Se connecter / S'enregistrer
Votre question

[Résolu] Infection TR/Vundo.FIX et TR/Monder.34304.4

Tags :
  • Windows
  • Sécurité
Dernière réponse : dans Sécurité et virus
1 Septembre 2008 21:28:02

Bonsoir toutes et tous,

Sur l'ordinateur d'un ami, antivir à détecté au moins deux problèmes :
Vundo et Monder.

Quelqu'un peut-il m'aider ?

Voici le rapport hijackthis :
Citation :
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 18:24, on 2008-09-01
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
C:\WINDOWS\system32\V0230Mon.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\WINDOWS\Logi_MwX.Exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\RDSHOST.exe
C:\WINDOWS\system32\sessmgr.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Damien\Mes documents\hijackthis\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =  fficial" rel="nofollow" target="_blank">http://www.google.fr/firefox?client=firefox-a&rls=org.m...
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {0545C48E-CDEA-41F2-97A9-6F044613878E} - (no file)
O2 - BHO: (no name) - {09CD5BBB-773C-49E4-989B-51F9A8BB37A6} - (no file)
O2 - BHO: (no name) - {0CD652AC-831A-45A2-B1EE-5642B572337B} - (no file)
O2 - BHO: (no name) - {264CD176-CB20-4249-B1C1-C7D7447BE536} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7c93d37d-e670-4a01-8e41-a1b000ceef7d} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: {f01223d5-bea6-be08-17f4-f273e6d5a18a} - {a81a5d6e-372f-4f71-80eb-6aeb5d32210f} - C:\WINDOWS\system32\xtcrbq.dll
O2 - BHO: (no name) - {AA62D208-49D4-4E93-A2D9-11BEE36B8CF5} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: (no name) - {B93ABF8B-F327-4286-84B6-D00700CB8AD1} - C:\WINDOWS\system32\opnOgFXp.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {D17EC20D-4207-47CE-AFB5-1C950E1C8DE9} - (no file)
O2 - BHO: (no name) - {E1DA6974-4B55-4158-91FB-4EEF76309791} - C:\WINDOWS\system32\jkkKaxVp.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
O4 - HKLM\..\Run: [V0230Mon.exe] C:\WINDOWS\system32\V0230Mon.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [Love default global mess] C:\Documents and Settings\All Users\Application Data\great coal love default\media stop.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [a45bb28a] rundll32.exe "C:\WINDOWS\system32\mtxodeyy.dll",b
O4 - HKLM\..\Run: [BMa7688116] Rundll32.exe "C:\WINDOWS\system32\fjrohyhs.dll",s
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [1caf53c8a4a8ca5185e64a6ee56e0c93] C:\DOCUME~1\Damien\MESDOC~1\MESFIC~1\18WHEE~1.EXE /r
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavweb...
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Co...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O20 - Winlogon Notify: jkkKaxVp - C:\WINDOWS\SYSTEM32\jkkKaxVp.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: MysqlInventime - Unknown owner - c:\mysql\bin\mysqld-nt.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

--
End of file - 10413 bytes


Merci d'avance pour vos habituelles et précieuses lumières :D 

Autres pages sur : resolu infection vundo fix monder 34304

1 Septembre 2008 21:58:45

bonsoir
belle infection, tu as le pc sous la main? sinon, dis à ton copain de s'inscrire et de venir poster sur ce sujet. ça sera plus simple.

Télécharge MalwareByte's Anti-Malware sur ton Bureau.
Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.

Une fois l'installation et la mise à jour effectuées, redémarre en mode sans échec.
AIDE : Redémarrer en mode sans échec

  • Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
  • Afin de lancer la recherche, clic sur"Rechercher".
  • Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :
    -- si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
    -- si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau afin de le poster dans ta prochaine réponse.
    [#ff0000]REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.[/#f]

    AIDE : Tuto en images sur MBAM



    3 Septembre 2008 18:24:46

    Bonsoir Sham_Rock, bonsoir toutes et tous,

    Effectivement, je vais voir avec lui s'il peut traiter en direct, sinon, je continuerai à faire l'intermédiaire.

    En tout cas, merci de ton aide et de ta réponse, désolé pour le délai induit.

    A bientôt,
    Christian.
    Contenus similaires
    3 Septembre 2008 18:41:25

    bonjour
    si tu attends trop, c'est le format assuré
    à moins que le copain ne surfe plus, sinon, plus il est connecté, plus la machine va s'infecter. :/ 
    6 Septembre 2008 01:44:41

    Bonsoir toutes et tous, bonsoir Sham_Rock,

    Cela n'a pas été sans mal, 3h30 de traitement après beaucoup de difficultés pour télécharger et installer le programme MalwareByte's Anti-Malware. Étant à distance, je n'ai pas pu le faire en mode sans échec.

    Voilà le résultat :
    Citation :
    Malwarebytes' Anti-Malware 1.26
    Version de la base de données: 1118
    Windows 5.1.2600 Service Pack 2

    2008-09-06 01:38:47
    mbam-log-2008-09-06 (01-38-40).txt

    Type de recherche: Examen complet (C:\|)
    Eléments examinés: 149039
    Temps écoulé: 3 hour(s), 36 minute(s), 35 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 2
    Clé(s) du Registre infectée(s): 22
    Valeur(s) du Registre infectée(s): 3
    Elément(s) de données du Registre infecté(s): 2
    Dossier(s) infecté(s): 2
    Fichier(s) infecté(s): 60

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    C:\WINDOWS\system32\opnOgFXp.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\jkkKaxVp.dll (Trojan.Vundo.H) -> No action taken.

    Clé(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3dcec36e-be30-44bf-be58-fc62c674de11} (Trojan.Vundo.H) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{3dcec36e-be30-44bf-be58-fc62c674de11} (Trojan.Vundo.H) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9096068b-daa7-4242-b95b-4489141f53d7} (Trojan.Vundo.H) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{9096068b-daa7-4242-b95b-4489141f53d7} (Trojan.Vundo.H) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e1da6974-4b55-4158-91fb-4eef76309791} (Trojan.Vundo.H) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\jkkkaxvp (Trojan.Vundo.H) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{e1da6974-4b55-4158-91fb-4eef76309791} (Trojan.Vundo.H) -> No action taken.
    HKEY_CLASSES_ROOT\pbfrv2.pbfrv2 (Adware.2020Search) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Adware.PlayMP3Z) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Mirar (Adware.Mirar) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\PlayMP3 (Adware.PlayMP3Z) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\FBrowsingAdvisor (Trojan.FBrowsingAdvisor) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\fbrowsingadvisor_is1 (Trojan.FBrowsingAdvisor) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> No action taken.

    Valeur(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{e1da6974-4b55-4158-91fb-4eef76309791} (Trojan.Vundo.H) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bma7688116 (Trojan.Agent) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\a45bb28a (Trojan.Vundo) -> No action taken.

    Elément(s) de données du Registre infecté(s):
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\opnogfxp -> No action taken.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\opnogfxp -> No action taken.

    Dossier(s) infecté(s):
    C:\Program Files\FBrowsingAdvisor (Trojan.FBrowsingAdvisor) -> No action taken.
    C:\Program Files\FBrowserAdvisor (Trojan.FBrowsingAdvisor) -> No action taken.

    Fichier(s) infecté(s):
    C:\WINDOWS\system32\ecoevu.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\opnOgFXp.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\pXFgOnpo.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\pXFgOnpo.ini2 (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\jkkKaxVp.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\eqgrbyyq.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\qyybrgqe.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\fccccCTL.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\LTCccccf.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\LTCccccf.ini2 (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\fccdDUmj.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\jmUDdccf.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\jmUDdccf.ini2 (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\hnnbewli.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\ilwebnnh.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\ianbkvkx.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\xkvkbnai.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\iifCuvst.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\tsvuCfii.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\tsvuCfii.ini2 (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\kkorcmmu.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\ummcrokk.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\nttlkbex.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\xebklttn.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\tuvWqRKB.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\BKRqWvut.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\BKRqWvut.ini2 (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\wvUKbCrP.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\PrCbKUvw.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\PrCbKUvw.ini2 (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\xxyyyWOF.dll (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\FOWyyyxx.ini (Trojan.Vundo.H) -> No action taken.
    C:\WINDOWS\system32\FOWyyyxx.ini2 (Trojan.Vundo.H) -> No action taken.
    C:\Program Files\FBrowsingAdvisor\XPCOMEvents.dll (Trojan.FBrowsingAdvisor) -> No action taken.
    C:\Program Files\Mozilla Firefox\regxpcom.exe (Trojan.FBrowsingAdvisor) -> No action taken.
    C:\Documents and Settings\Anita\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\kb65666[1] (Trojan.Vundo) -> No action taken.
    C:\Documents and Settings\Anita\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\kb767887[1] (Trojan.Vundo) -> No action taken.
    C:\Documents and Settings\Anita\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\kb456456[1] (Trojan.Vundo) -> No action taken.
    C:\Documents and Settings\Calix\Local Settings\Temporary Internet Files\Content.IE5\0Q3MJ16F\kb767887[1] (Trojan.Vundo) -> No action taken.
    C:\Documents and Settings\Calix\Local Settings\Temporary Internet Files\Content.IE5\DYL0AD24\kb456456[1] (Trojan.Vundo) -> No action taken.
    C:\Documents and Settings\Calix\Local Settings\Temporary Internet Files\Content.IE5\K7PHQC7E\kb65666[1] (Trojan.Vundo) -> No action taken.
    C:\Documents and Settings\Damien\Local Settings\Temp\Répertoire temporaire 1 pour xpand rally xtreme demo.zip\Setup.exe (Adware.Agent) -> No action taken.
    C:\Documents and Settings\Damien\Local Settings\Temporary Internet Files\Content.IE5\2068QFZ9\cntr[1] (Trojan.Vundo) -> No action taken.
    C:\Documents and Settings\Damien\Local Settings\Temporary Internet Files\Content.IE5\Y1SPS1JF\nd82m0[1] (Trojan.Vundo) -> No action taken.
    C:\Documents and Settings\Damien\Local Settings\Temporary Internet Files\Content.IE5\Y1SPS1JF\kb65666[1] (Trojan.Vundo) -> No action taken.
    C:\Documents and Settings\Damien\Mes documents\Mes fichiers reçus\logiciel\PLAY_MP3.exe (Adware.PlayMp3z) -> No action taken.
    C:\Documents and Settings\Hugo\Local Settings\Temporary Internet Files\Content.IE5\AHV90ZC1\kb65666[1] (Trojan.Vundo) -> No action taken.
    C:\Program Files\FBrowsingAdvisor\IXPCOMEvents.xpt (Trojan.FBrowsingAdvisor) -> No action taken.
    C:\Program Files\FBrowsingAdvisor\Logo.png (Trojan.FBrowsingAdvisor) -> No action taken.
    C:\Program Files\FBrowsingAdvisor\main.db (Trojan.FBrowsingAdvisor) -> No action taken.
    C:\Program Files\FBrowsingAdvisor\Thumbs.db (Trojan.FBrowsingAdvisor) -> No action taken.
    C:\Program Files\FBrowsingAdvisor\unins000.dat (Trojan.FBrowsingAdvisor) -> No action taken.
    C:\Program Files\FBrowsingAdvisor\unins000.exe (Trojan.FBrowsingAdvisor) -> No action taken.
    C:\WINDOWS\system32\mcrh.tmp (Malware.Trace) -> No action taken.
    C:\WINDOWS\system32\hojeyeyo.dll (Trojan.Agent) -> No action taken.
    C:\WINDOWS\system32\pac.txt (Malware.Trace) -> No action taken.
    C:\WINDOWS\pskt.ini (Trojan.Vundo) -> No action taken.
    C:\WINDOWS\BMa7688116.xml (Trojan.Vundo) -> No action taken.
    C:\WINDOWS\BMa7688116.txt (Trojan.Vundo) -> No action taken.
    C:\WINDOWS\system32\fccYsrRk.dll (Trojan.Vundo) -> No action taken.
    6 Septembre 2008 11:14:32

    bonjour



    Tu as mal lu la procédure:
    dans ton rapport:
    Citation :
    C:\WINDOWS\system32\ecoevu.dll (Trojan.Vundo.H) -> No action taken.


    Quand l'outil a trouvé quelque-chose, à la fin, il faut cliquer sur "Supprimer la sélection".

    Recommence stp
    6 Septembre 2008 12:55:27

    Bonjour Sham_Rock,

    Oui, j'ai vu mon erreur ce matin également : faut dire à 1h45 j'ai perdu les idées claires :( 

    Mais j'ai aussi fait le nécessaire pour récupérer l'ordinateur ici, ce sera plus facile. Je recommence donc la manip' et je te poste le nouveau rapport.
    6 Septembre 2008 18:03:02

    re

    pas de soucis :) 

    6 Septembre 2008 23:02:05

    Re Sham_Rock,

    Comme convenu, voici le rapport complet de MalwareByte's Anti-Malware,
    en mode sans échec et en ayant effectué le nettoyage demandé.

    Citation :
    Malwarebytes' Anti-Malware 1.26
    Database version: 1119
    Windows 5.1.2600 Service Pack 2

    06/09/2008 22:26:05
    mbam-log-2008-09-06 (22-26-05).txt

    Scan type: Full Scan (C:\|)
    Objects scanned: 189045
    Time elapsed: 2 hour(s), 30 minute(s), 24 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 3
    Registry Keys Infected: 23
    Registry Values Infected: 3
    Registry Data Items Infected: 2
    Folders Infected: 2
    Files Infected: 94

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    C:\WINDOWS\system32\opnOgFXp.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\ecoevu.dll (Trojan.Vundo) -> Delete on reboot.
    C:\WINDOWS\system32\jkkKaxVp.dll (Trojan.Vundo.H) -> Delete on reboot.

    Registry Keys Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3dcec36e-be30-44bf-be58-fc62c674de11} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{3dcec36e-be30-44bf-be58-fc62c674de11} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6fba11ac-d1b1-4ba7-a2b2-884dc440e2c7} (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_CLASSES_ROOT\CLSID\{6fba11ac-d1b1-4ba7-a2b2-884dc440e2c7} (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e1da6974-4b55-4158-91fb-4eef76309791} (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\jkkkaxvp (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_CLASSES_ROOT\CLSID\{e1da6974-4b55-4158-91fb-4eef76309791} (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_CLASSES_ROOT\pbfrv2.pbfrv2 (Adware.2020Search) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{10840e9a-9af4-4a93-9291-a8c46187fdf7} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{733fb71a-0be0-40d4-ab62-9363dc8ef188} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{a48527e4-cc46-43b8-a072-2167f3e8b627} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{623a7bbd-cebc-4a44-bacd-450188cf0ff6} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{30fe99e9-ca4b-4bd5-855f-bad4ba0200b0} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{0fae9dca-8df8-45bd-a43a-03b262974ee8} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{d0e1d989-a98b-4d1d-904f-ec9662891ceb} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\fbrowsingadvisor_is1 (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.

    Registry Values Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{e1da6974-4b55-4158-91fb-4eef76309791} (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bma7688116 (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\a45bb28a (Trojan.Vundo) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\opnogfxp -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\opnogfxp -> Delete on reboot.

    Folders Infected:
    C:\Program Files\FBrowsingAdvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    C:\Program Files\FBrowserAdvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.

    Files Infected:
    C:\WINDOWS\system32\ecoevu.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\opnOgFXp.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\pXFgOnpo.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\pXFgOnpo.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\jkkKaxVp.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\eqgrbyyq.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\qyybrgqe.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\fccccCTL.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LTCccccf.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\LTCccccf.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\fccdDUmj.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\jmUDdccf.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\jmUDdccf.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\hnnbewli.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ilwebnnh.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ianbkvkx.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\xkvkbnai.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\iifCuvst.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\tsvuCfii.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\tsvuCfii.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\kkorcmmu.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ummcrokk.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\nttlkbex.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\xebklttn.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\tuvWqRKB.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\BKRqWvut.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\BKRqWvut.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\wvUKbCrP.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\PrCbKUvw.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\PrCbKUvw.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\xxyyyWOF.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\FOWyyyxx.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\FOWyyyxx.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Anita\Local Settings\Temporary Internet Files\Content.IE5\EWRWEQEM\kb65666[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Anita\Local Settings\Temporary Internet Files\Content.IE5\FUI1I7VR\kb767887[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Anita\Local Settings\Temporary Internet Files\Content.IE5\M3MDITSD\kb456456[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Damien\Local Settings\Temp\Répertoire temporaire 1 pour xpand rally xtreme demo.zip\Setup.exe (Adware.Agent) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Damien\Local Settings\Temporary Internet Files\Content.IE5\2068QFZ9\cntr[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Damien\Local Settings\Temporary Internet Files\Content.IE5\Y1SPS1JF\kb65666[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Damien\Local Settings\Temporary Internet Files\Content.IE5\Y1SPS1JF\nd82m0[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Damien\Mes documents\Mes fichiers reçus\logiciel\PLAY_MP3.exe (Adware.PlayMp3z) -> Quarantined and deleted successfully.
    C:\Documents and Settings\Hugo\Local Settings\Temporary Internet Files\Content.IE5\AHV90ZC1\kb65666[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Program Files\FBrowsingAdvisor\XPCOMEvents.dll (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    C:\Program Files\Mozilla Firefox\regxpcom.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP398\A0036733.dll (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP402\A0037132.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP404\A0037384.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP405\A0037473.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP405\A0037474.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\bjuwoqcn.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\bqhegius.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\fateub.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\fccYsrRk.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\fxvtbauy.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ijcqauqf.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ivpxxwwi.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\jesbgkhy.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\kuroxeln.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\mbwlie.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\mcsvcf.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\nfkpeg.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\nfqngwen.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\nijvcaed.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\nrktnnah.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ntkgdn.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\oafbrd.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\oqddonqs.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\pdrreprp.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\pkigsope.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\qujrtsif.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\rvnivbtr.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\smouvtto.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\vjqqgj.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\xjmyxsbc.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\xrlneh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\xupvbwmi.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\yjbeqsit.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\yjdyei.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\yrpaxjrj.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ywvguitg.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\zobcnr.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\ztvspy.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\Program Files\FBrowsingAdvisor\IXPCOMEvents.xpt (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    C:\Program Files\FBrowsingAdvisor\Logo.png (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    C:\Program Files\FBrowsingAdvisor\main.db (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    C:\Program Files\FBrowsingAdvisor\Thumbs.db (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    C:\Program Files\FBrowsingAdvisor\unins000.dat (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    C:\Program Files\FBrowsingAdvisor\unins000.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\mcrh.tmp (Malware.Trace) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\hojeyeyo.dll (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\pac.txt (Malware.Trace) -> Quarantined and deleted successfully.
    C:\WINDOWS\pskt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\BMa7688116.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
    C:\WINDOWS\BMa7688116.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
    7 Septembre 2008 18:17:08

    re

    Désactive ton antivirus et tout autre type de protection.
    Télécharge ComboFix de sUBs :
    ComboFix.exe
    et sauvegarde le sur ton bureau et pas ailleurs!

    Double-clic sur ComboFix, Il va te poser une question, suis les invites puis attends que combofix ait terminé, il est possible que ton PC reboot, c’est normal, un rapport sera créé.Poste le rapport:C:\Combofix.txt
    clique dessus pour l'ouvrir, puis édition "sélectionner tout", édition "copier"

    viens sur le forum et édition "coller"

    ajoute un nouveau rapport Hijackthis.
    7 Septembre 2008 21:31:50

    Bonsoir toutes et tous, bonsoir Sham_Rock,

    Comme convenu, le rapport ComboFix :

    ComboFix 08-09-05.03 - Administrateur 2008-09-07 21:11:26.2 - NTFSx86 MINIMAL
    Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.801 [GMT 2:00]
    Endroit: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\Damien\Cookies\damien@edt02[2].txt
    C:\Documents and Settings\Damien\Cookies\damien@serving-sys[1].txt
    C:\WINDOWS\system32\awtydyrl.dll
    C:\WINDOWS\system32\bwohomng.dll
    C:\WINDOWS\system32\dfjvzp.dll
    C:\WINDOWS\system32\dkegixyl.dll
    C:\WINDOWS\system32\dompdu.dll
    C:\WINDOWS\system32\ehwjjcff.dll
    C:\WINDOWS\system32\eobdqqiy.ini
    C:\WINDOWS\system32\fiohqppd.ini
    C:\WINDOWS\system32\fiplicrh.dll
    C:\WINDOWS\system32\fssqqnah.dll
    C:\WINDOWS\system32\hvrscauk.ini
    C:\WINDOWS\system32\ipnrup.dll
    C:\WINDOWS\system32\ivkouend.dll
    C:\WINDOWS\system32\jqwszi.dll
    C:\WINDOWS\system32\mhjadmyv.dll
    C:\WINDOWS\system32\mmvesgtc.dll
    C:\WINDOWS\system32\MSINET.oca
    C:\WINDOWS\system32\nkcivyfy.dll
    C:\WINDOWS\system32\nrvgvdae.ini
    C:\WINDOWS\system32\nuacfrnd.dll
    C:\WINDOWS\system32\pznbho.dll
    C:\WINDOWS\system32\qctaas.dll
    C:\WINDOWS\system32\qrgtlxtc.dll
    C:\WINDOWS\system32\swaohrqa.dll
    C:\WINDOWS\system32\tuxskoxw.dll
    C:\WINDOWS\system32\wnmsuyal.dll
    C:\WINDOWS\system32\xakqlxoy.dll
    C:\WINDOWS\system32\xtcrbq.dll
    C:\WINDOWS\system32\ydjnyind.dll

    .
    ((((((((((((((((((((((((((((( Fichiers créés 2008-08-07 to 2008-09-07 ))))))))))))))))))))))))))))))))))))
    .

