impossible de suprimmer Packed.win32.TdssFermé

Question

bonjour!
Mon pc au ralenti démarrage long , parfois obligé de redémarrer plusieurs pour qu'il se lance, (écran qui se bloque sur la page bienvenue ou écran noir). j'ai fais un scan avec ad aware ça change rien et impossible de lancer spybot(??) j'ai fais un scan avec a-squared anti malware ; PAcked.win32.Tdss apparait je le supprime et le scan suivant il réapparait!!! je ne sais pas quoi faire merci de votre aide!!!! 
je vous joins les rapports Malbyte et hijackthis:
_____________
Version - a-squared Anti-Malware 4.5
Dernière mise à jour : 20/12/2009 11:50:03

Paramètres des balayages :

Type de balayage : Scan Rapide
Objets : Mémoire, Traces, Cookies
Balayage dans les archives : Marche
Analyse heuristique : Arrêt
Balayage dans les ADS : Marche

Début du balayage :	20/12/2009 11:58:58

\?\globalroot\systemroot\system32\H8SRTgkcpkonipy.dll 	Objets détectés : Packed.Win32.Tdss!IK
c:\documents and settings\odile\application data\bsplayer pro 	Objets détectés : Trace.Directory.BSplayer!A2
c:\documents and settings\odile\application data\bsplayer pro\bsplayer.xml 	Objets détectés : Trace.File.BSplayer!A2
Value: HKEY_USERS\S-1-5-21-606747145-1682526488-1801674531-1005\Software\BST\bsplayerv1 --> AppPath 	Objets détectés : Trace.Registry.BSplayer!A2
Value: HKEY_USERS\S-1-5-21-606747145-1682526488-1801674531-1005\Software\BST\bsplayerv1 --> AppVer 	Objets détectés : Trace.Registry.BSplayer!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\EventHandlers\PlayCDAudioOnArrival --> BSplayerCDDA 	Objets détectés : Trace.Registry.BSplayer!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\BSplayerCDDA --> Action 	Objets détectés : Trace.Registry.BSplayer!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\BSplayerCDDA --> DefaultIcon 	Objets détectés : Trace.Registry.BSplayer!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\BSplayerCDDA --> InvokeProgID 	Objets détectés : Trace.Registry.BSplayer!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\BSplayerCDDA --> InvokeVerb 	Objets détectés : Trace.Registry.BSplayer!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\BSplayerCDDA --> Provider 	Objets détectés : Trace.Registry.BSplayer!A2
C:\Documents and Settings\Odile\Application Data\Mozilla\Firefox\Profiles\pg7quv9h.default\cookies.sqlite:1261239035500000 	Objets détectés : Trace.TrackingCookie.doubleclick.net!A2

Analysé

Fichiers : 	392
Traces : 	659639
Cookies : 	300
Processus : 	40

Objets trouvés

Fichiers : 	10
Traces : 	10
Cookies : 	1
Processus : 	0
Clés de Registre : 	0

Fin du balayage :	20/12/2009 11:59:55
Temps du balayage :	0:00:57
_________________________

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:36:12, on 19/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe
C:\Program Files\G DATA\InternetSecurity\AVKTray\AVKTray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NetMeter\NetMeter.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe
C:\Program Files\G DATA\InternetSecurity\AVK\AVKService.exe
C:\Program Files\G DATA\InternetSecurity\AVK\AVKWCtl.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\G DATA\InternetSecurity\Firewall\GDFwSvc.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2scan.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\Program Files\Internet Explorer\Iexplore.exe
D:\D_L\DL_firefox\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)
O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe
O4 - HKLM\..\Run: [G DATA AntiVirus Trayapplication] C:\Program Files\G DATA\InternetSecurity\AVKTray\AVKTray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [a-squared] "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe" /d=60
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [C:\Program Files\NetMeter\NetMeter.exe] C:\Program Files\NetMeter\NetMeter.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://ushousecall02.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {22492231-AEF0-49FC-9180-CE8969AB1273} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5855E274-419E-497D-AFD3-98D513352C8B}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{5855E274-419E-497D-AFD3-98D513352C8B}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{5855E274-419E-497D-AFD3-98D513352C8B}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe
O23 - Service: Planificateur G DATA (AVKService) - G DATA Software AG - C:\Program Files\G DATA\InternetSecurity\AVK\AVKService.exe
O23 - Service: Gardien d'AntiVirus (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA\InternetSecurity\AVK\AVKWCtl.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Pare-feu personnel G DATA (GDFwSvc) - G DATA Software AG - C:\Program Files\G DATA\InternetSecurity\Firewall\GDFwSvc.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\GEST\GSvr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LVSrvLauncher - Labtec Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcappcapd.exe

Lyonnais92 · Accepted Answer

Bonjour,

On va utiliser ComboFix.exe. Rends toi sur cette page web pour obtenir les liens de téléchargement, ainsi que des instructions pour exécuter l'outil:

* Vérifie que tu as fermé/désactivé tous les programmes anti-virus, anti-malware ou anti-spyware afin qu'ils n'interfèrent pas avec le travail de ComboFix.

Envoie le contenu de C:\ComboFix.txt dans ta prochaine réponse afin que je l'examine

ayrton3333 · Answer

RE!
J'ai tout fais comme il a été indiqué enregistrer combofix désativer l'antvirus et le reste et lorsque je clic sur "exécuter" de l'icône Combofix il ne se passe absolument rien... j'ai attendu de tres longue minutes .. j'ai recommencer toujours rien..!!!....

Le sioux · Answer

Bonjour ayrton, Lyonnais

En attendant Lyonnais

Supprime ComboFix sur ton Bureau.

Puis  télécharge une nouvelle version en la renommant pendant le téléchargement , regarde ici comment faire :

https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm

Salut.

ayrton3333 · Answer

après plusieurs démarrage et redémarrage  de l'ordi tout seul voici le rapport:

ComboFix 09-12-19.03 - Odile 20/12/2009  15:34:30.1.4 - x86
Microsoft Windows XP Édition familiale  5.1.2600.3.1252.33.1036.18.3582.3034 [GMT 1:00]
Lancé depuis: c:\documents and settings\Odile\Bureau\bibitte.exe
AV: a-squared Anti-Malware *On-access scanning disabled* (Updated) {0F8591BB-342B-4493-91C3-4E948ED21255}
AV: G DATA InternetSecurity 2009 *On-access scanning disabled* (Updated) {71310606-6F3B-49F2-9A81-8315AA75FBB3}
FW: Pare-feu personnel G DATA *disabled* {6E6F4BA6-C07D-443F-A130-0A57DA59A082}
SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
 * Un antivirus résident est actif


AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Odile\Application Data\Desktopicon
c:\documents and settings\Odile\Application Data\Desktopicon\eBay.ico
c:\documents and settings\Odile\Application Data\Desktopicon\uninst.exe
c:\windows\system32\drivers\H8SRTridwyltpqp.sys
c:\windows\system32\H8SRTgkcpkonipy.dll
c:\windows\system32\H8SRTlrsvdsqoex.dll
c:\windows\system32\H8SRTwmretultlw.dat
c:\windows\system32\krl32mainweq.dll
c:\windows\system32egsvr32.dll
c:\windows\system32\srcr.dat

.
(((((((((((((((((((((((((((((((((((((((   Pilotes/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_H8SRTd.sys
-------\Legacy_H8SRTd.sys


(((((((((((((((((((((((((((((   Fichiers créés du 2009-11-20 au 2009-12-20  ))))))))))))))))))))))))))))))))))))
.

2009-12-20 11:18 . 2009-12-20 11:26	--------	d-----w-	C:\ToolBar SD
2009-12-19 10:12 . 2009-12-20 11:50	--------	d-----w-	c:\program files\a-squared Anti-Malware
2009-12-19 10:04 . 2009-12-19 10:11	--------	d-----w-	c:\program files\a-squared Free
2009-12-19 09:56 . 2009-12-19 18:24	--------	d-----w-	c:\program files\Spybot - Search & Destroy
2009-12-19 09:48 . 2009-12-19 09:48	--------	d-----w-	c:\program files\Unlocker
2009-12-19 07:40 . 2007-12-24 16:37	138384	----a-w-	c:\windows\system32\drivers	mcomm.sys
2009-12-19 07:40 . 2009-12-19 08:48	--------	d-----w-	c:\documents and settings\Odile\Application Data\HouseCall 6.6
2009-12-19 07:40 . 2009-12-19 07:40	--------	d-----w-	c:\windows\system32\HouseCall 6.6
2009-12-13 17:00 . 2009-12-13 17:23	--------	d-----w-	c:\documents and settings\Odile\Application Data\R-Wipe&Clean
2009-12-13 10:50 . 2009-12-13 10:50	--------	d-----w-	c:\documents and settings\Odile\Application Data\Intermedia Software
2009-12-13 10:50 . 2009-12-13 10:50	--------	d-----w-	c:\documents and settings\All Users\Application Data\Intermedia Software
2009-12-13 10:50 . 2009-12-13 10:50	--------	d-----w-	c:\program files\Intermedia Software
2009-12-13 10:50 . 2003-04-18 14:29	44544	----a-w-	c:\windows\system32\msxml4a.dll
2009-12-10 06:35 . 2009-12-19 18:21	--------	d-----w-	c:\program files\Error Repair Professional
2009-11-30 18:40 . 2009-11-30 18:40	--------	d-----w-	c:\documents and settings\All Users\Application Data\F-Secure
2009-11-29 12:11 . 2009-11-29 12:11	--------	d-----w-	c:\documents and settings\All Users\Application Data\Macrovision
2009-11-29 11:48 . 2009-11-29 11:48	--------	d-----w-	c:\documents and settings\Odile\Local Settings\Application Data\Installer3952
2009-11-24 16:46 . 2009-11-29 12:25	--------	d-----w-	c:\program files\AGEIA Technologies
2009-11-24 16:46 . 2009-11-24 16:46	--------	d-----w-	c:\windows\system32\AGEIA
2009-11-24 16:45 . 2009-11-24 16:45	--------	d-----w-	c:\program files\Fichiers communs\Wise Installation Wizard
2009-11-24 16:45 . 2009-11-24 16:45	--------	d-----w-	c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2009-11-24 16:45 . 2009-11-24 16:45	--------	d-----w-	c:\program files\NVIDIA Corporation
2009-11-24 16:44 . 2009-11-24 16:44	--------	d-----w-	C:\NVIDIA

