Hijack: tutoriel lu mais j'ai un dll qui change de nom , insupprimable - Sécurité - Windows & Software
Marsh Posté le 27-10-2005 à 10:34:22
( a essayé de redémarrer en mode sans echec d effacer la dll et redémarré de nouveau en mode sans échec poru voir si elle régénéré
Marsh Posté le 27-10-2005 à 10:57:17
Télécharge ce fichier.
Mets-le sur ton bureau.
Dézippe-le sur ton bureau.
Double-clique l2mfix.bat et choisis l'option 1 (et entrée).
Laisse-le travailler qq minutes et copie/colle le log final ici.
Ps : surtout, ne clique pas encore l'option 2..ni aucun autre fichier de l2mfix!!!
Marsh Posté le 27-10-2005 à 10:57:41
déjà fait, impossible à supprimer, même en mode sans échec.....
Marsh Posté le 27-10-2005 à 11:20:38
L2MFIX find log 1.04a
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ModuleUsage]
"Asynchronous"=dword:00000000
"DllName"="C:\\WINNT\\system32\\o2840clqefqe0.dll"
"Impersonate"=dword:00000000
"Logon"="WinLogon"
"Logoff"="WinLogoff"
"Shutdown"="WinShutdown"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif]
"DLLName"="wzcdlg.dll"
"Logon"="WZCEventLogon"
"Logoff"="WZCEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000000
RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above
Copyright (c) 1999-2001 Frank Heyne Software (http://www.heysoft.de)
This program is Freeware, use it on your own risk!
Access Control List for Registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify:
(NI) ALLOW Full access AUTORITE NT\SYSTEM
(IO) ALLOW Full access AUTORITE NT\SYSTEM
(ID-NI) ALLOW Read BUILTIN\Utilisateurs
(ID-IO) ALLOW Read BUILTIN\Utilisateurs
(ID-NI) ALLOW Read BUILTIN\Utilisateurs avec pouvoir
(ID-IO) ALLOW Read BUILTIN\Utilisateurs avec pouvoir
(ID-NI) ALLOW Full access BUILTIN\Administrateurs
(ID-IO) ALLOW Full access BUILTIN\Administrateurs
(ID-NI) ALLOW Full access AUTORITE NT\SYSTEM
(ID-IO) ALLOW Full access AUTORITE NT\SYSTEM
(ID-IO) ALLOW Full access CREATEUR PROPRIETAIRE
**********************************************************************************
useragent:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"{3E7F4903-5197-292D-E056-6F999E0FC694}"=""
**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{00022613-0000-0000-C000-000000000046}"="Feuille de proprits du fichier multimdia"
"{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM"
"{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de scurit NTFS"
"{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des proprits de OLE DocFile"
"{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'interprteur de commandes pour le partage"
"{41E300E0-78B6-11ce-849B-444553540000}"="Extension du Panneau de configuration PlusPack"
"{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration"
"{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage cran du Panneau de configuration"
"{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration"
"{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de scurit DS"
"{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donnes endommages de l'interprteur de commandes"
"{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette"
"{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'interprteur de commandes pour les objets Microsoft Windows Network"
"{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'cran ICM"
"{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM"
"{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'interprteur de commandes pour la compression de fichiers"
"{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension du shell d'imprimante Web"
"{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI"
"{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage"
"{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents"
"{88895560-9AA2-1069-930E-00AA0030EBC8}"="HyperTerminal Icon Ext"
"{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts"
"{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC"
"{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de scurit des imprimantes"
"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'interprteur de commandes pour le partage"
"{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension"
"{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extension de l'interprteur de commande pour Windows Script Host"
"{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO"
"{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign"
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions rseau et accs
distance"
"{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band"
"{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service"
"{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer"
"{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut"
"{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service"
"{FF393560-C2A7-11CF-BFF4-444553540000}"="Historique"
"{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook"
"{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de dmarrage de la Suite IE4"
"{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook"
"{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC"
"{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC"
"{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet"
"{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space"
"{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler"
"{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension"
"{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tches planifies"
"{1A9BA3A0-143A-11CF-8350-444553540000}"="Dossier favori du shell"
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"="Poste de travail"
"{86747AC0-42A0-1069-A2E6-08002B30309D}"="Porte-documents"
"{0AFACED1-E828-11D1-9187-B532F1E9575D}"="Raccourci vers le dossier"
"{12518493-00B2-11d2-9FA5-9E3420524153}"="Volume mont"