    2008-09-07 10:52 . 2008-09-07 10:52 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\AdobeUM
    2008-09-06 19:12 . 2008-09-06 19:12 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
    2008-09-06 19:10 . 2007-08-17 19:46 <REP> d-------- C:\Documents and Settings\Administrateur\WINDOWS
    2008-09-06 19:10 . 2004-08-16 17:55 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
    2008-09-06 19:10 . 2004-08-16 17:55 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
    2008-09-06 19:10 . 2004-08-16 17:55 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
    2008-09-06 19:10 . 2008-09-07 10:51 <REP> dr------- C:\Documents and Settings\Administrateur\Mes documents
    2008-09-06 19:10 . 2004-08-16 17:55 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
    2008-09-06 19:10 . 2007-08-17 19:56 <REP> dr------- C:\Documents and Settings\Administrateur\Favoris
    2008-09-06 19:10 . 2008-09-07 21:10 <REP> dr------- C:\Documents and Settings\Administrateur\Bureau
    2008-09-06 19:10 . 2007-08-17 19:56 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\You've Got Pictures Screensaver
    2008-09-06 19:10 . 2007-08-17 19:58 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Symantec
    2008-09-06 19:10 . 2008-09-06 19:10 <REP> d-------- C:\Documents and Settings\Administrateur
    2008-09-05 21:59 . 2008-09-06 01:38 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-09-05 21:59 . 2008-09-05 21:59 <REP> d-------- C:\Documents and Settings\Damien\Application Data\Malwarebytes
    2008-09-05 21:59 . 2008-09-05 21:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-09-05 21:59 . 2008-09-02 00:16 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
    2008-09-05 21:59 . 2008-09-02 00:16 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
    2008-08-28 13:25 . 2008-09-01 15:25 774 ---hs---- C:\WINDOWS\system32\yyedoxtm.ini
    2008-08-27 13:28 . 2008-08-27 13:28 114,688 --a------ C:\WINDOWS\system32\ucpsvxck.dll
    2008-08-27 13:22 . 2008-08-27 13:22 2,048 --a------ C:\WINDOWS\system32\pogbnjtg.exe
    2008-08-27 13:19 . 2008-08-27 13:19 95,744 --a------ C:\WINDOWS\system32\shbtxjax.dll
    2008-08-26 13:43 . 2008-08-26 13:43 95,744 --a------ C:\WINDOWS\system32\yweihpmr.dll
    2008-08-26 11:52 . 2008-08-26 11:52 114,688 --a------ C:\WINDOWS\system32\lmmjgyba.dll
    2008-08-26 11:49 . 2008-08-26 11:49 2,048 --a------ C:\WINDOWS\system32\wjwhtgtw.exe
    2008-08-26 11:44 . 2008-08-26 11:44 95,744 --a------ C:\WINDOWS\system32\dkebonbb.dll
    2008-08-24 10:09 . 2008-08-24 10:09 <REP> d-------- C:\WINDOWS\system32\eMaxt02
    2008-08-24 10:09 . 2008-08-24 10:09 <REP> d-------- C:\Temp\bbc2
    2008-08-24 10:09 . 2008-08-29 10:11 <REP> d-------- C:\Temp
    2008-08-20 10:37 . 2008-08-26 10:04 68,608 --ahs---- C:\WINDOWS\Thumbs.db
    2008-08-20 10:25 . 2008-08-20 10:25 <REP> d-------- C:\Graphics
    2008-08-20 10:25 . 2004-05-20 16:51 194,560 --------- C:\WINDOWS\system32\mwgfx24.dll
    2008-08-20 10:25 . 2004-04-05 19:37 158,720 --------- C:\WINDOWS\system32\mwgfx.dll
    2008-08-20 10:25 . 2004-04-20 09:50 103,424 --------- C:\WINDOWS\system32\mwdds.dll
    2008-08-20 10:25 . 2004-05-14 10:13 56,832 --------- C:\WINDOWS\system32\mwace.dll
    2008-08-19 19:20 . 2008-08-19 19:20 <REP> d-------- C:\Documents and Settings\Damien\Application Data\.wyzo
    2008-08-19 12:17 . 2008-05-22 14:57 805,400 -ra------ C:\WINDOWS\system32\tmpA7.tmp
    2008-08-19 12:06 . 2008-08-19 12:09 <REP> d-------- C:\Program Files\everglade rush
    2008-08-19 11:35 . 2008-08-19 11:35 <REP> d-------- C:\WINDOWS\system32\AGEIA
    2008-08-19 11:35 . 2008-08-19 11:35 <REP> d-------- C:\Program Files\AGEIA Technologies
    2008-08-19 11:34 . 2008-08-19 11:38 <REP> d-------- C:\Documents and Settings\Damien\Application Data\yuPlay
    2008-08-19 11:33 . 2008-08-19 12:15 <REP> d-------- C:\Program Files\yuPlay
    2008-08-19 11:33 . 2008-08-19 11:38 <REP> d-------- C:\Program Files\Fichiers communs\yuPlay
    2008-08-18 19:19 . 2008-08-18 19:19 <REP> d-------- C:\Program Files\Techland
    2008-08-15 11:42 . 2008-08-15 11:42 <REP> d-------- C:\Program Files\GifCreator
    2008-08-15 11:42 . 2008-08-15 11:42 <REP> d-------- C:\Program Files\Fichiers communs\Xuisoft
    2008-08-14 07:40 . 2008-05-01 16:31 331,776 --------- C:\WINDOWS\system32\dllcache\msadce.dll
    2008-08-10 16:00 . 2008-08-10 16:00 <REP> d-------- C:\Documents and Settings\Damien\Application Data\ScanSoft
    2008-08-10 16:00 . 2008-08-10 16:00 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ScanSoft

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-09-07 19:03 --------- d-----w C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic
    2008-09-06 21:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
    2008-09-06 21:08 --------- d-----w C:\Program Files\Spybot - Search & Destroy
    2008-09-06 07:19 --------- d-----w C:\Program Files\Mozilla Thunderbird
    2008-09-03 16:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2008-08-30 09:39 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-08-30 09:39 --------- d-----w C:\Program Files\SEGA
    2008-08-30 08:21 --------- d-----w C:\Program Files\THQ
    2008-08-30 08:20 --------- d-----w C:\Program Files\Codemasters
    2008-08-29 15:20 --------- d-----w C:\Documents and Settings\Damien\Application Data\LimeWire
    2008-08-26 07:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\TrackMania
    2008-08-26 07:31 --------- d-----w C:\Program Files\eMule
    2008-08-20 08:37 --------- d-----w C:\Program Files\Xvid
    2008-08-20 08:37 --------- d-----w C:\Program Files\Windows Media Connect 2
    2008-08-20 08:37 --------- d-----w C:\Program Files\Windows Live Toolbar
    2008-08-20 08:37 --------- d-----w C:\Program Files\TmNationsForever
    2008-08-20 08:37 --------- d-----w C:\Program Files\Microsoft Works
    2008-08-20 08:37 --------- d-----w C:\Program Files\LimeWire
    2008-08-20 08:37 --------- d-----w C:\Program Files\DivX
    2008-08-20 07:12 --------- d-----w C:\Program Files\Microsoft Silverlight
    2008-08-19 10:44 444,952 ----a-w C:\WINDOWS\system32\wrap_oal.dll
    2008-08-19 10:44 109,080 ----a-w C:\WINDOWS\system32\OpenAL32.dll
    2008-08-19 10:15 --------- d-----w C:\Program Files\Stunt Playground
    2008-08-19 10:14 --------- d-----w C:\Program Files\Empire Interactive
    2008-08-19 10:05 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
    2008-08-19 09:07 --------- d-----w C:\Program Files\Electronic Arts
    2008-08-18 17:06 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
    2008-08-17 16:00 --------- d-----w C:\Program Files\Norton Security Scan
    2008-08-16 14:50 --------- d-----w C:\Program Files\TrackMania Nations ESWC
    2008-08-13 16:02 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
    2008-08-07 11:18 --------- d-----w C:\Program Files\Google
    2008-08-02 16:44 --------- d-----w C:\Program Files\ExpertEnhancer
    2008-07-25 08:03 --------- d-----w C:\Program Files\Playlogic
    2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll
    2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
    2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
    2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
    2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
    2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll
    2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
    2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll
    2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
    2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll
    2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
    2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
    2008-07-18 10:02 --------- d-----w C:\Program Files\OpenAL
    2008-07-17 17:32 --------- d-----w C:\Program Files\Activision
    2008-07-17 17:21 --------- d-----w C:\Program Files\Aspyr
    2008-07-15 17:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\great coal love default
    2008-07-15 08:40 --------- d-----w C:\Program Files\Sun
    2008-07-15 08:40 --------- d-----w C:\Program Files\Java
    2008-07-12 16:57 --------- d-----w C:\Program Files\DelphineSoft
    2008-07-10 13:54 --------- d-----w C:\Program Files\Team6 game studios
    2008-07-10 08:17 --------- d-----w C:\Program Files\EA GAMES
    2008-07-07 20:31 253,952 ----a-w C:\WINDOWS\system32\es.dll
    2008-07-07 20:31 253,952 ------w C:\WINDOWS\system32\dllcache\es.dll
    2008-07-07 11:47 --------- d-----w C:\Program Files\Cutout Pro
    2008-07-07 11:46 --------- d-----w C:\Documents and Settings\Damien\Application Data\GetRightToGo
    2008-07-07 10:11 --------- d-----w C:\Program Files\Dofus
    2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
    2008-06-24 16:23 74,240 ------w C:\WINDOWS\system32\dllcache\mscms.dll
    2008-06-24 08:28 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
    2008-06-23 09:21 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
    2008-06-23 09:21 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
    2008-06-23 09:20 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
    2008-06-21 05:23 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
    2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
    2008-06-20 17:41 247,808 ------w C:\WINDOWS\system32\dllcache\mswsock.dll
    2008-06-20 17:41 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
    2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys
    2008-06-20 10:44 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys
    2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
    2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\dllcache\bthport.sys
    2007-09-05 16:06 536,064 ----a-w C:\Program Files\GIFAnimator.exe
    2007-09-05 16:06 248 ----a-w C:\Program Files\GIFAnimator.cnt
    2007-09-05 16:06 17,642 ----a-w C:\Program Files\GIFAnimator.hlp
    2007-09-05 16:06 10,752 ----a-w C:\Program Files\README.WRI
    .

    ((((((((((((((((((((((((((((( snapshot@2007-11-15_21.37.32.57 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-02-26 11:49:32 297,984 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB932823-v3\update\updspapi.dll
    + 2007-10-29 22:36:31 1,293,824 ----a-w C:\WINDOWS\$hf_mig$\KB941568\SP2QFE\quartz.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941568\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941568\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\updspapi.dll
    + 2007-10-30 16:53:32 360,832 ----a-w C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941644\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941644\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941644\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941644\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941644\update\updspapi.dll
    + 2008-03-20 07:56:50 1,846,016 ----a-w C:\WINDOWS\$hf_mig$\KB941693\SP2QFE\win32k.sys
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941693\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941693\update\updspapi.dll
    + 2007-10-10 23:22:14 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\advpack.dll
    + 2007-10-10 23:22:14 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\dxtrans.dll
    + 2007-10-10 23:22:14 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\extmgr.dll
    + 2007-10-10 23:22:14 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\icardie.dll
    + 2007-10-10 08:16:47 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe
    + 2007-10-10 23:22:14 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieakeng.dll
    + 2007-10-10 23:22:14 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieaksie.dll
    + 2007-10-10 05:47:20 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dat
    + 2007-10-10 23:22:14 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dll
    + 2007-10-10 23:22:15 388,096 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iedkcs32.dll
    + 2007-10-10 23:22:16 6,067,200 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieframe.dll
    + 2007-10-10 23:22:16 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iernonce.dll
    + 2007-10-10 23:22:16 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iertutil.dll
    + 2007-10-10 08:16:47 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe
    + 2007-10-10 08:16:56 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe
    + 2007-10-10 23:22:16 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\jsproxy.dll
    + 2007-10-10 23:22:16 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msfeeds.dll
    + 2007-10-10 23:22:16 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msfeedsbs.dll
    + 2007-10-30 23:40:57 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
    + 2007-10-10 23:22:18 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mshtmled.dll
    + 2007-10-10 23:22:18 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\msrating.dll
    + 2007-10-10 23:22:18 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\mstime.dll
    + 2007-10-10 23:22:18 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\occache.dll
    + 2007-10-10 23:22:18 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\url.dll
    + 2007-10-10 23:22:19 1,162,240 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll
    + 2007-10-10 23:22:19 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\webcheck.dll
    + 2007-10-10 23:22:19 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942615-IE7\update\updspapi.dll
    + 2007-11-13 11:02:46 60,416 ----a-w C:\WINDOWS\$hf_mig$\KB942763\SP2QFE\tzchange.exe
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942763\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942763\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\updspapi.dll
    + 2007-12-04 18:30:15 551,936 ----a-w C:\WINDOWS\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB943055\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB943055\update\updspapi.dll
    + 2007-11-07 09:50:06 733,696 ----a-w C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB943485\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB943485\update\updspapi.dll
    + 2007-12-07 01:42:15 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll
    + 2007-12-19 22:20:28 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll
    + 2007-12-07 01:42:15 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll
    + 2007-12-07 01:42:15 133,120 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll
    + 2007-12-07 01:42:15 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll
    + 2007-12-06 08:34:28 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe
    + 2007-12-07 01:42:15 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll
    + 2007-12-07 01:42:16 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll
    + 2007-12-06 05:00:02 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat
    + 2007-12-07 01:42:16 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll
    + 2007-12-07 01:42:16 388,096 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll
    + 2007-12-07 01:42:19 6,067,200 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll
    + 2007-12-07 01:42:19 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll
    + 2007-12-07 01:42:19 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll
    + 2007-12-06 08:34:29 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe
    + 2007-12-06 08:34:45 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe
    + 2007-12-07 01:42:20 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll
    + 2007-12-07 01:42:20 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll
    + 2007-12-07 01:42:20 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll
    + 2007-12-07 01:42:21 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
    + 2007-12-07 01:42:21 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll
    + 2007-12-07 01:42:21 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll
    + 2007-12-07 01:42:21 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll
    + 2007-12-07 01:42:21 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll
    + 2008-01-11 05:54:27 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll
    + 2007-12-07 01:42:21 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\url.dll
    + 2007-12-07 01:42:22 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll
    + 2007-12-07 01:42:22 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll
    + 2007-12-07 01:42:22 825,344 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944533-IE7\update\updspapi.dll
    + 2007-11-13 08:47:45 20,480 ----a-w C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\updspapi.dll
    + 2008-02-20 05:20:23 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsapi.dll
    + 2008-02-20 18:50:24 45,568 ----a-w C:\WINDOWS\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB945553\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB945553\update\updspapi.dll
    + 2007-12-18 09:38:59 179,712 ----a-w C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB946026\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB946026\update\updspapi.dll
    + 2008-03-01 12:34:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll
    + 2008-03-01 12:34:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll
    + 2008-03-01 12:34:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll
    + 2008-03-01 12:34:27 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll
    + 2008-03-01 12:34:27 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll
    + 2008-02-22 09:39:56 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe
    + 2008-03-01 12:34:27 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll
    + 2008-03-01 12:34:27 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll
    + 2008-02-15 05:44:25 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat
    + 2008-03-01 12:34:27 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll
    + 2008-03-01 12:34:27 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll
    + 2008-03-01 12:34:29 6,067,712 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll
    + 2008-03-01 12:34:29 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll
    + 2008-03-01 12:34:29 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll
    + 2008-02-22 09:39:56 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe
    + 2008-02-22 09:40:22 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe
    + 2008-03-01 12:34:30 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll
    + 2008-03-01 12:34:30 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll
    + 2008-03-01 12:34:30 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll
    + 2008-03-01 12:34:32 3,593,216 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
    + 2008-03-01 12:34:32 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll
    + 2008-03-01 12:34:32 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll
    + 2008-03-01 12:34:32 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll
    + 2008-03-01 12:34:32 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll
    + 2008-03-01 12:34:32 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll
    + 2008-03-01 12:34:32 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\url.dll
    + 2008-03-01 12:34:33 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll
    + 2008-03-01 12:34:33 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll
    + 2008-03-01 12:34:33 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB947864-IE7\update\updspapi.dll
    + 2008-02-20 06:52:42 282,624 ----a-w C:\WINDOWS\$hf_mig$\KB948590\SP2QFE\gdi32.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948590\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948590\update\updspapi.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB948881\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB948881\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\update.exe
    + 2007-03-06 01:35:47 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB948881\update\updspapi.dll
    + 2008-01-23 04:56:21 554,008 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll
    + 2007-12-10 12:41:11 518,944 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll
    + 2007-12-10 12:41:11 326,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll
    + 2007-12-10 12:41:11 1,516,568 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll
    + 2007-12-10 12:41:11 355,112 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll
    + 2008-03-25 06:56:31 194,144 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll
    + 2007-12-10 12:41:12 60,192 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll
    + 2007-12-10 12:41:12 248,608 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll
    + 2007-12-10 12:41:12 219,936 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll
    + 2007-12-10 12:41:12 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll
    + 2007-12-10 12:41:13 432,928 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll
    + 2007-12-10 12:41:13 322,336 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll
    + 2007-12-10 12:41:13 559,904 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll
    + 2007-12-10 12:41:13 264,992 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll
    + 2007-12-10 12:41:13 838,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll
    + 2007-11-01 05:15:27 621,344 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll
    + 2007-12-10 12:41:14 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll
    + 2008-04-23 07:19:26 124,928 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll
    + 2008-04-23 07:19:26 347,136 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll
    + 2008-04-23 07:19:26 214,528 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll
    + 2008-04-23 07:19:26 132,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll
    + 2008-04-23 07:19:26 63,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll
    + 2008-04-22 08:02:19 70,656 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe
    + 2008-04-23 07:19:26 153,088 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll
    + 2008-04-23 07:19:26 230,400 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll
    + 2008-04-20 05:07:38 161,792 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll
    + 2007-04-17 09:32:38 2,455,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat
    + 2008-04-23 07:19:26 383,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll
    + 2008-04-23 07:19:26 388,608 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll
    + 2008-04-23 07:19:26 6,068,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll
    + 2008-04-23 07:19:26 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll
    + 2008-04-23 07:19:26 267,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll
    + 2008-04-22 08:02:19 13,824 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe
    + 2008-04-22 08:02:46 625,664 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
    + 2008-04-23 07:19:26 27,648 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll
    + 2008-04-23 07:19:27 459,264 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll
    + 2008-04-23 07:19:27 52,224 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll
    + 2008-04-23 07:19:27 3,593,728 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
    + 2008-04-23 07:19:27 478,208 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll
    + 2008-04-23 07:19:27 193,024 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll
    + 2008-04-23 07:19:27 671,232 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll
    + 2008-04-23 07:19:27 102,912 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll
    + 2008-04-23 07:19:27 44,544 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll
    + 2008-04-23 07:19:27 105,984 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\url.dll
    + 2008-04-23 07:19:27 1,162,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll
    + 2008-04-23 07:19:27 233,472 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll
    + 2008-04-23 07:19:27 827,392 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
    + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\spmsg.dll
    + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\spuninst.exe
    + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\spcustom.dll
    + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\update.exe
    + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB950759-IE7\update\updspapi.dll
    + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950760\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950760\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950760\update\updspapi.dll
    + 2008-05-08 12:14:51 203,008 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP2QFE\rmcast.sys
    + 2008-05-08 14:02:52 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP3GDR\rmcast.sys
    + 2008-05-08 13:58:17 203,136 ----a-w C:\WINDOWS\$hf_mig$\KB950762\SP3QFE\rmcast.sys
    + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB950762\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB950762\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB950762\update\updspapi.dll
    + 2008-06-14 18:03:13 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys
    + 2008-06-14 17:33:37 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys
    + 2008-06-14 17:40:19 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys
    + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376-v2\update\updspapi.dll
    + 2008-04-14 16:17:04 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP2QFE\bthport.sys
    + 2008-04-14 15:59:30 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP3GDR\bthport.sys
    + 2008-04-14 16:22:05 272,768 ----a-w C:\WINDOWS\$hf_mig$\KB951376\SP3QFE\bthport.sys
    + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951376\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951376\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\spcustom.dll
    + 2007-11-30 11:19:06 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\update.exe
    + 2007-11-30 11:19:10 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951376\update\updspapi.dll
    + 2008-05-07 04:55:47 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll
    + 2008-05-07 05:11:24 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll
    + 2008-05-07 05:04:59 1,294,336 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll
    + 2007-11-30 11:19:06 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll
    + 2007-11-30 11:19:06 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe
    + 2007-11-30 11:19:06 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll
    + 2007-11-30 12:39:29 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
    + 2007-11-30 12:39:31 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll
    + 2006-08-16 12:13:24 100,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
    + 2008-06-20 10:44:08 138,368 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys
    + 2008-06-20 17:37:01 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
    + 2008-06-20 17:37:01 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll
    + 2008-06-20 10:44:42 360,960 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
    + 2008-06-20 09:32:39 225,920 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
    + 2008-06-20 11:40:08 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
    + 2008-06-20 17:47:22 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
    + 2008-06-20 17:47:22 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
    + 2008-06-20 11:51:12 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
    + 2008-06-20 11:08:27 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
    + 2008-06-20 11:48:03 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
    + 2008-06-20 17:44:02 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
    + 2008-06-20 17:44:02 247,808 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
    + 2008-06-20 11:59:02 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
    + 2008-06-20 11:16:44 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
    + 2007-11-30 12:39:29 18,296 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll
    + 2007-11-30 12:39:29 234,872 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe
    + 2007-11-30 12:39:29 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll
    + 2007-11-30 12:39:26 767,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
    + 2007-11-30 12:39:29 406,392 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll
    + 2004-08-05 12:00:00 294,400 -c----w C:\WINDOWS\$NtUninstallKB932823-v3$\msctf.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\updspapi.dll
    + 2005-08-30 03:55:43 1,293,312 -c----w C:\WINDOWS\$NtUninstallKB941568$\quartz.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941568$\spuninst\updspapi.dll
    + 2005-06-28 09:23:40 216,800 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe
    + 2005-06-28 09:23:54 371,424 -c----w C:\WINDOWS\$NtUninstallKB941569$\spuninst\updspapi.dll
    + 2006-10-18 19:47:18 222,208 -c----w C:\WINDOWS\$NtUninstallKB941569$\wmasf.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941644$\spuninst\updspapi.dll
    + 2006-04-20 11:51:50 359,808 -c----w C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB941693$\spuninst\updspapi.dll
    + 2007-03-08 15:33:58 1,843,712 -c----w C:\WINDOWS\$NtUninstallKB941693$\win32k.sys
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB942763$\spuninst\updspapi.dll
    + 2007-07-18 12:42:22 60,416 -c----w C:\WINDOWS\$NtUninstallKB942763$\tzchange.exe
    + 2007-05-17 11:29:50 549,376 -c----w C:\WINDOWS\$NtUninstallKB943055$\oleaut32.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB943055$\spuninst\updspapi.dll
    + 2006-08-17 12:29:49 728,576 -c----w C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB943485$\spuninst\updspapi.dll
    + 2004-08-05 12:00:00 27,440 -c----w C:\WINDOWS\$NtUninstallKB944653$\secdrv.sys
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB944653$\spuninst\updspapi.dll
    + 2006-06-26 17:41:32 148,480 -c----w C:\WINDOWS\$NtUninstallKB945553$\dnsapi.dll
    + 2004-08-05 12:00:00 45,568 -c----w C:\WINDOWS\$NtUninstallKB945553$\dnsrslvr.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB945553$\spuninst\updspapi.dll
    + 2004-08-05 12:00:00 181,248 -c----w C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB946026$\spuninst\updspapi.dll
    + 2007-06-19 13:32:25 282,112 -c----w C:\WINDOWS\$NtUninstallKB948590$\gdi32.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB948590$\spuninst\updspapi.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe
    + 2007-03-06 01:35:47 394,976 -c----w C:\WINDOWS\$NtUninstallKB948881$\spuninst\updspapi.dll
    + 2004-08-05 12:00:00 561,179 -c----w C:\WINDOWS\$NtUninstallKB950749$\dao360.dll
    + 2004-08-05 12:00:00 512,029 -c----w C:\WINDOWS\$NtUninstallKB950749$\msexch40.dll
    + 2004-08-05 12:00:00 319,517 -c----w C:\WINDOWS\$NtUninstallKB950749$\msexcl40.dll
    + 2004-08-05 12:00:00 1,507,356 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjet40.dll
    + 2004-08-05 12:00:00 358,976 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjetoledb40.dll
    + 2004-08-05 12:00:00 184,351 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjint40.dll
    + 2004-08-05 12:00:00 53,279 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjter40.dll
    + 2004-08-05 12:00:00 241,693 -c----w C:\WINDOWS\$NtUninstallKB950749$\msjtes40.dll
    + 2004-08-05 12:00:00 213,023 -c----w C:\WINDOWS\$NtUninstallKB950749$\msltus40.dll
    + 2004-08-05 12:00:00 348,189 -c----w C:\WINDOWS\$NtUninstallKB950749$\mspbde40.dll
    + 2004-08-05 12:00:00 421,919 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrd2x40.dll
    + 2004-08-05 12:00:00 315,423 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrd3x40.dll
    + 2004-08-05 12:00:00 552,989 -c----w C:\WINDOWS\$NtUninstallKB950749$\msrepl40.dll
    + 2004-08-05 12:00:00 258,077 -c----w C:\WINDOWS\$NtUninstallKB950749$\mstext40.dll
    + 2004-08-05 12:00:00 831,519 -c----w C:\WINDOWS\$NtUninstallKB950749$\mswdat10.dll
    + 2004-08-05 12:00:00 614,429 -c----w C:\WINDOWS\$NtUninstallKB950749$\mswstr10.dll
    + 2004-08-05 12:00:00 348,189 -c----w C:\WINDOWS\$NtUninstallKB950749$\msxbde40.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\$NtUninstallKB950749$\spuninst\updspapi.dll
    + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe
    + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB950760$\spuninst\updspapi.dll
    + 2006-07-13 08:48:58 202,240 -c----w C:\WINDOWS\$NtUninstallKB950762$\rmcast.sys
    + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe
    + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB950762$\spuninst\updspapi.dll
    + 2008-04-14 15:52:45 272,768 -c----w C:\WINDOWS\$NtUninstallKB951376-v2$\bthport.sys
    + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe
    + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\updspapi.dll
    + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe
    + 2007-11-30 11:19:10 406,392 -c----w C:\WINDOWS\$NtUninstallKB951376$\spuninst\updspapi.dll
    + 2007-10-29 22:43:32 1,293,824 -c----w C:\WINDOWS\$NtUninstallKB951698$\quartz.dll
    + 2007-11-30 11:19:06 234,872 -c----w C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe
    + 2007-11-30 12:39:31 406,392 -c----w C:\WINDOWS\$NtUninstallKB951698$\spuninst\updspapi.dll
    + 2004-08-05 12:00:00 138,496 -c----w C:\WINDOWS\$NtUninstallKB951748$\afd.sys
    + 2008-02-20 05:35:05 148,992 -c----w C:\WINDOWS\$NtUninstallKB951748$\dnsapi.dll
    + 2004-08-05 12:00:00 247,808 -c----w C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll
    + 2007-11-30 12:39:29 234,872 -c----w C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe
    + 2007-11-30 12:39:29 406,392 -c----w C:\WINDOWS\$NtUninstallKB951748$\spuninst\updspapi.dll
    + 2007-10-30 17:20:55 360,064 -c----w C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
    + 2006-08-16 09:37:30 225,664 -c----w C:\WINDOWS\$NtUninstallKB951748$\tcpip6.sys
    - 2007-11-07 18:52:52 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
    + 2008-08-19 10:44:19 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
    - 2007-11-07 18:52:53 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
    + 2008-08-19 10:44:19 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
    - 2007-11-07 18:52:53 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
    + 2008-08-19 10:44:20 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
    - 2007-11-07 18:52:50 2,676,224 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-08-19 10:44:09 2,676,224 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-07 18:52:50 2,846,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-08-19 10:44:11 2,846,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-07 18:52:51 563,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-08-19 10:44:12 563,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-07 18:52:51 567,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-08-19 10:44:13 567,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-07 18:52:51 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-08-19 10:44:14 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-07 18:52:51 577,024 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-08-19 10:44:15 577,024 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-07 18:52:51 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-08-19 10:44:16 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-07 18:52:52 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-08-19 10:44:17 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-07 18:52:52 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-08-19 10:44:17 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-07 18:52:54 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    + 2008-08-19 10:44:20 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
    - 2007-11-07 18:52:54 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
    + 2008-08-19 10:44:21 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
    - 2007-11-07 18:52:54 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
    + 2008-08-19 10:44:21 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
    - 2007-11-07 18:52:54 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
    + 2008-08-19 10:44:21 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
    - 2007-11-07 18:52:54 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
    + 2008-08-19 10:44:22 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
    - 2007-11-07 18:52:52 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
    + 2008-08-19 10:44:18 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
    - 2007-08-18 09:16:20 997,992 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
    + 2008-08-03 05:39:41 1,000,848 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Access\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
    - 2007-08-18 09:16:21 1,100,392 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Excel\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
    + 2008-08-03 05:41:02 1,103,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Excel\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
    - 2007-08-18 09:16:21 141,928 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Graph\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
    + 2008-08-03 05:41:03 144,784 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Graph\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
    - 2007-08-18 09:16:21 461,416 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Owc11\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Owc11.dll
    + 2008-08-03 05:40:51 464,272 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Owc11\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Owc11.dll
    - 2007-08-18 09:16:21 223,856 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
    + 2008-08-03 05:41:10 226,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
    - 2007-08-18 09:16:21 211,568 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Publisher\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Publisher.dll
    + 2008-08-03 05:41:12 214,424 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Publisher\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Publisher.dll
    - 2007-08-18 09:16:21 20,080 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.SmartTag\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
    + 2008-08-03 05:40:56 22,928 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.SmartTag\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
    - 2007-08-18 09:16:21 662,120 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Word\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
    + 2008-08-03 05:41:15 664,968 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.Word\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
    - 2007-08-18 09:16:21 371,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
    + 2008-08-03 05:40:55 374,152 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
    - 2007-08-17 18:06:57 64,088 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    + 2008-08-03 05:40:03 66,936 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    - 2007-08-17 18:06:57 223,800 ----a-w C:\WINDOWS\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
    + 2008-08-03 05:39:50 226,656 ----a-w C:\WINDOWS\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
    + 2008-05-24 18:42:40 69,120 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2008-05-24 18:42:46 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2008-05-24 18:42:24 4,444,160 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2008-05-24 18:42:48 483,840 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2008-05-24 18:42:33 3,036,160 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2008-05-24 18:42:51 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2008-05-24 18:42:51 113,664 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2008-05-24 18:42:46 261,120 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2008-05-24 18:42:30 5,431,296 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2008-05-24 18:42:38 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2008-05-23 19:24:53 315,392 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt.resources\2.0.0.0_fr_b03f5f7f11d50a3a\aspnetmmcext.resources.dll
    + 2008-05-24 18:42:31 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2008-05-24 18:42:39 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2008-05-24 18:42:42 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2008-05-24 18:42:43 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2008-05-24 18:42:44 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2008-05-23 19:25:01 53,248 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Engine.resources.dll
    + 2008-05-24 18:42:51 348,160 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2008-05-24 18:42:52 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2008-05-23 19:25:02 139,264 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Tasks.resources.dll
    + 2008-05-24 18:42:53 655,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2008-05-23 19:25:02 10,240 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.build.utilities.resources\2.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.Build.Utilities.Resources.dll
    + 2008-05-24 18:42:54 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2008-05-23 19:24:54 45,056 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Jscript.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.JScript.Resources.dll
    + 2008-05-24 18:42:44 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2008-05-23 19:25:07 9,216 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.data.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.resources.dll
    + 2008-05-24 18:42:43 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2008-05-23 19:25:07 9,728 ----a-w C:\WINDOWS\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.resources.dll
    + 2008-05-24 18:42:42 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2008-05-23 19:25:07 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_fr_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
    + 2008-05-24 18:42:48 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2008-05-24 18:42:41 671,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2008-05-24 18:42:28 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2008-05-24 18:42:50 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2008-05-24 18:42:41 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2008-05-24 18:42:40 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2008-05-23 19:25:03 311,296 ----a-w C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fr_b77a5c561934e089\mscorlib.Resources.dll
    + 2008-05-23 19:25:06 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl.resources\2.0.0.0_fr_b03f5f7f11d50a3a\sysglobl.resources.dll
    + 2008-05-24 18:42:44 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2008-05-23 19:25:03 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Configuration.Install.Resources.dll
    + 2008-05-24 18:42:45 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2008-05-23 19:25:06 49,152 ----a-w C:\WINDOWS\assembly\GAC_MSIL\system.configuration.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Configuration.resources.dll
    + 2008-05-24 18:42:32 425,984 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2008-05-23 19:25:03 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.OracleClient.resources\2.0.0.0_fr_b77a5c561934e089\System.Data.OracleClient.resources.dll
    + 2008-05-23 19:24:59 335,872 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.resources\2.0.0.0_fr_b77a5c561934e089\System.Data.Resources.dll
    + 2008-05-23 19:25:04 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml.resources\2.0.0.0_fr_b77a5c561934e089\system.data.sqlxml.resources.dll
    + 2008-05-24 18:42:33 741,376 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2008-05-23 19:24:53 385,024 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Deployment.resources.dll
    + 2008-05-24 18:42:34 933,888 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2008-05-23 19:24:59 544,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Design.Resources.dll
    + 2008-05-24 18:42:54 5,070,848 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2008-05-23 19:24:56 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.DirectoryServices.Protocols.resources.dll
    + 2008-05-24 18:42:52 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2008-05-23 19:24:56 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.DirectoryServices.Resources.dll
    + 2008-05-24 18:42:38 401,408 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2008-05-23 19:25:04 6,144 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Drawing.Design.Resources.dll
    + 2008-05-24 18:42:49 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2008-05-23 19:25:00 15,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Drawing.Resources.dll
    + 2008-05-24 18:42:28 630,784 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2008-05-23 19:24:55 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.EnterpriseServices.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.EnterpriseServices.Resources.dll
    + 2008-05-23 19:25:05 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Management.Resources.dll
    + 2008-05-24 18:42:50 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2008-05-23 19:25:00 61,440 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Messaging.Resources.dll
    + 2008-05-24 18:42:49 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2008-05-23 19:25:01 212,992 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.resources\2.0.0.0_fr_b77a5c561934e089\system.Resources.dll
    + 2008-05-23 19:25:05 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_fr_b77a5c561934e089\System.Runtime.Remoting.Resources.dll
    + 2008-05-24 18:42:47 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2008-05-23 19:25:05 11,776 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.Resources.dll
    + 2008-05-24 18:42:47 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2008-05-23 19:24:55 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Security.Resources.dll
    + 2008-05-24 18:42:29 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2008-05-23 19:24:57 40,960 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.ServiceProcess.Resources.dll
    + 2008-05-24 18:42:29 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2008-05-23 19:25:06 16,896 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Transactions.resources\2.0.0.0_fr_b77a5c561934e089\System.Transactions.resources.dll
    + 2008-05-23 19:25:07 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll
    + 2008-05-24 18:42:37 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2008-05-24 18:42:37 90,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2008-05-23 19:24:57 610,304 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Resources.dll
    + 2008-05-23 19:24:58 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services.resources\2.0.0.0_fr_b03f5f7f11d50a3a\System.Web.Services.Resources.dll
    + 2008-05-24 18:42:36 839,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2008-05-23 19:24:58 430,080 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_fr_b77a5c561934e089\System.Windows.Forms.Resources.dll
    + 2008-05-24 18:42:39 5,013,504 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windo
    7 Septembre 2008 21:36:17