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-20 14:47 . 2008-10-23 15:25	8224	----a-w-	c:\documents and settings\Odile\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-12-19 18:22 . 2008-10-29 06:28	--------	d-----w-	c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-19 18:20 . 2008-10-18 17:38	--------	d-----w-	c:\program files\Steam
2009-12-10 16:48 . 2008-04-14 12:00	81386	----a-w-	c:\windows\system32\perfc00C.dat
2009-12-10 16:48 . 2008-04-14 12:00	503210	----a-w-	c:\windows\system32\perfh00C.dat
2009-12-10 06:30 . 2008-10-18 14:25	--------	d-----w-	c:\documents and settings\All Users\Application Data\Microsoft Help
2009-11-29 13:38 . 2008-10-25 12:35	--------	d-----w-	c:\program files\CCleaner
2009-11-29 12:09 . 2008-10-18 14:11	--------	d-----w-	c:\program files\Fichiers communs\Adobe
2009-11-29 12:08 . 2008-10-11 16:53	--------	d--h--w-	c:\program files\InstallShield Installation Information
2009-11-16 18:28 . 2009-11-12 17:23	--------	d-----w-	c:\program files\CV Expert 3
2009-11-13 18:41 . 2009-11-13 18:41	--------	d-----w-	c:\program files\Razer
2009-11-13 18:41 . 2009-11-13 18:41	--------	d-----w-	c:\documents and settings\Odile\Application Data\InstallShield
2009-11-12 17:23 . 2009-11-12 17:23	--------	d-----w-	c:\program files\Fichiers communs\Borland Shared
2009-11-12 17:21 . 2009-11-12 17:21	--------	d-----w-	c:\program files\Antadis
2009-11-12 17:20 . 2008-10-11 16:52	--------	d-----w-	c:\program files\Fichiers communs\InstallShield
2009-11-11 12:39 . 2009-11-10 10:26	--------	d-----w-	c:\program files\Micro Application
2009-11-10 13:51 . 2009-11-10 13:51	437	----a-w-	c:\windows\MICRO APPLICATION Destinataire.dat
2009-11-10 13:51 . 2009-11-10 13:51	377	----a-w-	c:\windows\MICRO APPLICATION Expéditeur.dat
2009-11-10 10:22 . 2009-11-10 10:13	--------	d-----w-	c:\documents and settings\Odile\Application Data\DAEMON Tools Lite
2009-11-10 10:15 . 2009-11-10 10:13	--------	d-----w-	c:\program files\DAEMON Tools Lite
2009-11-10 10:14 . 2009-11-10 10:14	691696	----a-w-	c:\windows\system32\drivers\sptd.sys
2009-11-10 10:13 . 2009-11-10 10:13	--------	d-----w-	c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2009-11-09 18:30 . 2008-10-18 14:40	--------	d-----w-	c:\program files\Mozilla Thunderbird
2009-11-09 17:15 . 2008-10-18 15:29	--------	d-----w-	c:\program files\eMule
2009-11-09 16:22 . 2009-08-19 19:10	--------	d-----w-	c:\program files\Yahoo!
2009-11-09 15:30 . 2009-11-09 15:30	93360	----a-w-	c:\windows\system32\drivers\SBREDrv.sys
2009-11-09 15:30 . 2009-07-09 06:07	15880	----a-w-	c:\windows\system32\lsdelete.exe
2009-11-09 15:29 . 2009-11-09 15:28	--------	dc-h--w-	c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-11-08 09:45 . 2009-11-08 09:45	--------	d-----w-	c:\documents and settings\All Users\Application Data\IM
2009-11-08 09:45 . 2009-11-08 09:44	--------	d-----w-	c:\program files\IncrediMail
2009-11-08 09:44 . 2009-11-08 09:44	--------	d-----w-	c:\documents and settings\All Users\Application Data\IncrediMail
2009-10-29 07:42 . 2008-04-14 12:00	916480	----a-w-	c:\windows\system32\wininet.dll
2009-10-21 05:39 . 2008-04-14 12:00	75776	----a-w-	c:\windows\system32\strmfilt.dll
2009-10-21 05:39 . 2008-04-14 12:00	25088	----a-w-	c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2008-04-14 12:00	265728	----a-w-	c:\windows\system32\drivers\http.sys
2009-10-14 18:00 . 2009-10-14 17:20	376832	----a-w-	c:\windows\system32\AegisI5Installer.exe
2009-10-13 10:33 . 2008-04-14 12:00	271360	----a-w-	c:\windows\system32\oakley.dll
2009-10-12 13:39 . 2008-04-14 12:00	79872	----a-w-	c:\windows\system32aschap.dll
2009-10-12 13:39 . 2008-04-14 12:00	150528	----a-w-	c:\windows\system32astls.dll
2009-10-03 08:04 . 2009-10-03 07:37	120	----a-w-	C:\drmHeader.bin
2009-09-27 17:19 . 2009-09-27 17:19	3674112	----a-w-	c:\windows\system32
vwssr.dll
2009-09-27 15:12 . 2009-09-27 15:12	2194024	----a-w-	c:\windows\system32
vcuvid.dll
2009-09-27 15:12 . 2009-09-27 15:12	1714792	----a-w-	c:\windows\system32
vcuvenc.dll
2009-09-27 15:12 . 2009-09-27 15:12	1604482	----a-w-	c:\windows\system32
vdata.bin
2009-09-27 15:12 . 2008-10-13 13:03	490088	----a-w-	c:\windows\system32
vudisp.exe
2009-09-27 15:12 . 2008-06-26 04:24	888832	----a-w-	c:\windows\system32
vapi.dll
2009-09-27 15:12 . 2008-06-26 04:24	7655872	----a-w-	c:\windows\system32\drivers
v4_mini.sys
2009-09-27 15:12 . 2008-06-26 04:24	5900416	----a-w-	c:\windows\system32
v4_disp.dll
2009-09-27 15:12 . 2008-06-26 04:24	2007040	----a-w-	c:\windows\system32
vcuda.dll
2009-09-27 15:12 . 2008-06-26 04:24	170600	----a-w-	c:\windows\system32
vcodins.dll
2009-09-27 15:12 . 2008-06-26 04:24	170600	----a-w-	c:\windows\system32
vcod.dll
2009-09-27 15:12 . 2008-06-26 04:24	10756096	----a-w-	c:\windows\system32
voglnt.dll
2009-09-24 08:24 . 2008-10-13 13:03	490088	----a-w-	c:\windows\system32
vuninst.exe
2009-09-23 12:55 . 2009-07-09 05:52	64288	----a-w-	c:\windows\system32\drivers\Lbd.sys
2009-07-01 19:09 . 2009-07-01 19:09	8192	--sha-w-	c:\program files\Thumbs.db
2009-05-01 21:02 . 2009-05-01 21:02	1044480	----a-w-	c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02	200704	----a-w-	c:\program files\mozilla firefox\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"c:\program files\NetMeter\NetMeter.exe"="c:\program files\NetMeter\NetMeter.exe" [2007-08-11 331264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GDFirewallTray"="c:\program files\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe" [2008-09-09 1037992]
"G DATA AntiVirus Trayapplication"="c:\program files\G DATA\InternetSecurity\AVKTray\AVKTray.exe" [2008-11-24 958024]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-09-27 13918208]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-09-27 86016]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2009-10-26 15872]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-12-26 413696]
"a-squared"="c:\program files\A-SQUARED ANTI-MALWARE\a2guard.exe" [2009-11-05 3279192]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^User^Menu Démarrer^Programmes^Démarrage^Adobe Gamma.lnk]
path=c:\documents and settings\User\Menu Démarrer\Programmes\Démarrage\Adobe Gamma.lnk
backup=c:\windows\pss\Adobe Gamma.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^User^Menu Démarrer^Programmes^Démarrage^Outil de notification Live Search.lnk]
path=c:\documents and settings\User\Menu Démarrer\Programmes\Démarrage\Outil de notification Live Search.lnk
backup=c:\windows\pss\Outil de notification Live Search.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\36X Raid Configurer]
2007-08-29 08:55	1966080	------r-	c:\windows\system32\xRaidSetup.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ad-Watch]
2009-11-19 22:15	788880	----a-w-	c:\program files\Lavasoft\Ad-Aware\AAWTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2009-09-04 11:08	935288	----a-r-	c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
2007-09-10 23:43	67488	----a-w-	c:\program files\Adobe\Photoshop Elements 6.0\apdproxy.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-10-03 03:08	35696	----a-w-	c:\program files\Adobe\Reader 9.0\Readereader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2005-05-03 10:43	69632	------r-	c:\windows\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
2006-10-09 09:28	139264	----a-w-	c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2007-04-04 01:50	1603152	----a-w-	c:\program files\Canon\MyPrinter\BJMYPRT.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
2007-05-15 01:01	644696	----a-w-	c:\program files\Canon\SolutionMenu\CNSLMAIN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2009-10-30 11:57	369200	----a-w-	c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DeathAdder]
2007-05-07 16:40	159744	----a-w-	c:\program files\Razer\DeathAdderazerhid.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail]
2009-09-07 16:37	251336	----a-w-	c:\program files\IncrediMail\bin\IncMail.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JMB36X IDE Setup]
2007-03-20 06:36	36864	------r-	c:\windows\RaidTool\xInsIDE.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager]
2007-03-06 15:48	488984	----a-w-	c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]
2007-03-06 15:58	1060376	----a-w-	c:\program files\Labtec\WebCam10\WebCam10.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-13 17:34	1695232	------w-	c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2007-10-18 09:34	5724184	----a-w-	c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2006-01-12 14:40	155648	----a-w-	c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2009-09-27 17:19	86016	----a-w-	c:\windows\system32
vmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2008-12-26 07:19	413696	----a-w-	c:\program files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2008-02-13 06:31	16857600	------r-	c:\windows\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2009-02-04 11:27	23975720	----a-r-	c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2009-12-14 18:00	1217808	----a-w-	c:\program files\Steam\steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2008-11-30 18:57	136600	----a-w-	c:\program files\Java\jre6\bin\jusched.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"%windir%\system32\sessmgr.exe"=
"c:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"=
"c:\Program Files\eMule\emule.exe"=
"c:\Program Files\Steam\steamapps\tamazigh33@wanadoo.fr\condition zero\hl.exe"=
"c:\Program Files\Bonjour\mDNSResponder.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Windows Live\Messenger\livecall.exe"=
"c:\Program Files\Skype\Phone\Skype.exe"=
"c:\Program Files\IncrediMail\bin\IncMail.exe"=
"c:\Program Files\IncrediMail\bin\ImApp.exe"=
"c:\Program Files\IncrediMail\bin\ImpCnt.exe"=

R0 GDNdisIc;GDNdisIc;c:\windows\system32\drivers\GDNdisIc.sys [28/03/2009 18:17 22272]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [09/07/2009 06:52 64288]
R1 GRD;G DATA Rootkit Detector Driver;c:\windows\system32\drivers\GRD.sys [28/03/2009 18:48 68424]
R2 a2AntiMalware;a-squared Anti-Malware Service;c:\program files\a-squared Anti-Malware\a2service.exe [19/12/2009 11:12 1858144]
R2 a2free;a-squared Free Service;c:\program files\a-squared Free\a2service.exe [19/12/2009 11:04 1858144]
R2 AVKProxy;G DATA AntiVirus Proxy;c:\program files\Fichiers communs\G DATA\AVKProxy\AVKProxy.exe [08/09/2008 15:32 1016904]
R2 AVKService;Planificateur G DATA;c:\program files\G DATA\InternetSecurity\AVK\AVKService.exe [08/09/2008 15:32 386120]
R2 AVKWCtl;Gardien d'AntiVirus;c:\program files\G DATA\InternetSecurity\AVK\AVKWCtl.exe [14/08/2008 08:55 1185496]
R2 GDTdiInterceptor;GDTdiInterceptor;c:\windows\system32\drivers\GDTdiIcpt.sys [28/03/2009 18:17 51016]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [24/09/2009 12:17 1184912]
R3 DAdderFltr;DeathAdder Mouse;c:\windows\system32\drivers\dadder.sys [13/11/2009 19:42 10880]
R3 GDFwSvc;Pare-feu personnel G DATA;c:\program files\G DATA\InternetSecurity\Firewall\GDFwSvc.exe [15/08/2008 14:51 1407976]
R3 GDMnIcpt;GDMnIcpt;c:\windows\system32\drivers\MiniIcpt.sys [28/03/2009 18:18 48712]
R3 HookCentre;HookCentre;c:\windows\system32\drivers\HookCentre.sys [28/03/2009 18:18 32328]
S3 GEST Service;GEST Service for program management.;c:\program files\GIGABYTE\GEST\gsvr.exe [11/10/2008 17:53 55816]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers
pf.sys [06/11/2007 21:22 34064]
S4 Gdmnoptapmt;Gdmnoptapmt; [x]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [10/11/2009 11:14 691696]

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - mchInjDrv

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx	REG_MULTI_SZ   	scan
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
mWindow Title = 
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: {5855E274-419E-497D-AFD3-98D513352C8B} = 192.168.1.1
FF - ProfilePath - c:\documents and settings\Odile\Application Data\Mozilla\Firefox\Profiles\pg7quv9h.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=867034&p=
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -

MSConfigStartUp-'Ashampoo AntiSpyWare 2 Guard' - c:\program files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWare2Guard.exe
MSConfigStartUp-Ashampoo AntiSpyWare 2 Guard - c:\program files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWare2Guard.exe
MSConfigStartUp-GEST - c:\program files\GIGABYTE\GEST\RUN.exe
MSConfigStartUp-Google Update - c:\documents and settings\User\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
MSConfigStartUp-nwiz - c:\program files\NVIDIA Corporation
View
wiz.exe
MSConfigStartUp-SpyEmergency - c:\program files\NETGATE\Spy Emergency 2008\SpyEmergency.exe
MSConfigStartUp-UIWatcher - c:\program files\Ashampoo\Ashampoo UnInstaller 3\UIWatcher.exe
MSConfigStartUp-Vidalia - c:\program files\Vidalia Bundle\Vidalia\vidalia.exe
AddRemove-eBay Icon - c:\documents and settings\Odile\Application Data\Desktopicon\uninst.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-20 15:46
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-606747145-1682526488-1801674531-1005\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(1796)
c:\program files\Fichiers communs\Ahead\Lib\NeroSearchBar.dll
c:\program files\Fichiers communs\Ahead\Lib\MFC71U.DLL
c:\program files\Fichiers communs\Ahead\Lib\BCGCBPRO800u.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\eappprxy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32
vsvc32.exe
c:\windows\system32\RUNDLL32.EXE
c:\program files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Heure de fin: 2009-12-20  15:56:38 - La machine a redémarré
ComboFix-quarantined-files.txt  2009-12-20 14:56

Avant-CF: 96 991 739 904 octets libres
Après-CF: 97 281 441 792 octets libres

- - End Of File - - 1E55B50FDCB5D3B751F3510A89CDCAC2

mici

Lyonnais92 · Answer

Re,

merci Le sioux.

===

ayrton,

comment va l'ordi maintenant ?

===

Je voudrais vérifier ce fichier :

Rends toi sur ce site :

https://www.virustotal.com/gui/

Clique sur parcourir et cherche ce fichier : c:\program files\Windows Live\Messenger\msnmsgr.exe 

Clique sur Send File.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta réponse. 

Si VirusTotal indique que le fichier a déjà été analysé, cliquer sur le bouton Reanalyse le fichier maintenant  

===

Continue comme ça :

1) Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

2) Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton Bureau.

hxxp://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

3) A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

4) Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

5) Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

6) MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue. La fenêtre principale de MBAM s'affiche :

7) Dans l'onglet analyse, vérifie que "Exécuter une analyse rapide"  est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

8) MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

9) A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

10) Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

11) MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

12) Ferme MBAM en cliquant sur Quitter.