"{21B22460-3AEA-1069-A2DC-08002B30309D}"="Extension de la page de proprits des fichiers"
"{B091E540-83E3-11CF-A713-0020AFD79762}"="Page des types de fichiers"
"{FBF23B41-E3F0-101B-8488-00AA003E56F8}"="Gestionnaire des types de fichiers MIME"
"{C2FBB630-2971-11d1-A18C-00C04FD75D13}"="Service Copier vers Microsoft"
"{C2FBB631-2971-11d1-A18C-00C04FD75D13}"="Service Dplacer vers Microsoft"
"{13709620-C279-11CE-A49E-444553540000}"="Service d'automatisation de l'interface"
"{62112AA1-EBE4-11cf-A5FB-0020AFE7292D}"="Shell Automation Folder View"
"{4622AD11-FF23-11d0-8D34-00A0C90F2719}"="Menu Dmarrer"
"{7BA4C740-9E81-11CF-99D3-00AA004AE837}"="Service SendTo Microsoft"
"{D969A300-E7FF-11d0-A93B-00A0C90F2719}"="Service Nouvel objet Microsoft"
"{09799AFB-AD67-11d1-ABCD-00C04FC30936}"="Ouvrir avec le gestionnaire de menu contextuel"
"{3FC0B520-68A9-11D0-8D77-00C04FD70822}"="Afficher les extensions HTML du Panneau de configuration"
"{75048700-EF1F-11D0-9888-006097DEACF9}"="ActiveDesktop"
"{6D5313C0-8C62-11D1-B2CD-006097DF8C11}"="Extension de la page de proprits des options des dossiers"
"{57651662-CE3E-11D0-8D77-00C04FC99D61}"="CmdFileIcon"
"{4657278A-411B-11d2-839A-00C04FD918D0}"="Application d'aide du systme pour le glisser-dplacer"
"{A470F8CF-A1E8-4f65-8335-227475AA5C46}"="Ajouter l'lment de cryptage dans les menus contextuels de l'Explorateur"
"{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Microsoft Internet Toolbar"
"{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="Download Status"
"{568804CA-CBD7-11d0-9816-00C04FD91972}"="Menu Shell Folder"
"{5b4dae26-b807-11d0-9815-00c04fd91972}"="Menu Band"
"{8278F931-2A3E-11d2-838F-00C04FD918D0}"="Tracking Shell Menu"
"{E13EF4E4-D2F2-11d0-9816-00C04FD91972}"="Menu Site"
"{ECD4FC4F-521C-11D0-B792-00A0C90312E1}"="Menu Desk Bar"
"{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Augmented Shell Folder"
"{6413BA2C-B461-11d1-A18A-080036B11A03}"="Augmented Merge Shell Folder"
"{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy"
"{D82BE2B0-5764-11D0-A96E-00C04FD705A2}"="IShellFolderBand"
"{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Microsoft BrowserBand"
"{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Microsoft SearchBand"
"{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="In-pane search"
"{07798131-AF23-11d1-9111-00A0C98BA67D}"="Web Search"
"{0E5CBF21-D15F-11d0-8301-00AA005B4383}"="&Links"
"{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Registry Tree Options Utility"
"{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Address"
"{A08C11D2-A228-11d0-825B-00AA005B4383}"="Address EditBox"
"{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Microsoft AutoComplete"
"{7487cd30-f71a-11d0-9ea7-00805f714772}"="Thumbnail Image"
"{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor"
"{6756A641-DE71-11d0-831B-00AA005B4383}"="MRU AutoComplete List"
"{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Microsoft History AutoComplete List"
"{03C036F1-A186-11D0-824A-00AA005B4383}"="Microsoft Shell Folder AutoComplete List"
"{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Microsoft Multiple AutoComplete List Container"
"{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Shell Band Site Menu"
"{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp"
"{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Shell DeskBar"
"{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite"
"{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="User Assist"
"{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="Global Folder Settings"
"{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache"
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck"
"{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr"
"{F5175861-2688-11d0-9C5E-00AA00A45957}"="Subscription Folder"
"{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler"
"{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent"
"{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent"
"{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent"
"{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent"
"{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent"
"{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler"
"{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}"="Miniatures"
"{EAB841A0-9550-11CF-8C16-00805F1408F3}"="Extracteur de miniatures HTML"
"{1AEB1360-5AFC-11D0-B806-00C04FD706EC}"="Extracteur de miniatures des filtres graphiques Office"
"{9DBD2C50-62AD-11D0-B806-00C04FD706EC}"="Summary Info Thumbnail handler (DOCFILES)"
"{500202A0-731E-11D0-B829-00C04FD706EC}"="LNK file thumbnail interface delegator"
"{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'application du shell"
"{0B124F8C-91F0-11D1-B8B5-006008059382}"="numrateur d'applications installes"
"{CFCCC7A0-A282-11D1-9082-006008059382}"="Darwin App Publisher"
"{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Channel File"
"{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Channel Shortcut"
"{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object"
"{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu"
"{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties"
"{fe1290f0-cfbd-11cf-a330-00aa00c16e65}"="Directory Namespace"
"{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object"
"{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI"
"{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find"
"{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find"
"{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI"
"{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs"
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"="MyDocs Folder"
"{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook"
"{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target"
"{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties"
"{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Menu Fichiers hors connexion"