    Re,

    Impossible de mettre le rapport entier ! La suite ici :
    + 2008-05-24 18:42:39 5,013,504 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2008-05-23 19:24:59 167,936 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.XML.resources\2.0.0.0_fr_b77a5c561934e089\System.xml.Resources.dll
    + 2008-05-24 18:42:30 2,068,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2008-05-24 18:42:35 3,076,096 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2008-05-26 17:45:14 27,136 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
    + 2008-05-26 17:45:19 884,736 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
    + 2008-05-26 17:45:22 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
    + 2008-05-26 17:45:21 15,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
    + 2008-05-26 17:45:24 876,544 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
    + 2008-05-26 17:45:25 81,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
    + 2008-05-26 17:45:29 1,695,744 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
    + 2008-05-26 17:45:30 167,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
    + 2008-05-26 17:45:33 1,740,800 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
    + 2008-05-24 18:44:09 11,722,752 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
    + 2008-05-26 17:45:35 1,011,712 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
    + 2008-05-26 16:27:23 7,049,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
    + 2008-05-26 17:45:37 1,798,144 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
    + 2008-05-26 16:27:55 10,969,088 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
    + 2008-05-26 17:45:38 1,224,704 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
    + 2008-05-26 17:45:40 512,000 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
    + 2008-05-26 16:28:00 229,376 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
    + 2008-05-26 16:27:58 1,667,072 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
    + 2008-05-26 17:45:41 659,456 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
    + 2008-05-26 17:45:41 294,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
    + 2008-05-26 17:45:43 733,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
    + 2008-05-26 17:45:43 233,472 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
    + 2008-05-26 17:45:45 679,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
    + 2008-05-26 17:46:03 2,342,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
    + 2008-05-26 17:46:04 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
    + 2008-05-26 17:46:06 1,986,560 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
    + 2008-05-26 17:45:59 12,509,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
    + 2008-05-26 16:28:38 13,193,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
    + 2008-05-26 16:28:52 5,771,264 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
    + 2008-05-26 16:18:04 8,265,728 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
    + 2008-04-21 11:55:03 4,096 ----a-w C:\WINDOWS\d3dx.dat
    + 2006-05-16 09:58:18 24,576 ----a-w C:\WINDOWS\Downloaded Program Files\dwusplay.dll
    + 2006-05-16 09:58:18 196,608 ----a-w C:\WINDOWS\Downloaded Program Files\dwusplay.exe
    - 2007-04-13 00:14:52 382,344 ----a-w C:\WINDOWS\Downloaded Program Files\GAME_UNO1.dll
    + 2007-09-28 03:41:28 381,960 ----a-w C:\WINDOWS\Downloaded Program Files\GAME_UNO1.dll
    + 2006-05-16 09:58:18 484,272 ----a-w C:\WINDOWS\Downloaded Program Files\isusweb.dll
    - 2007-02-22 21:41:12 304,544 ----a-w C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll
    + 2007-02-22 22:41:12 304,544 ----a-w C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll
    + 2006-06-20 13:44:04 379,704 ----a-w C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll
    + 2006-06-20 13:44:02 117,560 ----a-w C:\WINDOWS\Downloaded Program Files\PURen-us.dll
    + 2007-01-09 06:30:14 110,592 ----a-w C:\WINDOWS\Downloaded Program Files\PURfr-fr.dll
    + 2008-06-14 17:59:52 272,768 ------w C:\WINDOWS\Driver Cache\i386\bthport.sys
    + 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
    + 2000-08-31 06:00:00 89,504 ----a-w C:\WINDOWS\fdsv.exe
    + 2000-08-31 06:00:00 80,412 ----a-w C:\WINDOWS\grep.exe
    + 2004-08-05 12:00:00 2,589 ----a-w C:\WINDOWS\I386\RUNW32.BAT
    + 2007-08-20 09:59:29 124,928 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\advpack.dll
    + 2007-08-20 09:59:29 214,528 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\dxtrans.dll
    + 2007-08-20 09:59:29 132,608 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\extmgr.dll
    + 2007-08-20 09:59:29 63,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\icardie.dll
    + 2007-08-17 10:22:11 63,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ie4uinit.exe
    + 2007-08-20 09:59:29 153,088 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieakeng.dll
    + 2007-08-20 09:59:29 230,400 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieaksie.dll
    + 2007-08-17 07:34:25 161,792 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieakui.dll
    + 2007-08-20 09:59:29 383,488 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieapfltr.dll
    + 2007-08-20 09:59:29 384,512 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iedkcs32.dll
    + 2007-08-20 09:59:29 6,058,496 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieframe.dll
    + 2007-08-20 09:59:29 44,544 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iernonce.dll
    + 2007-08-20 09:59:30 267,776 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iertutil.dll
    + 2007-08-17 10:22:11 13,824 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\ieudinit.exe
    + 2007-08-17 10:22:32 625,152 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe
    + 2007-08-20 09:59:30 27,648 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\jsproxy.dll
    + 2007-08-20 09:59:30 459,264 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msfeeds.dll
    + 2007-08-20 09:59:30 52,224 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msfeedsbs.dll
    + 2007-08-20 09:59:30 3,584,512 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mshtml.dll
    + 2007-08-20 09:59:30 477,696 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mshtmled.dll
    + 2007-08-20 09:59:30 193,024 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\msrating.dll
    + 2007-08-20 09:59:30 671,232 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\mstime.dll
    + 2007-08-20 09:59:31 102,400 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\occache.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\updspapi.dll
    + 2007-08-20 09:59:31 105,984 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\url.dll
    + 2007-08-20 09:59:31 1,152,000 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\urlmon.dll
    + 2007-08-20 09:59:31 232,960 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\webcheck.dll
    + 2007-08-20 09:59:31 824,832 -c----w C:\WINDOWS\ie7updates\KB942615-IE7\wininet.dll
    + 2007-10-10 23:49:42 124,928 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\advpack.dll
    + 2006-10-17 09:58:06 346,624 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\dxtmsft.dll
    + 2007-10-10 23:49:42 214,528 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\dxtrans.dll
    + 2007-10-10 23:49:42 132,608 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\extmgr.dll
    + 2007-10-10 23:49:42 63,488 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\icardie.dll
    + 2007-10-10 11:00:41 70,656 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ie4uinit.exe
    + 2007-10-10 23:49:42 153,088 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieakeng.dll
    + 2007-10-10 23:49:42 230,400 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieaksie.dll
    + 2007-10-10 05:46:55 161,792 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieakui.dll
    + 2007-10-10 23:49:42 383,488 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieapfltr.dll
    + 2007-10-10 23:49:42 384,512 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iedkcs32.dll
    + 2007-10-10 23:49:43 6,065,664 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieframe.dll
    + 2007-10-10 23:49:43 44,544 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iernonce.dll
    + 2007-10-10 23:49:43 267,776 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iertutil.dll
    + 2007-10-10 10:59:40 13,824 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\ieudinit.exe
    + 2007-10-10 11:00:59 625,152 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe
    + 2007-10-10 23:49:44 27,648 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\jsproxy.dll
    + 2007-10-10 23:49:44 459,264 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msfeeds.dll
    + 2007-10-10 23:49:44 52,224 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msfeedsbs.dll
    + 2007-10-30 23:23:48 3,590,656 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mshtml.dll
    + 2007-10-10 23:49:44 478,208 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mshtmled.dll
    + 2007-10-10 23:49:44 193,024 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\msrating.dll
    + 2007-10-10 23:49:45 671,232 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\mstime.dll
    + 2007-10-10 23:49:45 102,400 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\occache.dll
    + 2006-10-17 09:58:08 44,544 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\pngfilt.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\updspapi.dll
    + 2007-10-10 23:49:45 105,984 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\url.dll
    + 2007-10-10 23:49:45 1,159,680 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\urlmon.dll
    + 2007-10-10 23:49:45 232,960 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\webcheck.dll
    + 2007-10-10 23:49:45 824,832 -c----w C:\WINDOWS\ie7updates\KB944533-IE7\wininet.dll
    + 2007-12-07 02:08:32 124,928 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\advpack.dll
    + 2007-12-19 22:53:23 347,136 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtmsft.dll
    + 2007-12-07 02:08:32 214,528 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\dxtrans.dll
    + 2007-12-07 02:08:32 133,120 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\extmgr.dll
    + 2007-12-07 02:08:32 63,488 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\icardie.dll
    + 2007-12-06 11:02:31 70,656 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ie4uinit.exe
    + 2007-12-07 02:08:32 153,088 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakeng.dll
    + 2007-12-07 02:08:32 230,400 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieaksie.dll
    + 2007-12-06 04:59:51 161,792 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieakui.dll
    + 2007-12-07 02:08:32 383,488 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieapfltr.dll
    + 2007-12-07 02:08:32 384,512 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iedkcs32.dll
    + 2007-12-07 02:08:33 6,066,176 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieframe.dll
    + 2007-12-07 02:08:33 44,544 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iernonce.dll
    + 2007-12-07 02:08:33 267,776 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iertutil.dll
    + 2007-12-06 11:00:58 13,824 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\ieudinit.exe
    + 2007-12-06 11:03:16 625,664 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
    + 2007-12-07 02:08:33 27,648 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\jsproxy.dll
    + 2007-12-07 02:08:33 459,264 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msfeeds.dll
    + 2007-12-07 02:08:33 52,224 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msfeedsbs.dll
    + 2007-12-08 05:08:36 3,592,192 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtml.dll
    + 2007-12-07 02:08:34 478,208 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mshtmled.dll
    + 2007-12-07 02:08:34 193,024 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\msrating.dll
    + 2007-12-07 02:08:34 671,232 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\mstime.dll
    + 2007-12-07 02:08:34 102,912 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\occache.dll
    + 2008-01-11 05:36:55 44,544 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\pngfilt.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\updspapi.dll
    + 2007-12-07 02:08:34 105,984 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\url.dll
    + 2007-12-07 02:08:34 1,159,680 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\urlmon.dll
    + 2007-12-07 02:08:34 233,472 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\webcheck.dll
    + 2007-12-07 02:08:34 824,832 -c----w C:\WINDOWS\ie7updates\KB947864-IE7\wininet.dll
    + 2008-03-01 12:58:06 124,928 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\advpack.dll
    + 2008-03-01 12:58:06 347,136 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\dxtmsft.dll
    + 2008-03-01 12:58:06 214,528 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\dxtrans.dll
    + 2008-03-01 12:58:06 133,120 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\extmgr.dll
    + 2008-03-01 12:58:06 63,488 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\icardie.dll
    + 2008-02-29 08:56:41 70,656 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ie4uinit.exe
    + 2008-03-01 12:58:06 153,088 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieakeng.dll
    + 2008-03-01 12:58:06 230,400 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieaksie.dll
    + 2008-02-15 05:44:25 161,792 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieakui.dll
    + 2008-03-01 12:58:07 383,488 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieapfltr.dll
    + 2008-03-01 12:58:07 384,512 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iedkcs32.dll
    + 2008-03-01 12:58:08 6,066,176 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieframe.dll
    + 2008-03-01 12:58:08 44,544 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iernonce.dll
    + 2008-03-01 12:58:08 267,776 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iertutil.dll
    + 2008-02-22 10:00:51 13,824 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\ieudinit.exe
    + 2008-02-29 08:57:05 625,664 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe
    + 2008-03-01 12:58:08 27,648 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\jsproxy.dll
    + 2008-03-01 12:58:08 459,264 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msfeeds.dll
    + 2008-03-01 12:58:08 52,224 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msfeedsbs.dll
    + 2008-03-01 16:28:10 3,591,680 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mshtml.dll
    + 2008-03-01 12:58:09 478,208 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mshtmled.dll
    + 2008-03-01 12:58:10 193,024 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\msrating.dll
    + 2008-03-01 12:58:10 671,232 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\mstime.dll
    + 2008-03-01 12:58:10 102,912 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\occache.dll
    + 2008-03-01 12:58:10 44,544 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\pngfilt.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\updspapi.dll
    + 2008-03-01 12:58:10 105,984 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\url.dll
    + 2008-03-01 12:58:10 1,159,680 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\urlmon.dll
    + 2008-03-01 12:58:11 233,472 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\webcheck.dll
    + 2008-03-01 12:58:11 826,368 -c----w C:\WINDOWS\ie7updates\KB950759-IE7\wininet.dll
    + 2008-04-23 04:16:39 124,928 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\advpack.dll
    + 2008-04-23 04:16:39 347,136 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtmsft.dll
    + 2008-04-23 04:16:39 214,528 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtrans.dll
    + 2008-04-23 04:16:39 133,120 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\extmgr.dll
    + 2008-04-23 04:16:39 63,488 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\icardie.dll
    + 2008-04-22 07:41:08 70,656 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ie4uinit.exe
    + 2008-04-23 04:16:39 153,088 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakeng.dll
    + 2008-04-23 04:16:39 230,400 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieaksie.dll
    + 2008-04-20 05:07:51 161,792 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakui.dll
    + 2008-04-23 04:16:39 383,488 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieapfltr.dll
    + 2008-04-23 04:16:39 384,512 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iedkcs32.dll
    + 2008-04-23 04:16:39 6,066,176 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieframe.dll
    + 2008-04-23 04:16:39 44,544 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iernonce.dll
    + 2008-04-23 04:16:39 267,776 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iertutil.dll
    + 2008-04-22 07:39:58 13,824 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieudinit.exe
    + 2008-04-22 07:41:30 625,664 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe
    + 2008-04-23 04:16:40 27,648 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\jsproxy.dll
    + 2008-04-23 04:16:40 459,264 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msfeeds.dll
    + 2008-04-23 04:16:40 52,224 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msfeedsbs.dll
    + 2008-04-23 20:16:42 3,591,680 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mshtml.dll
    + 2008-04-23 04:16:40 478,208 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mshtmled.dll
    + 2008-04-23 04:16:40 193,024 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msrating.dll
    + 2008-04-23 04:16:40 671,232 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mstime.dll
    + 2008-04-23 04:16:40 102,912 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\occache.dll
    + 2008-04-23 04:16:40 44,544 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\pngfilt.dll
    + 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe
    + 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\updspapi.dll
    + 2008-04-23 04:16:40 105,984 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\url.dll
    + 2008-04-23 04:16:40 1,159,680 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\urlmon.dll
    + 2008-04-23 04:16:40 233,472 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\webcheck.dll
    + 2008-04-23 04:16:40 826,368 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\wininet.dll
    + 2007-08-18 09:16:20 997,992 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\ACCESS.DLL
    + 2003-07-15 04:57:34 38,968 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\AUTHZAX.DLL
    + 2003-07-15 04:53:06 94,768 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\AW.DLL
    + 2003-07-14 20:53:22 46,144 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\BLNMGRPS.DLL
    + 2003-07-15 04:56:54 14,904 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\DSITF.DLL
    + 2003-07-15 04:57:14 98,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\DSSM.EXE
    + 2007-08-18 09:16:21 1,100,392 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\EXCELPIA.DLL
    + 2002-10-07 15:49:36 192,573 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FORM.DLL
    + 2007-08-18 09:16:21 371,296 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FORMSPIA.DLL
    + 2003-07-15 04:40:12 179,768 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPERSON.DLL
    + 2007-08-18 09:16:21 141,928 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\GRAPHPIA.DLL
    + 2003-06-18 23:31:10 252,928 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIINK.DLL
    + 2003-07-15 04:57:14 124,480 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSB1CORE.DLL
    + 2003-07-15 05:12:22 47,872 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSB1XTOR.DLL
    + 2003-07-15 04:56:14 40,504 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSE7.EXE
    + 2003-07-15 04:51:44 87,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSENCODE.DLL
    + 2003-07-15 04:52:52 17,464 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSMH.DLL
    + 2003-07-14 20:57:16 120,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOAUTH.DLL
    + 2003-07-15 04:52:52 27,704 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSODCW.DLL
    + 2003-07-15 04:52:56 55,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOHTMED.EXE
    + 2003-07-15 04:56:16 54,328 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOMSE.DLL
    + 2003-07-11 08:15:48 1,292,872 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSONSEXT.DLL
    + 2003-07-15 09:18:52 376,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSORUN.DLL
    + 2003-07-14 20:52:54 28,224 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOSTYLE.DLL
    + 2003-07-15 04:52:52 35,896 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOSV.DLL
    + 2003-07-15 04:46:16 42,040 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOXEV.DLL
    + 2003-07-15 04:45:12 55,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOXMLED.EXE
    + 2003-07-15 04:45:12 39,488 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOXMLMF.DLL
    + 2003-06-18 23:31:54 788,480 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPFILT.DLL
    + 2003-06-18 23:31:50 16,384 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPGIMME.DLL
    + 2003-06-19 22:05:52 128,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPSCAN.EXE
    + 2003-06-19 22:05:50 364,648 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPVIEW.EXE
    + 2003-07-15 05:02:42 637,496 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSQRY32.EXE
    + 2003-07-15 04:52:58 41,528 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSSH.DLL
    + 2007-08-18 09:16:21 20,080 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSTAGPIA.DLL
    + 2003-07-15 05:00:54 145,984 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSWEBCAP.DLL
    + 2003-07-15 04:57:10 56,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\NAME.DLL
    + 2003-07-15 04:56:52 13,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\NPOFFICE.DLL
    + 2003-06-18 23:31:58 6,144 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OCRPS.DLL
    + 2007-08-17 18:06:57 223,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OFFICE.DLL
    + 2003-07-15 09:14:26 242,240 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OISGRAPH.DLL
    + 2003-07-15 05:05:24 1,054,264 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OMFC.DLL
    + 2003-07-15 05:05:24 1,054,264 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OMFC.DLL_0002
    + 2007-08-18 09:16:21 461,416 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OWC11PIA.DLL
    + 2003-07-15 09:18:44 93,752 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PP7X32.DLL
    + 2007-08-18 09:16:21 223,856 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PPTPIA.DLL
    + 2002-10-07 16:11:00 167,997 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PSOM.DLL
    + 2007-08-18 09:16:21 211,568 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PUBPIA.DLL
    + 2003-07-15 04:40:16 51,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PUBTRAP.DLL
    + 2003-05-09 03:54:00 77,824 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\REFEDIT.DLL
    + 2003-07-15 04:57:08 40,512 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\REFIEBAR.DLL
    + 2002-10-07 15:49:42 81,984 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\REVERSE.DLL
    + 2003-07-15 04:57:18 349,248 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\SELFCERT.EXE
    + 2003-07-14 20:57:08 58,944 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\SEQCHK10.DLL
    + 2003-07-15 04:53:14 11,848 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\SMARTTAGINSTALL.EXE
    + 2002-10-07 15:53:04 106,561 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\THOCRAPI.DLL
    + 2002-10-07 15:50:44 241,729 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWCUTCHR.DLL
    + 2002-10-07 15:51:04 180,289 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWCUTLIN.DLL
    + 2002-10-07 15:51:14 147,520 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWLAY32.DLL
    + 2002-10-07 15:51:20 102,467 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWORIENT.DLL
    + 2002-10-07 15:50:04 118,847 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWRECE.DLL
    + 2002-10-07 15:49:56 81,983 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWRECS.DLL
    + 2002-10-07 15:51:44 221,252 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\TWSTRUCT.DLL
    + 2003-07-15 04:57:40 59,960 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\UNBIND.EXE
    + 2007-08-17 18:06:57 64,088 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\VBIDEPIA.DLL
    + 2007-08-18 09:16:21 662,120 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\WORDPIA.DLL
    + 2002-10-07 16:03:34 1,794,113 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\XIMAGE3B.DLL
    + 2003-04-30 17:52:32 1,581,120 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\XPAGE3C.DLL
    + 2003-01-17 20:03:34 59,466 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\XSCAN32.DAT
    + 2001-06-05 14:13:22 289,926 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\ENGDIC.DAT
    + 2001-06-05 14:13:22 34,168 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\ENGIDX.DAT
    + 2001-06-05 14:13:24 18,844 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\JFONT.DAT
    + 2001-06-05 14:13:26 65,536 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\LOOKUP.DAT
    + 2005-02-03 15:59:22 346,840 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\METCONV.DLL
    + 2005-05-03 22:06:28 465,640 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\MSDMENG.DLL
    + 2005-05-03 22:06:32 1,411,816 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\MSDMINE.DLL
    + 2005-05-03 22:06:26 199,408 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\MSMDUN80.DLL
    + 2001-10-23 06:13:42 53,260 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\OCRHC.DAT
    + 2001-06-05 14:13:26 40,972 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\OCRVC.DAT
    + 2007-05-31 11:35:22 6,420,320 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\POWERPNT.EXE
    + 2003-07-15 04:41:44 13,368 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.5614\FINDER.EXE
    + 2003-07-15 04:53:20 39,488 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.5614\MSOSVFBR.DLL
    + 2003-07-15 04:44:34 102,968 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.5614\OUTLCTL.DLL
    + 2003-07-15 04:43:16 49,208 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.5614\OUTLWAB.DLL
    + 2003-07-21 17:46:38 390,712 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.5614\RTFHTML.DLL
    + 2003-07-15 04:44:16 66,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.5614\SENDTO.DLL
    + 2007-04-19 12:10:18 45,920 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\AUTHZAX.DLL