13) Poste le rapport dans ta réponse

ayrton3333 · Answer

ok en attendant voici le rapport de virustotal demandé:
Antivirus 	Version 	Dernière mise à jour 	Résultat
a-squared 	4.5.0.41 	2009.11.11 	-
AhnLab-V3 	5.0.0.2 	2009.11.11 	-
AntiVir 	7.9.1.61 	2009.11.11 	-
Antiy-AVL 	2.0.3.7 	2009.11.11 	-
Authentium 	5.2.0.5 	2009.11.11 	-
Avast 	4.8.1351.0 	2009.11.11 	-
AVG 	8.5.0.423 	2009.11.11 	-
BitDefender 	7.2 	2009.11.11 	-
CAT-QuickHeal 	10.00 	2009.11.11 	-
ClamAV 	0.94.1 	2009.11.11 	-
Comodo 	2918 	2009.11.11 	-
DrWeb 	5.0.0.12182 	2009.11.11 	-
eSafe 	7.0.17.0 	2009.11.11 	-
eTrust-Vet 	35.1.7115 	2009.11.11 	-
F-Prot 	4.5.1.85 	2009.11.10 	-
F-Secure 	9.0.15370.0 	2009.11.09 	-
Fortinet 	3.120.0.0 	2009.11.11 	-
GData 	19 	2009.11.11 	-
Ikarus 	T3.1.1.74.0 	2009.11.11 	-
Jiangmin 	11.0.800 	2009.11.11 	-
K7AntiVirus 	7.10.893 	2009.11.10 	-
Kaspersky 	7.0.0.125 	2009.11.11 	-
McAfee 	5798 	2009.11.10 	-
McAfee+Artemis 	5798 	2009.11.10 	-
McAfee-GW-Edition 	6.8.5 	2009.11.11 	-
Microsoft 	1.5202 	2009.11.11 	-
NOD32 	4596 	2009.11.11 	-
Norman 	6.03.02 	2009.11.10 	-
nProtect 	2009.1.8.0 	2009.11.11 	-
Panda 	10.0.2.2 	2009.11.10 	-
PCTools 	7.0.3.5 	2009.11.11 	-
Prevx 	3.0 	2009.11.11 	-
Rising 	22.21.02.09 	2009.11.11 	-
Sophos 	4.47.0 	2009.11.11 	-
Sunbelt 	3.2.1858.2 	2009.11.11 	-
Symantec 	1.4.4.12 	2009.11.11 	-
TheHacker 	6.5.0.2.065 	2009.11.11 	-
TrendMicro 	9.0.0.1003 	2009.11.11 	-
VBA32 	3.12.10.11 	2009.11.10 	-
ViRobot 	2009.11.11.2031 	2009.11.11 	-
VirusBuster 	4.6.5.0 	2009.11.10 	-
Information additionnelle
File size: 5724184 bytes
MD5   : 97384875b6d03831b2d1820ab8952f67
SHA1  : 3bb26b614eff3aa28970ccb325249499b05fe61d
SHA256: 679209a437b603cebb9026f51d29d5f6083ad0d83d7583a077c99956e313e647
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0xDA741
timedatestamp.....: 0x4717A53B (Thu Oct 18 20:26:03 2007)
machinetype.......: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x4BBFC6 0x4BC000 6.30 62ed61cde92cb5af4f29acd638a51f3f
.data 0x4BD000 0x89D88 0x89200 5.06 2fc0b8a2478dacad820021663b23d2c6
.rsrc 0x547000 0x2DD1C 0x2DE00 4.89 0294333164cc084a935ccfd1ee1c9af1

( 28 imports )