"{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Options du dossier Fichiers hors connexion"
"{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion"
"{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler"
"{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer"
"{E0D79304-84BE-11CE-9641-444553540000}"="WinZip"
"{E0D79305-84BE-11CE-9641-444553540000}"="WinZip"
"{E0D79306-84BE-11CE-9641-444553540000}"="WinZip"
"{1A7C20D7-6E7D-4E5B-95A4-0C53C02DA5CA}"=""
"{89205D6B-F29C-44DC-B5E3-4F94BC9204FE}"=""
"{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Dossiers Web"
"{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler"
**********************************************************************************
HKEY ROOT CLASSIDS:
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{1A7C20D7-6E7D-4E5B-95A4-0C53C02DA5CA}]
@=""
"IDEx"="ADDR"
[HKEY_CLASSES_ROOT\CLSID\{1A7C20D7-6E7D-4E5B-95A4-0C53C02DA5CA}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{1A7C20D7-6E7D-4E5B-95A4-0C53C02DA5CA}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{1A7C20D7-6E7D-4E5B-95A4-0C53C02DA5CA}\InprocServer32]
@="C:\\WINNT\\system32\\wrhisn.dll"
"ThreadingModel"="Apartment"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{89205D6B-F29C-44DC-B5E3-4F94BC9204FE}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{89205D6B-F29C-44DC-B5E3-4F94BC9204FE}\Implemented Categories]
@=""
[HKEY_CLASSES_ROOT\CLSID\{89205D6B-F29C-44DC-B5E3-4F94BC9204FE}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""
[HKEY_CLASSES_ROOT\CLSID\{89205D6B-F29C-44DC-B5E3-4F94BC9204FE}\InprocServer32]
@="C:\\WINNT\\system32\\mac40loc.dll"
"ThreadingModel"="Apartment"
**********************************************************************************
Files Found are not all bad files:
C:\WINNT\SYSTEM32\
aaaamon.dll Sat 15 Oct 2005 20:09:28 A.... 33 040 32,27 K
acledit.dll Sat 15 Oct 2005 20:09:28 A.... 138 000 134,77 K
acsetupc.dll Sat 15 Oct 2005 20:09:30 A.... 4 368 4,27 K
acsmib.dll Sat 15 Oct 2005 20:09:30 A.... 11 536 11,27 K
soorage.dll Sun 23 Oct 2005 9:59:26 ..S.R 233 636 228,16 K
admparse.dll Sat 15 Oct 2005 20:09:30 A.... 39 184 38,27 K
adptif.dll Sat 15 Oct 2005 20:09:30 A.... 27 408 26,77 K
alrsvc.dll Sat 15 Oct 2005 20:09:34 A.... 18 192 17,77 K
amstream.dll Sat 15 Oct 2005 20:09:34 A.... 64 784 63,27 K
apcups.dll Sat 15 Oct 2005 20:09:34 A.... 107 792 105,27 K
asfsipc.dll Sat 15 Oct 2005 20:09:34 A.... 14 608 14,27 K
avicap.dll Sat 15 Oct 2005 20:09:36 A.... 70 352 68,70 K
avicap32.dll Sat 15 Oct 2005 20:09:36 A.... 67 856 66,27 K
avifile.dll Sat 15 Oct 2005 20:09:36 A.... 108 096 105,56 K
bootvid.dll Sat 15 Oct 2005 20:09:40 A.... 10 784 10,53 K
br549.dll Sat 15 Oct 2005 20:09:40 A.... 36 112 35,27 K
cabview.dll Sat 15 Oct 2005 20:09:40 A.... 32 528 31,77 K
cards.dll Sat 15 Oct 2005 20:09:40 A.... 153 360 149,77 K
ccfgnt.dll Sat 15 Oct 2005 20:09:40 A.... 34 064 33,27 K
cfgmgr32.dll Sat 15 Oct 2005 20:09:42 A.... 17 168 16,77 K
lbnkinfo.dll Sun 23 Oct 2005 10:08:54 ..S.R 234 570 229,07 K
cic.dll Sat 15 Oct 2005 20:09:42 A.... 101 648 99,27 K
clbcatq.dll Mon 5 Sep 2005 10:19:28 A.... 551 184 538,27 K
clb.dll Sat 15 Oct 2005 20:09:44 A.... 11 536 11,27 K
cmcfg32.dll Sat 15 Oct 2005 20:09:46 A.... 36 112 35,27 K
cmpbk32.dll Sat 15 Oct 2005 20:09:46 A.... 16 144 15,77 K
cnbjmon.dll Sat 15 Oct 2005 20:10:50 A.... 48 400 47,27 K
cnetcfg.dll Sat 15 Oct 2005 20:09:46 A.... 144 656 141,27 K
commdlg.dll Sat 15 Oct 2005 20:09:46 A.... 29 376 28,69 K
compstui.dll Sat 15 Oct 2005 20:09:48 A.... 218 896 213,77 K
console.dll Sat 15 Oct 2005 20:09:50 A.... 44 304 43,27 K
nctui1.dll Sun 23 Oct 2005 10:15:56 ..S.R 235 834 230,30 K
crtdll.dll Sat 15 Oct 2005 20:09:52 A.... 149 264 145,77 K
cryptext.dll Sat 15 Oct 2005 20:09:52 A.... 50 448 49,27 K
webvw.dll Sat 15 Oct 2005 20:14:00 A.... 1 119 504 1,07 M
ctl3dv2.dll Sat 15 Oct 2005 20:09:52 A...R 27 200 26,56 K
d3dim.dll Sat 15 Oct 2005 20:09:54 A.... 446 224 435,77 K
d3dim700.dll Sat 15 Oct 2005 20:09:54 A.... 584 976 571,27 K
d3dpmesh.dll Sat 15 Oct 2005 20:09:54 A.... 37 648 36,77 K
d3dref.dll Sat 15 Oct 2005 20:09:54 A.... 93 456 91,27 K
d3drm.dll Sat 15 Oct 2005 20:09:54 A.... 364 816 356,27 K
d3dxof.dll Sat 15 Oct 2005 20:09:54 A.... 49 424 48,27 K
spvsvc.dll Sun 23 Oct 2005 11:40:42 ..S.R 234 570 229,07 K
dataclen.dll Sat 15 Oct 2005 20:09:56 A.... 41 744 40,77 K
datime.dll Sat 15 Oct 2005 20:09:56 A.... 157 968 154,27 K
dbmssocn.dll Sat 15 Oct 2005 20:09:56 A.... 28 944 28,27 K
dciman32.dll Sat 15 Oct 2005 20:09:58 A.... 8 464 8,27 K
ddeml.dll Sat 15 Oct 2005 20:10:00 A.... 39 936 39,00 K
ddraw.dll Sat 15 Oct 2005 20:10:00 A.... 266 512 260,27 K
ddrawex.dll Sat 15 Oct 2005 20:10:02 A.... 24 336 23,77 K
deskadp.dll Sat 15 Oct 2005 20:10:02 A.... 13 584 13,27 K
deskmon.dll Sat 15 Oct 2005 20:10:02 A.... 14 608 14,27 K
deskperf.dll Sat 15 Oct 2005 20:10:02 A.... 14 608 14,27 K
devenum.dll Sat 15 Oct 2005 20:10:02 A.... 48 912 47,77 K
dfrgres.dll Sat 15 Oct 2005 20:10:02 A.... 32 256 31,50 K
dfrgui.dll Sat 15 Oct 2005 20:10:02 A.... 109 328 106,77 K
dxtrans.dll Sat 15 Oct 2005 20:10:58 A.... 150 288 146,77 K
dlcapi.dll Sat 15 Oct 2005 20:10:04 A.... 10 512 10,27 K
dmband.dll Sat 15 Oct 2005 20:10:04 A.... 26 896 26,27 K
dmcompos.dll Sat 15 Oct 2005 20:10:04 A.... 49 936 48,77 K
dmime.dll Sat 15 Oct 2005 20:10:04 A.... 82 704 80,77 K
dmloader.dll Sat 15 Oct 2005 20:10:04 A.... 21 264 20,77 K
dmocx.dll Sat 15 Oct 2005 20:10:04 A.... 23 824 23,27 K
dmstyle.dll Sat 15 Oct 2005 20:10:04 A.... 78 608 76,77 K
dmsynth.dll Sat 15 Oct 2005 20:10:04 A.... 53 008 51,77 K
dmusic.dll Sat 15 Oct 2005 20:10:04 A.... 68 880 67,27 K
docprop.dll Sat 15 Oct 2005 20:10:04 A.... 44 816 43,77 K
docprop2.dll Sat 15 Oct 2005 20:10:04 A.... 307 472 300,27 K
dplay.dll Sat 15 Oct 2005 20:10:04 A.... 33 040 32,27 K