    + 2007-03-22 17:29:56 99,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\AW.DLL
    + 2007-03-22 17:06:08 355,168 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\CDLMSO.DLL
    + 2007-04-19 11:55:16 53,088 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\DFUICOM.EXE
    + 2007-03-22 17:23:32 19,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\DSITF.DLL
    + 2007-05-10 11:44:02 121,688 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\DSSM.EXE
    + 2007-03-22 17:29:28 43,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\DWDCW20.DLL
    + 2007-03-22 17:29:28 39,264 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\DWTRIG20.EXE
    + 2007-06-06 08:53:34 1,195,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\FM20.DLL
    + 2007-06-06 10:46:12 1,961,312 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\FPCUTL.DLL
    + 2007-04-19 12:15:26 192,344 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\FPDTC.DLL
    + 2007-04-19 11:47:40 186,208 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\FPERSON.DLL
    + 2007-05-31 11:50:10 1,168,736 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\FPSRVUTL.DLL
    + 2007-04-19 12:16:14 807,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\FPWEC.DLL
    + 2007-04-19 11:57:32 2,152,792 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\GRAPH.EXE
    + 2007-04-19 12:10:30 116,576 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\IEAWSDC.DLL
    + 2007-02-26 06:52:56 517,472 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\INTLNAME.DLL
    + 2007-04-09 11:24:04 758,664 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MDIGRAPH.DLL
    + 2007-04-09 11:23:58 231,816 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MDIINK.DLL
    + 2007-04-09 11:23:54 28,040 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MDIMON.DLL
    + 2007-04-09 11:23:54 28,552 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MDIPPR.DLL
    + 2007-04-09 11:23:58 46,472 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MDIUI.DLL
    + 2007-04-09 11:24:04 453,512 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MDIVWCTL.DLL
    + 2005-02-03 15:59:22 346,840 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\METCONV.DLL
    + 2007-04-19 12:10:38 131,424 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSB1CORE.DLL
    + 2007-04-19 12:10:06 52,576 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSB1XTOR.DLL
    + 2007-04-19 12:01:52 238,424 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSCDM.DLL
    + 2007-05-10 12:35:40 120,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSCONV97.DLL
    + 2005-05-03 22:06:28 465,640 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSDMENG.DLL
    + 2005-05-03 22:06:32 1,411,816 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSDMINE.DLL
    + 2007-04-30 13:11:38 89,440 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSENCODE.DLL
    + 2005-05-03 22:06:26 199,408 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSMDUN80.DLL
    + 2007-03-22 17:29:16 20,824 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSMH.DLL
    + 2007-04-19 12:10:34 127,840 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOAUTH.DLL
    + 2007-03-22 17:04:52 109,912 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOCF.DLL
    + 2007-03-22 17:04:52 130,912 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOCFU.DLL
    + 2007-03-22 17:29:22 31,072 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSODCW.DLL
    + 2007-04-19 11:56:58 29,024 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOEURO.DLL
    + 2007-04-19 12:07:38 61,280 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOHTMED.EXE
    + 2007-05-02 11:45:26 2,123,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOLAP80.DLL
    + 2005-09-20 10:33:08 1,293,008 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSONSEXT.DLL
    + 2007-04-19 11:49:28 383,328 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSORUN.DLL
    + 2007-04-19 12:07:24 36,192 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOSTYLE.DLL
    + 2007-03-22 17:29:24 39,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOSV.DLL
    + 2007-03-22 17:13:38 45,408 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOXEV.DLL
    + 2007-03-22 17:13:38 58,720 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOXMLED.EXE
    + 2007-04-19 11:57:40 46,432 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSOXMLMF.DLL
    + 2007-04-09 11:24:06 1,025,416 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSPCORE.DLL
    + 2007-04-09 11:23:52 25,992 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSPGIMME.DLL
    + 2007-04-09 11:24:00 367,496 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSPVIEW.EXE
    + 2007-03-22 17:29:32 44,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSSH.DLL
    + 2007-04-19 12:00:30 637,792 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSTORDB.EXE
    + 2007-04-19 12:00:22 130,912 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSTORE.EXE
    + 2007-04-19 12:00:30 489,824 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSTORES.DLL
    + 2007-04-19 12:09:02 157,024 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\MSWEBCAP.DLL
    + 2007-04-19 12:10:26 80,216 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\NAME.DLL
    + 2007-03-22 17:23:30 17,248 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\NPOFFICE.DLL
    + 2007-03-22 17:06:22 287,576 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\OIS.EXE
    + 2007-04-19 11:50:52 837,472 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\OISAPP.DLL
    + 2007-03-22 17:06:08 46,432 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\OISCTRL.DLL
    + 2007-03-22 17:06:22 245,600 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\OISGRAPH.DLL
    + 2007-04-19 12:09:46 1,061,720 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\OMFC.DLL
    + 2007-05-10 11:45:34 8,069,464 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\OWC11.DLL
    + 2007-05-31 11:35:22 6,420,320 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\POWERPNT.EXE
    + 2007-03-22 17:05:34 434,016 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\PP4X322.DLL
    + 2007-03-22 17:05:22 97,632 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\PP7X32.DLL
    + 2007-04-19 11:49:56 1,661,280 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\PPTVIEW.EXE
    + 2007-06-06 10:07:40 100,192 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\REFEDIT.DLL
    + 2007-04-19 12:10:18 63,840 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\REFIEBAR.DLL
    + 2007-04-19 12:10:20 65,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\SEQCHK10.DLL
    + 2007-03-22 17:29:16 14,704 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\SMARTTAGINSTALL.EXE
    + 2007-05-10 11:42:52 2,839,904 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040211900063D11C8EF10054038389C\11.0.8173\STSLIST.DLL
    + 2008-07-25 08:05:01 40,960 ----a-r C:\WINDOWS\Installer\{026FE81A-DF00-40B0-B325-7F9C6921ED02}\NewShortcut1_026FE81ADF0040B0B3257F9C6921ED02.exe
    + 2008-07-25 08:05:01 40,960 ----a-r C:\WINDOWS\Installer\{026FE81A-DF00-40B0-B325-7F9C6921ED02}\NewShortcut2_026FE81ADF0040B0B3257F9C6921ED02.exe
    + 2008-07-24 10:06:00 40,960 ----a-r C:\WINDOWS\Installer\{16C27441-5189-4F06-855D-FDF2D8224E57}\NewShortcut1_026FE81ADF0040B0B3257F9C6921ED02.exe
    + 2008-07-24 10:06:00 40,960 ----a-r C:\WINDOWS\Installer\{16C27441-5189-4F06-855D-FDF2D8224E57}\NewShortcut2_026FE81ADF0040B0B3257F9C6921ED02.exe
    + 2008-05-23 20:59:39 55,296 ----a-r C:\WINDOWS\Installer\{1A8A214F-6BAC-4E01-A27D-25C19A484908}\Icon1A8A214F.exe
    + 2008-08-07 11:19:09 26,694 ----a-r C:\WINDOWS\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ARPPRODUCTICON.exe
    + 2008-08-07 11:19:09 26,694 ----a-r C:\WINDOWS\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
    + 2008-08-07 11:19:09 26,694 ----a-r C:\WINDOWS\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\googleearth.exe1_407B9B5CDAC54F44A756B57CAB4E6A8B.exe
    + 2008-08-07 11:19:09 26,694 ----a-r C:\WINDOWS\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ShortcutDX_EB071909B9884F8CBF3D6115D4ADEE5E.exe
    + 2008-08-07 11:19:09 26,694 ----a-r C:\WINDOWS\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\ShortcutOGL_EB071909B9884F8CBF3D6115D4ADEE5E.exe
    + 2008-08-07 11:19:09 26,694 ----a-r C:\WINDOWS\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\UNINST_Uninstall_G_408FFBEED62349E08B232864A94D2864.exe
    + 2008-06-27 13:37:20 65,536 ----a-r C:\WINDOWS\Installer\{49FC50FC-F965-40D9-89B4-CBFF80941033}\ARPPRODUCTICON.exe
    + 2008-07-17 17:35:53 3,262 ----a-r C:\WINDOWS\Installer\{52AC37AD-2435-4BD8-A28A-5AF1306EF69B}\ARPPRODUCTICON.exe
    + 2008-07-18 09:40:40 10,134 ----a-r C:\WINDOWS\Installer\{5D86D0A0-54DF-46F2-BE5A-3BB164CDD76E}\ARPPRODUCTICON.exe
    + 2008-01-12 21:00:39 3,262 ----a-r C:\WINDOWS\Installer\{6E384346-CD1C-4A00-9885-BC8E6A50ECB5}\nfs_icon.exe
    + 2008-07-24 09:35:03 40,960 ----a-r C:\WINDOWS\Installer\{819A6E18-2533-4434-AB91-E5D95F3549A2}\NewShortcut1_026FE81ADF0040B0B3257F9C6921ED02.exe
    + 2008-07-24 09:35:03 40,960 ----a-r C:\WINDOWS\Installer\{819A6E18-2533-4434-AB91-E5D95F3549A2}\NewShortcut2_026FE81ADF0040B0B3257F9C6921ED02.exe
    - 2007-11-13 19:57:53 593,920 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
    + 2008-08-14 07:23:13 593,920 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
    - 2007-11-13 19:57:53 12,288 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2008-08-14 07:23:13 12,288 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    - 2007-11-13 19:57:53 86,016 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe
    + 2008-08-14 07:23:13 86,016 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe
    - 2007-11-13 19:57:53 135,168 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2008-08-14 07:23:12 135,168 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2007-11-13 19:57:53 11,264 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2008-08-14 07:23:13 11,264 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    - 2007-11-13 19:57:53 27,136 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2008-08-14 07:23:13 27,136 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    - 2007-11-13 19:57:53 4,096 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2008-08-14 07:23:13 4,096 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    - 2007-11-13 19:57:54 794,624 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2008-08-14 07:23:13 794,624 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
    - 2007-11-13 19:57:53 249,856 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
    + 2008-08-14 07:23:13 249,856 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
    - 2007-11-13 19:57:53 61,440 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
    + 2008-08-14 07:23:13 61,440 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
    - 2007-11-13 19:57:54 23,040 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2008-08-14 07:23:13 23,040 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    - 2007-11-13 19:57:53 286,720 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    + 2008-08-14 07:23:12 286,720 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    - 2007-11-13 19:57:53 409,600 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2008-08-14 07:23:12 409,600 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    - 2007-11-13 19:58:07 12,288 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    + 2008-08-14 07:23:37 12,288 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
    - 2007-11-13 19:58:07 135,168 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2008-08-14 07:23:37 135,168 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2007-11-13 19:58:07 11,264 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    + 2008-08-14 07:23:38 11,264 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
    - 2007-11-13 19:58:07 27,136 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    + 2008-08-14 07:23:38 27,136 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
    - 2007-11-13 19:58:07 4,096 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    + 2008-08-14 07:23:38 4,096 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
    - 2007-11-13 19:58:07 794,624 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
    + 2008-08-14 07:23:38 794,624 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
    - 2007-11-13 19:58:07 249,856 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
    + 2008-08-14 07:23:37 249,856 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
    - 2007-11-13 19:58:07 23,040 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    + 2008-08-14 07:23:38 23,040 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
    - 2007-11-13 19:58:07 286,720 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    + 2008-08-14 07:23:37 286,720 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
    - 2007-11-13 19:58:07 409,600 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    + 2008-08-14 07:23:37 409,600 ----a-r C:\WINDOWS\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
    - 2007-09-26 17:29:06 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
    + 2008-03-26 13:37:36 29,926 ----a-r C:\WINDOWS\Installer\{BADF6744-3787-48F6-B8C9-4C4995401D65}\MsblIco.Exe
    + 2007-11-29 05:45:46 86,746 ----a-r C:\WINDOWS\Installer\{C514C594-23AA-4F13-A070-DB8BDB27594F}\wlmail.exe
    - 2003-02-20 17:09:46 57,344 ----a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2007-10-23 23:47:38 82,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
    - 2003-02-20 17:09:32 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
    + 2007-10-23 23:47:38 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
    + 2007-10-23 23:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2007-10-23 23:47:42 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2007-10-23 23:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
    - 2003-02-20 16:43:50 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    + 2007-10-23 23:47:38 97,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    + 2007-10-23 23:47:26 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    + 2007-10-23 23:47:30 145,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    + 2007-10-23 23:47:32 13,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    + 2007-10-23 23:47:48 193,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    + 2007-10-23 23:47:20 218,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    + 2005-12-23 06:59:08 24,064 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\alinkui.dll
    + 2005-12-23 06:59:10 161,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\cscompui.dll
    + 2005-12-23 06:59:10 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\CvtResUI.dll
    + 2005-12-23 06:59:16 216,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\vbc7ui.dll
    + 2005-12-23 06:59:06 245,760 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1036\Vsavb7rtUI.dll
    + 2007-10-23 23:47:40 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    + 2007-10-23 23:47:42 147,968 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    + 2007-10-23 23:47:26 99,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
    + 2007-10-23 23:47:42 59,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2007-10-23 23:47:22 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2007-10-23 23:47:22 22,024 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2007-10-23 23:47:22 17,928 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    + 2007-10-23 23:47:22 33,288 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    + 2007-10-23 23:47:22 84,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2007-10-23 23:47:22 24,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    + 2007-10-23 23:47:22 32,776 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    + 2007-10-23 23:47:22 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    + 2007-10-23 23:47:22 33,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2007-10-23 23:47:22 33,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2007-10-23 23:47:22 507,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    + 2007-10-23 23:47:40 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    + 2007-10-23 23:47:40 101,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2007-10-23 23:47:30 80,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
    + 2007-10-23 23:47:30 1,162,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    + 2007-10-23 23:47:30 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    + 2007-10-23 23:47:42 27,136 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    + 2007-10-23 23:47:40 69,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    + 2007-10-23 23:47:30 35,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2007-10-23 23:47:28 66,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    + 2007-10-23 23:47:28 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    + 2007-10-23 23:47:54 572,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    + 2007-10-23 23:47:40 798,224 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    + 2005-12-23 06:59:06 8,704 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_compiler.resources.dll
    + 2005-12-23 06:59:06 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_rc.dll
    + 2005-12-23 06:59:06 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_regbrowsers.resources.dll
    + 2005-12-23 06:59:06 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnet_regsql.resources.dll
    + 2005-12-23 06:59:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\aspnetmmcext.resources.dll
    + 2005-12-23 06:59:14 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\caspol.resources.dll
    + 2005-12-23 06:59:14 4,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\InstallUtil.resources.dll
    + 2005-12-23 06:59:12 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\JSC.Resources.dll
    + 2005-12-23 06:59:14 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.Build.Engine.resources.dll
    + 2005-12-23 06:59:14 139,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.Build.Tasks.resources.dll
    + 2005-12-23 06:59:14 10,240 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.Build.Utilities.Resources.dll
    + 2005-12-23 06:59:12 45,056 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.JScript.Resources.dll
    + 2005-12-23 06:59:16 61,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Microsoft.VisualBasic.resources.dll
    + 2005-12-23 06:59:14 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\MSBuild.resources.dll
    + 2005-12-23 06:59:14 311,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\mscorlib.Resources.dll
    + 2005-12-23 06:59:14 404,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\mscorrc.dll
    + 2005-12-23 06:59:14 11,264 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\Regasm.resources.dll
    + 2005-12-23 06:59:14 86,528 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\ShFusRes.dll
    + 2005-12-23 06:59:14 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\sysglobl.resources.dll
    + 2005-12-23 06:59:14 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Configuration.Install.Resources.dll
    + 2005-12-23 06:59:14 49,152 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Configuration.resources.dll
    + 2005-12-23 06:59:14 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Data.OracleClient.resources.dll
    + 2005-12-23 06:59:14 335,872 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Data.Resources.dll
    + 2005-12-23 06:59:14 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\system.data.sqlxml.resources.dll
    + 2005-12-23 06:59:08 385,024 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Deployment.resources.dll
    + 2005-12-23 06:59:14 544,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Design.Resources.dll
    + 2005-12-23 06:59:14 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.DirectoryServices.Protocols.resources.dll
    + 2005-12-23 06:59:14 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.DirectoryServices.Resources.dll
    + 2005-12-23 06:59:14 6,144 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Drawing.Design.Resources.dll
    + 2005-12-23 06:59:14 15,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Drawing.Resources.dll
    + 2005-12-23 06:59:14 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.EnterpriseServices.Resources.dll
    + 2005-12-23 06:59:14 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Management.Resources.dll
    + 2005-12-23 06:59:14 61,440 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Messaging.Resources.dll
    + 2005-12-23 06:59:14 212,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\system.Resources.dll
    + 2005-12-23 06:59:14 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Runtime.Remoting.Resources.dll
    + 2005-12-23 06:59:14 11,776 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Runtime.Serialization.Formatters.Soap.Resources.dll
    + 2005-12-23 06:59:14 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Security.Resources.dll
    + 2005-12-23 06:59:14 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.ServiceProcess.Resources.dll
    + 2005-12-23 06:59:14 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Transactions.resources.dll
    + 2005-12-23 06:59:14 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Web.Mobile.resources.dll
    + 2005-12-23 06:59:14 610,304 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Web.Resources.dll
    + 2005-12-23 06:59:14 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Web.Services.Resources.dll
    + 2005-12-23 06:59:14 430,080 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.Windows.Forms.Resources.dll
    + 2005-12-23 06:59:14 167,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\System.xml.Resources.dll
    + 2007-10-23 23:47:36 18,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2005-12-23 06:59:18 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC\fr\Microsoft.VisualBasic.Compatibility.Data.resources.dll
    + 2005-12-23 06:59:18 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\GAC\fr\Microsoft.VisualBasic.Compatibility.resources.dll
    + 2007-10-23 23:47:40 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    + 2007-10-23 23:47:40 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    + 2007-10-23 23:47:40 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    + 2007-10-23 23:47:40 6,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    + 2007-10-23 23:47:40 230,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    + 2007-10-23 23:47:40 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2007-10-23 23:47:40 65,032 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    + 2007-10-23 23:47:40 72,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2007-10-23 23:47:34 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    + 2005-12-09 08:45:38 609,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
    + 2005-12-09 08:45:38 86,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.res.1036.dll
    + 2005-12-09 10:26:10 245,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\unicows.dll
    + 2007-10-23 23:47:36 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    + 2007-10-23 23:47:36 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2007-10-23 23:47:36 655,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    + 2007-10-23 23:47:36 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    + 2007-10-23 23:47:34 749,568 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    + 2007-10-23 23:47:52 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2007-10-23 23:47:52 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    + 2007-10-23 23:47:50 671,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    + 2007-10-23 23:47:20 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    + 2007-10-23 23:47:52 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    + 2007-10-23 23:47:20 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    + 2007-10-23 23:47:20 12,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2007-10-23 23:47:20 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    + 2007-10-23 23:47:22 97,792 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2007-10-23 23:47:36 69,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    + 2007-10-23 23:47:40 822,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2007-10-23 23:47:40 83,456 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    + 2007-10-23 23:47:40 308,224 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    + 2007-10-23 23:47:40 47,104 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    + 2007-10-23 23:47:40 348,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2007-10-23 23:47:40 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2007-10-23 23:47:40 4,444,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2007-10-23 23:47:40 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    + 2007-10-23 23:47:44 340,992 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    + 2007-10-23 23:47:40 77,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    + 2007-10-23 23:47:36 18,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    + 2007-10-23 23:47:40 242,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    + 2007-10-23 23:47:40 70,144 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    + 2007-10-23 23:47:40 19,456 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    + 2007-10-23 23:47:36 5,814,784 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2007-10-23 23:47:44 31,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    + 2005-12-23 06:59:14 23,040 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MUI\040C\mscorsecr.dll
    + 2007-10-23 23:47:40 101,880 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    + 2007-10-23 23:47:40 24,584 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    + 2007-10-23 23:47:40 89,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    + 2007-10-23 23:47:36 144,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    + 2007-10-23 23:47:40 53,248 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2007-10-23 23:47:40 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    + 2007-10-23 23:47:46 61,952 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    + 2007-10-23 23:47:42 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2007-10-23 23:47:40 119,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    + 2007-10-23 23:47:44 95,232 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    + 2007-10-23 23:47:40 392,696 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2007-10-23 23:47:40 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2007-10-23 23:47:42 425,984 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    + 2007-10-23 23:47:40 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    + 2007-10-23 23:47:40 3,036,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    + 2007-10-23 23:47:40 483,840 ----a-w C:\WINDO
    7 Septembre 2008 21:37:03