> advapi32.dll: MakeAbsoluteSD, ConvertStringSecurityDescriptorToSecurityDescriptorW, TraceEvent, RegCloseKey, RegEnumKeyExW, RegCreateKeyExW, RegOpenKeyExW, RegQueryValueExW, RegSetValueExW, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, RegDeleteKeyA, RevertToSelf, AccessCheck, IsValidSecurityDescriptor, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorDacl, AddAccessAllowedAce, InitializeAcl, GetLengthSid, InitializeSecurityDescriptor, OpenProcessToken, OpenThreadToken, ImpersonateSelf, CryptReleaseContext, CryptDestroyHash, CryptCreateHash, CryptAcquireContextW, CryptHashData, CryptGetHashParam, QueryServiceStatusEx, CloseServiceHandle, OpenServiceW, OpenSCManagerW, CryptDestroyKey, CryptDeriveKey, CryptEncrypt, CryptDecrypt, RegDeleteValueW, CryptGenRandom, CryptImportKey, CryptSetHashParam, RegEnumKeyA, RegEnumValueA, RegQueryInfoKeyW, RegDeleteValueA, RegQueryValueExA, RegSetValueExA, RegCreateKeyExA, RegOpenKeyExA
> comctl32.dll: ImageList_Draw, -, -, -, ImageList_ReplaceIcon, ImageList_DrawEx, ImageList_Remove, ImageList_Add, InitCommonControlsEx, ImageList_Destroy, ImageList_AddMasked, ImageList_Create, -, ImageList_GetIcon
> contactsux.dll: _GetGroupCount@Contacts@@YGKPAPAUIObjectPoolView@@@Z, _GetNumPendingRequests@Contacts@@YGKXZ, _IsAbchFailure@Contacts@@YG_NJ@Z, _GetIContactFromPhoneNumber@Contacts@@YGJPB_WPAPAUIContact@@@Z, _GetIContactFromEmail@Contacts@@YGJPB_WPAPAUIContact@@@Z, _CommitContactProperty@Contacts@@YGJABVCUpdateProperties@@@Z, _Synchronize@Contacts@@YGJW4ESyncTrigger@1@@Z, _SetStorageServer@Contacts@@YGXPBD0@Z, _LaunchContactDeleteDialog@Contacts@@YGJPAUIContact@@PAUHWND__@@@Z, _LaunchContactEditDialog@Contacts@@YGJPAUIContact@@_NPAUHWND__@@PAPAUIContactDialog@@@Z, _LaunchGroupEditDialog@Contacts@@YGJPAUIGroup@@PAUHWND__@@@Z, _LaunchGroupDeleteDialog@Contacts@@YGJKPAUHWND__@@@Z, _SetUseSsl@Contacts@@YGX_N@Z, _EnsureDefaultUiGroups@Contacts@@YGJPAUIStoreTransactionCallback@@PAPAUIUnknown@@@Z, _ReadyHelperObjects@Contacts@@YGXXZ, _LaunchContactEditDialog@Contacts@@YGJPB_WW4EEditDialogFillField@1@PAUHWND__@@_N@Z, _GetMeContact@Contacts@@YGJPAPAUIContact@@@Z, _SetCountingOfSocialNetworkRequests@Contacts@@YGJH@Z, _SetMarket@Contacts@@YGJPB_W@Z, _SetDefaultTransform@Contacts@@YGJPAVElement@DirectUI@@@Z, IsSpaceSet, _IsContactMe@@YG_NPAUIContact@@@Z, _SubscribeToLiveContactProfile@Contacts@@YGJPAUIContact@@@Z, _ViewMap@Contacts@@YGJPAUIContact@@W4EAddressType@@@Z, IsContactProfileSet, IsProfileSet, _ContactHasPhone@@YG_NPAUIContact@@@Z, _QueryContactCommand@@YGJPAUIBuddyListHost@@PAUIContact@@HAA_N2@Z, _IsContactMe@@YG_NPAUCONTACT@@@Z, _GetHost@Contacts@@YGJPAPAUIBuddyListHost@@@Z, _SetPolicyFlags@Contacts@@YGXW4EPolicyFlags@1@@Z, _GetStoreInfoFromDataObject@@YGJPAUIDataObject@@ABU_GUID@@PAPAXPAPAUIStoreObject@@@Z, _GetGroupContacts@Contacts@@YGJKPAPAUIObjectPoolView@@@Z, _SetAuth@Contacts@@YGXPB_W00@Z, _IsSyncOwner@Contacts@@YG_NXZ, _ReadyAbch@Contacts@@YGXXZ, __1CContactElemBase@@UAE@XZ, _OnDestroy@CContactElemBase@@UAEXXZ, _OnEvent@CContactElemBase@@UAEXPAUEvent@DirectUI@@@Z, _UpdateList@CContactElemBase@@MAEJ_N@Z, _ShouldSelectFirstItemInWordWheel@CContactElemBase@@UAE_NXZ, _Setup@CContactElemBase@@MAEJXZ, _CreateViewFilter@CContactElemBase@@MAEJXZ, _EnsureView@CContactElemBase@@MAEJK@Z, _DestroyAndReleaseElements@CContactElemBase@@MAEJXZ, _FindElements@CContactElemBase@@MAEJXZ, _EnsureFilter@CContactElemBase@@MAEJK_N@Z, _CheckForZeroListItems@CContactElemBase@@MAEXXZ, _SetSelectionOnChildren@CContactElemBase@@MAEJPAUIUnknown@@@Z, _SetDataSourceFilter@CContactElemBase@@MAEJXZ, _OnListenedPropertyChanged@CContactElemBase@@UAEXPAVElement@DirectUI@@PAUPropertyInfo@3@HPAVValue@3@2@Z, _GetSelection@CContactElemBase@@UAEJPAPAUIUnknown@@@Z, _SetSelection@CContactElemBase@@UAEJPAUIUnknown@@@Z, _AffectParticipant@CContactElemBase@@UAEJPAUIParticipant@@W4ParticipantModificationOperation@@@Z, _AffectParticipant@CContactElemBase@@UAEJABUPARTICIPANT@@W4ParticipantModificationOperation@@@Z, _GetSelectionChangeCallback@CContactElemBase@@UAEJPAPAUIParticipantSelectionControl@Contacts@@@Z, _SetSelectionChangeCallback@CContactElemBase@@UAEJPAUIParticipantSelectionControl@Contacts@@@Z, _UpdateList@CContactElemBase@@UAEJPAUIABViewFilter@@_N@Z, _GetSelectedObject@CContactElemBase@@UAEJPAPAUIUnknown@@@Z, _GetCmdTarget@CContactElemBase@@UAEJPAPAUIOleCommandTarget@@@Z, _SetWordWheelUpdateEnabled@CContactElemBase@@UAEX_N@Z, _SetFocusOnItem@CContactElemBase@@UAEJJ@Z, _OnTimer@CContactElemBase@@UAEXIKK@Z, _GetTimerHwndElement@CContactElemBase@@UAEPAVHWNDElement@DirectUI@@XZ, _Cleanup@CContactElemBase@@IAEXXZ, _QueryStatus@CContactElemBase@@UAGJPBU_GUID@@KPAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z, _CannotMobileMessage@@YG_NPBUCONTACT@@@Z, _Class@CWordWheelElement@@2PAUIClassInfo@DirectUI@@A, _GroupingProp@CContactElemBase@@2PAUPropertyInfo@DirectUI@@A, _GetSigninCookie@Contacts@@YGKXZ, _GetFilterFromSettings@CContactElemBase@@IAEHXZ, _GetViewFromSettings@CContactElemBase@@IAEHXZ, _OnPropertyChanged@CContactElemBase@@UAEXPAUPropertyInfo@DirectUI@@HPAVValue@3@1@Z, _Class@CContactElemBase@@2PAUIClassInfo@DirectUI@@A, _AddToList@CBaseGrouping@@MAEJKPAUIABDataSource@@AAVCABListItemArray@@@Z, __0CContactElemBase@@QAE@XZ, _Create@CABDataSource@@SGJKPAPAUIABDataSource@@W4ESORTBYCOLUMN@@@Z, _Initialize@CContactElemBase@@QAEJXZ, _AddToList@CPartitionedGrouping@@UAEJKPAUIABDataSource@@AAVCABListItemArray@@@Z, _DetermineZeroContactsState@CContactElemBase@@MAE_AW4EZeroContactsElement@@_N@Z, _IsInOtherGroup@@YG_NPBUCONTACT@@@Z, __0CFilteredGrouping@@QAE@IIP6G_NPBUCONTACT@@@Z111@Z, MsnContactUnInitProcess, _GetContactCount@Contacts@@YGKPAPAUIObjectPoolView@@@Z, _IsWordWheelInUse@CContactElemBase@@QAE_NXZ, _SetGroupViewToSettings@CContactElemBase@@IAEXK@Z, _GetGroupViewFromSettings@CContactElemBase@@IAEHXZ, _Register@CContactElemBase@@SGJXZ, _EnsureView@CWordWheelElement@@QAEJW4eWordWheelView@@@Z, _Exec@CContactElemBase@@UAGJPBU_GUID@@KKPAUtagVARIANT@@1@Z, __0CBuddyListElement@@QAE@XZ, _OnInput@CBuddyListElementBase@@UAEXPAUInputEvent@DirectUI@@@Z, _OnDestroy@CBuddyListElementBase@@UAEXXZ, _OnEvent@CBuddyListElementBase@@UAEXPAUEvent@DirectUI@@@Z, _OnHosted@CBuddyListElementBase@@UAEXPAVElement@DirectUI@@@Z, _OnUnHosted@CBuddyListElementBase@@UAEXPAVElement@DirectUI@@@Z, _Initialize@CBuddyListElementBase@@UAEJXZ, _ClearSelection@CBuddyListElementBase@@UAEXXZ, _IsWordWheelUpdateEnabled@CBuddyListElementBase@@UAE_NXZ, _IsWordWheelFilteringEnabled@CBuddyListElement@@UAE_NXZ, _SetFocusOnItem@CBuddyListElementBase@@UAEJJ@Z, _CreateItemList@CBuddyListElementBase@@MAEJXZ, _OnVirtualListCreated@CBuddyListElementBase@@MAEJPAVCBuddyVirtualList@@@Z, _OnScrollBarsChanged@CBuddyListElementBase@@MAEXPAVElement@DirectUI@@@Z, _GetHandleInputValue@CBuddyListElementBase@@MAE_AW4EHandleInput@@XZ, _GetSelectionMode@CBuddyListElementBase@@MAE_AW4VirtualListSelectionMode@@XZ, _ExecCommit@CBuddyListElementBase@@MAEJXZ, _ExpandCollapseItem@CBuddyListElementBase@@MAEJPAUIListItem@@_N@Z, _OnPoolViewEvent@CBuddyListElementBase@@UAEXW4EEvent@IObjectPoolViewCallback@@PAUIObjectPoolView@@@Z, _OnBegin@CBuddyListElementBase@@UAEXXZ, _OnInsert@CBuddyListElementBase@@UAEXPAUIStoreObject@@@Z, _OnChange@CBuddyListElementBase@@UAEXPAUIStoreObject@@PAUIObjectChangeDescription@@@Z, _OnDelete@CBuddyListElementBase@@UAEXPAUIStoreObject@@@Z, _OnEnd@CBuddyListElementBase@@UAEXXZ, _GetDataSource@CBuddyListElementBase@@UAEJPAPAUIUnknown@@@Z, _SetDataSource@CBuddyListElementBase@@UAEJPAUIUnknown@@@Z, _GetSelection@CBuddyListElementBase@@UAEJPAPAUIUnknown@@@Z, _SetDuiElement@CABPopupMenu@@UAEJPAVElement@DirectUI@@@Z, _ShowPopup@CABPopupMenu@@UAEJPAUtagPOINT@@PAVElement@DirectUI@@@Z, _IsReadOnlyGrouping@CABPopupMenu@@MAEJPA_N_N@Z, _GetParentGroup@CABPopupMenu@@MAEJPAPAUIGroup@@@Z, _OnTimer@CABPopupMenu@@MAEXXZ, _GetResource@CABPopupMenu@@MAEIXZ, __1CABPopupMenu@@MAE@XZ, _QueryStatus@CABPopupMenu@@UAGJPBU_GUID@@KPAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z, _DelayedExec@CABPopupMenu@@UAEJKU_GUID@@@Z, _SetReferencedEmail@CABPopupMenu@@UAEJPB_W@Z, _CreateUIContact@CBaseGrouping@@IAEJIPAPAUIContact@@K@Z, _Insert@CABListItemArray@@QAEHPAUIStoreObject@@K@Z, __0CGroupElement@@QAE@XZ, _OnDoubleClick@CGroupElement@@MAE_NXZ, _ShouldShowContextMenu@CGroupElement@@MAE_NXZ, _IsEditInlineCmd@CGroupElement@@MAE_NK@Z, __1CGroupElement@@UAE@XZ, _OnInput@CGroupElement@@UAEXPAUInputEvent@DirectUI@@@Z, _IsReadOnlyGroup@CGroupElement@@QAE_NXZ, _GetData@CGroupElement@@IAEJPAPAUCONTACTGROUP@@@Z, _GetIGroupFromGroupName@Contacts@@YGJPB_WPAPAUIGroup@@@Z, _OnEvent@CGroupElement@@UAEXPAUEvent@DirectUI@@@Z, _IsPublicContactFilesEncryptionEnabled@Contacts@@YGJPA_N@Z, _ConvertPublicContactFiles@Contacts@@YGJ_N@Z, _findCtry@CtryCode@@SGJKPA_WPAI@Z, _LoadCountryFromRegistry@CPhoneRegUtil@@SGKPAUHWND__@@KPBD1@Z, _InitComboBox@CtryCode@@SGJPAUHWND__@@HK@Z, _g_wzDream17@CDonationManager@@2PA_WA, _g_wzDream16@CDonationManager@@2PA_WA, _g_wzDream15@CDonationManager@@2PA_WA, _g_wzDream14@CDonationManager@@2PA_WA, _g_wzDream13@CDonationManager@@2PA_WA, _g_wzDream12@CDonationManager@@2PA_WA, _g_wzDream11@CDonationManager@@2PA_WA, _g_wzDream10@CDonationManager@@2PA_WA, _g_wzDream9@CDonationManager@@2PA_WA, _g_wzDream8@CDonationManager@@2PA_WA, _g_wzDream7@CDonationManager@@2PA_WA, _g_wzDream6@CDonationManager@@2PA_WA, _g_wzDream5@CDonationManager@@2PA_WA, _g_wzDream4@CDonationManager@@2PA_WA, _g_wzDream3@CDonationManager@@2PA_WA, _g_wzDream2@CDonationManager@@2PA_WA, _g_wzDream1@CDonationManager@@2PA_WA, _SetProxyUser@Contacts@@YGXPB_W@Z, _UpdatePolicy@Contacts@@YGJPB_W@Z, _DeleteItemFromSeal@Contacts@@YGJK@Z, _SetSelection@CBuddyListElementBase@@UAEJPAUIUnknown@@@Z, _AffectParticipant@CBuddyListElementBase@@UAEJPAUIParticipant@@W4ParticipantModificationOperation@@@Z, _AffectParticipant@CBuddyListElementBase@@UAEJABUPARTICIPANT@@W4ParticipantModificationOperation@@@Z, _GetSelectionChangeCallback@CBuddyListElementBase@@UAEJPAPAUIParticipantSelectionControl@Contacts@@@Z, _SetSelectionChangeCallback@CBuddyListElementBase@@UAEJPAUIParticipantSelectionControl@Contacts@@@Z, __0CWordWheelGrouping@@QAE@I@Z, TerminateSeal, RegisterMsnContactElements, InitializeSeal, _GetManager@Contacts@@YGJPAPAUIManager@1@@Z, _ConvertCodesToMap@CtryCode@@SGXPB_WAAV_$CRBMap@KEV_$CElementTraits@K@ATL@@V_$CElementTraits@E@2@@ATL@@@Z, _IsContactWvidBuddy@@YG_NPBUCONTACT@@@Z, _SetHost@Contacts@@YGJPAUIBuddyListHost@@@Z, _ABCMDToPhoneType@@YG_AW4SoftphoneContactPhoneType@@K@Z, _GetSigninUserName@Contacts@@YGXAAVCStr@@@Z, _CreateSqmAdapter@Contacts@@YGJABW4eSQMSessionType@@PAPAUIUnknown@@@Z, _CanMobileMessage@@YG_NPBUCONTACT@@@Z, _IsContactSomeKindOfBuddy@@YG_NPBUCONTACT@@@Z, _LaunchContactPicker@Contacts@@YGJW4ContactPickerStyle@@PAUHWND__@@PAPAUIContactPickerDialog@@@Z, _IsContactNotSomeBuddy@@YG_NPBUCONTACT@@@Z, _GetSubCollection@Contacts@@YGJW4STOREOBJECTTYPE@@PAUIObjectFilterer@@PAPAUIObjectPoolView@@_N@Z, _OnTimer@CBuddyListElementBase@@UAEXIKK@Z, _SetReferencedObject@CABPopupMenu@@UAEJPAUIStoreObject@@@Z, _Exec@CABPopupMenu@@UAGJPBU_GUID@@KKPAUtagVARIANT@@1@Z, __0CABPopupMenu@@IAE@XZ, _GetTimerHwndElement@CBuddyListElementBase@@UAEPAVHWNDElement@DirectUI@@XZ, __1CBuddyListElement@@UAE@XZ, _OnCanDrop@CBuddyListElement@@MAEXPAUQueryDropEvent@@@Z, _Class@CBuddyListElement@@2PAUIClassInfo@DirectUI@@A, _Register@CBuddyListElement@@SGJXZ, _IsContactBuddy@@YG_NPBUCONTACT@@@Z, _OnQueryDropEffect@CBuddyListElement@@MAEXPAUQueryDropEvent@@@Z, _GetRootHWNDOfElement@@YGPAUHWND__@@PAVElement@DirectUI@@@Z, _OnDrop@CBuddyListElement@@MAE_NPAUQueryDropEvent@@@Z, __0CContactElement@@QAE@XZ, _OnPropertyChanged@CListItemElement@@UAEXPAUPropertyInfo@DirectUI@@HPAVValue@3@1@Z, _OnHosted@CListItemElement@@UAEXPAVElement@DirectUI@@@Z, _OnUnHosted@CListItemElement@@UAEXPAVElement@DirectUI@@@Z, _DefaultAction@CListItemElement@@UAEJXZ, _ExecuteDefaultAction@CListItemElement@@UAE_NXZ, _OnDoubleClick@CContactElement@@MAE_NXZ, _ShouldShowContextMenu@CContactElement@@MAE_NXZ, _EnsurePopupMenuObject@CListItemElement@@MAEJXZ, _IsEditInlineCmd@CContactElement@@MAE_NK@Z, _QueryStatus@CListItemElement@@UAGJPBU_GUID@@KPAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z, __1CContactElement@@UAE@XZ, _GetDataContextAs@CListItemElement@@IAEJABU_GUID@@PAPAX@Z, _Class@CListItemElement@@2PAUIClassInfo@DirectUI@@A, _OnInput@CContactElement@@UAEXPAUInputEvent@DirectUI@@@Z, _GetData@CContactElement@@IAEJPAPAUCONTACT@@@Z, _ChangeInlineEditState@CListItemElement@@IAEX_N@Z, _OnEvent@CContactElement@@UAEXPAUEvent@DirectUI@@@Z, _GetElementSealId@CListItemElement@@IAEKXZ, _IsCommandSupportedByExec@CABPopupMenu@@MAE_NKU_GUID@@@Z, _GetDataContextAs@CABPopupMenu@@IAEJABU_GUID@@PAPAX@Z
> crypt32.dll: CertGetNameStringW, CertVerifyCertificateChainPolicy, CertFreeCertificateContext, CryptMsgClose, CertFindAttribute, CryptMsgGetParam, CryptMsgUpdate, CryptMsgOpenToDecode, CryptHashPublicKeyInfo, CryptFormatObject, CertFreeCertificateChainEngine, CertFreeCertificateChain, CertGetCertificateChain, CertCreateCertificateChainEngine, CryptVerifyMessageSignature, CryptDecodeObjectEx
> cryptnet.dll: CryptRetrieveObjectByUrlW
> gdi32.dll: SetPixel, SetBitmapBits, GetDIBits, EnumFontFamiliesExW, SetDIBColorTable, SetLayout, GetRgnBox, OffsetViewportOrgEx, SetStretchBltMode, CreateDIBSection, PatBlt, CreatePen, MoveToEx, LineTo, CreateFontIndirectW, ExtTextOutW, GetPixel, SetBkColor, GetTextMetricsW, LPtoDP, SetMapMode, SetViewportOrgEx, CreateDCW, CreateMetaFileW, SaveDC, SetWindowOrgEx, SetWindowExtEx, RestoreDC, CloseMetaFile, DeleteMetaFile, CreateRectRgnIndirect, GetStockObject, GetObjectW, CreateCompatibleBitmap, GetClipRgn, CreateRectRgn, BitBlt, StretchBlt, ExtSelectClipRgn, SetTextColor, SetBkMode, DeleteObject, CreateSolidBrush, GetDeviceCaps, GetDIBColorTable, SelectObject, DeleteDC, CreateCompatibleDC, SelectClipRgn
> gdiplus.dll: GdipGetImagePaletteSize, GdipAlloc, GdipFree, GdiplusShutdown, GdipBitmapUnlockBits, GdipBitmapLockBits, GdipCreateBitmapFromStreamICM, GdipCreateBitmapFromStream, GdipGetPropertyItem, GdipGetPropertyItemSize, GdipImageSelectActiveFrame, GdipImageGetFrameCount, GdipImageGetFrameDimensionsList, GdipGetImagePalette, GdipSaveImageToStream, GdipCreateBitmapFromScan0, GdipCreateBitmapFromHBITMAP, GdipGetImageEncodersSize, GdipGetImageEncoders, GdiplusStartup, GdipCloneImage, GdipSaveImageToFile, GdipDisposeImage, GdipGetImagePixelFormat, GdipGetImageRawFormat, GdipGetImageHeight, GdipGetImageWidth
> imm32.dll: ImmGetContext, ImmGetCompositionStringW, ImmSetConversionStatus, ImmGetConversionStatus, ImmAssociateContext, ImmReleaseContext
> iphlpapi.dll: GetIfEntry, GetAdaptersInfo, NotifyRouteChange, GetIpAddrTable
> kernel32.dll: lstrlenW, lstrcmpiW, lstrcpynW, lstrcmpW, GlobalUnlock, GlobalSize, GlobalLock, GlobalAlloc, HeapDestroy, HeapSize, GetLocaleInfoA, GetThreadLocale, IsProcessorFeaturePresent, VirtualFree, VirtualAlloc, GetStartupInfoA, QueryPerformanceCounter, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetStringTypeExA, IsDBCSLeadByteEx, GetDriveTypeW, GetLogicalDriveStringsW, IsWow64Process, LoadLibraryExA, GetShortPathNameW, VirtualQuery, VirtualProtect, GetThreadContext, SetThreadContext, SuspendThread, AddAtomW, SetThreadPriority, CreateToolhelp32Snapshot, Process32First, Process32Next, lstrcpynA, GetLocaleInfoW, GetACP, GetSystemDefaultLCID, FormatMessageA, GetVolumeInformationW, FileTimeToLocalFileTime, GetVersionExW, SetErrorMode, GetUserDefaultLCID, CreateMutexA, GetProcessTimes, GetSystemInfo, GetWindowsDirectoryW, GetUserDefaultUILanguage, QueryDepthSList, InterlockedFlushSList, InitializeSListHead, InterlockedPushEntrySList, InterlockedPopEntrySList, GetTempFileNameW, GetCurrentThread, QueueUserWorkItem, CompareStringA, GetSystemTimeAsFileTime, SetFileTime, FindFirstFileA, MoveFileExA, GetFullPathNameW, GetTimeZoneInformation, lstrcpyW, WaitForMultipleObjects, GetOverlappedResult, CancelIo, ReadDirectoryChangesW, SetEndOfFile, RemoveDirectoryW, SystemTimeToTzSpecificLocalTime, GetFileAttributesExW, FindFirstFileExW, FindNextFileW, FreeResource, FindAtomW, InterlockedCompareExchange, MulDiv, CompareFileTime, FindFirstFileW, FindClose, SetFilePointer, SetProcessWorkingSetSize, GetCurrentDirectoryW, SetCurrentDirectoryW, GetModuleFileNameA, GetDiskFreeSpaceExW, CompareStringW, OpenFileMappingW, MapViewOfFileEx, LoadLibraryExW, CopyFileW, CreateFileMappingW, MapViewOfFile, CreateMutexW, DuplicateHandle, GetCurrentProcessId, ReleaseMutex, UnmapViewOfFile, GetVersionExA, CreateEventA, TerminateProcess, GetCommandLineA, GetModuleHandleA, GlobalMemoryStatus, ExitProcess, OpenEventA, ExpandEnvironmentStringsA, DeleteFileA, GetSystemDirectoryW, LoadLibraryW, ExpandEnvironmentStringsW, OpenMutexW, lstrcmpiA, lstrcmpA, ReadFile, RtlMoveMemory, MoveFileW, MoveFileExW, GetProcAddress, GetSystemTime, FileTimeToSystemTime, GetDateFormatW, GetTimeFormatW, GetLocalTime, GetTempPathW, FreeLibrary, GlobalFree, TlsGetValue, GetSystemDirectoryA, LoadLibraryA, GetModuleFileNameW, lstrlenA, Sleep, GetModuleHandleW, CreateThread, LocalAlloc, ResumeThread, GetExitCodeThread, TerminateThread, SetEvent, ResetEvent, CreateEventW, CreateProcessW, WaitForSingleObject, GetExitCodeProcess, SetThreadExecutionState, InterlockedDecrement, InterlockedIncrement, HeapReAlloc, HeapAlloc, GetProcessHeap, HeapFree, CreateDirectoryW, SetLastError, GetCurrentProcess, FlushInstructionCache, RaiseException, GetFileSize, InterlockedExchange, WideCharToMultiByte, FlushFileBuffers, WriteFile, SystemTimeToFileTime, CreateFileW, GetTickCount, GetFileAttributesW, SetFileAttributesW, FormatMessageW, MultiByteToWideChar, CloseHandle, GetLastError, LocalFree, GetCurrentThreadId, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, DeleteFileW, DebugBreak
> msacm32.dll: acmStreamOpen, acmFormatSuggest, acmMetrics, acmStreamSize, acmStreamUnprepareHeader, acmStreamConvert, acmStreamClose, acmStreamPrepareHeader
> msidcrl40.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> msimg32.dll: AlphaBlend, TransparentBlt
> msncore.dll: _RMLoadResourceStream@@YGPAUIStream@@PB_W0_NPAKK0@Z, _CSAddFile@@YGJIPB_W0IK@Z, _RMPruneResourceSet@@YG_NKPB_W@Z, _FrameTitleProp@DialogHost@@2PAUPropertyInfo@DirectUI@@A, _Class@DialogHost@@2PAUIClassInfo@DirectUI@@A, _CreateGraphic@Value@DirectUI@@SGPAV12@PAUHBITMAP__@@EI_N1I1@Z, _FontSizeProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _LPARAMProp@CmdButton@@2PAUPropertyInfo@DirectUI@@A, _Open@CPerfMonitor@@QAEXXZ, _Close@CPerfMonitor@@QAEXXZ, GetHRESULTString, _Create@VerticalFlowLayout@DirectUI@@SGJHIIIPAPAVLayout@2@@Z, _CSGetElementInnerText@@YGJPAUIXMLDOMNode@@PB_WAAVCComBSTR@ATL@@@Z, _m_pMsgFilter@CMsgFilterHolder@@1PAVCMsgFilter@@A, _CSConfigGetDownloadState@@YG_AW4tagCONFIGSERVERCLIENT_DOWNLOAD_STATE@@PA_N@Z, _CSConfigNotify@@YGXJ@Z, _CSConfigDownload@@YGJPB_W000IK_NPADIW4tagCONFIGSERVERCLIENT_EVENT_TYPE@@00@Z, _CSGetAttributeValue@@YGJPAUIXMLDOMNode@@PB_WAAVCComBSTR@ATL@@@Z, _CSAdd@@YGJIPB_W00IK_NW4tagCONFIGSERVERCLIENT_EVENT_TYPE@@00@Z, _CSRemove@@YGJI@Z, _CSReset@@YGXXZ, _CSConfigReleaseXML@@YGXXZ, _CSSelectNode@@YGJIPB_WPAPAUIXMLDOMNode@@@Z, _CSLoadFromFile@@YGJPB_WPAPAUIXMLDOMNode@@@Z, _CSConfigIsInfoReady@@YG_NXZ, _CSSelectNode@@YGJPAUIXMLDOMNode@@PB_WPAPAU1@@Z, _CSConfigSelectNode@@YGJPB_WPAPAUIXMLDOMNode@@@Z, _CSConfigGetAttributeValue@@YGJPB_W0AAK@Z, _CSConfigGetElementInnerText@@YGJPAUIXMLDOMNode@@PB_WAAV_$CStringT@_WV_$StrTraitATL@_WV_$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z, _CSConfigGetElementInnerText@@YGJPB_WAAV_$CStringT@_WV_$StrTraitATL@_WV_$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z, _GetPageInc@ScrollBar@DirectUI@@IAEHXZ, _LineProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _MinimumProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _MaximumProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _Create@NativeHWNDHost@DirectUI@@SGJPB_W0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@IPAPAV12@@Z, _WM_PRIVATE_UPDATEFRAME@CFramelessHost@@2IB, MapGadgetPoints, SetGadgetOrder, _Initialize@ScrollViewer@DirectUI@@QAEJXZ, _OnListenedPropertyChanged@ScrollViewer@DirectUI@@UAEXPAVElement@2@PAUPropertyInfo@2@HPAVValue@2@2@Z, _CreateScrollBars@ScrollViewer@DirectUI@@MAEJXZ, _Add@ScrollViewer@DirectUI@@UAEJPAPAVElement@2@I@Z, _OnEvent@ScrollViewer@DirectUI@@UAEXPAUEvent@2@@Z, _OnInput@ScrollViewer@DirectUI@@UAEXPAUInputEvent@2@@Z, _OnPropertyChanged@ScrollViewer@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnPropertyChanging@ScrollViewer@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z, _Class@Combobox@DirectUI@@2PAUIClassInfo@2@A, _Class@ScrollViewer@DirectUI@@2PAUIClassInfo@2@A, _Class@Viewer@DirectUI@@2PAUIClassInfo@2@A, _Class@Thumb@DirectUI@@2PAUIClassInfo@2@A, _Class@RepeatButton@DirectUI@@2PAUIClassInfo@2@A, InitGadgetComponent, _Register@HWNDContainer@@SGJXZ, _Register@PNGGraphic@@SGJXZ, _Register@CmdButton@@SGJXZ, _Register@Clipper@@SGJXZ, _Register@CExpando@@SGJXZ, _Register@ClipperH@@SGJXZ, _Register@CExpandoH@@SGJXZ, _Register@DialogHost@@SGJXZ, UninitGadgetComponent, _Enter@Edit@DirectUI@@2PAEA, _StateChange@Checkbox@DirectUI@@2PAEA, _FindFirstDescendentByClass@DirectUI@@YGPAVElement@1@PAV21@PAUIClassInfo@1@@Z, _StateProp@Checkbox@DirectUI@@2PAUPropertyInfo@2@A, _RMLoadImage@@YGPAXPB_WIHHIK0@Z, SetGadgetMessageFilter, _AnimationProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _GetContentSize@WLEditT@@QAE_AUtagSIZE@@XZ, _OnDragEnterEvent@CDropTargetGadgetAdaptor@@2PAEA, _FontFaceProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _FontWeightProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _FontStyleProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _GetTextServices@CRichEditAccessible@@IAE_AV_$CComPtr@VITextServices@@@ATL@@XZ, _EmbededOleToText@CRichEditAccessible@@IAEXAAV_$CStringT@_WV_$StrTraitATL@_WV_$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@U_charrange@@@Z, _Initialize@CRichEditAccessible@@QAEXPAVElement@DirectUI@@@Z, _RemoveEllipsis@WLEditT@@IAEXXZ, _GetMaxVisibleLinesHeight@WLEditT@@QBEHXZ, _GetTextSize@WLEditT@@IAE_AUtagSIZE@@HHPAUHDC__@@@Z, _GetYScrollable@WLEditT@@QBE_NXZ, _UpdateLayoutRect@Layout@DirectUI@@SGXPAVElement@2@HH0HHHH@Z, _IsIMEActive@WLEditT@@IAE_NXZ, _ScrollToBottom@WLEditT@@QAEJXZ, _GetPosFromChar@WLEditT@@QAE_AUtagPOINT@@I@Z, _SetFirstLineHeight@WLEditT@@IAEJH@Z, _PinBottomEnabledProp@WLEditT@@2PAUPropertyInfo@DirectUI@@A, _SetReadOnly@WLEditT@@QAEJH@Z, _SetPinBottom@WLEditT@@QAEJ_N@Z, _GetPinBottomEnabled@WLEditT@@QBE_NXZ, _ContextSensitiveHelp@DuiAccessible@DirectUI@@UAGJH@Z, _GetWindow@DuiAccessible@DirectUI@@UAGJPAPAUHWND__@@@Z, _Clone@DuiAccessible@DirectUI@@UAGJPAPAUIEnumVARIANT@@@Z, _Reset@DuiAccessible@DirectUI@@UAGJXZ, _Skip@DuiAccessible@DirectUI@@UAGJK@Z, _Next@DuiAccessible@DirectUI@@UAGJKPAUtagVARIANT@@PAK@Z, _Disconnect@CRichEditAccessible@@UAEJXZ, _put_accValue@CRichEditAccessible@@UAGJUtagVARIANT@@PA_W@Z, _put_accName@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PA_W@Z, _accDoDefaultAction@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@@Z, _accHitTest@DuiAccessible@DirectUI@@UAGJJJPAUtagVARIANT@@@Z, _accNavigate@DuiAccessible@DirectUI@@UAGJJUtagVARIANT@@PAU3@@Z, _accLocation@DuiAccessible@DirectUI@@UAGJPAJ000UtagVARIANT@@@Z, _accSelect@DuiAccessible@DirectUI@@UAGJJUtagVARIANT@@@Z, _get_accDefaultAction@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accSelection@DuiAccessible@DirectUI@@UAGJPAUtagVARIANT@@@Z, _get_accFocus@DuiAccessible@DirectUI@@UAGJPAUtagVARIANT@@@Z, _get_accKeyboardShortcut@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accHelpTopic@DuiAccessible@DirectUI@@UAGJPAPA_WUtagVARIANT@@PAJ@Z, _get_accHelp@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accState@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAU3@@Z, _get_accRole@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAU3@@Z, _get_accDescription@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accValue@CRichEditAccessible@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accName@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPA_W@Z, _get_accChild@DuiAccessible@DirectUI@@UAGJUtagVARIANT@@PAPAUIDispatch@@@Z, _get_accChildCount@DuiAccessible@DirectUI@@UAGJPAJ@Z, _get_accParent@DuiAccessible@DirectUI@@UAGJPAPAUIDispatch@@@Z, _Invoke@DuiAccessible@DirectUI@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z, _GetIDsOfNames@DuiAccessible@DirectUI@@UAGJABU_GUID@@PAPA_WIKPAJ@Z, _GetTypeInfo@DuiAccessible@DirectUI@@UAGJIKPAPAUITypeInfo@@@Z, _GetTypeInfoCount@DuiAccessible@DirectUI@@UAGJPAI@Z, _Release@DuiAccessible@DirectUI@@UAGKXZ, _AddRef@DuiAccessible@DirectUI@@UAGKXZ, _QueryInterface@DuiAccessible@DirectUI@@UAGJABU_GUID@@PAPAX@Z, __1DuiAccessible@DirectUI@@UAE@XZ, _Initialize@Selector@DirectUI@@QAEJXZ, _Create@Selector@DirectUI@@SGJPAPAVElement@2@@Z, _SelectionChange@Selector@DirectUI@@2PAEA, _MessageCallbackHelper@CDropTargetGadgetAdaptor@@SGIPAVElement@DirectUI@@PAUIDropTarget@@PAUtagGMSG@@AAV_$CRefCountedPtr2@VCDropTargetGadgetAdaptor@@@@@Z, _GetClassInfoW@CmdButton@@UAEPAUIClassInfo@DirectUI@@XZ, _BringWindowToTop@NativeHWNDHost@DirectUI@@QAEXXZ, _pvValueListNull@Value@DirectUI@@2PAV12@A, _CreateVariant@Value@DirectUI@@SGPAV12@PAUtagVARIANT@@@Z, _RMFindModuleForResource@@YGPAUHINSTANCE__@@PB_W0K0@Z, _RMLoadBitmap@@YGPAUHBITMAP__@@PB_WK0@Z, _DataTransformProp@Element@DirectUI@@2PAUPropertyInfo@2@A, __SetValue@Element@DirectUI@@IAEJPBUPropertyInfo@2@HPAVValue@2@_N2@Z, _KillTimer@DuiElementTimerHandler@@QAEXIK@Z, _SetTimer@DuiElementTimerHandler@@QAEIIIK@Z, GetGadget, _ForceDSChanged@WLEditT@@IAEXXZ, __0DuiElementTimerHandler@@QAE@XZ, __1DuiElementTimerHandler@@UAE@XZ, _SetTimer@SyncTimerHandler@@QAEIIIK@Z, _pvUnknownNull@Value@DirectUI@@2PAV12@A, _Help@HWNDElement@DirectUI@@2PAEA, _DestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ, _CreateImageValue@CRMDUIParser@@UAEPAVValue@DirectUI@@PB_W@Z, _CreateStringValue@CRMDUIParser@@UAEPAVValue@DirectUI@@PB_WI@Z, _SetDataTransform@Element@DirectUI@@QAEJPAUIUnknown@@@Z, _Create@FillLayout@DirectUI@@SGJPAPAVLayout@2@@Z, _Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NI1@Z, ForwardGadgetMessage, _WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z, _RMFindModule@@YGPAUHINSTANCE__@@KPB_W@Z, _Class@Element@DirectUI@@2PAUIClassInfo@2@A, _FindDescendent@Element@DirectUI@@QAEPAV12@G@Z, _StrToID@DirectUI@@YGGPB_W@Z, _EndDefer@Element@DirectUI@@SGXXZ, _ShowElement@@YGJPAVElement@DirectUI@@H@Z, _StartDefer@Element@DirectUI@@SGXXZ, _GetElement@NativeHWNDHost@DirectUI@@QAEPAVElement@2@XZ, __1CRMDirectStringResource@@UAE@XZ, __BCRMDirectStringResource@@QBEPB_WXZ, __1CRMSystemMetricString@@UAE@XZ, __BCRMSystemMetricString@@QAEPB_WXZ, _Length@CRMSystemMetricString@@QAEKXZ, __0CRMSystemMetricString@@QAE@ABVCRMDirectStringResource@@@Z, _IsSystemMetric@CRMDirectStringResource@@QBE_NXZ, _Length@CRMDirectStringResource@@QBEIXZ, __0CRMDirectStringResource@@QAE@IKPB_W@Z, __1CRMCompoundStringResource@@UAE@XZ, _BuildString@CRMCompoundStringResource@@UBE_NPA_WI@Z, _Length@CRMCompoundStringResource@@QBEIXZ, __0CRMCompoundStringResource@@QAE@IKPB_W@Z, _g_fIsRTL@UxgUtil@@3HA, __0CDUIDialog@@QAE@XZ, _Destroy@CDUIDialog@@MAEXXZ, _OnMessage@CDUIDialog@@MAEJIIJAAJ@Z, _SetDefaultFocus@NativeHWNDHost@DirectUI@@MAEXXZ, _OnDefaultFrameColorChanged@CFramelessHost@@MAEXXZ, _OnUpdateFrame@CFramelessHost@@MAEXXZ, _OnCreateRegion@CFramelessHost@@MAEPAUHRGN__@@HHHH@Z, _OnLoadHiddenState@CDUIDialog@@MAE_NXZ, _OnSaveHiddenState@CDUIDialog@@MAEX_N@Z, _ExitDialog@CDUIDialog@@MAEXH@Z, _OnPostCreateDialog@CDUIDialog@@MAEXPAVElement@DirectUI@@@Z, _OnSize@CDUIDialog@@MAE_NIJAAJ@Z, _OnCreate@CDUIDialog@@MAE_NIJAAJ@Z, _OnDestroy@CDUIDialog@@MAE_NIJAAJ@Z, _OnNCDestroy@CDUIDialog@@MAE_NIJAAJ@Z, _OnActivate@CDUIDialog@@MAE_NIJAAJ@Z, _OnSysCommand@CDUIDialog@@MAE_NIJAAJ@Z, _OnClose@CDUIDialog@@MAE_NIJAAJ@Z, _OnShowWindow@CDUIDialog@@MAE_NIJAAJ@Z, _ShowDialog@CDUIDialog@@MAEJPAUHWND__@@PAUtagPOINT@@@Z, _FilterMessage@CDUIDialog@@MAEHPAUtagMSG@@@Z, __1CDUIDialog@@UAE@XZ, _GetColor@CCustomColor@@CGKW4EUIType@@@Z, __1CMsgFilter@@QAE@XZ, __ZeroRelease@Value@DirectUI@@AAEXXZ, _ParentProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _Count@CPerfMonitor@@QAEHH@Z, _Elapsed@CPerfMonitor@@QAENH@Z, _End@CPerfMonitor@@QAENH@Z, _Start@CPerfMonitor@@QAENH@Z, _g_LogonPerfMonitor@@3VCLogonPerfMonitor@@A, _DesiredSizeProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _GetValue@Element@DirectUI@@QBEPAVValue@2@PBUPropertyInfo@2@H@Z, _EnabledProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _SetValue@Element@DirectUI@@QAEJPBUPropertyInfo@2@HPAVValue@2@@Z, _PaddingProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateRect@Value@DirectUI@@SGPAV12@HHHH@Z, _CreateInt@Value@DirectUI@@SGPAV12@H@Z, _CSConfigGetAttributeValue@@YGJPB_W0AAV_$CStringT@_WV_$StrTraitATL@_WV_$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z, _QueryInterface@CPerfMonitor@@UAGJABU_GUID@@PAPAX@Z, DUserMessageHook, MsnCoreUnInitProcess, MsnCoreUnInitThread, MsnCoreInitThread, MsnCoreInitProcess, GetMessageExW, _FilterMessage@CMsgFilterHolder@@SGHPAUtagMSG@@@Z, _LayoutPosProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _SelectedProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateBool@Value@DirectUI@@SGPAV12@_N@Z, InvalidateGadget, GetGadgetRect, _GetRootHWND@HWNDElement@DirectUI@@SGPAUHWND__@@PAVElement@2@@Z, _RMLoadColorRef@@YGKPB_WKK0@Z, _BackgroundProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateColor@Value@DirectUI@@SGPAV12@KEE@Z, _GetHWND@NativeHWNDHost@DirectUI@@QAEPAUHWND__@@XZ, _WidthProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _HeightProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ChildrenProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ExtentProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _KeyFocusedProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _IDProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _VisibleProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ContentProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateString@Value@DirectUI@@SGPAV12@PB_WPAUHINSTANCE__@@I@Z, _ActiveProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ClassProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateAtom@Value@DirectUI@@SGPAV12@PB_W@Z, _AccessibleProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _AccRoleProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _AccNameProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _AccDescProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _WindowActiveProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _DropFocusProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _g_dwElSlot@DirectUI@@3KA, _Destroy@Element@DirectUI@@QAEJ_N@Z, _PressedProp@Button@DirectUI@@2PAUPropertyInfo@2@A, _AggressiveUpdateProp@HWNDHost@DirectUI@@2PAUPropertyInfo@2@A, _PositionProp@Progress@DirectUI@@2PAUPropertyInfo@2@A, _Attach@CRMDUIParser@@QAEJPAVElement@DirectUI@@@Z, _Add@Element@DirectUI@@QAEJPAV12@@Z, _DestroyAll@Element@DirectUI@@QAEJXZ, _LoadAndCreateElement@CRMDUIParser@@QAEJIPB_WPAPAVElement@DirectUI@@PAV23@K0@Z, __0CRMDUIParser@@QAE@XZ, _RMLoadString@@YGIIPA_WIKPB_W@Z, _OnInitDialog@CDUIDialog@@MAE_NIJAAJ@Z, _OnCommand@CDUIDialog@@MAE_NIJAAJ@Z, _ShowWindow@NativeHWNDHost@DirectUI@@QAEXH@Z, _KillTimer@SyncTimerHandler@@QAEXIK@Z, _SetRichEditStyle@WLEditT@@QAEJH@Z, _GetRichEditStyle@WLEditT@@QBEHXZ, _Class@CExpandoH@@2PAUIClassInfo@DirectUI@@A, _Class@Constrainer@DirectUI@@2PAUIClassInfo@2@A, _Class@Progress@DirectUI@@2PAUIClassInfo@2@A, _Initialize@NativeHWNDHost@DirectUI@@QAEJPB_W0PAUHWND__@@PAUHICON__@@HHHHHHHPAUHINSTANCE__@@I@Z, _RemoveLocalValue@Element@DirectUI@@QAEJPBUPropertyInfo@2@@Z, _ForceCaretRefresh@WLEditT@@QAEJXZ, _SyncRect@WLEditT@@QAEJUtagSIZE@@@Z, GetGadgetFocus, _ShowElement@@YGJPAVElement@DirectUI@@PB_WH@Z, SetGadgetRootInfo, _Class@CmdButton@@2PAUIClassInfo@DirectUI@@A, SetElementContentFromImageResource, __1CFramelessHost@@UAE@XZ, __1SyncTimerHandler@@UAE@XZ, _AdjustElementSize@@YGJPAVElement@DirectUI@@PAUtagSIZE@@K@Z, _IsChildElement@@YGHPAVElement@DirectUI@@0@Z, _ElementFromGadget@DirectUI@@YGPAVElement@1@PAUHGADGET__@@@Z, FindGadgetFromPoint, _m_crDefaultFrameColor@CFramelessHost@@1KA, SetElementPropertyFromImageResource, _IconProp@Button@DirectUI@@2PAUPropertyInfo@2@A, _Remove@Element@DirectUI@@QAEJPAV12@@Z, _SelectElement@@YGJPAVElement@DirectUI@@PB_WH@Z, _SetDefaultFocusID@NativeHWNDHost@DirectUI@@QAEXPB_W@Z, _GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