dplayx.dll Sat 15 Oct 2005 20:10:06 A.... 218 384 213,27 K
dpmodemx.dll Sat 15 Oct 2005 20:10:06 A.... 22 800 22,27 K
dpserial.dll Sat 15 Oct 2005 20:10:06 A.... 54 032 52,77 K
dpwsock.dll Sat 15 Oct 2005 20:10:06 A.... 42 768 41,77 K
drmclien.dll Sat 15 Oct 2005 20:10:50 A.... 148 752 145,27 K
drmstor.dll Sat 15 Oct 2005 20:10:50 A.... 77 072 75,27 K
mhdrv.dll Sun 23 Oct 2005 11:42:56 ..S.R 235 002 229,49 K
ds16gt.dll Sat 15 Oct 2005 20:10:50 A.... 4 656 4,55 K
dsctl.dll Sat 15 Oct 2005 20:10:50 A.... 18 192 17,77 K
dsound.dll Sat 15 Oct 2005 20:10:50 A.... 298 256 291,27 K
dsound3d.dll Sat 15 Oct 2005 20:10:52 A.... 1 296 144 1,23 M
dx7vb.dll Sat 15 Oct 2005 20:10:54 A.... 605 456 591,27 K
dxtmsft3.dll Sat 15 Oct 2005 20:10:58 A.... 380 688 371,77 K
dpwsockx.dll Sat 15 Oct 2005 20:10:06 A.... 44 816 43,77 K
efsadu.dll Sat 15 Oct 2005 20:10:58 A.... 34 576 33,77 K
esentprf.dll Sat 15 Oct 2005 20:11:00 A.... 40 720 39,77 K
faxevent.dll Sat 15 Oct 2005 20:11:06 A.... 23 312 22,77 K
faxext32.dll Sat 15 Oct 2005 20:11:06 A.... 17 680 17,27 K
faxmapi.dll Sat 15 Oct 2005 20:11:06 A.... 14 608 14,27 K
faxocm.dll Sat 15 Oct 2005 20:11:06 A.... 79 120 77,27 K
faxperf.dll Sat 15 Oct 2005 20:11:06 A.... 6 416 6,27 K
faxroute.dll Sat 15 Oct 2005 20:11:06 A.... 17 168 16,77 K
faxshell.dll Sat 15 Oct 2005 20:11:06 A.... 8 464 8,27 K
faxtiff.dll Sat 15 Oct 2005 20:11:06 A.... 59 664 58,27 K
faxxp32.dll Sat 15 Oct 2005 20:11:06 A.... 28 432 27,77 K
fde.dll Sat 15 Oct 2005 20:11:06 A.... 92 944 90,77 K
feclient.dll Sat 15 Oct 2005 20:11:06 A.... 16 656 16,27 K
fontsub.dll Sat 15 Oct 2005 20:11:08 A.... 78 096 76,27 K
ftsrch.dll Sat 15 Oct 2005 20:11:16 A.... 187 152 182,77 K
gcdef.dll Sat 15 Oct 2005 20:11:16 A.... 60 688 59,27 K
glmf32.dll Sat 15 Oct 2005 20:11:16 A.... 297 744 290,77 K
glu32.dll Sat 15 Oct 2005 20:11:16 A.... 120 592 117,77 K
gpkcsp.dll Sat 15 Oct 2005 20:11:18 A.... 93 456 91,27 K
gpkrsrc.dll Sat 15 Oct 2005 20:11:18 A.... 8 704 8,50 K
hpmon.dll Sat 15 Oct 2005 20:11:22 A.... 57 616 56,27 K
htui.dll Sat 15 Oct 2005 20:11:22 A.... 41 744 40,77 K
iashlpr.dll Sat 15 Oct 2005 20:11:24 A.... 34 064 33,27 K
iaspipe.dll Sat 15 Oct 2005 20:11:24 A.... 42 768 41,77 K
iaspolcy.dll Sat 15 Oct 2005 20:11:24 A.... 25 872 25,27 K
iasrecst.dll Sat 15 Oct 2005 20:11:24 A.... 25 360 24,77 K
iccvid.dll Sat 15 Oct 2005 20:11:24 A.... 110 592 108,00 K
icmp.dll Sat 15 Oct 2005 20:11:24 A.... 7 440 7,27 K
icmui.dll Sat 15 Oct 2005 20:11:24 A.... 52 496 51,27 K
ieaksie.dll Sat 15 Oct 2005 20:11:24 A.... 111 888 109,27 K
iernonce.dll Sat 15 Oct 2005 20:11:24 A.... 24 336 23,77 K
ifmon.dll Sat 15 Oct 2005 20:11:26 A.... 118 544 115,77 K
igmpagnt.dll Sat 15 Oct 2005 20:11:26 A.... 8 976 8,77 K
iissuba.dll Sat 15 Oct 2005 20:11:28 A.... 10 000 9,77 K
imeshare.dll Sat 15 Oct 2005 20:11:30 A.... 32 768 32,00 K
indicdll.dll Sat 15 Oct 2005 20:11:30 A.... 11 536 11,27 K
iologmsg.dll Sat 15 Oct 2005 20:11:34 A.... 17 408 17,00 K
ipmontr.dll Sat 15 Oct 2005 20:11:34 A.... 173 328 169,27 K
ippromon.dll Sat 15 Oct 2005 20:11:34 A.... 343 312 335,27 K
iprtprio.dll Sat 15 Oct 2005 20:11:34 A.... 4 880 4,77 K
ipsecsnp.dll Sat 15 Oct 2005 20:11:34 A.... 642 832 627,77 K
ipxmontr.dll Sat 15 Oct 2005 20:11:34 A.... 95 504 93,27 K
ipxpromn.dll Sat 15 Oct 2005 20:11:34 A.... 77 072 75,27 K
ipxrip.dll Sat 15 Oct 2005 20:11:34 A.... 22 800 22,27 K
ipxrtmgr.dll Sat 15 Oct 2005 20:11:34 A.... 41 744 40,77 K
ipxsap.dll Sat 15 Oct 2005 20:11:34 A.... 68 880 67,27 K
ipxwan.dll Sat 15 Oct 2005 20:11:34 A.... 21 776 21,27 K
ir32_32.dll Sat 15 Oct 2005 20:11:34 A.... 199 168 194,50 K
irclass.dll Sat 15 Oct 2005 20:11:36 A.... 14 096 13,77 K
jobexec.dll Sat 15 Oct 2005 20:11:36 A.... 49 488 48,33 K
kbdbe.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdbene.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdbr.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdcan.dll Sat 15 Oct 2005 20:11:38 A.... 8 464 8,27 K
kbdda.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbddv.dll Sat 15 Oct 2005 20:11:38 A.... 5 904 5,77 K
kbdes.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdfc.dll Sat 15 Oct 2005 20:11:38 A.... 7 440 7,27 K
kbdfi.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdfo.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdfr.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdgae.dll Sat 15 Oct 2005 20:11:38 A.... 6 416 6,27 K
kbdgr.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdgr1.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdic.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdir.dll Sat 15 Oct 2005 20:11:38 A.... 6 416 6,27 K
kbdit.dll Sat 15 Oct 2005 20:11:38 A.... 6 416 6,27 K
kbdit142.dll Sat 15 Oct 2005 20:11:38 A.... 6 416 6,27 K
kbdla.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdmac.dll Sat 15 Oct 2005 20:11:38 A.... 6 416 6,27 K
kbdne.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdno.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdpo.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdsf.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdsg.dll Sat 15 Oct 2005 20:11:38 A.... 7 440 7,27 K
kbdsp.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbdsw.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
kbduk.dll Sat 15 Oct 2005 20:11:38 A.... 6 416 6,27 K
kbdus.dll Sat 15 Oct 2005 20:11:38 A.... 6 416 6,27 K
kbdusl.dll Sat 15 Oct 2005 20:11:38 A.... 6 416 6,27 K
kbdusr.dll Sat 15 Oct 2005 20:11:38 A.... 6 416 6,27 K
kbdusx.dll Sat 15 Oct 2005 20:11:38 A.... 6 928 6,77 K
licmgr10.dll Sat 15 Oct 2005 20:12:38 A.... 21 776 21,27 K
bnotvid.dll Tue 25 Oct 2005 21:37:16 ..S.R 236 996 231,44 K
lmrt.dll Sat 15 Oct 2005 20:12:38 A.... 337 680 329,77 K
localmon.dll Sat 15 Oct 2005 20:12:38 A.... 4 368 4,27 K
localui.dll Sat 15 Oct 2005 20:12:38 A.... 10 000 9,77 K
logdrive.dll Sat 15 Oct 2005 20:12:38 A.... 208 959 204,06 K