    La suite,

    + 2007-10-23 23:47:40 3,036,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    + 2007-10-23 23:47:40 483,840 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    + 2007-10-23 23:47:40 741,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    + 2007-10-23 23:47:28 933,888 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    + 2007-10-23 23:47:40 5,070,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    + 2007-10-23 23:47:40 401,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    + 2007-10-23 23:47:40 188,416 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    + 2007-10-23 23:47:40 3,076,096 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2007-10-23 23:47:40 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    + 2007-10-23 23:47:40 630,784 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    + 2007-10-23 23:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2007-10-23 23:47:40 57,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    + 2007-10-23 23:47:40 113,664 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    + 2007-10-23 23:47:40 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    + 2007-10-23 23:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    + 2007-10-23 23:47:40 299,008 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    + 2007-10-23 23:47:40 131,072 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    + 2007-10-23 23:47:40 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2007-10-23 23:47:40 114,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    + 2007-10-23 23:47:40 261,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    + 2007-10-23 23:47:40 5,431,296 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2007-10-23 23:47:40 884,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    + 2007-10-23 23:47:40 90,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    + 2007-10-23 23:47:40 839,680 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    + 2007-10-23 23:47:40 5,013,504 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2007-10-23 23:47:40 2,068,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    + 2007-10-23 23:47:40 81,400 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2007-10-23 23:47:48 1,172,472 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2007-10-23 23:47:20 1,344,000 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    + 2007-10-23 23:47:22 434,688 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2007-10-23 23:47:40 37,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    - 2007-06-16 23:11:58 51,200 ----a-w C:\WINDOWS\NirCmd.exe
    + 2000-08-31 06:00:00 28,672 ----a-w C:\WINDOWS\NirCmd.exe
    + 2004-08-16 16:28:44 2,692 ----a-w C:\WINDOWS\pchealth\helpctr\PackageStore\SkuStore.bin
    + 2002-12-13 11:42:56 8,192 ----a-w C:\WINDOWS\RegisteredPackages\{3695EB93-6443-448D-8E2E-1F6F4FC79BC1}\asferror.dll
    + 2002-12-20 11:06:00 3,366,912 ----a-w C:\WINDOWS\RegisteredPackages\{60BFF50D-FB2C-4498-A577-C9548C390BB9}\moviemk.exe
    + 2002-11-06 00:10:14 167,936 ----a-w C:\WINDOWS\RegisteredPackages\{89FDAB62-6F46-4C7E-A559-E00B9A0BACB6}\wmserror.dll
    + 2002-11-06 00:45:32 327,680 ----a-w C:\WINDOWS\RegisteredPackages\{89FDAB62-6F46-4C7E-A559-E00B9A0BACB6}\wmsservertypelib.dll
    + 2000-08-31 06:00:00 98,816 ----a-w C:\WINDOWS\sed.exe
    + 2000-08-31 06:00:00 161,792 ----a-w C:\WINDOWS\swreg.exe
    + 2000-08-31 06:00:00 136,704 ----a-w C:\WINDOWS\swsc.exe
    + 2000-08-31 06:00:00 212,480 ----a-w C:\WINDOWS\swxcacls.exe
    + 2004-08-05 12:00:00 2,000 ----a-w C:\WINDOWS\system\KEYBOARD.DRV
    + 2004-08-05 12:00:00 73,680 ----a-w C:\WINDOWS\system\MCIAVI.DRV
    + 2004-08-05 12:00:00 25,280 ----a-w C:\WINDOWS\system\MCISEQ.DRV
    + 2004-08-05 12:00:00 28,160 ----a-w C:\WINDOWS\system\MCIWAVE.DRV
    + 2004-08-05 12:00:00 2,032 ----a-w C:\WINDOWS\system\MOUSE.DRV
    + 2004-08-05 12:00:00 1,744 ----a-w C:\WINDOWS\system\SOUND.DRV
    + 2004-08-05 12:00:00 3,360 ----a-w C:\WINDOWS\system\SYSTEM.DRV
    + 2004-08-05 12:00:00 4,096 ----a-w C:\WINDOWS\system\TIMER.DRV
    + 2004-08-05 12:00:00 2,176 ----a-w C:\WINDOWS\system\VGA.DRV
    + 2004-08-05 12:00:00 13,600 ----a-w C:\WINDOWS\system\WFWNET.DRV
    + 2004-08-05 12:00:00 146,944 ----a-w C:\WINDOWS\system\WINSPOOL.DRV
    - 2007-08-20 09:59:29 124,928 ----a-w C:\WINDOWS\system32\advpack.dll
    + 2008-06-23 16:28:17 124,928 ----a-w C:\WINDOWS\system32\advpack.dll
    + 2007-02-20 11:59:06 53,248 ----a-w C:\WINDOWS\system32\AgCPanelFrench.dll
    + 2007-02-20 11:59:06 53,248 ----a-w C:\WINDOWS\system32\AgCPanelGerman.dll
    + 2007-02-20 11:59:08 53,248 ----a-w C:\WINDOWS\system32\AgCPanelJapanese.dll
    + 2007-02-20 11:59:06 53,248 ----a-w C:\WINDOWS\system32\AgCPanelKorean.dll
    + 2007-02-20 11:59:06 53,248 ----a-w C:\WINDOWS\system32\AgCPanelPortugese.dll
    + 2007-02-20 11:59:06 53,248 ----a-w C:\WINDOWS\system32\AgCPanelSimplifiedChinese.dll
    + 2007-02-20 11:59:04 53,248 ----a-w C:\WINDOWS\system32\AgCPanelSpanish.dll
    + 2007-02-20 11:59:06 53,248 ----a-w C:\WINDOWS\system32\AgCPanelSwedish.dll
    + 2007-02-20 11:59:06 53,248 ----a-w C:\WINDOWS\system32\AgCPanelTraditionalChinese.dll
    + 2007-01-05 17:38:18 198,257 ----a-w C:\WINDOWS\system32\AGEIA\app.bin
    + 2007-01-05 17:38:18 122,249 ----a-w C:\WINDOWS\system32\AGEIA\diag.bin
    - 2006-11-03 07:56:54 7,680 ----a-w C:\WINDOWS\system32\asferror.dll
    + 2002-12-13 11:42:56 8,192 ----a-w C:\WINDOWS\system32\asferror.dll
    + 1999-08-09 12:39:20 14,832 ----a-w C:\WINDOWS\system32\asfsipc.dll
    + 2004-08-05 12:00:00 10,544 ----a-w C:\WINDOWS\system32\comm.drv
    + 2007-03-12 15:42:30 1,123,696 ----a-w C:\WINDOWS\system32\D3DCompiler_33.dll
    + 2007-05-16 15:45:16 1,124,720 ----a-w C:\WINDOWS\system32\D3DCompiler_34.dll
    + 2007-07-19 16:14:42 1,358,192 ----a-w C:\WINDOWS\system32\D3DCompiler_35.dll
    + 2007-10-12 13:14:00 1,374,232 ----a-w C:\WINDOWS\system32\D3DCompiler_36.dll
    + 2008-03-05 13:56:58 1,420,824 ----a-w C:\WINDOWS\system32\D3DCompiler_37.dll
    + 2007-03-15 15:57:58 443,752 ----a-w C:\WINDOWS\system32\d3dx10_33.dll
    + 2007-05-16 15:45:16 443,752 ----a-w C:\WINDOWS\system32\d3dx10_34.dll
    + 2007-07-19 16:14:42 444,776 ----a-w C:\WINDOWS\system32\d3dx10_35.dll
    + 2007-10-02 07:56:34 444,776 ----a-w C:\WINDOWS\system32\d3dx10_36.dll
    + 2008-02-05 21:07:36 462,864 ----a-w C:\WINDOWS\system32\d3dx10_37.dll
    + 2006-09-28 14:05:20 2,414,360 ----a-w C:\WINDOWS\system32\d3dx9_31.dll
    + 2006-11-29 11:06:18 3,426,072 ----a-w C:\WINDOWS\system32\d3dx9_32.dll
    + 2007-03-12 15:42:30 3,495,784 ----a-w C:\WINDOWS\system32\d3dx9_33.dll
    + 2007-05-16 15:45:16 3,497,832 ----a-w C:\WINDOWS\system32\d3dx9_34.dll
    + 2007-07-19 16:14:42 3,727,720 ----a-w C:\WINDOWS\system32\d3dx9_35.dll
    + 2007-10-12 13:14:00 3,734,536 ----a-w C:\WINDOWS\system32\d3dx9_36.dll
    + 2008-03-05 13:56:58 3,786,760 ----a-w C:\WINDOWS\system32\D3DX9_37.dll
    + 2004-08-05 12:00:00 1,788 ----a-w C:\WINDOWS\system32\Dcache.bin
    + 2007-10-23 23:47:28 96,760 ----a-w C:\WINDOWS\system32\dfshim.dll
    - 2007-09-28 16:05:40 739,840 ----a-w C:\WINDOWS\system32\DivX.dll
    + 2008-05-30 23:22:46 683,520 ----a-w C:\WINDOWS\system32\DivX.dll
    - 2007-09-28 16:05:40 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
    + 2008-05-30 23:22:48 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
    + 2008-05-30 23:22:46 815,104 ----a-w C:\WINDOWS\system32\divx_xx0a.dll
    - 2007-09-28 16:05:40 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
    + 2008-05-30 23:22:48 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
    - 2007-09-28 16:05:40 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
    + 2008-05-30 23:22:48 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
    - 2007-09-28 16:08:18 156,992 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
    + 2008-05-22 22:19:12 161,096 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
    - 2007-09-28 16:07:54 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
    + 2008-03-21 20:30:12 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
    - 2007-09-28 16:05:08 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
    + 2008-05-22 22:18:54 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
    - 2007-08-20 09:59:29 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll
    + 2008-06-23 16:28:17 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll
    + 2002-12-13 11:42:56 8,192 ----a-w C:\WINDOWS\system32\dllcache\asferror.dll
    + 2008-03-25 04:50:25 554,008 ------w C:\WINDOWS\system32\dllcache\dao360.dll
    + 2008-02-20 05:35:05 45,568 ------w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
    + 2004-08-03 21:07:58 2,944 ----a-w C:\WINDOWS\system32\dllcache\drmkaud.sys
    - 2006-10-17 09:58:06 346,624 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
    + 2008-06-23 16:28:17 347,136 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
    - 2007-08-20 09:59:29 214,528 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
    + 2008-06-23 16:28:17 214,528 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
    - 2007-08-20 09:59:29 132,608 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll
    + 2008-06-23 16:28:17 133,120 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll
    - 2007-06-19 13:32:25 282,112 ------w C:\WINDOWS\system32\dllcache\gdi32.dll
    + 2008-02-20 06:51:00 282,624 ------w C:\WINDOWS\system32\dllcache\gdi32.dll
    - 2007-08-20 09:59:29 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll
    + 2008-06-23 16:28:17 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll
    - 2007-08-20 09:59:29 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll
    + 2008-06-23 16:28:18 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll
    - 2007-08-20 09:59:29 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll
    + 2008-06-23 16:28:18 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll
    - 2007-08-20 09:59:29 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll
    + 2008-06-23 16:28:18 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll
    - 2007-08-20 09:59:29 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll
    + 2008-06-23 16:28:18 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll
    - 2007-08-20 09:59:29 6,058,496 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
    + 2008-06-23 16:28:19 6,066,176 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
    - 2007-08-20 09:59:29 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll
    + 2008-06-23 16:28:19 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll
    - 2007-08-20 09:59:30 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll
    + 2008-06-23 16:28:20 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll
    - 2007-08-21 06:17:23 683,520 ------w C:\WINDOWS\system32\dllcache\inetcomm.dll
    + 2008-04-11 18:51:06 683,520 ------w C:\WINDOWS\system32\dllcache\inetcomm.dll
    - 2007-08-20 09:59:30 27,648 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
    + 2008-06-23 16:28:20 27,648 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
    - 2006-08-17 12:29:49 728,576 ------w C:\WINDOWS\system32\dllcache\lsasrv.dll
    + 2007-11-07 09:28:31 728,576 ------w C:\WINDOWS\system32\dllcache\lsasrv.dll
    + 2002-12-20 11:06:00 3,366,912 ----a-w C:\WINDOWS\system32\dllcache\moviemk.exe
    + 2007-12-18 09:51:35 179,584 ------w C:\WINDOWS\system32\dllcache\mrxdav.sys
    + 2008-02-26 12:00:31 294,912 ------w C:\WINDOWS\system32\dllcache\msctf.dll
    + 2008-03-25 04:50:28 518,944 ------w C:\WINDOWS\system32\dllcache\msexch40.dll
    + 2008-03-25 04:50:30 326,432 ------w C:\WINDOWS\system32\dllcache\msexcl40.dll
    - 2007-08-20 09:59:30 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll
    + 2008-06-23 16:28:20 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll
    - 2007-08-20 09:59:30 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
    + 2008-06-23 16:28:20 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
    - 2007-08-20 09:59:30 477,696 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
    + 2008-06-23 16:28:22 477,696 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
    + 2008-03-25 04:50:34 1,516,568 ------w C:\WINDOWS\system32\dllcache\msjet40.dll
    + 2008-03-25 04:50:40 355,112 ------w C:\WINDOWS\system32\dllcache\msjetol1.dll
    + 2008-03-25 04:51:08 194,144 ------w C:\WINDOWS\system32\dllcache\msjint40.dll
    + 2008-03-25 04:50:42 60,192 ------w C:\WINDOWS\system32\dllcache\msjter40.dll
    + 2008-03-25 04:50:42 248,608 ------w C:\WINDOWS\system32\dllcache\msjtes40.dll
    + 2008-03-25 04:50:44 219,936 ------w C:\WINDOWS\system32\dllcache\msltus40.dll
    + 2008-03-25 04:50:45 355,104 ------w C:\WINDOWS\system32\dllcache\mspbde40.dll
    - 2007-08-20 09:59:30 193,024 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll
    + 2008-06-23 16:28:22 193,024 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll
    + 2008-03-25 04:50:47 432,928 ------w C:\WINDOWS\system32\dllcache\msrd2x40.dll
    + 2008-03-25 04:50:49 322,336 ------w C:\WINDOWS\system32\dllcache\msrd3x40.dll
    + 2008-03-25 04:50:52 559,904 ------w C:\WINDOWS\system32\dllcache\msrepl40.dll
    + 2008-03-25 04:50:55 264,992 ------w C:\WINDOWS\system32\dllcache\mstext40.dll
    - 2007-08-20 09:59:30 671,232 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll
    + 2008-06-23 16:28:22 671,232 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll
    + 2008-03-25 04:50:57 838,432 ------w C:\WINDOWS\system32\dllcache\mswdat10.dll
    + 2008-03-25 04:51:09 621,344 ------w C:\WINDOWS\system32\dllcache\mswstr10.dll
    + 2008-03-25 04:50:58 355,104 ------w C:\WINDOWS\system32\dllcache\msxbde40.dll
    - 2007-08-20 09:59:31 102,400 ------w C:\WINDOWS\system32\dllcache\occache.dll
    + 2008-06-23 16:28:22 102,912 ------w C:\WINDOWS\system32\dllcache\occache.dll
    - 2007-05-17 11:29:50 549,376 ------w C:\WINDOWS\system32\dllcache\oleaut32.dll
    + 2007-12-04 18:41:36 550,912 ------w C:\WINDOWS\system32\dllcache\oleaut32.dll
    - 2006-10-17 09:58:08 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
    + 2008-06-23 16:28:22 44,544 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
    + 2008-05-07 05:15:36 1,293,824 ------w C:\WINDOWS\system32\dllcache\quartz.dll
    - 2006-07-13 08:48:58 202,240 ------w C:\WINDOWS\system32\dllcache\rmcast.sys
    + 2008-05-08 12:28:49 202,752 ------w C:\WINDOWS\system32\dllcache\rmcast.sys
    - 2007-08-20 09:59:31 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll
    + 2008-06-23 16:28:22 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll
    - 2007-08-20 09:59:31 1,152,000 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll
    + 2008-06-23 16:28:23 1,159,680 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll
    + 2004-08-03 21:08:48 26,496 ----a-w C:\WINDOWS\system32\dllcache\usbstor.sys
    + 2004-08-03 22:55:04 23,552 ----a-w C:\WINDOWS\system32\dllcache\wdmaud.drv
    - 2007-08-20 09:59:31 232,960 ------w C:\WINDOWS\system32\dllcache\webcheck.dll
    + 2008-06-23 16:28:23 233,472 ------w C:\WINDOWS\system32\dllcache\webcheck.dll
    - 2007-03-08 15:33:58 1,843,712 ------w C:\WINDOWS\system32\dllcache\win32k.sys
    + 2008-03-20 08:09:22 1,845,376 ------w C:\WINDOWS\system32\dllcache\win32k.sys
    - 2007-08-20 09:59:31 824,832 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll
    + 2008-06-23 16:28:23 826,368 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll
    - 2006-10-18 19:47:18 222,208 ----a-w C:\WINDOWS\system32\dllcache\WMASF.dll
    + 2007-10-25 08:28:30 222,720 ----a-w C:\WINDOWS\system32\dllcache\wmasf.dll
    - 2006-06-26 17:41:32 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll
    + 2008-06-20 17:41:06 148,992 ----a-w C:\WINDOWS\system32\dnsapi.dll
    - 2004-08-05 12:00:00 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
    + 2008-02-20 05:35:05 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
    - 2007-09-28 16:05:50 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
    + 2008-05-22 22:19:46 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
    - 2007-09-28 16:05:42 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
    + 2008-05-30 23:22:54 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
    - 2007-09-28 16:05:42 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
    + 2008-05-30 23:22:54 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
    - 2007-09-28 16:05:44 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
    + 2008-05-30 23:22:58 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
    - 2007-09-28 16:05:42 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
    + 2008-05-30 23:22:54 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
    - 2007-09-28 16:05:42 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
    + 2008-05-30 23:22:54 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
    - 2007-09-28 16:05:42 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
    + 2008-05-30 23:22:54 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
    - 2004-08-05 12:00:00 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys
    + 2008-06-20 10:44:38 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
    + 2008-03-19 18:52:52 271,360 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys
    - 2007-10-13 16:47:46 61,632 ----a-w C:\WINDOWS\system32\drivers\avipbb.sys
    + 2008-07-20 16:18:53 75,072 ----a-w C:\WINDOWS\system32\drivers\avipbb.sys
    + 2008-06-14 17:59:52 272,768 ------w C:\WINDOWS\system32\drivers\bthport.sys
    + 2004-08-03 21:07:58 2,944 ----a-w C:\WINDOWS\system32\drivers\drmkaud.sys
    + 2008-03-19 18:52:52 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys
    - 2004-08-05 12:00:00 181,248 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
    + 2007-12-18 09:51:35 179,584 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
    + 1999-05-05 14:22:00 9,360 ----a-w C:\WINDOWS\system32\drivers\ntmap.sys
    + 2004-08-05 12:00:00 2,944 ----a-w C:\WINDOWS\system32\drivers\null.sys
    + 2004-08-09 11:29:28 53,920 ----a-w C:\WINDOWS\system32\drivers\prodrv06.sys
    + 2004-08-09 11:33:26 114,016 ----a-w C:\WINDOWS\system32\drivers\prohlp02.sys
    - 2006-07-13 08:48:58 202,240 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
    + 2008-05-08 12:28:49 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
    - 2004-08-05 12:00:00 27,440 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
    + 2007-11-13 10:25:54 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
    - 2006-05-10 08:39:38 51,200 ----a-w C:\WINDOWS\system32\drivers\sfdrv01.sys
    + 2005-08-10 12:44:04 50,688 ----a-w C:\WINDOWS\system32\drivers\sfdrv01.sys
    + 2006-07-05 12:46:06 63,352 ----a-w C:\WINDOWS\system32\drivers\sfdrv01a.sys
    + 2003-12-01 15:20:52 4,832 ----a-w C:\WINDOWS\system32\drivers\sfhlp01.sys
    - 2006-05-10 08:20:28 6,656 ----a-w C:\WINDOWS\system32\drivers\sfhlp02.sys
    + 2006-06-14 14:56:56 13,680 ----a-w C:\WINDOWS\system32\drivers\sfhlp02.sys
    + 2005-11-03 14:40:07 63,488 ----a-w C:\WINDOWS\system32\drivers\sfvfs02.sys
    + 2005-08-30 00:47:38 58,320 ----a-w C:\WINDOWS\system32\drivers\ssm_bus.sys
    + 2005-08-30 00:49:28 6,176 ----a-w C:\WINDOWS\system32\drivers\ssm_cm.sys
    + 2005-08-30 00:49:28 6,176 ----a-w C:\WINDOWS\system32\drivers\ssm_cmnt.sys
    + 2005-08-30 00:49:34 8,336 ----a-w C:\WINDOWS\system32\drivers\ssm_mdfl.sys
    + 2005-08-30 00:49:38 94,000 ----a-w C:\WINDOWS\system32\drivers\ssm_mdm.sys
    + 2005-08-30 00:47:34 5,840 ----a-w C:\WINDOWS\system32\drivers\ssm_wh.sys
    + 2005-08-30 00:47:34 5,840 ----a-w C:\WINDOWS\system32\drivers\ssm_whnt.sys
    + 2006-07-24 15:05:00 5,632 ----a-w C:\WINDOWS\system32\drivers\StarOpen.sys
    - 2006-04-20 11:51:50 359,808 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
    + 2008-06-20 10:45:13 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
    - 2006-08-16 09:37:30 225,664 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
    + 2008-06-20 09:52:06 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
    + 2003-06-06 13:29:16 15,884 ----a-w C:\WINDOWS\system32\drivers\UMP3.sys
    + 2006-11-09 09:29:12 110,336 -c--a-r C:\WINDOWS\system32\DRVSTORE\athena_6BDC51EC34901E554F7E8DCB20A16311375D6D33\athena.sys
    - 2007-09-28 16:05:50 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
    + 2008-05-22 22:19:46 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
    - 2006-10-17 09:58:06 346,624 ----a-w C:\WINDOWS\system32\dxtmsft.dll
    + 2008-06-23 16:28:17 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dll
    - 2007-08-20 09:59:29 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll
    + 2008-06-23 16:28:17 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll
    + 2003-01-07 13:22:34 139,264 ----a-w C:\WINDOWS\system32\eax.dll
    - 2007-08-20 09:59:29 132,608 ----a-w C:\WINDOWS\system32\extmgr.dll
    + 2008-06-23 16:28:17 133,120 ----a-w C:\WINDOWS\system32\extmgr.dll
    - 2005-03-17 12:39:58 1,146,320 ----a-w C:\WINDOWS\system32\FM20.DLL
    + 2007-06-06 08:53:34 1,195,888 ----a-w C:\WINDOWS\system32\FM20.DLL
    + 2007-03-22 17:17:04 35,440 ----a-w C:\WINDOWS\system32\FM20ENU.DLL
    - 2003-07-31 17:46:08 42,128 ----a-w C:\WINDOWS\system32\FM20FRA.DLL
    + 2007-04-05 09:56:36 47,840 ----a-w C:\WINDOWS\system32\FM20FRA.DLL
    - 2007-09-01 17:32:37 342,624 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
    + 2008-09-01 13:21:52 343,424 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
    + 2006-05-03 21:53:54 174,592 ----a-w C:\WINDOWS\system32\framedyn.dll
    + 2007-09-04 15:47:26 62,232 ----a-w C:\WINDOWS\system32\GameuxInstallHelper.dll
    - 2007-06-19 13:32:25 282,112 ----a-w C:\WINDOWS\system32\gdi32.dll
    + 2008-02-20 06:51:00 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
    + 1998-05-08 10:57:22 143,872 ------w C:\WINDOWS\system32\iacenc.dll
    - 2007-08-20 09:59:29 63,488 ----a-w C:\WINDOWS\system32\icardie.dll
    + 2008-06-23 16:28:17 63,488 ----a-w C:\WINDOWS\system32\icardie.dll
    - 2007-08-17 10:22:11 63,488 ----a-w C:\WINDOWS\system32\ie4uinit.exe
    + 2008-06-23 09:21:30 70,656 ----a-w C:\WINDOWS\system32\ie4uinit.exe
    - 2007-08-20 09:59:29 153,088 ----a-w C:\WINDOWS\system32\ieakeng.dll
    + 2008-06-23 16:28:18 153,088 ----a-w C:\WINDOWS\system32\ieakeng.dll
    - 2007-08-20 09:59:29 230,400 ----a-w C:\WINDOWS\system32\ieaksie.dll
    + 2008-06-23 16:28:18 230,400 ----a-w C:\WINDOWS\system32\ieaksie.dll
    - 2007-08-17 07:34:25 161,792 ----a-w C:\WINDOWS\system32\ieakui.dll
    + 2008-06-21 05:23:54 161,792 ----a-w C:\WINDOWS\system32\ieakui.dll
    - 2007-08-20 09:59:29 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll
    + 2008-06-23 16:28:18 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll
    - 2007-08-20 09:59:29 384,512 ----a-w C:\WINDOWS\system32\iedkcs32.dll
    + 2008-06-23 16:28:18 384,512 ----a-w C:\WINDOWS\system32\iedkcs32.dll