z, ___7CMsgFilter@@6B@, __0CFramelessHost@@QAE@XZ, _SetFramelessCaption@CFramelessHost@@QAE_NQB_W@Z, _SetActiveWindow@CMsgFilter@@IAEXXZ, _GetMenu@CFramelessHost@@IAEPAUHMENU__@@XZ, _RMLoadStringBSTR@@YGPA_WIKPB_W@Z, _SetMenu@CFramelessHost@@IAEXPAUHMENU__@@@Z, _RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z, _OnMessage@CFramelessHost@@UAEJIIJAAJ@Z, RevokeDropTarget, _OnSysChange@CCustomColor@@SGXXZ, _Insert@Element@DirectUI@@QAEJPAV12@I@Z, _AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z, _Initialize@CFramelessHost@@QAEJXZ, _Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z, BuildDropTarget, _Create@HWNDContainer@@SGJPAVNativeHWNDHost@DirectUI@@PAUIDropTarget@@PAPAVElement@3@@Z, _TooltipProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _RMIsResourceAvailable@@YG_NPB_W0K0@Z, _SetDefaultFrameColor@CFramelessHost@@SGKK@Z, __0_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@QAE@XZ, _OnListenerAttach@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAEXPAVElement@2@@Z, _OnListenedPropertyChanging@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAE_NPAVElement@2@PAUPropertyInfo@2@HPAVValue@2@2@Z, _OnListenedPropertyChanged@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAEXPAVElement@2@PAUPropertyInfo@2@HPAVValue@2@2@Z, _OnListenedInput@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAEXPAVElement@2@PAUInputEvent@2@@Z, _OnListenedEvent@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAEXPAVElement@2@PAUEvent@2@@Z, _OnListenedWindowMessage@_$IElementListenerImpl@VElement@DirectUI@@@DirectUI@@UAE_NPAVElement@2@PAUHWND__@@IIJPAJ@Z, __1_$ListenedElementPtr@VElement@DirectUI@@@DirectUI@@QAE@XZ, __B_$ListenedElementPtr@VElement@DirectUI@@@DirectUI@@QBEPAVElement@1@XZ, __4_$ListenedElementPtr@VElement@DirectUI@@@DirectUI@@QAEPBVElement@1@PAV21@@Z, __0_$ListenedElementPtr@VElement@DirectUI@@@DirectUI@@QAE@PAVElement@1@@Z, _UpdateFrame@CFramelessHost@@IAEXXZ, _ShowMainMenuAsPopup@CFramelessHost@@IAEXH@Z, _IsDescendent@Element@DirectUI@@QAE_NPAV12@@Z, _PerformFramelessHitTest@CFramelessHost@@IAEJUtagPOINT@@PAPAVElement@DirectUI@@@Z, _RMUpdateResourceSet@@YG_NPB_WK00@Z, _RMTerminate@@YGXXZ, _RMInitialize@@YGXXZ, _Class@Checkbox@DirectUI@@2PAUIClassInfo@2@A, _CheckedProp@Checkbox@DirectUI@@2PAUPropertyInfo@2@A, _UpdateStateProp@Checkbox@DirectUI@@IAEJH@Z, _GetInstance@CConfigServerClientEvents@@SGPAV1@XZ, _RMLoadInt@@YGHIHKPB_W@Z, _FirstStart@CPerfMonitor@@QAENH@Z, _ElementMinimizeMemoryUsage@DirectUI@@YGXXZ, _EventEnd@CPerfMonitor@@UAGXH@Z, _EventStart@CPerfMonitor@@UAGXH@Z, _Init@CCustomColor@@SGJXZ, _DirectionProp@Element@DirectUI@@2PAUPropertyInfo@2@A, __0CmdButton@@QAE@XZ, _OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnGroupChanged@Element@DirectUI@@UAEXH_N@Z, _OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z, _OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z, _OnDestroy@Element@DirectUI@@UAEXXZ, _OnEvent@CmdButton@@UAEXPAUEvent@DirectUI@@@Z, _Paint@CmdButton@@UAEXPAUHDC__@@PAUHBITMAP__@@PAUtagDIBSECTION@@PBUtagRECT@@3PAU5@4@Z, _GetContentSize@Element@DirectUI@@UAE_AUtagSIZE@@HHPAVSurface@2@@Z, _Add@Element@DirectUI@@UAEJPAPAV12@I@Z, _Insert@Element@DirectUI@@UAEJPAPAV12@II@Z, _Remove@Element@DirectUI@@UAEJPAPAV12@I@Z, _GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z, _EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z, _SetKeyFocus@Element@DirectUI@@UAEXXZ, _MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z, __SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z, __SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE_AUtagSIZE@@HHPAVSurface@2@@Z, _OnHosted@Button@DirectUI@@UAEXPAVElement@2@@Z, _OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z, _GetAccessibleImpl@Button@DirectUI@@UAEJPAPAUIAccessible@@@Z, _DefaultAction@Button@DirectUI@@UAEJXZ, _UpdateCue@Button@DirectUI@@MAEJXZ, __1CmdButton@@UAE@XZ, _g_hHeap@DirectUI@@3PAXA, _AlphaProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _Initialize@PNGGraphic@@QAEJI@Z, _OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z, _Click@Button@DirectUI@@2PAEA, _OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z, UtilDrawBlendRect, _AllocatePropertyIndex@Element@DirectUI@@SGIXZ, _AllocateClassIndex@Element@DirectUI@@SGIXZ, _GetPciMap@Element@DirectUI@@SGPAV_$BTreeLookup@PAUIClassInfo@DirectUI@@@2@XZ, _InvalidateElement@@YGHPAVElement@DirectUI@@@Z, __1CRMResource@@UAE@XZ, __0CRMResource@@QAE@PB_W0K0PAK@Z, _pvBoolTrue@Value@DirectUI@@2PAV12@A, _OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _Paint@Element@DirectUI@@UAEXPAUHDC__@@PAUHBITMAP__@@PAUtagDIBSECTION@@PBUtagRECT@@3PAU6@4@Z, _OnHosted@Element@DirectUI@@MAEXPAV12@@Z, _GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z, _DefaultAction@Element@DirectUI@@UAEJXZ, __1Element@DirectUI@@UAE@XZ, _OnPropertyChanged@Selector@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnInput@Selector@DirectUI@@UAEXPAUInputEvent@2@@Z, _OnKeyFocusMoved@Selector@DirectUI@@UAEXPAVElement@2@0@Z, _OnMouseFocusMoved@Selector@DirectUI@@UAEXPAVElement@2@0@Z, _GetAdjacent@Selector@DirectUI@@UAEPAVElement@2@PAV32@HPBUNavReference@2@K@Z, _Class@Selector@DirectUI@@2PAUIClassInfo@2@A, __1CRMDUIParser@@UAE@XZ, _Initialize@Element@DirectUI@@QAEJI@Z, _pvBoolFalse@Value@DirectUI@@2PAV12@A, _pvIntZero@Value@DirectUI@@2PAV12@A, _DoModal@CDUIDialog@@QAEHGPB_WPAUHWND__@@PAUtagPOINT@@0_N0@Z, _SelectionProp@Selector@DirectUI@@2PAUPropertyInfo@2@A, _CreateElementRef@Value@DirectUI@@SGPAV12@PAVElement@2@@Z, _Class@Button@DirectUI@@2PAUIClassInfo@2@A, _CmdIdProp@CmdButton@@2PAUPropertyInfo@DirectUI@@A, _FindDialogElement@CDUIDialog@@IAEPAVElement@DirectUI@@PB_W@Z, _RMLoadStringA@@YGIIPADIKPB_W@Z, _CmdIDProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _TextProp@Button@DirectUI@@2PAUPropertyInfo@2@A, _Class@TabControl@DirectUI@@2PAUIClassInfo@2@A, _Class@TabButton@DirectUI@@2PAUIClassInfo@2@A, _SetDataContext@Element@DirectUI@@QAEJPAUIUnknown@@@Z, __1NativeHWNDHost@DirectUI@@UAE@XZ, __0NativeHWNDHost@DirectUI@@QAE@XZ, _SetFocusOnChild@TabControl@DirectUI@@QAEJPAVElement@2@_N@Z, _GetTabButtons@TabControl@DirectUI@@QAEPAV_$DynamicArray@PAVElement@DirectUI@@@2@XZ, _GetTabPages@TabControl@DirectUI@@QAEPAV_$DynamicArray@PAVElement@DirectUI@@@2@XZ, _AsyncSelectionChange@TabControl@DirectUI@@2PAEA, _SetBinding@Element@DirectUI@@QAEJPAUPropertyInfo@2@PAVBinding@2@@Z, _TagProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _BorderColorProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ForegroundProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ColorizeProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateColorize@Value@DirectUI@@SGPAV12@K@Z, _Class@TabPage@DirectUI@@2PAUIClassInfo@2@A, _AccValueProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _Initialize@Button@DirectUI@@QAEJI@Z, _pvUnset@Value@DirectUI@@2PAV12@A, _RMLoadIcon@@YGPAUHICON__@@PB_WK0@Z, _ShortcutProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _MaximumProp@Progress@DirectUI@@2PAUPropertyInfo@2@A, _MinimumProp@Progress@DirectUI@@2PAUPropertyInfo@2@A, _DoModeless@CDUIDialog@@QAEJGPB_WPAUHWND__@@PAUtagPOINT@@0_N330@Z, _FireEvent@Element@DirectUI@@QAEXPAUEvent@2@_N@Z, _IdResProp@PNGGraphic@@2PAUPropertyInfo@DirectUI@@A, _Class@PNGGraphic@@2PAUIClassInfo@DirectUI@@A, __1PNGGraphic@@UAE@XZ, _OnInput@Button@DirectUI@@UAEXPAUInputEvent@2@@Z, __0PNGGraphic@@QAE@XZ, _OnPropertyChanged@Button@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnPropertyChanged@PNGGraphic@@UAEXPAUPropertyInfo@DirectUI@@HPAVValue@3@1@Z, _PostEvent@Element@DirectUI@@QAEXPAUEvent@2@@Z, GetGadgetStyle, _KeyboardNavigate@Element@DirectUI@@2PAEA, _DUI2Win32Message@CDUI2WindowMsg@@IAEJPAUInputEvent@DirectUI@@PAV_$DynamicArray@UCWinMsg@CDUI2WindowMsg@@@3@@Z, _OnPropertyChanged@HWNDHost@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnInput@HWNDHost@DirectUI@@UAEXPAUInputEvent@2@@Z, _OnDestroy@HWNDHost@DirectUI@@UAEXXZ, _Paint@HWNDHost@DirectUI@@UAEXPAUHDC__@@PAUHBITMAP__@@PAUtagDIBSECTION@@PBUtagRECT@@3PAU6@4@Z, _MessageCallback@HWNDHost@DirectUI@@UAEIPAUtagGMSG@@@Z, _OnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z, _OnUnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z, _GetAccessibleImpl@HWNDHost@DirectUI@@UAEJPAPAUIAccessible@@@Z, _OnNotify@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z, _OnMessage@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z, _OnAdjustWindowSize@HWNDHost@DirectUI@@UAEHHHI@Z, _CreateHWND@HWNDHost@DirectUI@@MAEPAUHWND__@@PAU3@@Z, _SyncFont@HWNDHost@DirectUI@@MAEXXZ, _Class@HWNDHost@DirectUI@@2PAUIClassInfo@2@A, _Initialize@HWNDHost@DirectUI@@QAEJII@Z, _pvStringNull@Value@DirectUI@@2PAV12@A, _TransferImageToPNG@PNGGraphic@@QAEJAAVCMSGRImage@ATL@@@Z, _HideWindow@NativeHWNDHost@DirectUI@@QAEXXZ, _NotifyAccessibilityEvent@DirectUI@@YGXKPAVElement@1@@Z, _OnMessage@NativeHWNDHost@DirectUI@@UAEJIIJAAJ@Z, _SetActiveWindow@CMsgFilterHolder@@SGXPAVCMsgFilter@@@Z, _LayoutProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateLayout@Value@DirectUI@@SGPAV12@PAVLayout@2@@Z, _ContentAlignProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _IsDefaultProp@Button@DirectUI@@2PAUPropertyInfo@2@A, SetElementContentFromIconResource, _Create@FlowLayout@DirectUI@@SGJHIIIPAPAVLayout@2@@Z, _OnPropertyChanged@CmdButton@@UAEXPAUPropertyInfo@DirectUI@@HPAVValue@3@1@Z, _OnInput@CmdButton@@UAEXPAUInputEvent@DirectUI@@@Z, _Init@NavReference@DirectUI@@QAEXPAVElement@2@PAUtagRECT@@@Z, _KeyWithinProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _MouseWithinProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _AccStateProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ButtonStyleProp@CmdButton@@2PAUPropertyInfo@DirectUI@@A, _IsEqual@Value@DirectUI@@QAE_NPAV12@@Z, GetGadgetAnimation, _pvAtomZero@Value@DirectUI@@2PAV12@A, __0WLEditT@@QAE@XZ, _OnPropertyChanged@WLEditT@@UAEXPAUPropertyInfo@DirectUI@@HPAVValue@3@1@Z, _OnInput@WLEditT@@UAEXPAUInputEvent@DirectUI@@@Z, _OnKeyFocusMoved@WLEditT@@UAEXPAVElement@DirectUI@@0@Z, _OnEvent@WLEditT@@UAEXPAUEvent@DirectUI@@@Z, _Paint@WLEditT@@UAEXPAUHDC__@@PAUHBITMAP__@@PAUtagDIBSECTION@@PBUtagRECT@@3PAU5@4@Z, _GetContentSize@WLEditT@@UAE_AUtagSIZE@@HHPAVSurface@DirectUI@@@Z, _MessageCallback@WLEditT@@UAEIPAUtagGMSG@@@Z, __SelfLayoutDoLayout@WLEditT@@MAEXHH@Z, __SelfLayoutUpdateDesiredSize@WLEditT@@MAE_AUtagSIZE@@HHPAVSurface@DirectUI@@@Z, _OnHosted@WLEditT@@MAEXPAVElement@DirectUI@@@Z, _GetAccessibleImpl@WLEditT@@UAEJPAPAUIAccessible@@@Z, _Initialize@WLEditT@@UAEJI@Z, _AdjustInvalidationRect@WLEditT@@UAEXPAUtagRECT@@@Z, _OnPhysicalExtentChanged@WLEditT@@UAEXUtagSIZE@@@Z, _OnDragEnter@WLEditT@@UAEJPAUIDataObject@@@Z, _GetEditTextString@WLEditT@@UAEHAAV_$CStringT@_WV_$StrTraitATL@_WV_$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_N1@Z, _OnVirtualExtentChanged@WLEditT@@MAEXUtagSIZE@@@Z, _SyncText@WLEditT@@MAEJPB_W@Z, _CreateTextHost@WLEditT@@MAEJXZ, _OnTimer@WLEditT@@UAEXIKK@Z, _GetTimerHwndElement@WLEditT@@UAEPAVHWNDElement@DirectUI@@XZ, _SendMessageW@WLEditT@@UAEJIIJAAJ@Z, _PostMessageW@WLEditT@@UAEJIIJAAJ@Z, _SetFocus@WLEditT@@UAEJXZ, _IsFocused@WLEditT@@UAEHXZ, _SetCursor@WLEditT@@UAEJPAUHICON__@@@Z, _GetScrollInfo@WLEditT@@UAEJHPAUtagSCROLLINFO@@@Z, _ClientToScreen@WLEditT@@UAEJPAUtagPOINT@@@Z, _ScreenToClient@WLEditT@@UAEJPAUtagPOINT@@@Z, _InvalidateRect@WLEditT@@UAEJPAUtagRECT@@H@Z, _GetClientRect@WLEditT@@UAEJPAUtagRECT@@@Z, _GetWindowRect@WLEditT@@UAEJPAUtagRECT@@@Z, _ImmGetContext@WLEditT@@UAEPAUHIMC__@@XZ, _ImmReleaseContext@WLEditT@@UAEXPAUHIMC__@@@Z, _GetDC@WLEditT@@UAEPAUHDC__@@XZ, _ReleaseDC@WLEditT@@UAEHPAUHDC__@@@Z, _OnMessage@WLEditT@@UAEJIIJAAJ@Z, _OnInitContextMenu@WLEditT@@UAEJPAUHMENU__@@@Z, __1WLEditT@@UAE@XZ, _Class@WLEditT@@2PAUIClassInfo@DirectUI@@A, _GetFirstLineHeight@WLEditT@@QBEHXZ, _GetLabel@WLEditT@@QBEGXZ, _SetYScrollable@WLEditT@@QAEJ_N@Z, _SetXScrollable@WLEditT@@QAEJ_N@Z, _Initialize@WLEditT@@QAEJIH@Z, _VerticalProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _OnPropertyChanging@ScrollBar@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnPropertyChanged@ScrollBar@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnEvent@ScrollBar@DirectUI@@UAEXPAUEvent@2@@Z, __SelfLayoutDoLayout@ScrollBar@DirectUI@@UAEXHH@Z, __SelfLayoutUpdateDesiredSize@ScrollBar@DirectUI@@UAE_AUtagSIZE@@HHPAVSurface@2@@Z, _CreateButtons@ScrollBar@DirectUI@@MAEJXZ, _SetButtonsTag@ScrollBar@DirectUI@@MAEX_N@Z, _Class@ScrollBar@DirectUI@@2PAUIClassInfo@2@A, _Initialize@ScrollBar@DirectUI@@QAEJ_N@Z, _GetTopHWNDParent@DirectUI@@YGPAUHWND__@@PAU2@H@Z, _PositionProp@ScrollBar@DirectUI@@2PAUPropertyInfo@2@A, _m_fPaintingFrozen@CMsgFilterHolder@@1HA, _CursorProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _CreateCursor@Value@DirectUI@@SGPAV12@PAUHICON__@@@Z, _CapturedProp@Button@DirectUI@@2PAUPropertyInfo@2@A, _MapElementPoint@Element@DirectUI@@QAEXPAV12@PBUtagPOINT@@PAU3@@Z, _Drag@Thumb@DirectUI@@2PAEA, _MarginProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _SizeInLayoutProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _GetImmediateChild@Element@DirectUI@@QAEPAV12@PAV12@@Z, __UpdateDesiredSize@Element@DirectUI@@QAE_AUtagSIZE@@HHPAVSurface@2@@Z, __UpdateLayoutSize@Element@DirectUI@@QAEXHH@Z, __UpdateLayoutPosition@Element@DirectUI@@QAEXHH@Z, _RMLoadMenu@@YGPAUHMENU__@@PB_WK0@Z, _Context@Button@DirectUI@@2PAEA, _BorderThicknessProp@Element@DirectUI@@2PAUPropertyInfo@2@A, _ProcessForEllipsis@WLEditT@@IAEJPAUHDC__@@AAUtagSIZE@@@Z, _SyncMaxVisibleLines@WLEditT@@QAEJXZ, _Class@HWNDElement@DirectUI@@2PAUIClassInfo@2@A, _GetScreenCenterPoint@CDUIDialog@@SG_AUtagPOINT@@PAUHWND__@@@Z, _Destroy@NativeHWNDHost@DirectUI@@UAEXXZ, _OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z, _OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z, _OnPropertyChanged@HWNDElement@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z, _OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z, _OnKeyFocusMoved@HWNDElement@DirectUI@@UAEXPAVElement@2@0@Z, _OnDestroy@HWNDElement@DirectUI@@UAEXXZ, _UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z, _ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z, _RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
> msvcr80.dll: _crt_debugger_hook, _localtime64, strncmp, _strrev, _strnicoll, wcscpy_s, _wcstoui64, strtol, __3@YAXPAX@Z, ___V@YAXPAX@Z, memcpy_s, _CxxThrowException, memmove_s, wcschr, free, _purecall, malloc, __CxxFrameHandler3, memset, calloc, memchr, _wcsicmp, wcsrchr, _wcslwr_s, _recalloc, memcpy, _mktime64, _localtime64_s, _time64, wcsstr, _beginthreadex, _vscwprintf, vswprintf_s, _mbscmp, wcsspn, wcscspn, _ltoa, strchr, iswspace, swprintf_s, _mbsicmp, _vscprintf, vsprintf_s, _strlwr, _wtoi, _wcsnicoll, strrchr, strstr, _vsnprintf_s, fclose, fprintf, fopen, _mbsstr, _resetstkoflw, qsort_s, _vsnwprintf_s, exit, _wcsnicmp, _set_purecall_handler, iswalpha, iswdigit, _wcsncoll, _wcsupr_s, _mbsspn, _mbscspn, qsort, __RTDynamicCast, wcstoul, wprintf, _strnicmp, isspace, _wcsrev, _stricmp, _mbschr, atoi, srand, towupper, wcsncmp, _scwprintf, _aligned_free, _aligned_malloc, _gmtime64_s, _wfullpath, _mbsinc, _ismbcspace, _mbsupr_s, _mbsrchr, strtoul, wcsncpy_s, wcstol, _wgetenv, wcspbrk, tolower, _mbslwr_s, rand, _wcsdup, _mbspbrk, ceil, _wtol, memmove, isxdigit, isalpha, isdigit, realloc, atol, _difftime64, swscanf_s, floor, _callnewh, _amsg_exit, __getmainargs, _cexit, _exit, _XcptFilter, _ismbblead, _acmdln, _initterm, _initterm_e, _configthreadlocale, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, _encode_pointer, __set_app_type, _terminate@@YAXXZ, _except_handler4_common, _unlock, __dllonexit, _lock, _onexit, _decode_pointer, _invoke_watson, _controlfp_s, __type_info_dtor_internal_method@type_info@@QAEXXZ
> ole32.dll: CoUninitialize, CoInitialize, CoInitializeSecurity, CoRevokeClassObject, StringFromGUID2, OleUninitialize, CreateStreamOnHGlobal, GetHGlobalFromStream, CoTaskMemAlloc, CLSIDFromString, StringFromCLSID, OleFlushClipboard, ReleaseStgMedium, OleRegEnumVerbs, OleRegGetUserType, OleRegGetMiscStatus, CreateOleAdviseHolder, CreateDataAdviseHolder, OleLoadFromStream, WriteClassStm, CoCreateInstance, CoTaskMemFree, OleSaveToStream, CoSuspendClassObjects, CoInitializeEx, CoGetInterfaceAndReleaseStream, CoMarshalInterThreadInterfaceInStream, CoAllowSetForegroundWindow, CoCreateGuid, StgCreateDocfileOnILockBytes, CreateILockBytesOnHGlobal, OleSetClipboard, CoFreeUnusedLibraries, CoSetProxyBlanket, CLSIDFromProgID, CoFileTimeNow, CoCreateFreeThreadedMarshaler, CoFreeLibrary, CoLoadLibrary, StgOpenStorageOnILockBytes, OleRun, CoRegisterClassObject, OleInitialize, OleLockRunning
> oleaut32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> rpcrt4.dll: UuidFromStringA
> secur32.dll: FreeCredentialsHandle, FreeContextBuffer, InitSecurityInterfaceW, DeleteSecurityContext
> setupapi.dll: SetupIterateCabinetW
> shell32.dll: SHGetDesktopFolder, -, SHChangeNotify, SHCreateDirectoryExW, ShellExecuteExW, -, -, SHGetMalloc, SHBrowseForFolderW, SHGetPathFromIDListW, -, Shell_NotifyIconW, ExtractIconExW, Shell_NotifyIconA, SHAppBarMessage, SHGetFileInfoW, SHFileOperationW, SHGetFolderPathAndSubDirW, -, -, -, ShellExecuteA, ShellExecuteExA, -, SHGetFolderPathW, DragQueryFileW, ShellExecuteW
> shlwapi.dll: SHStrDupW, SHCreateStreamOnFileEx, UrlGetPartW, PathFindFileNameW, PathAppendA, PathFindExtensionW, PathRemoveArgsW, PathGetArgsW, PathAppendW, PathRemoveFileSpecW, PathFileExistsW, StrCmpNIW, PathIsDirectoryW, PathRelativePathToW, SHCreateStreamOnFileW, PathCanonicalizeW, PathCommonPrefixW, PathStripPathW, PathUnquoteSpacesW, PathStripToRootW, SHCopyKeyA, PathCombineW
> user32.dll: ReleaseCapture, SetCapture, GetDesktopWindow, TrackPopupMenuEx, LoadMenuA, CopyRect, MapWindowPoints, IsWindow, SetForegroundWindow, GetWindowRect, SetWindowPos, GetWindowTextW, GetWindowTextLengthW, EqualRect, GetClientRect, GetSysColor, GetSystemMetrics, PtInRect, GetKeyState, UpdateWindow, GetForegroundWindow, FlashWindow, LoadCursorA, MsgWaitForMultipleObjects, TranslateMessage, DispatchMessageW, PostMessageW, CreateMenu, DestroyMenu, CreatePopupMenu, DeleteMenu, GetMenuItemCount, SendMessageW, RemoveMenu, GetSubMenu, GetMenuItemInfoW, InsertMenuItemW, SetWindowsHookExW, DialogBoxParamW, IsDlgButtonChecked, LoadIconW, SendDlgItemMessageW, SetWindowLongW, EndDialog, LoadCursorW, SetCursor, GetCursorPos, DestroyWindow, InvalidateRect, UnregisterClassA, CharNextA, CharLowerA, CharNextW, CharLowerW, GetKeyboardLayoutList, MonitorFromRect, RegisterClipboardFormatW, GetMenuItemID, GetMenuState, GetParent, GetFocus, IsChild, SetFocus, DrawTextW, FrameRect, FillRect, GetSysColorBrush, DrawIconEx, DestroyIcon, EnableMenuItem, OffsetRect, InflateRect, SetRect, GetDC, ReleaseDC, UnhookWindowsHookEx, PostThreadMessageW, CallNextHookEx, GetActiveWindow, PeekMessageW, ShowWindow, SetTimer, SetParent, DefWindowProcW, KillTimer, SystemParametersInfoW, GetWindowPlacement, SetWindowTextW, LoadIconA, EnumChildWindows, MessageBoxIndirectW, GetTopWindow, GetCapture, GetWindowRgn, AdjustWindowRect, MonitorFromWindow, GetMonitorInfoW, GetIconInfo, GetWindowThreadProcessId, IsDialogMessageW, CharLowerBuffW, CharPrevW, LoadStringA, LoadStringW, IsClipboardFormatAvailable, RegisterWindowMessageW, EnumWindows, EnumThreadWindows, RegisterClassExA, CreateWindowExA, GetWindowDC, DestroyAcceleratorTable, IsRectEmpty, GetDlgItemInt, SetDlgItemInt, ScreenToClient, ClientToScreen, GetScrollInfo, GetDlgCtrlID, GetDlgItemTextW, IsWindowEnabled, MapDialogRect, DrawFocusRect, CreateDialogParamW, GetNextDlgTabItem, SendMessageA, SetActiveWindow, RedrawWindow, SetDlgItemTextW, SetProcessDefaultLayout, ModifyMenuW, GetLastActivePopup, GetClassNameA, SetCursorPos, GetMenu, InsertMenuW, GetAsyncKeyState, TrackPopupMenu, GetClassInfoExA, RegisterClassW, RegisterWindowMessageA, GetDoubleClickTime, SetMenuDefaultItem, MoveWindow, LoadImageW, CheckDlgButton, EnableWindow, CheckRadioButton, GetMessageW, SetRectEmpty, GetProcessDefaultLayout, GetClassNameW, GetWindow, GetDlgItem, UnregisterClassW, FindWindowA, MessageBoxW, PostQuitMessage, AdjustWindowRectEx, GetMenuStringW, AppendMenuW, FindWindowW, FindWindowExW, DrawAnimatedRects, CreateWindowExW, RegisterClassExW, UnionRect, CallWindowProcW, GetClassInfoExW, GetWindowLongW, BeginPaint, EndPaint, IntersectRect, SetWindowRgn, IsMenu, IsZoomed, MessageBeep, CheckMenuItem, SetWindowPlacement, SetMenuItemInfoW, IsIconic, CheckMenuRadioItem, IsWindowVisible
> version.dll: GetFileVersionInfoW, GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA, GetFileVersionInfoSizeW, VerQueryValueW
> wininet.dll: InternetInitializeAutoProxyDll, GetUrlCacheEntryInfoW, InternetSetOptionW, InternetQueryOptionW
> winmm.dll: waveInGetNumDevs, waveOutGetNumDevs
> ws2_32.dll: getnameinfo, WSCEnumProtocols, WSAIoctl, getaddrinfo, WSACloseEvent, WSACreateEvent, WSCGetProviderPath, freeaddrinfo
> wsock32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -

( 0 exports )
TrID  : File type identification
Win32 Executable MS Visual C++ (generic) (75.0%)
Win32 Executable Generic (16.9%)
Generic Win/DOS Executable (3.9%)

Lyonnais92 · Answer

Bonsoir,

OK, merci.

Le rapport de MBAM ?

ayrton3333 · Answer

bonsoir oups je l'avais oublié:
le voici:
Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3403
Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 8.0.6001.18702

21/12/2009 20:47:27
mbam-log-2009-12-21 (20-47-27).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 210737
Temps écoulé: 55 minute(s), 13 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Lyonnais92 · Answer

Bonjour,

comment va l'ordi ?

Impossible de suprimmer Packed.win32.Tdss

9 réponses

Discussions similaires

Newsletters