lprhelp.dll Sat 15 Oct 2005 20:12:38 A.... 10 000 9,77 K
lprmonui.dll Sat 15 Oct 2005 20:12:38 A.... 10 000 9,77 K
lzexpand.dll Sat 15 Oct 2005 20:12:38 A.... 9 936 9,70 K
mag_hook.dll Sat 15 Oct 2005 20:12:38 A.... 8 976 8,77 K
mapistub.dll Sat 15 Oct 2005 20:12:40 A.... 139 536 136,27 K
mbslgn32.dll Sat 15 Oct 2005 20:12:40 A.... 30 480 29,77 K
mcastmib.dll Sat 15 Oct 2005 20:12:40 A.... 13 584 13,27 K
mcd32.dll Sat 15 Oct 2005 20:12:40 A.... 11 024 10,77 K
mcdsrv32.dll Sat 15 Oct 2005 20:12:40 A.... 10 688 10,44 K
mciavi32.dll Sat 15 Oct 2005 20:12:40 A.... 83 216 81,27 K
mcicda.dll Sat 15 Oct 2005 20:12:40 A.... 18 192 17,77 K
mciole16.dll Sat 15 Oct 2005 20:12:40 A.... 8 192 8,00 K
mciole32.dll Sat 15 Oct 2005 20:12:40 A.... 8 464 8,27 K
mciqtz32.dll Sat 15 Oct 2005 20:12:40 A.... 34 576 33,77 K
mciseq.dll Sat 15 Oct 2005 20:12:40 A.... 22 288 21,77 K
mciwave.dll Sat 15 Oct 2005 20:12:40 A.... 23 312 22,77 K
jsproxy.dll Sat 15 Oct 2005 20:11:36 A.... 13 072 12,77 K
mfc40.dll Sat 15 Oct 2005 20:12:44 A.... 924 432 902,77 K
mfc40u.dll Sat 15 Oct 2005 20:12:44 A.... 924 432 902,77 K
mfcsubs.dll Sat 15 Oct 2005 20:12:44 A.... 26 896 26,27 K
midimap.dll Sat 15 Oct 2005 20:12:44 A.... 19 216 18,77 K
mll_hp.dll Sat 15 Oct 2005 20:12:46 A.... 4 368 4,27 K
mll_mtf.dll Sat 15 Oct 2005 20:12:46 A.... 8 976 8,77 K
mll_qic.dll Sat 15 Oct 2005 20:12:46 A.... 7 440 7,27 K
mmcshext.dll Sat 15 Oct 2005 20:12:46 A.... 24 848 24,27 K
mmdet.dll Sat 15 Oct 2005 20:12:46 A.... 31 504 30,77 K
mmdrv.dll Sat 15 Oct 2005 20:12:46 A.... 12 048 11,77 K
mmfutil.dll Sat 15 Oct 2005 20:12:46 A.... 32 829 32,06 K
mmsystem.dll Sat 15 Oct 2005 20:12:46 A.... 70 544 68,89 K
mmutilse.dll Sat 15 Oct 2005 20:12:46 A.... 119 056 116,27 K
modex.dll Sat 15 Oct 2005 20:12:48 A.... 10 032 9,80 K
moricons.dll Sat 15 Oct 2005 20:12:48 A.... 134 144 131,00 K
mprapi.dll Sat 15 Oct 2005 20:12:50 A.... 81 168 79,27 K
mprmsg.dll Sat 15 Oct 2005 20:12:50 A.... 113 936 111,27 K
msacm.dll Sat 15 Oct 2005 20:12:50 A.... 61 312 59,88 K
msacm32.dll Sat 15 Oct 2005 20:12:52 A.... 66 832 65,27 K
msapsspc.dll Sat 15 Oct 2005 20:12:52 A.... 80 640 78,75 K
msaudite.dll Sat 15 Oct 2005 20:12:52 A.... 60 688 59,27 K
mscat32.dll Sat 15 Oct 2005 20:12:52 A.... 7 952 7,77 K
spmsg.dll Fri 2 Sep 2005 3:29:26 ..... 14 560 14,22 K
msfaxmon.dll Sat 15 Oct 2005 20:12:54 A.... 18 704 18,27 K
msidle.dll Sat 15 Oct 2005 20:12:56 A.... 6 416 6,27 K
msidlpm.dll Sat 15 Oct 2005 20:12:56 A.... 64 272 62,77 K
msidpe.dll Sat 15 Oct 2005 20:12:56 A.... 6 928 6,77 K
msimg32.dll Sat 15 Oct 2005 20:12:56 A.... 5 392 5,27 K
msls31.dll Sat 15 Oct 2005 20:12:58 A.... 148 752 145,27 K
msnsspc.dll Sat 15 Oct 2005 20:12:58 A.... 117 808 115,05 K
msobjs.dll Sat 15 Oct 2005 20:12:58 A.... 19 456 19,00 K
msports.dll Sat 15 Oct 2005 20:13:00 A.... 40 208 39,27 K
mssip32.dll Sat 15 Oct 2005 20:13:00 A.... 5 904 5,77 K
msvbvm50.dll Sat 15 Oct 2005 20:13:02 A.... 1 355 776 1,29 M
msvcirt.dll Sat 15 Oct 2005 20:13:02 A.... 77 878 76,05 K
msvcp50.dll Sat 15 Oct 2005 20:13:04 A.... 565 760 552,50 K
msvcrt40.dll Sat 15 Oct 2005 20:13:04 A.... 65 024 63,50 K
msvidc32.dll Sat 15 Oct 2005 20:13:04 A.... 27 920 27,27 K
msvideo.dll Sat 15 Oct 2005 20:13:04 A.... 127 168 124,19 K
narrhook.dll Sat 15 Oct 2005 20:13:06 A.... 76 048 74,27 K
netapi.dll Sat 15 Oct 2005 20:13:06 A.... 108 512 105,97 K
netdet.dll Sat 15 Oct 2005 20:13:08 A.... 21 264 20,77 K
netdtect.dll Sat 15 Oct 2005 20:13:08 A.... 6 416 6,27 K
netevent.dll Sat 15 Oct 2005 20:13:08 A.... 228 352 223,00 K
neth.dll Sat 15 Oct 2005 20:13:08 A.... 293 136 286,27 K
netmsg.dll Sat 15 Oct 2005 20:13:08 A.... 182 784 178,50 K
netrap.dll Sat 15 Oct 2005 20:13:08 A.... 11 536 11,27 K
netui1.dll Sat 15 Oct 2005 20:13:08 A.... 215 312 210,27 K
netui2.dll Sat 15 Oct 2005 20:13:08 A.... 291 600 284,77 K
npptools.dll Sat 15 Oct 2005 20:13:10 A.... 51 984 50,77 K
ntdsxds.dll Sat 15 Oct 2005 20:13:14 A.... 56 592 55,27 K
ntlanui.dll Sat 15 Oct 2005 20:13:16 A.... 62 224 60,77 K
ntlanui2.dll Sat 15 Oct 2005 20:13:16 A.... 16 144 15,77 K
ntmsevt.dll Sat 15 Oct 2005 20:13:16 A.... 47 888 46,77 K
ntmsmgr.dll Sat 15 Oct 2005 20:13:16 A.... 446 736 436,27 K
ntshrui.dll Sat 15 Oct 2005 20:13:18 A.... 48 912 47,77 K
nwapi16.dll Sat 15 Oct 2005 20:13:18 A.... 18 192 17,77 K
nwapi32.dll Sat 15 Oct 2005 20:13:18 A.... 64 784 63,27 K
nwcfg.dll Sat 15 Oct 2005 20:13:18 A.... 20 752 20,27 K
nwevent.dll Sat 15 Oct 2005 20:13:18 A.... 7 952 7,77 K
odbc16gt.dll Sat 15 Oct 2005 20:13:18 A.... 26 224 25,61 K
ole2disp.dll Sat 15 Oct 2005 20:13:20 A.... 169 520 165,55 K
ole2nls.dll Sat 15 Oct 2005 20:13:20 A.... 153 008 149,42 K
oleacc.dll Sat 15 Oct 2005 20:13:20 A.... 113 936 111,27 K
oleaccrc.dll Sat 15 Oct 2005 20:13:20 A.... 12 800 12,50 K
olecli.dll Sat 15 Oct 2005 20:13:20 A.... 83 456 81,50 K
oledlg.dll Sat 15 Oct 2005 20:13:20 A.... 120 592 117,77 K
olesvr.dll Sat 15 Oct 2005 20:13:20 A.... 24 064 23,50 K
olesvr32.dll Sat 15 Oct 2005 20:13:20 A.... 22 800 22,27 K
panmap.dll Sat 15 Oct 2005 20:13:22 A.... 11 024 10,77 K
pautoenr.dll Sat 15 Oct 2005 20:13:22 A.... 6 416 6,27 K
olecli32.dll Sat 15 Oct 2005 20:13:20 A.... 69 904 68,27 K
perfnet.dll Sat 15 Oct 2005 20:13:24 A.... 18 192 17,77 K
perfnw.dll Sat 15 Oct 2005 20:13:24 A.... 6 928 6,77 K
perfos.dll Sat 15 Oct 2005 20:13:24 A.... 22 800 22,27 K
pidgen.dll Sat 15 Oct 2005 20:13:24 A.... 66 832 65,27 K
pifmgr.dll Sat 15 Oct 2005 20:13:24 A.... 37 136 36,27 K
pjlmon.dll Sat 15 Oct 2005 20:10:50 A.... 13 072 12,77 K
plustab.dll Sat 15 Oct 2005 20:13:24 A.... 21 264 20,77 K
pmspl.dll Sat 15 Oct 2005 20:13:24 A.... 46 592 45,50 K
prflbmsg.dll Sat 15 Oct 2005 20:13:24 A.... 20 240 19,77 K
psapi.dll Sat 15 Oct 2005 20:13:24 A.... 28 944 28,27 K
pschdprf.dll Sat 15 Oct 2005 20:13:24 A.... 10 512 10,27 K
psnppagn.dll Sat 15 Oct 2005 20:13:24 A.... 7 952 7,77 K
