOWS\system32\kydazel.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\kzdaze.dll

C:\WINDOWS\system32\kzdaze.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\l0l6la3s1d.dll

C:\WINDOWS\system32\l0l6la3s1d.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\l0p2la7o1d.dll

C:\WINDOWS\system32\l0p2la7o1d.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\l22slcf71f2.dll

C:\WINDOWS\system32\l22slcf71f2.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\l8r00i9me8.dll

C:\WINDOWS\system32\l8r00i9me8.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\lj32.dll

C:\WINDOWS\system32\lj32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\lscmgr10.dll

C:\WINDOWS\system32\lscmgr10.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\lucalsec.dll

C:\WINDOWS\system32\lucalsec.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\lv0409dqe.dll

C:\WINDOWS\system32\lv0409dqe.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\lvp8097ue.dll

C:\WINDOWS\system32\lvp8097ue.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\lwexpand.dll

C:\WINDOWS\system32\lwexpand.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\m082lalo1dqc.dll

C:\WINDOWS\system32\m082lalo1dqc.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mavfw32.dll

C:\WINDOWS\system32\mavfw32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mbcoree.dll

C:\WINDOWS\system32\mbcoree.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mbgsvc.dll

C:\WINDOWS\system32\mbgsvc.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mbvcrt20.dll

C:\WINDOWS\system32\mbvcrt20.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mccms.dll

C:\WINDOWS\system32\mccms.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mcdart.dll

C:\WINDOWS\system32\mcdart.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mcl_qic.dll

C:\WINDOWS\system32\mcl_qic.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mcrmsg.dll

C:\WINDOWS\system32\mcrmsg.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mddemui.dll

C:\WINDOWS\system32\mddemui.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mdr2c.dll

C:\WINDOWS\system32\mdr2c.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mdrd2x40.dll

C:\WINDOWS\system32\mdrd2x40.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mdrmsg.dll

C:\WINDOWS\system32\mdrmsg.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mdsip32.dll

C:\WINDOWS\system32\mdsip32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mermsg.dll

C:\WINDOWS\system32\mermsg.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mexml.dll

C:\WINDOWS\system32\mexml.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mFpistub.dll

C:\WINDOWS\system32\mFpistub.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mfxparhd.dll

C:\WINDOWS\system32\mfxparhd.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mgsap.dll

C:\WINDOWS\system32\mgsap.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\midrv.dll

C:\WINDOWS\system32\midrv.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\miexch40.dll

C:\WINDOWS\system32\miexch40.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mkexcl40.dll

C:\WINDOWS\system32\mkexcl40.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mkgsvc.dll

C:\WINDOWS\system32\mkgsvc.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mkxml2r.dll

C:\WINDOWS\system32\mkxml2r.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mlc40.dll

C:\WINDOWS\system32\mlc40.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mltext35.dll

C:\WINDOWS\system32\mltext35.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mmrd3x40.dll

C:\WINDOWS\system32\mmrd3x40.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mmtask.dll

C:\WINDOWS\system32\mmtask.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mnl_hp.dll

C:\WINDOWS\system32\mnl_hp.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\MnPMSNSv.dll

C:\WINDOWS\system32\MnPMSNSv.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\MOWMDM.dll

C:\WINDOWS\system32\MOWMDM.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mpdsrv32.dll

C:\WINDOWS\system32\mpdsrv32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\MPSCP.dll

C:\WINDOWS\system32\MPSCP.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mptlsapi.dll

C:\WINDOWS\system32\mptlsapi.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mqdsrv32.dll

C:\WINDOWS\system32\mqdsrv32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\msiqtz32.dll

C:\WINDOWS\system32\msiqtz32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\murdim.dll

C:\WINDOWS\system32\murdim.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\musip32.dll

C:\WINDOWS\system32\musip32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\muxex.dll

C:\WINDOWS\system32\muxex.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mvimtf.dll

C:\WINDOWS\system32\mvimtf.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mvp8l97u1.dll

C:\WINDOWS\system32\mvp8l97u1.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mvvcp60.dll

C:\WINDOWS\system32\mvvcp60.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mvxmlr.dll

C:\WINDOWS\system32\mvxmlr.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mwxex.dll

C:\WINDOWS\system32\mwxex.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mziqtz32.dll

C:\WINDOWS\system32\mziqtz32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\mzr2cenu.dll

C:\WINDOWS\system32\mzr2cenu.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\nbdenb32.dll

C:\WINDOWS\system32\nbdenb32.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\nemkcert.dll

C:\WINDOWS\system32\nemkcert.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\nhapi16.dll

C:\WINDOWS\system32\nhapi16.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\njtrap.dll

C:\WINDOWS\system32\njtrap.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\nltcfgx.dll

C:\WINDOWS\system32\nltcfgx.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\nuobjapi.dll

C:\WINDOWS\system32\nuobjapi.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\Nwindeo.dll

C:\WINDOWS\system32\Nwindeo.dll could not be deleted!

Attempting to delete: C:\WINDOWS\system32\o0660ajsedo60.dll

C:\WINDOWS\system32\o0660ajsedo60.dll could not be deleted!

Making registry repairs.

Removing: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Extensions

Removing: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SharedDLLs

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{ABD68986-4F57-4EE6-BEA5-AFB2202B3806}"

HKCR\Clsid\{ABD68986-4F57-4EE6-BEA5-AFB2202B3806}

Restoring Windows certificates.

Replaced hosts file with default windows hosts file

Restoring SeDebugPrivilege for Administrateurs - Succeeded

bruce lee · le 29 octobre 2006

re,

je n'avais pas vu ton post precedent:

Ou vois tu look2me et comment le supprimer ?

Sur hijackthis, la ligne 020.

Reposte un nouveau rapport hijackthis s'il te plait.

davidtitus · le 29 octobre 2006

re,

je n'avais pas vu ton post precedent:

Sur hijackthis, la ligne 020.

Reposte un nouveau rapport hijackthis s'il te plait.

Re,

la ligne 020 n'est plus , je crois que tout est ok, encore merci.

Logfile of HijackThis v1.99.1

Scan saved at 19:16:29, on 29/10/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\System32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE

C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe

C:\Program Files\Norton Utilities\NPROTECT.EXE

C:\Program Files\Speed Disk\nopdb.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe

C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\MSI\Live Update 3\LMonitor.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Inventel\Gateway\wlancfg.exe

C:\Program Files\MSI\Core Center\CoreCenter.exe

C:\WINDOWS\system32\MsPMSPSv.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Alwil Software\Avast4\ashSimpl.exe