    - 2007-08-20 09:59:29 6,058,496 ----a-w C:\WINDOWS\system32\ieframe.dll
    + 2008-06-23 16:28:19 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dll
    - 2007-08-20 09:59:29 44,544 ----a-w C:\WINDOWS\system32\iernonce.dll
    + 2008-06-23 16:28:19 44,544 ----a-w C:\WINDOWS\system32\iernonce.dll
    - 2007-08-20 09:59:30 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll
    + 2008-06-23 16:28:20 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll
    - 2007-08-17 10:22:11 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe
    + 2008-06-23 09:20:26 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe
    - 2007-08-21 06:17:23 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
    + 2008-04-11 18:51:06 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
    + 1997-06-14 08:56:08 56,832 ------w C:\WINDOWS\system32\iyvu9_32.dll
    - 2007-09-24 20:30:28 135,168 ----a-w C:\WINDOWS\system32\java.exe
    + 2008-06-09 23:21:01 135,168 ----a-w C:\WINDOWS\system32\java.exe
    - 2007-09-24 20:30:30 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
    + 2008-06-09 23:21:04 135,168 ----a-w C:\WINDOWS\system32\javaw.exe
    - 2007-09-24 21:31:42 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
    + 2008-06-10 00:32:34 139,264 ----a-w C:\WINDOWS\system32\javaws.exe
    - 2007-08-20 09:59:30 27,648 ----a-w C:\WINDOWS\system32\jsproxy.dll
    + 2008-06-23 16:28:20 27,648 ----a-w C:\WINDOWS\system32\jsproxy.dll
    + 2005-05-24 11:27:16 213,048 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll
    + 2007-08-29 14:47:20 94,208 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
    + 2007-08-29 14:49:54 950,272 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
    + 2004-08-05 12:00:00 2,000 ----a-w C:\WINDOWS\system32\keyboard.drv
    + 2004-08-05 12:00:00 224,448 ----a-w C:\WINDOWS\system32\lanman.drv
    + 2004-05-14 14:53:08 57,344 ----a-w C:\WINDOWS\system32\lfbmp13n.dll
    + 2004-05-14 14:53:08 401,408 ----a-w C:\WINDOWS\system32\lfcmp13n.dll
    + 2003-11-04 13:10:40 69,632 ----a-w C:\WINDOWS\system32\lfgif13n.dll
    - 2007-09-28 16:07:44 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
    + 2008-05-22 22:20:42 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
    - 2006-08-17 12:29:49 728,576 ----a-w C:\WINDOWS\system32\lsasrv.dll
    + 2007-11-07 09:28:31 728,576 ----a-w C:\WINDOWS\system32\lsasrv.dll
    + 2004-05-14 14:53:10 299,008 ----a-w C:\WINDOWS\system32\ltdis13n.dll
    + 2004-01-12 00:09:42 206,336 ----a-w C:\WINDOWS\system32\ltefx13n.dll
    + 2004-05-14 14:53:10 163,840 ----a-w C:\WINDOWS\system32\ltfil13n.dll
    + 2004-05-14 14:53:12 450,560 ----a-w C:\WINDOWS\system32\ltimg13n.dll
    + 2004-05-14 14:53:12 462,848 ----a-w C:\WINDOWS\system32\ltkrn13n.dll
    + 2004-08-05 12:00:00 2,560 ----a-w C:\WINDOWS\system32\lz32.dll
    + 2005-07-28 11:52:32 15,840 ----a-w C:\WINDOWS\system32\Machnm1.exe
    - 2007-06-11 11:34:00 2,115,816 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
    + 2008-03-25 03:21:18 2,889,088 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
    - 2007-06-11 11:34:00 190,696 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
    + 2008-03-25 03:21:20 218,496 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
    + 2008-06-27 09:41:09 70,264 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
    + 2004-08-05 12:00:00 73,680 ----a-w C:\WINDOWS\system32\mciavi.drv
    + 2004-08-05 12:00:00 25,280 ----a-w C:\WINDOWS\system32\mciseq.drv
    + 2004-08-05 12:00:00 28,160 ----a-w C:\WINDOWS\system32\mciwave.drv
    - 2004-03-22 13:17:06 24,816 ----a-w C:\WINDOWS\system32\mdimon.dll
    + 2007-04-09 11:23:54 28,040 ----a-w C:\WINDOWS\system32\mdimon.dll
    + 2007-11-17 13:14:55 407,047 ----a-w C:\WINDOWS\system32\mioengine.exe
    + 2004-08-05 12:00:00 2,032 ----a-w C:\WINDOWS\system32\mouse.drv
    - 2007-11-02 07:12:57 18,238,072 ----a-w C:\WINDOWS\system32\MRT.exe
    + 2008-08-05 18:11:01 15,888,504 ----a-w C:\WINDOWS\system32\MRT.exe
    + 2004-08-05 12:00:00 20,992 ----a-w C:\WINDOWS\system32\msacm32.drv
    - 2006-12-22 10:28:14 271,360 ----a-w C:\WINDOWS\system32\mscoree.dll
    + 2007-10-23 23:47:38 282,112 ----a-w C:\WINDOWS\system32\mscoree.dll
    - 2004-07-14 21:34:06 16,896 ----a-w C:\WINDOWS\system32\mscorier.dll
    + 2007-10-23 23:47:38 158,720 ----a-w C:\WINDOWS\system32\mscorier.dll
    - 2003-02-20 17:09:14 106,496 ----a-w C:\WINDOWS\system32\mscories.dll
    + 2007-10-23 23:47:38 84,480 ----a-w C:\WINDOWS\system32\mscories.dll
    - 2004-08-05 12:00:00 294,400 ----a-w C:\WINDOWS\system32\MSCTF.dll
    + 2008-02-26 12:00:31 294,912 ----a-w C:\WINDOWS\system32\msctf.dll
    - 2004-08-05 12:00:00 512,029 ----a-w C:\WINDOWS\system32\msexch40.dll
    + 2008-03-25 04:50:28 518,944 ----a-w C:\WINDOWS\system32\msexch40.dll
    - 2004-08-05 12:00:00 319,517 ----a-w C:\WINDOWS\system32\msexcl40.dll
    + 2008-03-25 04:50:30 326,432 ----a-w C:\WINDOWS\system32\msexcl40.dll
    - 2007-08-20 09:59:30 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll
    + 2008-06-23 16:28:20 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll
    - 2007-08-20 09:59:30 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
    + 2008-06-23 16:28:20 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
    + 2004-08-05 12:00:00 188,416 ----a-w C:\WINDOWS\system32\msh261.drv
    + 2004-08-05 12:00:00 294,912 ----a-w C:\WINDOWS\system32\msh263.drv
    - 2007-08-20 09:59:30 3,584,512 ----a-w C:\WINDOWS\system32\mshtml.dll
    + 2008-06-24 08:28:24 3,592,192 ----a-w C:\WINDOWS\system32\mshtml.dll
    - 2007-08-20 09:59:30 477,696 ----a-w C:\WINDOWS\system32\mshtmled.dll
    + 2008-06-23 16:28:22 477,696 ----a-w C:\WINDOWS\system32\mshtmled.dll
    + 2007-04-30 14:50:50 903,072 ----a-w C:\WINDOWS\system32\msidcrl40.dll
    - 2004-08-05 12:00:00 1,507,356 ----a-w C:\WINDOWS\system32\msjet40.dll
    + 2008-03-25 04:50:34 1,516,568 ----a-w C:\WINDOWS\system32\msjet40.dll
    - 2004-08-05 12:00:00 358,976 ----a-w C:\WINDOWS\system32\msjetoledb40.dll
    + 2008-03-25 04:50:40 355,112 ----a-w C:\WINDOWS\system32\msjetoledb40.dll
    - 2004-08-05 12:00:00 184,351 ----a-w C:\WINDOWS\system32\msjint40.dll
    + 2008-03-25 04:51:08 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll
    - 2004-08-05 12:00:00 53,279 ----a-w C:\WINDOWS\system32\msjter40.dll
    + 2008-03-25 04:50:42 60,192 ----a-w C:\WINDOWS\system32\msjter40.dll
    - 2004-08-05 12:00:00 241,693 ----a-w C:\WINDOWS\system32\msjtes40.dll
    + 2008-03-25 04:50:42 248,608 ----a-w C:\WINDOWS\system32\msjtes40.dll
    - 2004-08-05 12:00:00 213,023 ----a-w C:\WINDOWS\system32\msltus40.dll
    + 2008-03-25 04:50:44 219,936 ----a-w C:\WINDOWS\system32\msltus40.dll
    - 2004-08-05 12:00:00 348,189 ----a-w C:\WINDOWS\system32\mspbde40.dll
    + 2008-03-25 04:50:45 355,104 ----a-w C:\WINDOWS\system32\mspbde40.dll
    - 2007-08-20 09:59:30 193,024 ----a-w C:\WINDOWS\system32\msrating.dll
    + 2008-06-23 16:28:22 193,024 ----a-w C:\WINDOWS\system32\msrating.dll
    - 2004-08-05 12:00:00 421,919 ----a-w C:\WINDOWS\system32\msrd2x40.dll
    + 2008-03-25 04:50:47 432,928 ----a-w C:\WINDOWS\system32\msrd2x40.dll
    - 2004-08-05 12:00:00 315,423 ----a-w C:\WINDOWS\system32\msrd3x40.dll
    + 2008-03-25 04:50:49 322,336 ----a-w C:\WINDOWS\system32\msrd3x40.dll
    - 2004-08-05 12:00:00 552,989 ----a-w C:\WINDOWS\system32\msrepl40.dll
    + 2008-03-25 04:50:52 559,904 ----a-w C:\WINDOWS\system32\msrepl40.dll
    - 2004-08-05 12:00:00 258,077 ----a-w C:\WINDOWS\system32\mstext40.dll
    + 2008-03-25 04:50:55 264,992 ----a-w C:\WINDOWS\system32\mstext40.dll
    - 2007-08-20 09:59:30 671,232 ----a-w C:\WINDOWS\system32\mstime.dll
    + 2008-06-23 16:28:22 671,232 ----a-w C:\WINDOWS\system32\mstime.dll
    - 2004-08-05 12:00:00 1,392,671 ----a-w C:\WINDOWS\system32\msvbvm60.dll
    + 2004-02-24 00:42:40 1,386,496 ----a-w C:\WINDOWS\system32\msvbvm60.dll
    + 2006-12-02 05:22:52 479,232 ----a-w C:\WINDOWS\system32\msvcm80.dll
    + 2006-12-01 21:03:36 548,864 ----a-w C:\WINDOWS\system32\msvcp80.dll
    + 2006-12-01 21:03:36 626,688 ----a-w C:\WINDOWS\system32\msvcr80.dll
    - 2004-08-05 12:00:00 831,519 ----a-w C:\WINDOWS\system32\mswdat10.dll
    + 2008-03-25 04:50:57 838,432 ----a-w C:\WINDOWS\system32\mswdat10.dll
    - 2004-08-05 12:00:00 614,429 ----a-w C:\WINDOWS\system32\mswstr10.dll
    + 2008-03-25 04:51:09 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
    - 2004-08-05 12:00:00 348,189 ----a-w C:\WINDOWS\system32\msxbde40.dll
    + 2008-03-25 04:50:58 355,104 ----a-w C:\WINDOWS\system32\msxbde40.dll
    - 2006-12-22 11:02:36 6,144 ----a-w C:\WINDOWS\system32\mui\0409\mscorees.dll
    + 2007-10-23 23:47:44 15,360 ----a-w C:\WINDOWS\system32\mui\0409\mscorees.dll
    + 2005-12-23 06:59:14 6,656 ----a-w C:\WINDOWS\system32\mui\040C\mscorees.dll
    - 2007-08-20 09:59:31 102,400 ----a-w C:\WINDOWS\system32\occache.dll
    + 2008-06-23 16:28:22 102,912 ----a-w C:\WINDOWS\system32\occache.dll
    - 2007-05-17 11:29:50 549,376 ----a-w C:\WINDOWS\system32\oleaut32.dll
    + 2007-12-04 18:41:36 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll
    - 2007-10-29 07:41:59 53,608 ----a-w C:\WINDOWS\system32\perfc009.dat
    + 2008-05-24 18:43:02 64,372 ----a-w C:\WINDOWS\system32\perfc009.dat
    - 2007-10-29 07:41:59 64,492 ----a-w C:\WINDOWS\system32\perfc00C.dat
    + 2008-05-24 18:43:02 77,916 ----a-w C:\WINDOWS\system32\perfc00C.dat
    - 2007-10-29 07:41:59 383,254 ----a-w C:\WINDOWS\system32\perfh009.dat
    + 2008-05-24 18:43:02 409,232 ----a-w C:\WINDOWS\system32\perfh009.dat
    - 2007-10-29 07:41:59 447,772 ----a-w C:\WINDOWS\system32\perfh00C.dat
    + 2008-05-24 18:43:02 477,072 ----a-w C:\WINDOWS\system32\perfh00C.dat
    + 2007-02-20 10:24:46 71,208 ----a-w C:\WINDOWS\system32\PhysXLoader.dll
    - 2006-10-17 09:58:08 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
    + 2008-06-23 16:28:22 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
    - 2007-09-28 16:07:52 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
    + 2008-03-21 20:30:08 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
    - 2005-08-30 03:55:43 1,293,312 ----a-w C:\WINDOWS\system32\quartz.dll
    + 2008-05-07 05:15:36 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll
    + 2005-08-30 16:57:18 58,320 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\1\ss_bus.sys
    + 2005-08-30 16:58:50 6,144 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\1\ss_cmnt.sys
    + 2005-08-30 16:58:56 8,304 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\1\ss_mdfl.sys
    + 2005-08-30 16:59:00 94,000 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\1\ss_mdm.sys
    + 2005-08-26 17:07:28 81,920 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
    + 2005-08-30 16:57:14 5,808 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\1\ss_whnt.sys
    + 2005-08-30 00:47:38 58,320 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\2\ssm_bus.sys
    + 2005-08-30 00:49:28 6,176 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\2\ssm_cmnt.sys
    + 2005-08-30 00:49:34 8,336 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\2\ssm_mdfl.sys
    + 2005-08-30 00:49:38 94,000 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\2\ssm_mdm.sys
    + 2005-08-30 00:46:16 81,920 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
    + 2005-08-30 00:47:34 5,840 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\2\ssm_whnt.sys
    + 2005-12-22 11:24:50 80,272 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\3\sscdbus.sys
    + 2005-12-22 11:24:52 11,877 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\3\sscdcmnt.sys
    + 2005-12-22 11:24:52 10,864 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\3\sscdmdfl.sys
    + 2005-12-22 11:24:52 137,884 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\3\sscdmdm.sys
    + 2005-12-22 11:24:52 108,003 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\3\sscdserd.sys
    + 2005-12-22 11:24:52 65,536 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
    + 2005-12-22 11:24:54 11,188 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\3\sscdwhnt.sys
    + 2006-07-21 11:12:56 66,672 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\5\sssdbus.sys
    + 2006-07-21 11:15:26 6,208 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\5\sssdcmnt.sys
    + 2006-07-21 11:13:48 9,232 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\5\sssdmdfl.sys
    + 2006-07-21 11:13:52 100,304 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\5\sssdmdm.sys
    + 2006-07-21 11:14:40 91,744 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\5\sssdmgmt.sys
    + 2006-07-21 11:15:28 89,584 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\5\sssdobex.sys
    + 2006-07-21 11:15:56 53,760 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
    + 2006-07-21 11:12:52 5,872 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\5\sssdwhnt.sys
    + 2007-01-07 17:10:28 66,880 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\6\ssbcbus.sys
    + 2007-01-07 17:11:16 6,272 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\6\ssbccmnt.sys
    + 2007-01-07 17:11:18 9,360 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\6\ssbcmdfl.sys
    + 2007-01-07 17:11:22 100,864 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\6\ssbcmdm.sys
    + 2007-01-07 17:11:48 55,296 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
    + 2007-01-07 17:10:24 5,936 ----a-w C:\WINDOWS\system32\Samsung_USB_Drivers\6\ssbcwhnt.sys
    - 2007-08-16 14:17:18 51,568 ----a-w C:\WINDOWS\system32\sirenacm.dll
    + 2007-10-18 10:31:46 51,224 ----a-w C:\WINDOWS\system32\sirenacm.dll
    + 2008-07-18 20:10:20 36,552 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
    + 2008-07-18 20:10:40 45,768 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
    + 2004-08-05 12:00:00 1,744 ----a-w C:\WINDOWS\system32\sound.drv
    - 2006-09-25 15:58:48 14,640 ------w C:\WINDOWS\system32\spmsg.dll
    + 2007-11-30 11:19:06 18,296 ------w C:\WINDOWS\system32\spmsg.dll
    - 2004-03-22 13:17:04 765,680 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\mdigraph.dll
    + 2007-04-09 11:24:04 758,664 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\mdigraph.dll
    - 2004-03-22 13:17:10 42,224 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\mdiui.dll
    + 2007-04-09 11:23:58 46,472 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\3\mdiui.dll
    - 2004-03-22 13:17:04 765,680 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\mdigraph.dll
    + 2007-04-09 11:24:04 758,664 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\mdigraph.dll
    - 2004-03-22 13:17:10 42,224 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\mdiui.dll
    + 2007-04-09 11:23:58 46,472 ----a-w C:\WINDOWS\system32\spool\drivers\w32x86\mdiui.dll
    - 2004-03-22 13:17:08 25,840 ----a-w C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
    + 2007-04-09 11:23:54 28,552 ----a-w C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
    - 2007-09-28 16:07:44 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
    + 2008-05-22 22:20:42 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
    + 2004-08-05 12:00:00 3,360 ----a-w C:\WINDOWS\system32\system.drv
    + 2004-08-05 12:00:00 4,096 ----a-w C:\WINDOWS\system32\timer.drv
    - 2007-07-18 12:42:22 60,416 ------w C:\WINDOWS\system32\tzchange.exe
    + 2008-07-14 11:09:18 62,976 ------w C:\WINDOWS\system32\tzchange.exe
    - 2007-08-20 09:59:31 105,984 ----a-w C:\WINDOWS\system32\url.dll
    + 2008-06-23 16:28:22 105,984 ----a-w C:\WINDOWS\system32\url.dll
    - 2007-08-20 09:59:31 1,152,000 ----a-w C:\WINDOWS\system32\urlmon.dll
    + 2008-06-23 16:28:23 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll
    + 2000-07-15 03:00:00 101,888 ----a-w C:\WINDOWS\system32\VB6STKIT.DLL
    + 2004-08-05 12:00:00 2,176 ----a-w C:\WINDOWS\system32\vga.drv
    + 2004-08-03 22:55:04 23,552 ----a-w C:\WINDOWS\system32\wdmaud.drv
    - 2007-08-20 09:59:31 232,960 ----a-w C:\WINDOWS\system32\webcheck.dll
    + 2008-06-23 16:28:23 233,472 ----a-w C:\WINDOWS\system32\webcheck.dll
    + 2004-08-05 12:00:00 13,600 ----a-w C:\WINDOWS\system32\wfwnet.drv
    - 2007-03-08 15:33:58 1,843,712 ----a-w C:\WINDOWS\system32\win32k.sys
    + 2008-03-20 08:09:22 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
    + 2002-11-06 00:45:32 327,680 ----a-w C:\WINDOWS\system32\windows media\server\wmsservertypelib.dll
    - 2007-08-20 09:59:31 824,832 ----a-w C:\WINDOWS\system32\wininet.dll
    + 2008-06-23 16:28:23 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
    + 2004-08-05 12:00:00 2,864 ----a-w C:\WINDOWS\system32\winsock.dll
    + 2004-08-05 12:00:00 146,944 ----a-w C:\WINDOWS\system32\winspool.drv
    + 2004-08-05 12:00:00 2,112 ----a-w C:\WINDOWS\system32\winspool.exe
    - 2006-10-18 19:47:18 222,208 ----a-w C:\WINDOWS\system32\wmasf.dll
    + 2007-10-25 08:28:30 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll
    + 1999-08-09 12:40:56 163,600 ----a-w C:\WINDOWS\system32\wmaudsdk.dll
    + 2002-11-06 00:10:14 167,936 ----a-w C:\WINDOWS\system32\wmserror.dll
    + 2004-08-05 12:00:00 2,736 ----a-w C:\WINDOWS\system32\wowdeb.exe
    + 2007-03-05 11:42:18 15,128 ----a-w C:\WINDOWS\system32\x3daudio1_1.dll
    + 2007-10-22 01:37:16 17,928 ----a-w C:\WINDOWS\system32\X3DAudio1_2.dll
    + 2008-03-05 14:00:06 25,608 ----a-w C:\WINDOWS\system32\X3DAudio1_3.dll
    + 2007-10-22 01:39:54 267,272 ----a-w C:\WINDOWS\system32\xactengine2_10.dll
    + 2006-05-31 05:24:16 230,168 ----a-w C:\WINDOWS\system32\xactengine2_2.dll
    + 2006-07-28 07:30:32 236,824 ----a-w C:\WINDOWS\system32\xactengine2_3.dll
    + 2006-09-28 14:05:56 237,848 ----a-w C:\WINDOWS\system32\xactengine2_4.dll
    + 2006-12-08 10:02:00 251,672 ----a-w C:\WINDOWS\system32\xactengine2_5.dll
    + 2007-01-24 14:27:30 255,848 ----a-w C:\WINDOWS\system32\xactengine2_6.dll
    + 2007-04-04 17:55:00 261,480 ----a-w C:\WINDOWS\system32\xactengine2_7.dll
    + 2007-06-20 19:46:04 266,088 ----a-w C:\WINDOWS\system32\xactengine2_8.dll
    + 2007-07-19 22:57:12 267,112 ----a-w C:\WINDOWS\system32\xactengine2_9.dll
    + 2008-03-05 14:03:20 238,088 ----a-w C:\WINDOWS\system32\xactengine3_0.dll
    + 2008-03-05 14:03:54 479,752 ----a-w C:\WINDOWS\system32\XAudio2_0.dll
    + 2006-07-28 07:30:14 62,744 ----a-w C:\WINDOWS\system32\xinput1_2.dll
    + 2007-04-04 17:53:42 81,768 ----a-w C:\WINDOWS\system32\xinput1_3.dll
    + 2007-08-07 17:22:14 8,607,552 ----a-w C:\WINDOWS\system32\xlive.dll
    + 2007-08-07 17:22:16 13,653,824 ----a-w C:\WINDOWS\system32\xlivefnt.dll
    + 2000-08-31 06:00:00 49,152 ----a-w C:\WINDOWS\VFind.exe
    + 2008-05-24 18:42:42 8,192 ----a-w C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
    + 2005-09-22 21:49:12 95,744 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.dll
    + 2007-10-23 23:47:56 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcm80.dll
    + 2007-10-23 23:47:56 558,080 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll
    + 2007-10-23 23:47:56 635,904 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
    + 2005-09-22 21:48:08 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcm80.dll
    + 2005-09-22 21:48:08 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll
    + 2005-09-22 21:48:06 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
    + 2006-12-01 20:54:32 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
    + 2006-12-01 20:54:34 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
    + 2006-12-01 20:54:32 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
    + 2005-09-22 23:16:02 1,093,632 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80.dll
    + 2005-09-22 23:16:06 1,079,808 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfc80u.dll
    + 2005-09-22 23:16:08 69,632 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80.dll
    + 2005-09-22 23:16:10 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\mfcm80u.dll
    + 2005-09-22 22:58:06 40,960 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80CHS.dll
    + 2005-09-22 22:58:06 45,056 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80CHT.dll
    + 2005-09-22 22:58:06 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80DEU.dll
    + 2005-09-22 22:58:06 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ENU.dll
    + 2005-09-22 22:58:06 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ESP.dll
    + 2005-09-22 22:58:06 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80FRA.dll
    + 2005-09-22 22:58:06 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80ITA.dll
    + 2005-09-22 22:58:06 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80JPN.dll
    + 2005-09-22 22:58:06 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\mfc80KOR.dll
    + 2005-09-22 23:35:10 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0ee63867\vcomp.dll
    + 2008-05-24 18:42:51 258,048 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2008-05-24 18:42:51 113,664 ----a-w C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2000-08-31 06:00:00 68,096 ----a-w C:\WINDOWS\zip.exe
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 15360]
    "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 1694208]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-12 339968]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
    "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-10-08 81920]
    "AVFX Engine"="C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe" [2006-06-09 24576]
    "V0230Mon.exe"="C:\WINDOWS\system32\V0230Mon.exe" [2006-07-19 36961]
    "avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-20 266497]
    "OpwareSE2"="C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
    "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-08-17 180269]
    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-08-17 98304]
    "SoundMan"="SOUNDMAN.EXE" [2004-02-26 C:\WINDOWS\SOUNDMAN.EXE]
    "Logitech Utility"="Logi_MwX.Exe" [2003-12-17 C:\WINDOWS\LOGI_MWX.EXE]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=ecoevu.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "C:\\Program Files\\eMule\\emule.exe"=
    "C:\\Program Files\\Veoh Networks\\Veoh\\VeohClient.exe"=
    "C:\\WINDOWS\\system32\\dpvsetup.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "C:\\Program Files\\THQ\\MotoGP URT 3 Demo\\motogp_demo.exe"=
    "C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"=
    "C:\\Program Files\\Xider\\EsR DEMO\\ESR DEMO.exe"=
    "C:\\Program Files\\Microsoft Games\\Age of Empires II\\EMPIRES2.ICD"=
    "C:\\Documents and Settings\\Damien\\Bureau\\vidéo&image portable calix\\stuntmoto_007\\server.exe"=
    "C:\\Program Files\\EA GAMES\\Need for Speed Underground 2\\speed2.exe"=
    "C:\\Program Files\\LimeWire\\LimeWire.exe"=
    "C:\\Program Files\\TmNationsForever\\TmForever.exe"=
    "C:\\WINDOWS\\system32\\dplaysvr.exe"=
    "C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=