pstorec.dll Sat 15 Oct 2005 20:13:24 A.... 37 648 36,77 K
psxdll.dll Sat 15 Oct 2005 20:13:26 A.... 32 016 31,27 K
qcut.dll Sat 15 Oct 2005 20:13:26 A.... 176 400 172,27 K
qdv.dll Sat 15 Oct 2005 20:13:26 A.... 214 288 209,27 K
qdvd.dll Sat 15 Oct 2005 20:13:26 A.... 271 632 265,27 K
qosname.dll Sat 15 Oct 2005 20:13:26 A.... 8 464 8,27 K
rasadhlp.dll Sat 15 Oct 2005 20:13:26 A.... 7 440 7,27 K
rasauth.dll Sat 15 Oct 2005 20:13:26 A.... 9 488 9,27 K
rasctrs.dll Sat 15 Oct 2005 20:13:26 A.... 13 072 12,77 K
rasgprxy.dll Sat 15 Oct 2005 20:13:26 A.... 11 536 11,27 K
rasgtwy.dll Sat 15 Oct 2005 20:13:26 A.... 48 400 47,27 K
rasmxs.dll Sat 15 Oct 2005 20:13:28 A.... 23 312 22,77 K
rasrad.dll Sat 15 Oct 2005 20:13:28 A.... 23 824 23,27 K
rassauth.dll Sat 15 Oct 2005 20:13:28 A.... 24 848 24,27 K
rasser.dll Sat 15 Oct 2005 20:13:28 A.... 14 096 13,77 K
rcamsp.dll Sat 15 Oct 2005 20:13:28 A.... 143 632 140,27 K
regwizc.dll Sat 15 Oct 2005 20:13:28 A.... 371 984 363,27 K
riched32.dll Sat 15 Oct 2005 20:13:28 A.... 3 856 3,77 K
routetab.dll Sat 15 Oct 2005 20:13:28 A.... 7 440 7,27 K
rsvpmsg.dll Sat 15 Oct 2005 20:13:30 A.... 26 896 26,27 K
rsvpperf.dll Sat 15 Oct 2005 20:13:30 A.... 11 024 10,77 K
rtipxmib.dll Sat 15 Oct 2005 20:13:30 A.... 30 480 29,77 K
rtutils.dll Sat 15 Oct 2005 20:13:30 A.... 44 816 43,77 K
scarddlg.dll Sat 15 Oct 2005 20:13:32 A.... 72 976 71,27 K
scardssp.dll Sat 15 Oct 2005 20:13:32 A.... 123 152 120,27 K
sdpblb.dll Sat 15 Oct 2005 20:13:32 A.... 149 776 146,27 K
security.dll Sat 15 Oct 2005 20:13:32 A.... 5 904 5,77 K
sefilshr.dll Sat 15 Oct 2005 20:13:32 A.... 23 824 23,27 K
sendcmsg.dll Sat 15 Oct 2005 20:13:32 A.... 24 848 24,27 K
senscfg.dll Sat 15 Oct 2005 20:13:32 A.... 14 096 13,77 K
serialui.dll Sat 15 Oct 2005 20:13:32 A.... 15 632 15,27 K
serwvdrv.dll Sat 15 Oct 2005 20:13:32 A.... 16 144 15,77 K
setupdll.dll Sat 15 Oct 2005 20:13:34 A.... 423 184 413,27 K
sfmapi.dll Sat 15 Oct 2005 20:13:34 A.... 39 696 38,77 K
sfmatmsg.dll Sat 15 Oct 2005 20:13:34 A.... 19 728 19,27 K
sfmmon.dll Sat 15 Oct 2005 20:13:34 A.... 45 840 44,77 K
sfmwshat.dll Sat 15 Oct 2005 20:13:34 A.... 88 848 86,77 K
shell.dll Sat 15 Oct 2005 20:13:34 A.... 5 120 5,00 K
wqapi.dll Sun 23 Oct 2005 12:00:16 ..S.R 236 967 231,41 K
shimgvw.dll Sat 15 Oct 2005 20:13:34 A.... 52 496 51,27 K
shscrap.dll Sat 15 Oct 2005 20:13:36 A.... 23 824 23,27 K
sigtab.dll Sat 15 Oct 2005 20:13:36 A.... 13 072 12,77 K
slbcsp.dll Sat 15 Oct 2005 20:13:36 A.... 217 360 212,27 K
slbkygen.dll Sat 15 Oct 2005 20:13:36 A.... 36 624 35,77 K
slbrsrc.dll Sat 15 Oct 2005 20:13:36 A.... 15 360 15,00 K
softpub.dll Sat 15 Oct 2005 20:13:36 A.... 6 928 6,77 K
sti_ci.dll Sat 15 Oct 2005 20:13:40 A.... 48 912 47,77 K
streamci.dll Sat 15 Oct 2005 20:13:40 A.... 7 440 7,27 K
synceng.dll Sat 15 Oct 2005 20:13:40 A.... 54 032 52,77 K
syncui.dll Sat 15 Oct 2005 20:13:40 A.... 172 304 168,27 K
sysinv.dll Sat 15 Oct 2005 20:13:40 A.... 16 656 16,27 K
t2embed.dll Sat 15 Oct 2005 20:13:42 A.... 194 320 189,77 K
tapi.dll Sat 15 Oct 2005 20:13:42 A.... 21 344 20,84 K
tapiperf.dll Sat 15 Oct 2005 20:13:42 A.... 6 416 6,27 K
tapiui.dll Sat 15 Oct 2005 20:13:42 A.... 63 248 61,77 K
termmgr.dll Sat 15 Oct 2005 20:13:44 A.... 126 224 123,27 K
tlntsvrp.dll Sat 15 Oct 2005 20:13:44 A.... 6 928 6,77 K
toolhelp.dll Sat 15 Oct 2005 20:13:44 A.... 13 888 13,56 K
tsbyuv.dll Sat 15 Oct 2005 20:10:50 A.... 12 560 12,27 K
tsd32.dll Sat 15 Oct 2005 20:13:46 A.... 16 144 15,77 K
typelib.dll Sat 15 Oct 2005 20:13:48 A.... 177 856 173,69 K
umdmxfrm.dll Sat 15 Oct 2005 20:13:48 A.... 13 072 12,77 K
ureg.dll Sat 15 Oct 2005 20:13:50 A.... 18 704 18,27 K
vcdex.dll Sat 15 Oct 2005 20:13:52 A.... 8 464 8,27 K
vdmredir.dll Sat 15 Oct 2005 20:13:52 A.... 41 744 40,77 K
ver.dll Sat 15 Oct 2005 20:13:52 A.... 9 104 8,89 K
vjoy.dll Sat 15 Oct 2005 20:13:54 A.... 5 392 5,27 K
w32topl.dll Sat 15 Oct 2005 20:13:54 A.... 12 560 12,27 K
wifeman.dll Sat 15 Oct 2005 20:14:02 A.... 9 216 9,00 K
win87em.dll Sat 15 Oct 2005 20:14:02 A.... 13 312 13,00 K
winmm.dll Sat 15 Oct 2005 20:14:40 A.... 193 808 189,27 K
winnls.dll Sat 15 Oct 2005 20:14:40 A.... 5 120 5,00 K
winrnr.dll Sat 15 Oct 2005 20:14:54 A.... 19 216 18,77 K
winsock.dll Sat 15 Oct 2005 20:14:54 A.... 2 864 2,80 K
winstrm.dll Sat 15 Oct 2005 20:14:56 A.... 22 288 21,77 K
wmi.dll Sat 15 Oct 2005 20:14:56 A.... 6 416 6,27 K
wowfax.dll Sat 15 Oct 2005 20:10:50 A.... 3 312 3,23 K
wowfaxui.dll Sat 15 Oct 2005 20:10:50 A.... 15 120 14,77 K
ws2help.dll Sat 15 Oct 2005 20:14:56 A.... 18 192 17,77 K
wshisn.dll Sat 15 Oct 2005 20:14:56 A.... 12 560 12,27 K
wshnetbs.dll Sat 15 Oct 2005 20:14:56 A.... 7 952 7,77 K
wtsapi32.dll Sat 15 Oct 2005 20:14:58 A.... 14 608 14,27 K
wlnscard.dll Sun 23 Oct 2005 9:07:38 ..S.R 234 272 228,78 K
corpol.dll Sat 15 Oct 2005 20:09:50 A.... 14 608 14,27 K
msscrfr.dll Sat 15 Oct 2005 20:13:00 A.... 24 626 24,05 K
scofr.dll Sat 15 Oct 2005 20:13:32 A.... 24 576 24,00 K
vbsfr.dll Sat 15 Oct 2005 20:13:52 A.... 24 576 24,00 K
mfc42loc.dll Sat 15 Oct 2005 20:12:44 A.... 57 344 56,00 K
mfc40loc.dll Sat 15 Oct 2005 20:12:44 A.... 45 568 44,50 K
ctl3d32.dll Sat 15 Oct 2005 20:09:52 A.... 27 136 26,50 K
d3dramp.dll Sat 15 Oct 2005 20:09:54 A.... 591 120 577,27 K
ir41_qc.dll Sat 15 Oct 2005 20:11:34 A.... 120 320 117,50 K
ir41_qcx.dll Sat 15 Oct 2005 20:11:34 A.... 338 432 330,50 K
ir50_32.dll Sat 15 Oct 2005 20:11:36 A.... 755 200 737,50 K
ir50_qc.dll Sat 15 Oct 2005 20:11:36 A.... 200 192 195,50 K
ir50_qcx.dll Sat 15 Oct 2005 20:11:36 A.... 183 808 179,50 K
msr2c.dll Sat 15 Oct 2005 20:13:00 A.... 69 632 68,00 K
msrclr40.dll Sat 15 Oct 2005 20:13:00 A.... 74 000 72,27 K
msrecr40.dll Sat 15 Oct 2005 20:13:00 A.... 28 944 28,27 K
msr2cenu.dll Sat 15 Oct 2005 20:13:00 A.... 7 168 7,00 K
msvcrt20.dll Sat 15 Oct 2005 20:13:04 A.... 253 952 248,00 K
framebuf.dll Sat 15 Oct 2005 20:11:12 A.... 8 752 8,55 K
vga256.dll Sat 15 Oct 2005 20:13:52 A.... 51 344 50,14 K
vga64k.dll Sat 15 Oct 2005 20:13:52 A.... 18 128 17,70 K
sydll.dll Sat 22 Oct 2005 14:00:50 ..S.R 235 405 229,89 K
oneacc.dll Sat 22 Oct 2005 14:36:04 ..S.R 236 977 231,42 K
ddmstor.dll Sun 23 Oct 2005 12:06:08 ..S.R 234 272 228,78 K
danim.dll Sat 15 Oct 2005 20:09:54 A.... 1 136 400 1,08 M
mscms.dll Sat 15 Oct 2005 20:12:52 A.... 69 904 68,27 K
mf3216.dll Sat 15 Oct 2005 20:12:42 A.... 35 600 34,77 K
ieakui.dll Sat 15 Oct 2005 20:11:24 A.... 243 200 237,50 K
rmr20.dll Tue 25 Oct 2005 21:51:26 ..S.R 236 996 231,44 K
soell32.dll Wed 26 Oct 2005 9:27:34 ..S.R 233 512 228,04 K
ciodm.dll Sat 15 Oct 2005 20:09:42 A.... 68 368 66,77 K
catsrv.dll Mon 5 Sep 2005 10:19:28 A.... 165 648 161,77 K
scrrnfr.dll Sat 15 Oct 2005 20:13:32 A.... 24 576 24,00 K
msencode.dll Sat 15 Oct 2005 20:12:54 A.... 94 480 92,27 K
ieakeng.dll Sat 15 Oct 2005 20:11:24 A.... 126 736 123,77 K
~clbcatq.dll Sat 15 Oct 2005 20:09:48 A.... 4 880 4,77 K
dxtmsft.dll Sat 15 Oct 2005 20:10:58 A.... 325 904 318,27 K
wshext.dll Sat 15 Oct 2005 20:14:56 A.... 45 056 44,00 K
digest.dll Sat 15 Oct 2005 20:10:02 A.... 46 352 45,27 K
jsfr.dll Sat 15 Oct 2005 20:11:36 A.... 24 576 24,00 K
batt.dll Sat 15 Oct 2005 21:09:38 A.... 6 416 6,27 K
eqnclass.dll Sat 15 Oct 2005 21:10:58 A.... 176 400 172,27 K
spxcoins.dll Sat 15 Oct 2005 21:13:38 A.... 150 528 147,00 K
shfolder.dll Sat 15 Oct 2005 20:13:34 A.... 21 776 21,27 K
dgsetup.dll Sat 15 Oct 2005 21:10:02 A.... 86 288 84,27 K
dgrpsetu.dll Sat 15 Oct 2005 21:10:02 A.... 123 904 121,00 K
hpj023~1.dll Sun 23 Oct 2005 9:25:38 ..S.R 234 272 228,78 K
dispex.dll Sat 15 Oct 2005 20:10:04 A.... 45 112 44,05 K
vdmdbg.dll Sat 15 Oct 2005 20:13:52 A.... 29 968 29,27 K
umpnpmgr.dll Sat 15 Oct 2005 20:13:48 A.... 89 360 87,27 K
ntvdmd.dll Sat 15 Oct 2005 20:13:18 A.... 14 096 13,77 K
nddenb32.dll Sat 15 Oct 2005 20:13:06 A.... 17 680 17,27 K
linkinfo.dll Sat 15 Oct 2005 20:12:38 A.... 16 144 15,77 K
cabinet.dll Sat 15 Oct 2005 20:09:40 A.... 56 080 54,77 K
irn8l5~1.dll Sat 22 Oct 2005 14:22:36 ..S.R 237 260 231,70 K
dtdpmesh.dll Sun 23 Oct 2005 12:05:54 ..S.R 234 272 228,78 K
setupnt.dll Sat 22 Oct 2005 17:51:44 A.... 37 888 37,00 K
snapapi.dll Sun 23 Oct 2005 13:06:30 A.... 131 072 128,00 K
mvasn1.dll Sun 23 Oct 2005 13:12:00 ..S.R 235 002 229,49 K
n48o0e~1.dll Sat 22 Oct 2005 13:57:56 ..S.R 235 002 229,49 K
clbcatex.dll Mon 5 Sep 2005 10:19:30 A.... 97 040 94,77 K
catsrvut.dll Mon 5 Sep 2005 10:19:30 A.... 595 728 581,77 K
comrepl.dll Mon 5 Sep 2005 10:19:30 A.... 100 112 97,77 K
comsvcs.dll Mon 5 Sep 2005 10:19:30 A.... 1 476 880 1,41 M
mtxoci.dll Mon 5 Sep 2005 10:19:32 A.... 122 640 119,77 K
msdtcprx.dll Mon 5 Sep 2005 10:19:32 A.... 739 600 722,27 K
comsnap.dll Sat 15 Oct 2005 22:09:50 A.... 146 192 142,77 K
txflog.dll Sat 15 Oct 2005 22:13:46 A.... 84 240 82,27 K
mtxlegih.dll Mon 5 Sep 2005 10:19:32 A.... 35 600 34,77 K
catsrvps.dll Sat 15 Oct 2005 22:09:40 A.... 55 056 53,77 K
txfaux.dll Mon 5 Sep 2005 10:19:28 A.... 398 608 389,27 K
comaddin.dll Sat 15 Oct 2005 22:09:46 A.... 29 968 29,27 K
dcomext.dll Sat 15 Oct 2005 22:10:00 A.... 150 800 147,27 K
mtxex.dll Sat 15 Oct 2005 22:13:06 A.... 3 856 3,77 K
imgcmn.dll Sat 15 Oct 2005 22:11:30 A.... 63 760 62,27 K
imgshl.dll Sat 15 Oct 2005 22:11:30 A.... 13 584 13,27 K
jpeg1x32.dll Sat 15 Oct 2005 22:11:36 A.... 27 920 27,27 K
jpeg2x32.dll Sat 15 Oct 2005 22:11:36 A.... 38 160 37,27 K
oiprt400.dll Sat 15 Oct 2005 22:13:20 A.... 13 072 12,77 K
oissq400.dll Sat 15 Oct 2005 22:13:20 A.... 13 072 12,77 K
oitwa400.dll Sat 15 Oct 2005 22:13:20 A.... 25 872 25,27 K
oislb400.dll Sat 15 Oct 2005 22:13:20 A.... 21 776 21,27 K
xiffr3_0.dll Sat 15 Oct 2005 22:14:58 A.... 641 808 626,77 K
tifflt.dll Sat 15 Oct 2005 22:13:44 A.... 33 552 32,77 K
getuname.dll Sat 15 Oct 2005 22:11:16 A.... 423 184 413,27 K
colbact.dll Mon 5 Sep 2005 10:19:30 A.... 41 744 40,77 K
avmeter.dll Sat 15 Oct 2005 22:09:36 A.... 17 168 16,77 K
comuid.dll Mon 5 Sep 2005 10:19:32 A.... 639 248 624,27 K
avwav.dll Sat 15 Oct 2005 22:09:38 A.... 76 048 74,27 K
msdtclog.dll Mon 5 Sep 2005 10:19:32 A.... 96 016 93,77 K
msdtctm.dll Mon 5 Sep 2005 10:19:32 A.... 1 200 400 1,14 M
msdtcui.dll Mon 5 Sep 2005 10:19:32 A.... 153 872 150,27 K
mtxdm.dll Mon 5 Sep 2005 10:19:32 A.... 26 896 26,27 K
stclient.dll Mon 5 Sep 2005 10:19:32 A.... 71 440 69,77 K
xolehlp.dll Mon 5 Sep 2005 10:19:32 A.... 20 240 19,77 K
dnound.dll Sat 22 Oct 2005 14:08:20 ..S.R 235 405 229,89 K
l24q0c~1.dll Sat 22 Oct 2005 14:05:56 ..S.R 235 947 230,41 K
hr0m05~1.dll Sat 22 Oct 2005 14:08:20 ..S.R 235 510 229,99 K
nymkcert.dll Sat 22 Oct 2005 22:40:30 ..S.R 236 977 231,42 K
fwapi.dll Sat 22 Oct 2005 14:34:08 A.... 36 924 36,06 K
mac40loc.dll Wed 26 Oct 2005 9:48:18 ..S.R 233 994 228,51 K
icfgnt5.dll Sat 15 Oct 2005 22:11:24 A.... 5 904 5,77 K
inetcfg.dll Sat 15 Oct 2005 22:11:30 A.... 261 904 255,77 K
icwdial.dll Sat 15 Oct 2005 22:11:24 A.... 58 640 57,27 K
icwphbk.dll Sat 15 Oct 2005 22:11:24 A.... 49 936 48,77 K
msconf.dll Sat 15 Oct 2005 22:12:52 A.... 54 032 52,77 K
nmmkcert.dll Sat 15 Oct 2005 22:13:10 A.... 12 560 12,27 K
mnmdd.dll Sat 15 Oct 2005 22:12:46 A.... 32 880 32,11 K
nmevtmsg.dll Sat 15 Oct 2005 22:13:10 A.... 3 072 3,00 K
ils.dll Sat 15 Oct 2005 22:11:30 A.... 63 248 61,77 K
l48m0e~1.dll Sat 22 Oct 2005 14:30:02 ..S.R 235 589 230,07 K
f60o0g~1.dll Wed 26 Oct 2005 9:36:02 ..S.R 234 300 228,81 K
fpjq03~1.dll Tue 25 Oct 2005 13:43:22 ..S.R 234 019 228,53 K
mapi32.dll Sat 15 Oct 2005 20:12:40 A.... 139 536 136,27 K
m264lc~1.dll Sat 22 Oct 2005 14:36:02 ..S.R 233 979 228,49 K
hrno05~1.dll Wed 26 Oct 2005 9:48:16 ..S.R 234 349 228,86 K
o2840c~1.dll Wed 26 Oct 2005 9:27:32 ..S.R 233 994 228,51 K
j4p0le~1.dll Tue 25 Oct 2005 17:58:04 ..S.R 235 656 230,13 K
473 items found: 473 files (30 H/S), 0 directories.