    R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);C:\WINDOWS\system32\drivers\sfdrv01a.sys [2006-07-05 63352]
    R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
    S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
    S3 V0230Vfx;V0230Vfx;C:\WINDOWS\system32\DRIVERS\V0230Vfx.sys [2006-03-23 6272]
    S3 V0230VID;Live! Cam Video IM Pro;C:\WINDOWS\system32\DRIVERS\V0230VID.sys [2006-07-24 498464]
    .
    Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
    .
    - - - - ORPHANS REMOVED - - - -

    BHO-{0545C48E-CDEA-41F2-97A9-6F044613878E} - (no file)
    BHO-{09CD5BBB-773C-49E4-989B-51F9A8BB37A6} - (no file)
    BHO-{0CD652AC-831A-45A2-B1EE-5642B572337B} - (no file)
    BHO-{264CD176-CB20-4249-B1C1-C7D7447BE536} - (no file)
    BHO-{7c93d37d-e670-4a01-8e41-a1b000ceef7d} - (no file)
    BHO-{AA62D208-49D4-4E93-A2D9-11BEE36B8CF5} - (no file)
    BHO-{D17EC20D-4207-47CE-AFB5-1C950E1C8DE9} - (no file)
    HKLM-Run-Love default global mess - C:\Documents and Settings\All Users\Application Data\great coal love default\media stop.exe


    .
    ------- Supplementary Scan -------
    .
    O8 -: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-07 21:17:53
    Windows 5.1.2600 Service Pack 2 NTFS

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\MysqlInventime]
    "ImagePath"="c:\mysql\bin\mysqld-nt MysqlInventime"
    .
    --------------------- DLLs a chargé sous des processus courants ---------------------

    PROCESS: C:\WINDOWS\system32\winlogon.exe
    -> C:\WINDOWS\system32\tsd32.dll
    .
    Temps d'accomplissement: 2008-09-07 21:20:39
    ComboFix-quarantined-files.txt 2008-09-07 19:20:17

    Pre-Run: 50,368,208,896 octets libres
    Post-Run: 50,738,741,248 octets libres

    1890 --- E O F --- 2008-08-21 08:31:30
    7 Septembre 2008 21:55:55

    La suite, le rapport HijackThis :

    Citation :
    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 21:31, on 2008-09-07
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\slserv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\Apps\Powercinema\PCMService.exe
    C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    C:\WINDOWS\system32\V0230Mon.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
    C:\WINDOWS\Logi_MwX.Exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Documents and Settings\Damien\Mes documents\hijackthis\HiJackThis_v2.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =  fficial" rel="nofollow" target="_blank">http://www.google.fr/firefox?client=firefox-a&rls=org.m...
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
    O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    O4 - HKLM\..\Run: [V0230Mon.exe] C:\WINDOWS\system32\V0230Mon.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
    O4 - HKCU\..\Run: [1caf53c8a4a8ca5185e64a6ee56e0c93] C:\DOCUME~1\Damien\MESDOC~1\MESFIC~1\18WHEE~1.EXE /r
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
    O15 - Trusted Zone: http://www.secuser.com
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavweb...
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Co...
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall...
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O20 - AppInit_DLLs: ecoevu.dll
    O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
    O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
    O23 - Service: MysqlInventime - Unknown owner - c:\mysql\bin\mysqld-nt.exe
    O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
    O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
    O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
    O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

    --
    End of file - 9259 bytes
    8 Septembre 2008 20:38:28

    bonsoir

    il en reste plein...

    refais un passage avec ComboFix, mais poste le ici:
    http://www.sendspace.com/

    vue la longueur, ça sera plus facile à lire pour moi. :) 
    8 Septembre 2008 21:26:14

    Bonsoir Sham_Rock,
    Bonsoir toutes et tous,

    Sham_Rock a dit :
    bonsoir

    il en reste plein...

    Ah ? Pourtant le PC va déjà beaucoup mieux que précédemment ;) 
    Mais bon, la page d'accueil de Firefox est toujours Firesearch, et le
    programme Veoh TV se lance toujours aussi...

    J'aurais des questions, mais je les garde pour la fin ;) 

    Le nouveau rapport Combofix


    9 Septembre 2008 21:09:10

    bonsoir

    Copie (Ctrl+C) le texte ci-dessous :
    File::
    C:\WINDOWS\system32\yyedoxtm.ini
    C:\WINDOWS\system32\ucpsvxck.dll
    C:\WINDOWS\system32\pogbnjtg.exe
    C:\WINDOWS\system32\shbtxjax.dll
    C:\WINDOWS\system32\yweihpmr.dll
    C:\WINDOWS\system32\lmmjgyba.dll
    C:\WINDOWS\system32\wjwhtgtw.exe
    C:\WINDOWS\system32\dkebonbb.dll
    C:\WINDOWS\system32\tmpA7.tmp

    Folder::
    C:\WINDOWS\system32\eMaxt02
    C:\Temp
    C:\Program Files\Veoh Networks

    Registry::
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {D0943516-5076-4020-A3B5-AEFAF26AB263}=-



    Ouvre le Bloc-Notes puis colle (Ctrl+V) le texte que tu viens de copier.
    Sauvegarde ce fichier sous le nom de CFScript.txt

    Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture


  • Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
  • Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!
    Ne touche à rien tant que le scan n'est pas terminé.
  • Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
  • Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

    essaye de le poster sur le forum si ça passe. :) 

    ajoute un log hijackthis stp

    10 Septembre 2008 01:11:05

    Bonsoir à vous,
    Bonsoir Sham_Rock,

    Le rapport Combofix fait plus de 45Ko, il se trouve donc ici.

    Le rapport Hijackthis :
    Citation :
    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 01:11:00, on 10/09/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\Apps\Powercinema\PCMService.exe
    C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    C:\WINDOWS\system32\V0230Mon.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
    C:\WINDOWS\Logi_MwX.Exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Damien\Mes documents\hijackthis\HiJackThis_v2.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =  fficial" rel="nofollow" target="_blank">http://www.google.fr/firefox?client=firefox-a&rls=org.m...
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll (file missing)
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
    O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    O4 - HKLM\..\Run: [V0230Mon.exe] C:\WINDOWS\system32\V0230Mon.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
    O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
    O15 - Trusted Zone: http://www.secuser.com
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavweb...
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.ca...
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Co...
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall...
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.ca...
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
    O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
    O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
    O23 - Service: MysqlInventime - Unknown owner - c:\mysql\bin\mysqld-nt.exe
    O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
    O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
    O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
    O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

    --
    End of file - 8932 bytes
    10 Septembre 2008 06:33:17

    Bonjour toutes et tous, bonjour Sham_Rock,

    Sham_Rock a dit :
  • Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
  • Je n'ai pas eu ce message, mais Combofix s'est directement exécuté et j'ai posté le rapport dans le message ci-dessus.

    J'ai aussi vu qu'il y avait une nouvelle version de Combofix, je l'ai donc à nouveau exécuté, voici le rapport ci-dessous :
    Citation :
    ComboFix 08-09-05.03 - Administrateur 2008-09-10 1:23:39.5 - NTFSx86 MINIMAL
    Endroit: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe
    .

    ((((((((((((((((((((((((((((( Fichiers créés 2008-08-09 to 2008-09-09 ))))))))))))))))))))))))))))))))))))
    .

    2008-09-07 10:52 . 2008-09-07 10:52 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\AdobeUM
    2008-09-06 19:12 . 2008-09-06 19:12 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes
    2008-09-06 19:10 . 2007-08-17 19:46 <REP> d-------- C:\Documents and Settings\Administrateur\WINDOWS
    2008-09-06 19:10 . 2004-08-16 17:55 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
    2008-09-06 19:10 . 2004-08-16 17:55 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
    2008-09-06 19:10 . 2004-08-16 17:55 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
    2008-09-06 19:10 . 2008-09-07 10:51 <REP> dr------- C:\Documents and Settings\Administrateur\Mes documents
    2008-09-06 19:10 . 2004-08-16 17:55 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
    2008-09-06 19:10 . 2007-08-17 19:56 <REP> dr------- C:\Documents and Settings\Administrateur\Favoris
    2008-09-06 19:10 . 2008-09-07 21:10 <REP> dr------- C:\Documents and Settings\Administrateur\Bureau
    2008-09-06 19:10 . 2007-08-17 19:56 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\You've Got Pictures Screensaver
    2008-09-06 19:10 . 2007-08-17 19:58 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Symantec
    2008-09-06 19:10 . 2008-09-06 19:10 <REP> d-------- C:\Documents and Settings\Administrateur
    2008-09-05 21:59 . 2008-09-06 01:38 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-09-05 21:59 . 2008-09-05 21:59 <REP> d-------- C:\Documents and Settings\Damien\Application Data\Malwarebytes
    2008-09-05 21:59 . 2008-09-05 21:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-09-05 21:59 . 2008-09-02 00:16 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
    2008-09-05 21:59 . 2008-09-02 00:16 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
    2008-08-20 10:37 . 2008-08-26 10:04 68,608 --ahs---- C:\WINDOWS\Thumbs.db
    2008-08-20 10:25 . 2008-08-20 10:25 <REP> d-------- C:\Graphics
    2008-08-20 10:25 . 2004-05-20 16:51 194,560 --------- C:\WINDOWS\system32\mwgfx24.dll
    2008-08-20 10:25 . 2004-04-05 19:37 158,720 --------- C:\WINDOWS\system32\mwgfx.dll
    2008-08-20 10:25 . 2004-04-20 09:50 103,424 --------- C:\WINDOWS\system32\mwdds.dll
    2008-08-20 10:25 . 2004-05-14 10:13 56,832 --------- C:\WINDOWS\system32\mwace.dll
    2008-08-19 19:20 . 2008-08-19 19:20 <REP> d-------- C:\Documents and Settings\Damien\Application Data\.wyzo
    2008-08-19 12:06 . 2008-08-19 12:09 <REP> d-------- C:\Program Files\everglade rush
    2008-08-19 11:35 . 2008-08-19 11:35 <REP> d-------- C:\WINDOWS\system32\AGEIA
    2008-08-19 11:35 . 2008-08-19 11:35 <REP> d-------- C:\Program Files\AGEIA Technologies
    2008-08-19 11:34 . 2008-08-19 11:38 <REP> d-------- C:\Documents and Settings\Damien\Application Data\yuPlay
    2008-08-19 11:33 . 2008-08-19 12:15 <REP> d-------- C:\Program Files\yuPlay
    2008-08-19 11:33 . 2008-08-19 11:38 <REP> d-------- C:\Program Files\Fichiers communs\yuPlay
    2008-08-18 19:19 . 2008-08-18 19:19 <REP> d-------- C:\Program Files\Techland
    2008-08-15 11:42 . 2008-08-15 11:42 <REP> d-------- C:\Program Files\GifCreator
    2008-08-15 11:42 . 2008-08-15 11:42 <REP> d-------- C:\Program Files\Fichiers communs\Xuisoft
    2008-08-14 07:40 . 2008-05-01 16:31 331,776 --------- C:\WINDOWS\system32\dllcache\msadce.dll
    2008-08-10 16:00 . 2008-08-10 16:00 <REP> d-------- C:\Documents and Settings\Damien\Application Data\ScanSoft
    2008-08-10 16:00 . 2008-08-10 16:00 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ScanSoft

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-09-09 22:11 --------- d-----w C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic
    2008-09-08 19:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
    2008-09-06 21:08 --------- d-----w C:\Program Files\Spybot - Search & Destroy
    2008-09-06 07:19 --------- d-----w C:\Program Files\Mozilla Thunderbird
    2008-09-03 16:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2008-08-30 09:39 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-08-30 09:39 --------- d-----w C:\Program Files\SEGA
    2008-08-30 08:21 --------- d-----w C:\Program Files\THQ
    2008-08-30 08:20 --------- d-----w C:\Program Files\Codemasters
    2008-08-29 15:20 --------- d-----w C:\Documents and Settings\Damien\Application Data\LimeWire
    2008-08-26 07:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\TrackMania
    2008-08-26 07:31 --------- d-----w C:\Program Files\eMule
    2008-08-20 08:37 --------- d-----w C:\Program Files\Xvid
    2008-08-20 08:37 --------- d-----w C:\Program Files\Windows Media Connect 2
    2008-08-20 08:37 --------- d-----w C:\Program Files\Windows Live Toolbar
    2008-08-20 08:37 --------- d-----w C:\Program Files\TmNationsForever
    2008-08-20 08:37 --------- d-----w C:\Program Files\Microsoft Works
    2008-08-20 08:37 --------- d-----w C:\Program Files\LimeWire
    2008-08-20 08:37 --------- d-----w C:\Program Files\DivX
    2008-08-20 07:12 --------- d-----w C:\Program Files\Microsoft Silverlight
    2008-08-19 10:44 444,952 ----a-w C:\WINDOWS\system32\wrap_oal.dll
    2008-08-19 10:44 109,080 ----a-w C:\WINDOWS\system32\OpenAL32.dll
    2008-08-19 10:15 --------- d-----w C:\Program Files\Stunt Playground
    2008-08-19 10:14 --------- d-----w C:\Program Files\Empire Interactive
    2008-08-19 10:05 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
    2008-08-19 09:07 --------- d-----w C:\Program Files\Electronic Arts
    2008-08-18 17:06 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
    2008-08-17 16:00 --------- d-----w C:\Program Files\Norton Security Scan
    2008-08-16 14:50 --------- d-----w C:\Program Files\TrackMania Nations ESWC
    2008-08-13 16:02 --------- d-----w C:\Program Files\Fichiers communs\Symantec Shared
    2008-08-07 11:18 --------- d-----w C:\Program Files\Google
    2008-08-02 16:44 --------- d-----w C:\Program Files\ExpertEnhancer
    2008-07-25 08:03 --------- d-----w C:\Program Files\Playlogic
    2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll
    2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
    2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
    2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
    2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
    2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
    2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\dllcache\wups.dll
    2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
    2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll
    2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
    2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll
    2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
    2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll
    2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
    2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
    2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll
    2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll
    2008-07-18 10:02 --------- d-----w C:\Program Files\OpenAL
    2008-07-17 17:32 --------- d-----w C:\Program Files\Activision
    2008-07-17 17:21 --------- d-----w C:\Program Files\Aspyr
    2008-07-15 17:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\great coal love default
    2008-07-15 08:40 --------- d-----w C:\Program Files\Sun
    2008-07-15 08:40 --------- d-----w C:\Program Files\Java
    2008-07-12 16:57 --------- d-----w C:\Program Files\DelphineSoft
    2008-07-10 13:54 --------- d-----w C:\Program Files\Team6 game studios
    2008-07-10 08:17 --------- d-----w C:\Program Files\EA GAMES
    2008-07-07 20:31 253,952 ----a-w C:\WINDOWS\system32\es.dll
    2008-07-07 20:31 253,952 ------w C:\WINDOWS\system32\dllcache\es.dll
    2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
    2008-06-24 16:23 74,240 ------w C:\WINDOWS\system32\dllcache\mscms.dll
    2008-06-24 08:28 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
    2008-06-23 09:21 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
    2008-06-23 09:21 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
    2008-06-23 09:20 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
    2008-06-21 05:23 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
    2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
    2008-06-20 17:41 247,808 ------w C:\WINDOWS\system32\dllcache\mswsock.dll
    2008-06-20 17:41 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
    2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys
    2008-06-20 10:44 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys
    2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
    2008-06-14 17:59 272,768 ------w C:\WINDOWS\system32\dllcache\bthport.sys
    2007-09-05 16:06 536,064 ----a-w C:\Program Files\GIFAnimator.exe
    2007-09-05 16:06 248 ----a-w C:\Program Files\GIFAnimator.cnt
    2007-09-05 16:06 17,642 ----a-w C:\Program Files\GIFAnimator.hlp
    2007-09-05 16:06 10,752 ----a-w C:\Program Files\README.WRI
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 15360]
    "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 1694208]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ATIPTA"="C:\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-12 339968]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
    "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-10-08 81920]
    "AVFX Engine"="C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe" [2006-06-09 24576]
    "V0230Mon.exe"="C:\WINDOWS\system32\V0230Mon.exe" [2006-07-19 36961]
    "avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-20 266497]
    "OpwareSE2"="C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
    "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-08-17 180269]
    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-08-17 98304]
    "SoundMan"="SOUNDMAN.EXE" [2004-02-26 C:\WINDOWS\SOUNDMAN.EXE]
    "Logitech Utility"="Logi_MwX.Exe" [2003-12-17 C:\WINDOWS\LOGI_MWX.EXE]