Total of file sizes: 50 177 344 bytes 47,85 M
Locate .tmp files:
C:\WINNT\SYSTEM32\
config.tmp Sat 15 Oct 2005 21:09:50 ..... 3 072 3,00 K
1 item found: 1 file, 0 directories.
Total of file sizes: 3 072 bytes 3,00 K
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C n'a pas de nom.
Le numro de srie du volume est 435A-3B27
Rpertoire de C:\WINNT\System32
26/10/2005 09:48 233ÿ994 mac40loc.dll
26/10/2005 09:48 234ÿ349 hrno0553e.dll
26/10/2005 09:36 234ÿ300 f60o0gd3e60.dll
26/10/2005 09:27 233ÿ512 soell32.dll
26/10/2005 09:27 233ÿ994 o2840clqefqe0.dll
25/10/2005 21:51 236ÿ996 rmr20.dll
25/10/2005 21:37 236ÿ996 bnotvid.dll
25/10/2005 17:58 235ÿ656 j4p0le7m1h.dll
25/10/2005 13:43 234ÿ019 fpjq0315e.dll
23/10/2005 13:12 235ÿ002 mvasn1.dll
23/10/2005 12:06 234ÿ272 ddmstor.dll
23/10/2005 12:05 234ÿ272 dTdpmesh.dll
23/10/2005 12:00 236ÿ967 wqapi.dll
23/10/2005 11:42 235ÿ002 mhdrv.dll
23/10/2005 11:40 234ÿ570 spvsvc.dll
23/10/2005 10:15 235ÿ834 nctui1.dll
23/10/2005 10:08 234ÿ570 lbnkinfo.dll
23/10/2005 09:59 233ÿ636 soorage.dll
23/10/2005 09:25 234ÿ272 hpj0231mg.dll
23/10/2005 09:07 234ÿ272 wlnscard.dll
22/10/2005 22:40 236ÿ977 nymkcert.dll
22/10/2005 14:36 236ÿ977 oneacc.dll
22/10/2005 14:36 233ÿ979 m264lcjq1foe.dll
22/10/2005 14:30 235ÿ589 l48m0el1ehq.dll
22/10/2005 14:22 237ÿ260 irn8l55u1.dll
22/10/2005 14:08 235ÿ510 hr0m05d1e.dll
22/10/2005 14:08 235ÿ405 dnound.dll
22/10/2005 14:05 235ÿ947 l24q0ch5ef4.dll
22/10/2005 14:00 235ÿ405 sydll.dll
22/10/2005 13:57 235ÿ002 n48o0el3ehq.dll
30 fichier(s) 7ÿ054ÿ536 octets
0 Rp(s) 77ÿ115ÿ195ÿ392 octets libres
Marsh Posté le 27-10-2005 à 13:19:23
Impressionnant...
Maintenant :
- Télécharge CWShredder 2.15 d' ICI.
Tiens-le prêt mais ne clique pas "Fix" pour le moment.
1- - Ferme tes applications, il va y avoir un reboot.
- Tu double-cliques l2mfix.bat et cette fois-ci, tu choisis l'option 2 (taper 2 et entrée). Ne t'inquiète pas si le bureau ou les icônes disparaissent un instant. C'est normal.
2- Après le redémarrage, lance CWShredder (Fix->next) Il va te demander de redémarrer. Accepte.
3- Relance L2mfix exactement comme au point 1.
Après tout ça, poste un nouvel HijackThis.
Marsh Posté le 27-10-2005 à 13:21:18
ok je suis en cours (sache quand même que mon os est neuf depuis 5 jours, et que je suis resté online que 10 minutes sans look n stop, ni kaspersky.... 10 minutes a suffi pour me coller 74 virus dont 54 troyens (que kaspersky a giclé), restent les spywares.....
Merci de ton aide... Pourras tu m'explique un moment si tu as le temps...
merci
Marsh Posté le 27-10-2005 à 13:24:16
alors petit précision, CWshredder je l'ai téléchargé, lancé j'ai fait un scan mais il n'a rien trouvé ? normal
je passe à l'étape 2 ? et je choisis l'option 2 ?
Marsh Posté le 27-10-2005 à 13:31:11
alors malheureusement au point 2, CWShredder, n'a rien à "fixer" ; il ne voit rien..... Donc j'ai fait le point 1...
Marsh Posté le 27-10-2005 à 13:33:18
sinon par contre, suite au lmfix , 2 option, le dll a bien disparu ; malheureusement le changement d'url sauvage lui est toujours bien présent :
dernier log de hijack
Logfile of HijackThis v1.99.1
Scan saved at 13:32:03, on 26/10/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\rundll32.exe
C:\WINNT\SOUNDMAN.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SiS KHooker] C:\WINNT\system32\khooker.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [KAV50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe" -run -n PersonalPro -v 5.0.0.0
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKLM\..\Run: [Acronis True Image Monitor] "C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe"
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/window [...] 0050213796
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Kaspersky Anti-Virus Service (KLBLMain) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Unknown owner - C:\WINNT\system32\ZONELABS\vsmon.exe (file missing)
Marsh Posté le 27-10-2005 à 14:06:48
je ne sais pas si ça peut aider , mais l'adresse qui revient le plus souvent c'est celle là :
http://www.searc-h.com/normal/yyy53.html
c'est d'un pénible... Encore qu'avec adblock pour moz, ca bloque le contenu mais la redirection, je me la mange toujours, et en plein milieu d'un message qui fait 10 lignes, t'as envie de péter tout le bureau....
Marsh Posté le 27-10-2005 à 18:18:56
Bon, déjà ton infection Vx2 est nettoyée.
HijackThis ne montre plus rien de suspect. Aussi télécharge SilentRunners.vbs..
Lance-le. Il génère un log. Copie/colle le ENTIER.
Marsh Posté le 27-10-2005 à 09:53:12
Salut,
J'ai déjà nettoyé une premiere fois et voici mon log nettoyé :
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SiS KHooker] C:\WINNT\system32\khooker.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [KAV50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe" -run -n PersonalPro -v 5.0.0.0
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKLM\..\Run: [Acronis True Image Monitor] "C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe"
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/window [...] 0050213796
O20 - Winlogon Notify: ModuleUsage - C:\WINNT\system32\o2840clqefqe0.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Kaspersky Anti-Virus Service (KLBLMain) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Unknown owner - C:\WINNT\system32\ZONELABS\vsmon.exe (file missing)
Mon problème est celui i : O20 - Winlogon Notify: ModuleUsage - C:\WINNT\system32\o2840clqefqe0.dll
change de nom à chaque, on ne peut le supprimer même en mode sans échec et le fix ne marche pas.
J'ai kaspersky, look'n stop, et utilisé successivement : microsoft spyware, counterspy, xoftspy, spyremover et spywareblaster, rien n'y fait. J'en suis donc à hijack this. Les symptomes, une page web qui se loade toute seul pdt que je lis un article ou que je tape sur un foruù qui m'envoie souvent vers searc-h.com... Bref le truc très lourd...
Si vous avez des idées...
Merci
Michael
Message édité par Bacillus le 27-10-2005 à 09:53:34