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "C:\\Program Files\\eMule\\emule.exe"=
    "C:\\WINDOWS\\system32\\dpvsetup.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "C:\\Program Files\\THQ\\MotoGP URT 3 Demo\\motogp_demo.exe"=
    "C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"=
    "C:\\Program Files\\Xider\\EsR DEMO\\ESR DEMO.exe"=
    "C:\\Program Files\\Microsoft Games\\Age of Empires II\\EMPIRES2.ICD"=
    "C:\\Program Files\\EA GAMES\\Need for Speed Underground 2\\speed2.exe"=
    "C:\\Program Files\\LimeWire\\LimeWire.exe"=
    "C:\\Program Files\\TmNationsForever\\TmForever.exe"=
    "C:\\WINDOWS\\system32\\dplaysvr.exe"=
    "C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=

    R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);C:\WINDOWS\system32\drivers\sfdrv01a.sys [2006-07-05 63352]
    R3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
    S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
    S3 V0230Vfx;V0230Vfx;C:\WINDOWS\system32\DRIVERS\V0230Vfx.sys [2006-03-23 6272]
    S3 V0230VID;Live! Cam Video IM Pro;C:\WINDOWS\system32\DRIVERS\V0230VID.sys [2006-07-24 498464]
    .
    Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
    .
    .
    ------- Supplementary Scan -------
    .
    O8 -: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-10 01:29:00
    Windows 5.1.2600 Service Pack 2 NTFS

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\MysqlInventime]
    "ImagePath"="c:\mysql\bin\mysqld-nt MysqlInventime"
    .
    --------------------- DLLs a chargé sous des processus courants ---------------------

    PROCESS: C:\WINDOWS\system32\winlogon.exe
    -> C:\WINDOWS\system32\tsd32.dll
    .
    Temps d'accomplissement: 2008-09-10 1:32:30
    ComboFix-quarantined-files.txt 2008-09-09 23:32:19
    ComboFix2.txt 2008-09-09 22:59:14
    ComboFix3.txt 2008-09-08 19:13:28
    ComboFix4.txt 2008-09-07 19:20:40

    Pre-Run: 52,409,122,816 octets libres
    Post-Run: 52,395,507,712 octets libres

    200 --- E O F --- 2008-08-21 08:31:30
    10 Septembre 2008 18:48:10

    bonsoir
    ce n'est pas un jouet, pas la peine de passer 36 fois l'outil. ComboFix est très puissant, on ne l'utilise donc pas au hasard. ;) 
    1
    Ouvre Spybot , clique sur l'onglet Mode et choisis Mode Avancé
    Ne tiens pas compte de l'avertissement
    En bas à gauche , clique sur Outils
    Toujours dans la colonne de gauche , clique sur Résident ( pas dans la fenêtre centrale )
    Et décoche l'option Resident "TeaTimer".......


    2
    ~Lance Hijackthis “Do a system scan only”.
    Coche les lignes qui suivent si encore présentes et uniquement celles-là.

    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll (file missing)


    Clique sur Fix checked (en bas à gauche)

    3

    Désinstalle combofix en suivant cette procédure:

  • Menu démarrer puis exécuter
  • Tape maintenant Combofix /u dans la fenêtre que apparaît puis valide par OK. Veille à bien laisser un espace entre le X et le /U, car cela est nécessaire ici.



    4

    ~Fais une analyse antivirus en ligne sur le site de Kaspersky
    http://www.kaspersky.com/kos/eng/partner/default/kavweb...

    * Clique sur Accept
    * Une barre jaune va te demander si tu acceptes d'installer le Kavwebscan_Unicode.cab, installe l'Active X.
    * clique une nouvelle fois sur "Accept"
    * Les bases de mises à jour vont s'installer, patiente un moment
    * Clique sur Next.
    * Clique sur My Computer, le scan se met en route; attends la fin du scan sans fermer la fenêtre sinon il s'arrêtera.
    * Poste le rapport de scan.
    11 Septembre 2008 06:00:09

    Bonsoir Sham_Rock,

    Sham_Rock a dit :
    bonsoir
    ce n'est pas un jouet, pas la peine de passer 36 fois l'outil. ComboFix est très puissant, on ne l'utilise donc pas au hasard. ;)  [

    Heu... certes ! :/  Mais crois bien que je ne prends pas les logiciels et l'informatique pour des jouets, je ne l'ai pas lancé 36 fois ;)  et je ne l'ai pas fait au hasard, même si ma raison te semble mauvaise.

    Je ne voudrais pas qu'il y ait confusion sur ce que j'ai fait ;) 

    La rapport Kaspersky :
    Citation :
    --------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER 7 REPORT
    Thursday, September 11, 2008
    Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
    Kaspersky Online Scanner 7 version: 7.0.25.0
    Program database last update: Wednesday, September 10, 2008 14:56:32
    Records in database: 1207325
    --------------------------------------------------------------------------------

    Scan settings:
    Scan using the following database: extended
    Scan archives: yes
    Scan mail databases: yes

    Scan area - My Computer:
    A:\
    C:\
    D:\
    E:\
    F:\
    G:\
    H:\
    I:\

    Scan statistics:
    Files scanned: 118956
    Threat name: 2
    Infected objects: 2
    Suspicious objects: 0
    Duration of the scan: 03:16:17


    File name / Threat name / Threats count
    C:\Documents and Settings\Damien\Mes documents\LimeWire\Saved\xpand rally xtreme demo.zip Infected: not-a-virus:AdWare.Win32.Agent.dva 1
    C:\Program Files\ExpertEnhancer\ExpertEnhancer-1.dll Infected: not-a-virus:AdWare.Win32.Agent.ahl 1

    The selected area was scanned.


    Pour information, pendant nos manips' Antivir continue de me signaler des problèmes, même si cela se produit beaucoup moins fréquemment qu'avant le nettoyage :
    Citation :
    Exported events:

    10/09/2008 20:20 [Guard] Malware found
    Virus or unwanted program 'SPR/Tool.Hide.A [riskware]'
    detected in file 'C:\327882R2FWJFW\hidec.exe.
    Action performed: Deny access

    10/09/2008 07:04 [Guard] Malware found
    Virus or unwanted program 'TR/Monder.95744.6 [trojan]'
    detected in file 'C:\System Volume
    Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP411\A0039393.dll.
    Action performed: Deny access

    10/09/2008 01:19 [Guard] Malware found
    Virus or unwanted program 'SPR/Tool.Hide.A [riskware]'
    detected in file 'C:\327882R2FWJFW\hidec.exe.
    Action performed: Deny access

    10/09/2008 01:18 [Guard] Malware found
    Virus or unwanted program 'SPR/Tool.Hide.A [riskware]'
    detected in file 'C:\327882R2FWJFW\hidec.exe.
    Action performed: Deny access

    10/09/2008 00:42 [Guard] Malware found
    Virus or unwanted program 'TR/Monder.95744.6 [trojan]'
    detected in file 'C:\System Volume
    Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP411\A0039393.dll.
    Action performed: Deny access

    10/09/2008 00:17 [Guard] Malware found
    Virus or unwanted program 'Eicar-Test-Signature [virus]'
    detected in file 'C:\ComboFix\n_28056.
    Action performed: Allow access

    10/09/2008 00:15 [Guard] Malware found
    Virus or unwanted program 'SPR/Tool.Hide.A [riskware]'
    detected in file 'C:\327882R2FWJFW\hidec.exe.
    Action performed: Deny access

    06/09/2008 11:38 [Guard] Malware found
    Virus or unwanted program 'TR/Vundo.FIX [trojan]'
    detected in file 'C:\WINDOWS\system32\opnOgFXp.dll.
    Action performed: Deny access
    11 Septembre 2008 22:06:20

    re

    pour antivir c'est ok, il n'y avait que ça :
    Citation :
    06/09/2008 11:38 [Guard] Malware found
    Virus or unwanted program 'TR/Vundo.FIX [trojan]'
    detected in file 'C:\WINDOWS\system32\opnOgFXp.dll.
    Action performed: Deny access

    mais on l'a viré.
    vire:
    C:\Documents and Settings\Damien\Mes documents\LimeWire\Saved\xpand rally xtreme demo.zip
    Lecture: LES RISQUES SECURITAIRES DU PEER-TO-PEER

    désisntalle via ajout suppression de programmes:
    C:\Program Files\ExpertEnhancer

    puis supprime le dossier en gras.


    ~Désactive puis réactive la restauration en suivant ce tuto:
    http://service1.symantec.com/SUPPORT/INTER/tsgeninfoint...
    Il faudra désactiver la restauration, redémarrer l'ordinateur et réactiver aussitôt la restauration.


    d'autres soucis?
    14 Septembre 2008 19:26:07

    Bonsoir toutes et tous,
    Bonsoir Sham_Rock,

    Bien, vérifications et tests faits, il semble que tout soit rentré dans l'ordre ; merci !

    Y-a-t-il d'autres vérifications à effectuer ?

    Si j'ai bien suivi, les sources d'infections de l'ordinateur sont, entre autres :
    Citation :
    xpand rally xtreme demo.zip
    ExpertEnhancer
    Veoh TV
    Firesearch
    C'est bien cela ?

    Sinon, dans le rapport Antivir, il y avait aussi :
    Citation :
    10/09/2008 20:20 [Guard] Malware found
    Virus or unwanted program 'SPR/Tool.Hide.A [riskware]'
    detected in file 'C:\327882R2FWJFW\hidec.exe.
    Action performed: Deny access
    Normal ?

    [EDIT] Pendant que j'écris, Antivir effectue un scan complet de l'ordinateur, et il me dit ceci :/ 
    Citation :
    Exported events:
    14/09/2008 19:29 [Scanner] Malware found
    The file 'C:\Documents and Settings\Calix\Local Settings\Temporary Internet
    Files\Content.IE5\DYL0AD24\kb456456[1]'
    contained a virus or unwanted program 'TR/Monder.85504.1' [trojan]
    Action(s) taken:
    The file was moved to '49014a65.qua'!

    14/09/2008 19:28 [Scanner] Malware found
    The file 'C:\Documents and Settings\Calix\Local Settings\Temporary Internet
    Files\Content.IE5\0Q3MJ16F\kb767887[1]'
    contained a virus or unwanted program 'TR/Monder.114688' [trojan]
    Action(s) taken:
    The file was moved to '49044a11.qua'!

    13/09/2008 08:14 [Guard] Malware found
    Virus or unwanted program 'SPR/Tool.Hide.A [riskware]'
    detected in file 'C:\327882R2FWJFW\hidec.exe.
    Action performed: Allow access

    13/09/2008 08:14 [Guard] Malware found
    Virus or unwanted program 'SPR/Tool.Hide.A [riskware]'
    detected in file 'C:\327882R2FWJFW\hidec.exe.
    Action performed: Allow access

    13/09/2008 08:14 [Guard] Malware found
    Virus or unwanted program 'SPR/Tool.Hide.A [riskware]'
    detected in file 'C:\327882R2FWJFW\hidec.exe.
    Action performed: Deny access

    10/09/2008 20:20 [Guard] Malware found
    Virus or unwanted program 'SPR/Tool.Hide.A [riskware]'
    detected in file 'C:\327882R2FWJFW\hidec.exe.
    Action performed: Deny access
    14 Septembre 2008 20:52:25

    bonsoir

    supprime:
    C:\327882R2FWJFW
    On va nettoyer tes fichiers temporaires:

    Télécharge -AtfCleaner
    http://www.atribune.org/public-beta/ATF-Cleaner.exe

    Double-cliquer sur ATF-Cleaner.exe afin de lancer le programme.
    - Si vous utilisez IE
    Sous l'onglet Main, choisir : Select All
    Cliquer sur le bouton Empty Selected
    - Si vous utilisez le navigateur Firefox :
    Cliquer Firefox au haut et choisir : Select All
    Cliquer le bouton Empty Selected
    Note : Si vous voulez conserver les mots de passe sauvegardés, cliquer "No" à l'invite.
    - Si vous utilisez le navigateur Opera :
    Cliquer Opera au haut et choisir : Select All
    Cliquer le bouton Empty Selected
    Note : Si vous voulez conserver les mots de passe sauvegardés, cliquer "No" à l'invite.
    Cliquer Exit, du menu principal, afin de fermer le programme



    +++++++++++

    après fais un scan complet avec antivir et poste le rapport stp

    14 Septembre 2008 23:00:58

    Re Sham_Rock,

    Le rapport Antivir :
    Citation :
    Avira AntiVir Personal
    Report file date: 2008-09-14 21:08

    Scanning for 1613566 virus strains and unwanted programs.

    Licensed to: Avira AntiVir PersonalEdition Classic
    Serial number: 0000149996-ADJIE-0001
    Platform: Windows XP
    Windows version: (Service Pack 2) [5.1.2600]
    Boot mode: Normally booted
    Username: SYSTEM
    Computer name: SN302738690004

    Version information:
    BUILD.DAT : 8.1.0.331 16934 Bytes 2008-08-12 11:46:00
    AVSCAN.EXE : 8.1.4.7 315649 Bytes 2008-07-20 16:18:53
    AVSCAN.DLL : 8.1.4.0 40705 Bytes 2008-07-20 16:18:53
    LUKE.DLL : 8.1.4.5 164097 Bytes 2008-07-20 16:18:53
    LUKERES.DLL : 8.1.4.0 12033 Bytes 2008-07-20 16:18:53
    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 2007-07-18 16:51:14
    ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 2008-06-24 19:39:34
    ANTIVIR2.VDF : 7.0.6.153 3341312 Bytes 2008-09-12 06:11:17
    ANTIVIR3.VDF : 7.0.6.155 18944 Bytes 2008-09-14 19:07:05
    Engineversion : 8.1.1.28
    AEVDF.DLL : 8.1.0.5 102772 Bytes 2008-04-19 12:35:49
    AESCRIPT.DLL : 8.1.0.70 319866 Bytes 2008-09-03 16:44:39
    AESCN.DLL : 8.1.0.23 119156 Bytes 2008-07-15 16:30:11
    AERDL.DLL : 8.1.1.1 397683 Bytes 2008-09-03 16:44:39
    AEPACK.DLL : 8.1.2.1 364917 Bytes 2008-07-15 16:30:11
    AEOFFICE.DLL : 8.1.0.23 196987 Bytes 2008-09-03 16:44:38
    AEHEUR.DLL : 8.1.0.51 1397111 Bytes 2008-09-03 16:44:37
    AEHELP.DLL : 8.1.0.15 115063 Bytes 2008-05-30 19:39:06
    AEGEN.DLL : 8.1.0.36 315764 Bytes 2008-08-19 12:31:03
    AEEMU.DLL : 8.1.0.7 430452 Bytes 2008-08-01 05:50:53
    AECORE.DLL : 8.1.1.11 172406 Bytes 2008-09-03 16:44:31
    AEBB.DLL : 8.1.0.1 53617 Bytes 2008-07-20 16:18:53
    AVWINLL.DLL : 1.0.0.12 15105 Bytes 2008-07-20 16:18:53
    AVPREF.DLL : 8.0.2.0 38657 Bytes 2008-07-20 16:18:53
    AVREP.DLL : 8.0.0.2 98344 Bytes 2008-08-01 05:50:51
    AVREG.DLL : 8.0.0.1 33537 Bytes 2008-07-20 16:18:53
    AVARKT.DLL : 1.0.0.23 307457 Bytes 2008-04-19 12:35:48
    AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 2008-07-20 16:18:53
    SQLITE3.DLL : 3.3.17.1 339968 Bytes 2008-04-19 12:35:49
    SMTPLIB.DLL : 1.2.0.23 28929 Bytes 2008-07-20 16:18:53
    NETNT.DLL : 8.0.0.1 7937 Bytes 2008-04-19 12:35:48
    RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 2008-07-20 16:18:50
    RCTEXT.DLL : 8.0.52.0 86273 Bytes 2008-07-20 16:18:50

    Configuration settings for the scan:
    Jobname..........................: Complete system scan
    Configuration file...............: C:\Program Files\AntiVir PersonalEdition Classic\sysscan.avp
    Logging..........................: low
    Primary action...................: interactive
    Secondary action.................: ignore
    Scan master boot sector..........: on
    Scan boot sector.................: on
    Boot sectors.....................: C:,
    Process scan.....................: on
    Scan registry....................: on
    Search for rootkits..............: on
    Scan all files...................: Intelligent file selection
    Scan archives....................: on
    Recursion depth..................: 20
    Smart extensions.................: on
    Macro heuristic..................: on
    File heuristic...................: medium
    Skipped files....................: C:\Program Files\Navilog1,
    Deviating risk categories........: +PCK,+SPR,

    Start of the scan: 2008-09-14 21:08

    Starting search for hidden objects.
    '78479' objects were checked, '0' hidden objects were found.

    The scan of running processes will be started
    Scan process 'avscan.exe' - '1' Module(s) have been scanned
    Scan process 'avcenter.exe' - '1' Module(s) have been scanned
    Scan process 'alg.exe' - '1' Module(s) have been scanned
    Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
    Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
    Scan process 'realsched.exe' - '1' Module(s) have been scanned
    Scan process 'LOGI_MWX.EXE' - '1' Module(s) have been scanned
    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
    Scan process 'StartFX.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'slserv.exe' - '1' Module(s) have been scanned
    Scan process 'MDM.EXE' - '1' Module(s) have been scanned
    Scan process 'GoogleUpdaterService.exe' - '1' Module(s) have been scanned
    Scan process 'sched.exe' - '1' Module(s) have been scanned
    Scan process 'explorer.exe' - '1' Module(s) have been scanned
    Scan process 'avguard.exe' - '1' Module(s) have been scanned
    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'svchost.exe' - '1' Module(s) have been scanned
    Scan process 'lsass.exe' - '1' Module(s) have been scanned
    Scan process 'services.exe' - '1' Module(s) have been scanned
    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
    Scan process 'csrss.exe' - '1' Module(s) have been scanned
    Scan process 'smss.exe' - '1' Module(s) have been scanned
    28 processes with 28 modules were scanned

    Starting master boot sector scan:
    Master boot sector HD0
    [INFO] No virus was found!
    Master boot sector HD1
    [INFO] No virus was found!
    [WARNING] System error [21]: Le périphérique n'est pas prêt.
    Master boot sector HD2
    [INFO] No virus was found!
    [WARNING] System error [21]: Le périphérique n'est pas prêt.
    Master boot sector HD3
    [INFO] No virus was found!
    [WARNING] System error [21]: Le périphérique n'est pas prêt.
    Master boot sector HD4
    [INFO] No virus was found!
    [WARNING] System error [21]: Le périphérique n'est pas prêt.

    Start scanning boot sectors:
    Boot sector 'C:\'
    [INFO] No virus was found!

    Starting to scan the registry.
    The registry was scanned ( '47' files ).


    Starting the file scan:

    Begin scan in 'C:\' <HDD>
    C:\hiberfil.sys
    [WARNING] The file could not be opened!
    C:\pagefile.sys
    [WARNING] The file could not be opened!
    C:\Program Files\AntiVir PersonalEdition Classic\avnotify.exe
    [WARNING] The file could not be opened!
    The directory 'C:\Program Files\Navilog1\' was excluded from scanning!


    End of the scan: 2008-09-14 22:42
    Used time: 1:34:05 Hour(s)

    The scan has been done completely.

    11992 Scanning directories
    536654 Files were scanned
    0 viruses and/or unwanted programs were found
    0 Files were classified as suspicious:
    0 files were deleted
    0 files were repaired
    0 files were moved to quarantine
    0 files were renamed
    3 Files cannot be scanned
    536651 Files not concerned
    9995 Archives were scanned
    7 Warnings
    0 Notes
    78479 Objects were scanned with rootkit scan
    0 Hidden objects were found
    15 Septembre 2008 21:17:17

    bonsoir
    c'est ok

    Supprime tous les programmes installés pour la désinfection.


    Merci de consulter ce dossier (en pdf) pour en connaître davantage sur les risques du Net.



    Si tu trouves ce document intéressant, n'hésite pas à le transmettre à tes contacts.

    Si tu en as assez d'être assailli de publicités durant ta navigation, installe Firefox sécurisé avec les extensions noscript et AdBlock Plus.

    ~Edite ton premier message (en cliquant sur la gomme) et marque [résolu] dans le titre.

    :hello: 
    16 Septembre 2008 07:06:27

    Bonjour Sham_Rock,

    Merci beaucoup pour ton aide précieuse et le temps passé ; ceci m'a évité une réinstallation complète de l'ordinateur.

    Et si jamais tu passes par Nantes, c'est la saison des vendanges du Muscadet, ce sera l'occasion ou jamais de gouter au bourru* :) 

    Merci encore :D  et à une prochaine.

  • : Bourru : Vin bourru, vin blanc nouveau qui se conserve doux dans le tonneau pendant quelque temps.
    16 Septembre 2008 21:53:15

    bonsoir

    je connaissais pas le bourru ;O)

    'suis plutôt Sancerre :D 

    bon surf
    :hello: 
    18 Septembre 2008 21:05:12

    Bonsoir
    Ok ;) 
    Interrogation écrite la semaine prochaine. :D 
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS