aide pour supprimer vundo fbw Résolu/Fermé

Question

Bonjour,
J'ai vundo fbw sur un ordi que je n'arrive pas a supprimer .
J'ai essayé avec vundo fix et mbam sans succés , je n'arrive pas a telecharger combifix (trend micro me le bloque)
Merci de m'aider pas a pas

gen-hackman · Answer

salut :

 Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau. 

-> http://images.malwareremoval.com/random/RSIT.exe 

! Déconnecte toi et ferme toutes tes applications en cours ! 

Double-clique sur " RSIT.exe " pour le lancer . 

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " . 

* Devant l'option "List files/folders created ..." , tu choisis : 2 months 

* clique ensuite sur " Continue " pour lancer l'analyse ... 


-> laisse faire le scan et ne touche pas au PC ... 


Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note). 

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ... 

Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum 


( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

nbloquet · Answer

Merci de m'aider voici les 2 rapports 
info.txt logfile of random's system information tool 1.05 2009-01-23 11:13:47

======Uninstall list======

-->"C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"
-->c:\apps\skype\phone\unins000.exe
-->C:\PROGRA~1\FICHIE~1\AOL\ACS\AcsUninstall.exe /c
-->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
-->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
-->C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe" 
-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.EXE"  -uninstall
-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Reader 6.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-000000000001}
AVG Anti-Spyware 7.5-->C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Brother HL-2700CN-->"C:\Program Files\Brother\BRHL2700\IsUn040c.exe" -f"C:\Program Files\Brother\BRHL2700\DeIsL1.isu" -cbruninst.dll
CADENAS PARTsolutions single-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{C623A5D3-1DB5-4B16-A8B2-CC5E3C67AD14} 
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Ciel eSauvegarde V2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CBF7A3DA-880B-4747-AB57-D74A4EBAC69E}\install.exe" UNINSTALL
Ciel Gestion Commerciale Evolution (client) 7.10-->MsiExec.exe /I{7C603A94-4F13-4E7D-80AA-F48E6745DAE2}
Ciel Serveur-->C:\WINDOWS\unin040c.exe -fC:\Ciel\CielServeur\DeIsL2.isu
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Doppstadt DOCMA-->D:\setup.exe /u
EasyStudio-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe /M{D48C9BFC-FBCF-4F29-B97D-822ED6D497FE} 
Eudora-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{240DDA1E-6A30-4797-8E25-4BEB1C00F92B}\setup.exe" -l0x40c 
FileZilla (remove only)-->"C:\Program Files\FileZilla\uninstall.exe"
High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Image Expert-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Sierra Imaging\Image Expert\Uninst.isu" -c"C:\Program Files\Sierra Imaging\Image Expert\uninstall.dll
Imprimantes Canon CAPT-->C:\WINDOWS\system32\Spool\Drivers\w32x86\3\CAP1UNIK.EXE
iPAQ WebReg-->MsiExec.exe /I{D37C6152-89DF-4D29-83CF-666200D5F398}
ITEDO IsoView ActiveX Control 5.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BCB873D5-94BD-4ADC-B80A-A3B381D7E8FA}\setup.exe" -l0x9  -uninst 
Java 2 Runtime Environment, SE v1.4.2_05-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142050}
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
Microsoft Office Standard Edition 2003-->MsiExec.exe /I{9112040C-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Works-->MsiExec.exe /I{3B160861-7250-451E-B5EE-8B92BF30A710}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
Mozilla Firefox (2.0.0.18)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.19)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{1787603C-E6E3-42D4-8034-55F358486F1D}
Nokia Connectivity Cable Driver-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4AD35E01-9BA9-4F0C-B6B7-09C6C8F20D15} /l1036 
Nokia PC Suite-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{1267949C-73FC-4692-AA22-176F5E909647} /l1036 
Novaxel 98-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\NOVAXEL\Novaxel98\Uninst.isu"
Packard Bell Toolbar 1.0-->"C:\Program Files\Dynamic Toolbar\unins000.exe"
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" REMOVE
SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c  -removeonly
Sonic MyDVD-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow!-->MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
TOSHIBA e-STUDIO451c Series Client-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D58CCA0A-43D8-4DC7-80C8-F715FC4D7C72}\SETUP.EXE" -l0x40c 
Trend Micro Client/Server Security Agent-->"C:\Program Files\Trend Micro\Client Server Security Agent
trmv.exe"
TwidoSoft-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A7DB7470-C9DF-11D4-B49F-0006294FC964}\setup.exe" anything
ViaMichelin Navigation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88C9863E-5495-4D66-8B00-2644E95837C0}\setup.exe" -l0x40c 
VNC Free Edition 4.1.2-->"C:\Program Files\RealVNC\VNC4\unins000.exe"
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Yahoo! Install Manager-->C:\WINDOWS\system32egsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL

=====HijackThis Backups=====

O20 - Winlogon Notify: awtss - C:\WINDOWS\system32\awtss.dll (file missing)
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - (no file)
O2 - BHO: (no name) - {2EA802B1-E09F-41BE-B893-86B803FE0812} - C:\WINDOWS\system32\awtss.dll (file missing)
O20 - Winlogon Notify: geeby - C:\WINDOWS\system32\geeby.dll (file missing)

======Security center information======

AV: Antivirus de Trend Micro Client/Server Security Agent
FW: Trend Micro Personal Firewall (disabled)

System event log

Computer Name: JEANMARIE
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Service de découvertes SSDP.

Record Number: 9419
Source Name: Service Control Manager
Time Written: 20081106082812.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JEANMARIE
Event Code: 7036
Message: Le service NLA (Network Location Awareness) est entré dans l'état : en cours d'exécution.

Record Number: 9418
Source Name: Service Control Manager
Time Written: 20081106082811.000000+060
Event Type: Informations
User: 

Computer Name: JEANMARIE
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service NLA (Network Location Awareness).

Record Number: 9417
Source Name: Service Control Manager
Time Written: 20081106082811.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: JEANMARIE
Event Code: 7036
Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution.

Record Number: 9416
Source Name: Service Control Manager
Time Written: 20081106082811.000000+060
Event Type: Informations
User: 

Computer Name: JEANMARIE
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.

Record Number: 9415
Source Name: Service Control Manager
Time Written: 20081106082811.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Application event log

Computer Name: JEANMARIE
Event Code: 105
Message: The service was started.

Record Number: 5
Source Name: ATI Smart
Time Written: 20071029142834.000000+060
Event Type: Informations
User: 

Computer Name: JEANMARIE
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 4
Source Name: SecurityCenter
Time Written: 20071029142710.000000+060
Event Type: Informations
User: 

Computer Name: JEANMARIE
Event Code: 0
Message: 
Record Number: 3
Source Name: CLSched
Time Written: 20071029142659.000000+060
Event Type: Informations
User: 

Computer Name: JEANMARIE
Event Code: 0
Message: 
Record Number: 2
Source Name: CLCapSvc
Time Written: 20071029142654.000000+060
Event Type: Informations
User: 

Computer Name: JEANMARIE
Event Code: 105
Message: The service was started.

Record Number: 1
Source Name: ATI Smart
Time Written: 20071029142654.000000+060
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\ATI Technologies\ATI Control Panel;C:\PROGRA~1\FICHIE~1\SONICS~1";C:\Program Files\Samsung\Samsung PC Studio 3\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0401
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CADENAS"=C:\Program Files\cadenas\partsolutions\software
"CADENAS_DATA"=C:\Program Files\cadenas\partsolutions\data
"CADENAS_LANGUAGE"=french
"CADENAS_LICENSE"=C:\Program Files\cadenas\partsolutions\software\lic
"CADENAS_SETUP"=C:\Program Files\cadenas\partsolutions\software\setup
"CADENAS_USER"=%UserAppData%\cadenas\partsolutions
"CADENAS_DEFAULTUSER"=C:\Program Files\cadenas\partsolutions\software\setup\user\maurin_user
"CADENAS_VDAPS"=C:\Program Files\cadenas\partsolutions\software\vdaps\x86
"OSNAME"=x86

-----------------EOF-----------------

nbloquet · Answer

Puis le second

Logfile of random's system information tool 1.05 (written by random/random)
Run by BOUDEAU JM at 2009-01-23 11:13:36
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 212 GB (91%) free of 232 GB
Total RAM: 1023 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:13:43, on 23/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\clmlservice.exe
C:\WINDOWS\system32	cpsvcs.exe
C:\Program Files\Trend Micro\Client Server Security Agent
trtscan.exe
C:\WINDOWS\system32\CAPRPCSK.EXE
C:\Program Files\Trend Micro\Client Server Security Agent	mlisten.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Trend Micro\Client Server Security Agent\pccntmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Sierra Imaging\Image Expert\IXApplet.exe
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Trend Micro\Client Server Security Agent\CNTAoSMgr.exe
C:\Program Files\Trend Micro\Client Server Security Agent	mproxy.exe
C:\Documents and Settings\BOUDEAU JM\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\BOUDEAU JM.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=6&key=SEARCH
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\Client Server Security Agent\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [OE] C:\Program Files\Trend Micro\Client Server Security Agent\TMAS_OE\TMAS_OEMon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Camio Viewer.lnk = C:\Program Files\Sierra Imaging\Image Expert\IXApplet.exe
O4 - Global Startup: Fenêtre d'état Canon LBP-810.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) - https://svbo001:4343/officescan/console/ClientInstall/WinNTChk.cab
O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - https://svbo001:4343/officescan/console/ClientInstall/setup.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) - https://svbo001:4343/officescan/console/ClientInstall/RemoveCtrl.cab
O16 - DPF: {9BBB3919-F518-4D06-8209-299FC243FC2A} (Encrypt Class) - https://svbo001:4343/SMB/console/html/root/AtxEnc.cab
O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://orange.securitoo.com/pchc/fscax.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://orange.securitoo.com/ols/fscax.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{969C720D-089F-44D9-8523-C12010C31B54}: NameServer = 10.31.125.1
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: MysqlInventime - Unknown owner - c:\mysql\bin\mysqld-nt.exe
O23 - Service: Scan en temps réel Trend Micro Client/Server Security Agent (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent
trtscan.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent\..\BM\TMBMSRV.exe
O23 - Service: Trend Micro Client/Server Security Agent Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent	mlisten.exe
O23 - Service: Pare-feu personnel Trend Micro Client/Server Security Agent (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe
O23 - Service: Service proxy Trend Micro Client/Server Security Agent (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent\TmProxy.exe

gen-hackman · Answer

essaie de passer mbam en examen complet en sans echec apres mise a jour en mode normal stp

nbloquet · Answer

Je viens de repasser mbam en mode sans echec il ne trouve rien

nbloquet · Answer

Logfile of random's system information tool 1.05 (written by random/random)
Run by BOUDEAU JM at 2009-01-23 15:03:06
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 212 GB (91%) free of 232 GB
Total RAM: 1023 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:03:10, on 23/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\clmlservice.exe
C:\WINDOWS\system32	cpsvcs.exe
C:\Program Files\Trend Micro\Client Server Security Agent
trtscan.exe
C:\WINDOWS\system32\CAPRPCSK.EXE
C:\Program Files\Trend Micro\Client Server Security Agent	mlisten.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Trend Micro\Client Server Security Agent\pccntmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\Program Files\Sierra Imaging\Image Expert\IXApplet.exe
C:\PROGRA~1\FICHIE~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\Program Files\Trend Micro\Client Server Security Agent\CNTAoSMgr.exe
C:\Program Files\Trend Micro\Client Server Security Agent	mproxy.exe
C:\Documents and Settings\BOUDEAU JM\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\BOUDEAU JM.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://format.packardbell.com/...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\Client Server Security Agent\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [OE] C:\Program Files\Trend Micro\Client Server Security Agent\TMAS_OE\TMAS_OEMon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Camio Viewer.lnk = C:\Program Files\Sierra Imaging\Image Expert\IXApplet.exe
O4 - Global Startup: Fenêtre d'état Canon LBP-810.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) - https://svbo001:4343/officescan/console/ClientInstall/WinNTChk.cab
O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - https://svbo001:4343/officescan/console/ClientInstall/setup.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) - https://svbo001:4343/officescan/console/ClientInstall/RemoveCtrl.cab
O16 - DPF: {9BBB3919-F518-4D06-8209-299FC243FC2A} (Encrypt Class) - https://svbo001:4343/SMB/console/html/root/AtxEnc.cab
O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://orange.securitoo.com/pchc/fscax.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://orange.securitoo.com/ols/fscax.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{969C720D-089F-44D9-8523-C12010C31B54}: NameServer = 10.31.125.1
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: MysqlInventime - Unknown owner - c:\mysql\bin\mysqld-nt.exe
O23 - Service: Scan en temps réel Trend Micro Client/Server Security Agent (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent
trtscan.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent\..\BM\TMBMSRV.exe
O23 - Service: Trend Micro Client/Server Security Agent Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent	mlisten.exe
O23 - Service: Pare-feu personnel Trend Micro Client/Server Security Agent (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe
O23 - Service: Service proxy Trend Micro Client/Server Security Agent (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent\TmProxy.exe

gen-hackman · Answer

1) Affiche les fichiers et dossiers cachés … 
Pour ce faire, tu vas dans un dossier, par ex. "Mes Images". 
Ensuite, clique sur > Outils > Options des dossiers ... 
clique sur l' onglet « Affichage » et ... 
coche ---> Afficher les fichiers et dossiers cachés 
décoche > Masquer les extensions des fichiers dont le type est connu 
décoche > Masquer les fichiers protégés du système d' exploitation (recommandé). 
« Appliquer » et « OK ». 

2) Téléchargez VirtumundoBeGone sur votre bureau : http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe 

Double-cliquez ensuite sur VirtumundoBeGone.exe et suivez les instructions qui s'affichent à l'écran. 

Une fois terminé, redémarrez votre PC. 

PS : Ne vous inquiètez pas si vous voyez un écran bleu "Erreur fatale", c'est normal. 

Poste le rapport généré par VirtumundoBeGone ^^ 


ensuite : 




Télécharge SDFix sur ton bureau : 
ici http://downloads.andymanchesta.com/RemovalTools/SDFix.exe. 
ou ici http://download.bleepingcomputer.com/andymanchesta/SDFix.exe­ 
ou ici http://sdfix.net/SDFix.exe 

--> Double-clique sur SDFix.exe et choisis "Install" . 

( tuto ici : https://www.malekal.com/slenfbot-still-an-other-irc-bot/ ) 

Puis une fois l'installe faite , 

Impératif : Démarrer en mode sans echec . 

/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\ 

Comment aller en Mode sans échec : 
1) Redémarre ton ordi . 
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" . 
3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage . 
4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] . 
5) Choisis ton compte habituel ( et pas Administrateur ). 
attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ... 


Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer l'outil . 
-->Tapes Y pour lancer le script ... 
Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc : 
presses une touche pour redémarrer quand il te le sera demandé . 

Le PC va mettre du temps avant de démarrer ( c'est normale ), après le chargement du Bureau presses une touche lorsque "Finished" s'affiche . 

Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier 
C:\SDFix sous le nom "Report.txt".

nbloquet · Answer

Désolé j'ai du m'absenter cet AM
J' ai fait ce que tu m'avais demandé voici les rapports

[01/23/2009, 18:14:01] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\BOUDEAU JM\Bureau\VirtumundoBeGone.exe" )
[01/23/2009, 18:14:11] - Detected System Information:
[01/23/2009, 18:14:11] -  Windows Version: 5.1.2600, Service Pack 3
[01/23/2009, 18:14:11] -  Current Username: BOUDEAU JM (Admin)
[01/23/2009, 18:14:11] -  Windows is in NORMAL mode.
[01/23/2009, 18:14:11] - Searching for Browser Helper Objects:
[01/23/2009, 18:14:11] -  BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/23/2009, 18:14:11] - Finished Searching Browser Helper Objects
[01/23/2009, 18:14:11] - Finishing up...
[01/23/2009, 18:14:11] - Nothing found! Exiting...



[b]SDFix: Version 1.240 [/b]
Run by BOUDEAU JM on 23/01/2009 at 18:38

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]: 

No Trojan Files Found






Removing Temp Files

[b]ADS Check [/b]:
 


                                 [b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-23 18:49:41
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[b]Remaining Files [/b]:



[b]Files with Hidden Attributes [/b]:

Tue 15 Mar 2005           215 A.SHR --- "C:\BOOT.BAK"
Fri 12 Mar 2004        54,384 A..H. --- "C:\Program Files\AOL 9.0\aolphx.exe"
Fri 12 Mar 2004       156,784 A..H. --- "C:\Program Files\AOL 9.0\aoltray.exe"
Fri 12 Mar 2004        31,344 A..H. --- "C:\Program Files\AOL 9.0\RBM.exe"
Thu 27 Mar 2008             0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Fri 12 Mar 2004       106,496 A..H. --- "C:\Program Files\Fichiers communs\aolshare\shell\fr\shellext.dll"

[b]Finished![/b]

gen-hackman · Answer

sinon desactive trend micro le temps de ta manip car la.....

nbloquet · Answer

J'avais désactivé tend micro pour virtumondobegone falait il le faire pour sdfix?
Je recommence?

gen-hackman · Answer

non sdfix etait en sans echec donc pas d antivirus :)

je parlais de Combofix mais sais -tu qu'il faut installer la console de recuperation avant d'utiliser un tel outil ?

nbloquet · Answer

Non je savais pas , heureusement que trend ma bloqué
Comment faire pour la console de recuperation?

gen-hackman · Answer

tout explique la :

-- Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil. 
-- Ne pas utiliser en dehors de ce cas de figure : dangereux! 

Lors de son exécution, 
ComboFix va vérifier si la Console de récupération Microsoft Windows est installée. 
Avec des infections comme celles d'aujourd'hui, il est fortement conseillé de l'avoir pré-installée sur votre PC avant toute suppression de nuisibles. 
Elle vous permettra de démarrer dans un mode spécial, de récupération (réparation), qui nous permet de vous aider plus facilement si jamais votre ordinateur rencontre un problème après une tentative de nettoyage. 

Suivez les invites pour permettre à ComboFix de télécharger et installer la Console de récupération Microsoft Windows

et lorsque cela vous est demandé, acceptez le Contrat de Licence Utilisateur Final pour installer la Console de récupération Microsoft Windows. 
Sous XP 
https://support.microsoft.com/en-us/help/310994 
Sous Vista 
https://www.commentcamarche.net/list 13735 console de recuperation vista sur cd bootable 
**Note importante: Si la Console de récupération Microsoft Windows est déjà installée, ComboFix continuera ses procédures de suppression de nuisibles. 



Télécharges ComboFix à partir d'un de ces liens : 
En premier 
http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

A lire 
http://www.bleepingcomputer.com/combofix/fr/comment-utiliser­-combofix 


Et important, enregistre le sur le bureau. 

Avant d'utiliser ComboFix : 

? Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 

? Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil. 


Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. 

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

? Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

? Reviens sur le forum, et 

copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

nbloquet · Answer

ok j'ai tout fais a la lettre voici le log: ComboFix 09-01-21.04 - BOUDEAU JM 2009-01-23 19:47:41.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.1023.635 [GMT 1:00] Lancé depuis: c:\documents and settings\BOUDEAU JM\Bureau\ComboFix.exe Commutateurs utilisés :: c:\documents and settings\BOUDEAU JM\Bureau\WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe AV: Antivirus de Trend Micro Client/Server Security Agent *On-access scanning disabled* (Outdated) FW: Trend Micro Personal Firewall *disabled* * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\BOUDEAU JM\Application Data\WeatherDPA c:\windows\system32\chrlkrfu.ini c:\windows\system32\dhxmpbnm.ini c:\windows\system32\drwveiug.ini c:\windows\system32\fpvgigjr.ini c:\windows\system32\huieylgi.ini c:\windows\system32\iflcsepp.ini c:\windows\system32\ixeeyuph.ini c:\windows\system32\jdfodfmm.ini c:\windows\system32\kswwpfex.ini c:\windows\system32\lpcircpt.ini c:\windows\system32\mlipuequ.ini c:\windows\system32\mnjkapxj.ini c:\windows\system32 mnlotsv.ini c:\windows\system32\oyufcjqh.ini c:\windows\system32\xgvjxxaj.ini c:\windows\system32\xxsqwebl.ini c:\windows\system32\yeggocto.ini c:\windows\system32\yetfqgcn.ini . ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-23 au 2009-01-23 )))))))))))))))))))))))))))))))))))) . 2009-01-23 18:37 . 2009-01-23 18:37 579,584 --a------ c:\windows\system32\dllcache\user32.dll 2009-01-23 18:34 . 2009-01-23 18:34 d-------- c:\windows\ERUNT 2009-01-23 18:26 . 2009-01-23 18:52 d-------- C:\SDFix 2009-01-23 11:13 . 2009-01-23 11:13 d-------- C: sit 2009-01-23 08:18 . 2009-01-23 08:18 d-------- c:\program files\Malwarebytes' Anti-Malware 2009-01-23 08:18 . 2009-01-23 08:18 d-------- c:\documents and settings\BOUDEAU JM\Application Data\Malwarebytes 2009-01-23 08:18 . 2009-01-23 08:18 d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-01-23 08:18 . 2009-01-14 16:11 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2009-01-23 08:18 . 2009-01-14 16:11 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2009-01-22 09:44 . 2009-01-22 09:44 d-------- C:\fsaua.data . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-23 11:11 --------- d-----w c:\program files\Mozilla Thunderbird 2008-12-13 06:37 3,593,216 ------w c:\windows\system32\dllcache\mshtml.dll 2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys 2008-12-11 10:57 333,952 ------w c:\windows\system32\dllcache\srv.sys 2008-10-24 11:21 455,296 ------w c:\windows\system32\dllcache\mrxsmb.sys 2008-10-23 12:36 286,720 ----a-w c:\windows\system32\gdi32.dll 2008-10-23 12:36 286,720 ------w c:\windows\system32\dllcache\gdi32.dll 2008-05-07 12:52 0 ----a-w c:\documents and settings\BOUDEAU JM\Application Data\wklnhst.dat 2008-12-11 12:57 67,696 ----a-w c:\program files\mozilla firefox\components\jar50.dll 2008-12-11 12:57 54,376 ----a-w c:\program files\mozilla firefox\components\jsd3250.dll 2008-12-11 12:57 34,952 ----a-w c:\program files\mozilla firefox\components\myspell.dll 2008-12-11 12:57 46,720 ----a-w c:\program files\mozilla firefox\components\spellchk.dll 2008-12-11 12:57 172,144 ----a-w c:\program files\mozilla firefox\components\xpinstal.dll 2008-09-10 05:56 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008091020080911\index.dat . ((((((((((((((((((((((((((((( snapshot@2007-10-29_14.47.36.00 ))))))))))))))))))))))))))))))))))))))))) . + 2006-03-24 04:49:05 49,152 ----a-w c:\windows\$hf_mig$\KB904942\SP2QFE\wdigest.dll + 2005-10-12 23:15:25 15,072 ----a-w c:\windows\$hf_mig$\KB904942\spmsg.dll + 2005-10-12 23:15:26 216,800 ----a-w c:\windows\$hf_mig$\KB904942\spuninst.exe + 2005-10-12 23:15:25 22,752 ----a-w c:\windows\$hf_mig$\KB904942\update\spcustom.dll + 2005-10-12 23:15:28 727,776 ----a-w c:\windows\$hf_mig$\KB904942\update\update.exe + 2005-10-12 23:15:45 394,976 ----a-w c:\windows\$hf_mig$\KB904942\update\updspapi.dll + 2006-07-14 15:52:22 121,856 ----a-w c:\windows\$hf_mig$\KB915865\SP2QFE\xmllite.dll + 2005-10-12 23:12:25 14,048 ----a-w c:\windows\$hf_mig$\KB915865\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w c:\windows\$hf_mig$\KB915865\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w c:\windows\$hf_mig$\KB915865\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w c:\windows\$hf_mig$\KB915865\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w c:\windows\$hf_mig$\KB915865\update\updspapi.dll + 2008-02-26 11:49:32 297,984 ----a-w c:\windows\$hf_mig$\KB932823-v3\SP2QFE\msctf.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB932823-v3\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB932823-v3\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB932823-v3\update\updspapi.dll + 2007-07-12 23:28:38 765,952 ----a-w c:\windows\$hf_mig$\KB938127-IE7\SP2QFE\vgx.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB938127-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB938127-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB938127-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB938127-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB938127-IE7\update\updspapi.dll + 2007-10-29 22:36:31 1,293,824 ----a-w c:\windows\$hf_mig$\KB941568\SP2QFE\quartz.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941568\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941568\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941568\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941568\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941568\update\updspapi.dll + 2007-10-30 16:53:32 360,832 ----a-w c:\windows\$hf_mig$\KB941644\SP2QFE cpip.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941644\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941644\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941644\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941644\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941644\update\updspapi.dll + 2008-03-20 07:56:50 1,846,016 ----a-w c:\windows\$hf_mig$\KB941693\SP2QFE\win32k.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB941693\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB941693\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB941693\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB941693\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB941693\update\updspapi.dll + 2007-10-10 23:22:14 124,928 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\advpack.dll + 2007-10-10 23:22:14 214,528 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\dxtrans.dll + 2007-10-10 23:22:14 132,608 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\extmgr.dll + 2007-10-10 23:22:14 63,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\icardie.dll + 2007-10-10 08:16:47 70,656 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ie4uinit.exe + 2007-10-10 23:22:14 153,088 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieakeng.dll + 2007-10-10 23:22:14 230,400 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieaksie.dll + 2007-10-10 05:47:20 161,792 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieakui.dll + 2007-07-01 03:31:33 2,455,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dat + 2007-10-10 23:22:14 383,488 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieapfltr.dll + 2007-10-10 23:22:15 388,096 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iedkcs32.dll + 2007-10-10 23:22:16 6,067,200 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieframe.dll + 2007-10-10 23:22:16 44,544 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iernonce.dll + 2007-10-10 23:22:16 267,776 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iertutil.dll + 2007-10-10 08:16:47 13,824 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\ieudinit.exe + 2007-10-10 08:16:56 625,664 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe + 2007-10-10 23:22:16 27,648 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\jsproxy.dll + 2007-10-10 23:22:16 459,264 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msfeeds.dll + 2007-10-10 23:22:16 52,224 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msfeedsbs.dll + 2007-10-30 23:40:57 3,593,216 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll + 2007-10-10 23:22:18 478,208 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtmled.dll + 2007-10-10 23:22:18 193,024 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\msrating.dll + 2007-10-10 23:22:18 671,232 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mstime.dll + 2007-10-10 23:22:18 102,912 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\occache.dll + 2007-10-10 23:22:18 105,984 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\url.dll + 2007-10-10 23:22:19 1,162,240 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll + 2007-10-10 23:22:19 233,472 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\webcheck.dll + 2007-10-10 23:22:19 825,344 ----a-w c:\windows\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB942615-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB942615-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\spcustom.dll + 2007-06-30 18:47:16 727,776 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\update.exe + 2007-06-30 20:24:42 394,976 ----a-w c:\windows\$hf_mig$\KB942615-IE7\update\updspapi.dll + 2007-10-11 05:59:18 1,024,512 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\browseui.dll + 2007-10-11 05:59:18 152,064 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\cdfview.dll + 2007-10-11 05:59:21 1,056,768 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\danim.dll + 2007-10-11 05:59:22 357,888 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\dxtmsft.dll + 2007-10-11 05:59:22 205,824 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\dxtrans.dll + 2007-10-11 05:59:22 55,808 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\extmgr.dll + 2007-10-10 10:48:23 18,432 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\iedw.exe + 2007-10-11 05:59:22 251,904 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\iepeers.dll + 2007-10-11 05:59:22 96,768 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\inseng.dll + 2007-10-11 05:59:22 16,384 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\jsproxy.dll + 2007-10-30 09:57:54 3,086,848 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\mshtml.dll + 2007-10-11 05:59:26 449,024 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\mshtmled.dll + 2007-10-11 05:59:26 146,432 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\msrating.dll + 2007-10-11 05:59:27 532,480 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\mstime.dll + 2007-10-11 05:59:27 39,424 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\pngfilt.dll + 2007-10-11 05:59:28 1,498,624 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\shdocvw.dll + 2007-10-11 05:59:28 474,624 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\shlwapi.dll + 2007-10-10 23:36:44 369,152 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\spru040c.dll + 2007-10-11 05:59:29 620,032 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\urlmon.dll + 2007-10-11 05:59:29 670,208 ----a-w c:\windows\$hf_mig$\KB942615\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB942615\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB942615\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB942615\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB942615\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB942615\update\updspapi.dll + 2007-11-13 11:02:46 60,416 ----a-w c:\windows\$hf_mig$\KB942763\SP2QFE zchange.exe + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB942763\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB942763\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB942763\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB942763\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB942763\update\updspapi.dll + 2007-11-14 07:19:25 450,560 ----a-w c:\windows\$hf_mig$\KB942840\SP2QFE\jscript.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB942840\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB942840\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB942840\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB942840\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB942840\update\updspapi.dll + 2007-12-04 18:30:15 551,936 ----a-w c:\windows\$hf_mig$\KB943055\SP2QFE\oleaut32.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB943055\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB943055\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB943055\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB943055\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB943055\update\updspapi.dll + 2007-10-25 16:43:25 8,516,608 ----a-w c:\windows\$hf_mig$\KB943460\SP2QFE\shell32.dll + 2007-10-29 15:07:16 369,152 ----a-w c:\windows\$hf_mig$\KB943460\SP2QFE\spru040c.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB943460\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB943460\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB943460\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB943460\update\update.exe + 2007-03-06 01:35:47 394,976 ----a-w c:\windows\$hf_mig$\KB943460\update\updspapi.dll + 2007-11-07 09:50:06 733,696 ----a-w c:\windows\$hf_mig$\KB943485\SP2QFE\lsasrv.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB943485\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB943485\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB943485\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB943485\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB943485\update\updspapi.dll + 2007-12-18 14:32:57 450,560 ----a-w c:\windows\$hf_mig$\KB944338\SP2QFE\jscript.dll + 2007-12-18 14:32:57 417,792 ----a-w c:\windows\$hf_mig$\KB944338\SP2QFE\vbscript.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB944338\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB944338\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB944338\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB944338\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB944338\update\updspapi.dll + 2007-12-07 01:42:15 124,928 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\advpack.dll + 2007-12-19 22:20:28 347,136 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtmsft.dll + 2007-12-07 01:42:15 214,528 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\dxtrans.dll + 2007-12-07 01:42:15 133,120 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\extmgr.dll + 2007-12-07 01:42:15 63,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\icardie.dll + 2007-12-06 08:34:28 70,656 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ie4uinit.exe + 2007-12-07 01:42:15 153,088 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakeng.dll + 2007-12-07 01:42:16 230,400 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieaksie.dll + 2007-12-06 05:00:02 161,792 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dat + 2007-12-07 01:42:16 383,488 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieapfltr.dll + 2007-12-07 01:42:16 388,096 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iedkcs32.dll + 2007-12-07 01:42:19 6,067,200 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieframe.dll + 2007-12-07 01:42:19 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iernonce.dll + 2007-12-07 01:42:19 267,776 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iertutil.dll + 2007-12-06 08:34:29 13,824 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\ieudinit.exe + 2007-12-06 08:34:45 625,664 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe + 2007-12-07 01:42:20 27,648 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\jsproxy.dll + 2007-12-07 01:42:20 459,264 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeeds.dll + 2007-12-07 01:42:20 52,224 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msfeedsbs.dll + 2007-12-07 01:42:21 3,593,216 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll + 2007-12-07 01:42:21 478,208 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtmled.dll + 2007-12-07 01:42:21 193,024 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\msrating.dll + 2007-12-07 01:42:21 671,232 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mstime.dll + 2007-12-07 01:42:21 102,912 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\occache.dll + 2008-01-11 05:54:27 44,544 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\pngfilt.dll + 2007-12-07 01:42:21 105,984 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\url.dll + 2007-12-07 01:42:22 1,162,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\urlmon.dll + 2007-12-07 01:42:22 233,472 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\webcheck.dll + 2007-12-07 01:42:22 825,344 ----a-w c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB944533-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB944533-IE7\update\updspapi.dll + 2007-12-07 00:47:14 1,024,512 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\browseui.dll + 2007-12-07 00:47:14 152,064 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\cdfview.dll + 2007-12-07 00:47:14 1,056,768 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\danim.dll + 2007-12-07 00:47:15 357,888 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\dxtmsft.dll + 2007-12-07 00:47:15 205,824 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\dxtrans.dll + 2007-12-07 00:47:15 55,808 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\extmgr.dll + 2007-12-06 10:05:52 18,432 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\iedw.exe + 2007-12-07 00:47:15 251,904 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\iepeers.dll + 2007-12-07 00:47:15 96,768 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\inseng.dll + 2007-12-07 00:47:15 16,384 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\jsproxy.dll + 2007-12-07 00:47:18 3,087,360 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\mshtml.dll + 2007-12-07 00:47:18 449,024 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\mshtmled.dll + 2007-12-07 00:47:18 146,432 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\msrating.dll + 2007-12-07 00:47:19 532,480 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\mstime.dll + 2007-12-07 00:47:19 39,424 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\pngfilt.dll + 2007-12-07 00:47:20 1,499,648 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\shdocvw.dll + 2007-12-07 00:47:20 474,624 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\shlwapi.dll + 2007-12-06 23:40:30 369,152 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\spru040c.dll + 2007-12-07 00:47:21 620,032 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\urlmon.dll + 2007-12-07 00:47:21 670,208 ----a-w c:\windows\$hf_mig$\KB944533\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB944533\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB944533\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB944533\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB944533\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB944533\update\updspapi.dll + 2007-11-13 08:47:45 20,480 ----a-w c:\windows\$hf_mig$\KB944653\SP2QFE\secdrv.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB944653\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB944653\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB944653\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB944653\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB944653\update\updspapi.dll + 2008-02-20 05:20:23 147,968 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsapi.dll + 2008-02-20 18:50:24 45,568 ----a-w c:\windows\$hf_mig$\KB945553\SP2QFE\dnsrslvr.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB945553\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB945553\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB945553\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB945553\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB945553\update\updspapi.dll + 2007-12-18 09:38:59 179,712 ----a-w c:\windows\$hf_mig$\KB946026\SP2QFE\mrxdav.sys + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB946026\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB946026\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB946026\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB946026\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB946026\update\updspapi.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB946627\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB946627\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB946627\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB946627\update\update.exe + 2007-03-06 01:35:47 394,976 ----a-w c:\windows\$hf_mig$\KB946627\update\updspapi.dll + 2008-05-02 13:33:12 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll + 2008-05-02 14:01:52 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll + 2008-05-02 13:44:40 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll + 2008-03-01 12:34:26 124,928 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\advpack.dll + 2008-03-01 12:34:26 347,136 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtmsft.dll + 2008-03-01 12:34:26 214,528 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\dxtrans.dll + 2008-03-01 12:34:27 132,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\extmgr.dll + 2008-03-01 12:34:27 63,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\icardie.dll + 2008-02-22 09:39:56 70,656 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ie4uinit.exe + 2008-03-01 12:34:27 153,088 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakeng.dll + 2008-03-01 12:34:27 230,400 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieaksie.dll + 2008-02-15 05:44:25 161,792 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dat + 2008-03-01 12:34:27 383,488 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieapfltr.dll + 2008-03-01 12:34:27 388,608 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iedkcs32.dll + 2008-03-01 12:34:29 6,067,712 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieframe.dll + 2008-03-01 12:34:29 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iernonce.dll + 2008-03-01 12:34:29 267,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iertutil.dll + 2008-02-22 09:39:56 13,824 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\ieudinit.exe + 2008-02-22 09:40:22 625,664 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe + 2008-03-01 12:34:30 27,648 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\jsproxy.dll + 2008-03-01 12:34:30 459,264 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeeds.dll + 2008-03-01 12:34:30 52,224 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msfeedsbs.dll + 2008-03-01 12:34:32 3,593,216 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll + 2008-03-01 12:34:32 478,208 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtmled.dll + 2008-03-01 12:34:32 193,024 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\msrating.dll + 2008-03-01 12:34:32 671,232 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mstime.dll + 2008-03-01 12:34:32 102,912 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\occache.dll + 2008-03-01 12:34:32 44,544 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\pngfilt.dll + 2008-03-01 12:34:32 105,984 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\url.dll + 2008-03-01 12:34:33 1,162,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\urlmon.dll + 2008-03-01 12:34:33 233,472 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\webcheck.dll + 2008-03-01 12:34:33 827,392 ----a-w c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB947864-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB947864-IE7\update\updspapi.dll + 2008-02-16 09:31:57 1,024,512 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\browseui.dll + 2008-02-16 09:31:57 152,064 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\cdfview.dll + 2008-02-16 09:31:58 1,056,768 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\danim.dll + 2008-02-16 09:31:58 357,888 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\dxtmsft.dll + 2008-02-16 09:31:58 205,312 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\dxtrans.dll + 2008-02-16 09:31:58 55,808 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\extmgr.dll + 2008-02-15 09:07:53 18,432 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\iedw.exe + 2008-02-16 09:31:58 251,904 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\iepeers.dll + 2008-02-16 09:31:58 96,768 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\inseng.dll + 2008-02-16 09:31:58 16,384 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\jsproxy.dll + 2008-02-16 09:31:59 3,087,872 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\mshtml.dll + 2008-02-16 09:31:59 449,024 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\mshtmled.dll + 2008-02-16 09:31:59 146,432 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\msrating.dll + 2008-02-16 09:31:59 532,480 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\mstime.dll + 2008-02-16 09:31:59 39,424 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\pngfilt.dll + 2008-02-16 09:32:00 1,499,648 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\shdocvw.dll + 2008-02-16 09:32:00 474,624 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\shlwapi.dll + 2008-02-15 23:03:14 370,176 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\spru040c.dll + 2008-02-16 09:32:00 620,544 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\urlmon.dll + 2008-02-16 09:32:00 670,208 ----a-w c:\windows\$hf_mig$\KB947864\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB947864\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB947864\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB947864\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB947864\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB947864\update\updspapi.dll + 2008-02-20 06:52:42 282,624 ----a-w c:\windows\$hf_mig$\KB948590\SP2QFE\gdi32.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB948590\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB948590\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB948590\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB948590\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB948590\update\updspapi.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB948881\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB948881\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB948881\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB948881\update\update.exe + 2007-03-06 01:35:47 394,976 ----a-w c:\windows\$hf_mig$\KB948881\update\updspapi.dll + 2008-01-23 04:56:21 554,008 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\dao360.dll + 2007-12-10 12:41:11 518,944 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexch40.dll + 2007-12-10 12:41:11 326,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msexcl40.dll + 2007-12-10 12:41:11 1,516,568 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjet40.dll + 2007-12-10 12:41:11 355,112 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjetol1.dll + 2008-03-25 06:56:31 194,144 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjint40.dll + 2007-12-10 12:41:12 60,192 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjter40.dll + 2007-12-10 12:41:12 248,608 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msjtes40.dll + 2007-12-10 12:41:12 219,936 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msltus40.dll + 2007-12-10 12:41:12 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mspbde40.dll + 2007-12-10 12:41:13 432,928 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll + 2007-12-10 12:41:13 322,336 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll + 2007-12-10 12:41:13 559,904 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msrepl40.dll + 2007-12-10 12:41:13 264,992 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mstext40.dll + 2007-12-10 12:41:13 838,432 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswdat10.dll + 2007-11-01 05:15:27 621,344 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\mswstr10.dll + 2007-12-10 12:41:14 355,104 ----a-w c:\windows\$hf_mig$\KB950749\SP2QFE\msxbde40.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB950749\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB950749\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB950749\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB950749\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB950749\update\updspapi.dll + 2008-04-23 07:19:26 124,928 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\advpack.dll + 2008-04-23 07:19:26 347,136 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtmsft.dll + 2008-04-23 07:19:26 214,528 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\dxtrans.dll + 2008-04-23 07:19:26 132,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\extmgr.dll + 2008-04-23 07:19:26 63,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\icardie.dll + 2008-04-22 08:02:19 70,656 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ie4uinit.exe + 2008-04-23 07:19:26 153,088 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakeng.dll + 2008-04-23 07:19:26 230,400 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieaksie.dll + 2008-04-20 05:07:38 161,792 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dat + 2008-04-23 07:19:26 383,488 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieapfltr.dll + 2008-04-23 07:19:26 388,608 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iedkcs32.dll + 2008-04-23 07:19:26 6,068,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieframe.dll + 2008-04-23 07:19:26 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iernonce.dll + 2008-04-23 07:19:26 267,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iertutil.dll + 2008-04-22 08:02:19 13,824 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\ieudinit.exe + 2008-04-22 08:02:46 625,664 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe + 2008-04-23 07:19:26 27,648 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\jsproxy.dll + 2008-04-23 07:19:27 459,264 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeeds.dll + 2008-04-23 07:19:27 52,224 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msfeedsbs.dll + 2008-04-23 07:19:27 3,593,728 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll + 2008-04-23 07:19:27 478,208 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtmled.dll + 2008-04-23 07:19:27 193,024 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\msrating.dll + 2008-04-23 07:19:27 671,232 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mstime.dll + 2008-04-23 07:19:27 102,912 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\occache.dll + 2008-04-23 07:19:27 44,544 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\pngfilt.dll + 2008-04-23 07:19:27 105,984 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\url.dll + 2008-04-23 07:19:27 1,162,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\urlmon.dll + 2008-04-23 07:19:27 233,472 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\webcheck.dll + 2008-04-23 07:19:27 827,392 ----a-w c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB950759-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB950759-IE7\update\updspapi.dll + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950760\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950760\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950760\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB950760\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB950760\update\updspapi.dll + 2008-05-08 12:14:51 203,008 ----a-w c:\windows\$hf_mig$\KB950762\SP2QFE mcast.sys + 2008-05-08 14:02:52 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3GDR mcast.sys + 2008-05-08 13:58:17 203,136 ----a-w c:\windows\$hf_mig$\KB950762\SP3QFE mcast.sys + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950762\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950762\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950762\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB950762\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB950762\update\updspapi.dll + 2008-07-07 20:18:27 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll + 2008-07-07 20:28:20 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll + 2008-07-07 20:24:11 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll + 2008-04-11 18:40:33 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll + 2008-04-11 19:05:22 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll + 2008-04-11 22:23:04 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll + 2007-12-03 15:25:43 767,352 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll + 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE zchange.exe + 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR zchange.exe + 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE zchange.exe + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll + 2008-06-14 18:03:13 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP2QFE\bthport.sys + 2008-06-14 17:33:37 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3GDR\bthport.sys + 2008-06-14 17:40:19 272,768 ----a-w c:\windows\$hf_mig$\KB951376-v2\SP3QFE\bthport.sys + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951376-v2\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951376-v2\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB951376-v2\update\updspapi.dll + 2008-04-14 16:17:04 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP2QFE\bthport.sys + 2008-04-14 15:59:30 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP3GDR\bthport.sys + 2008-04-14 16:22:05 272,768 ----a-w c:\windows\$hf_mig$\KB951376\SP3QFE\bthport.sys + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951376\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951376\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951376\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB951376\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB951376\update\updspapi.dll + 2008-05-07 04:55:47 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP2QFE\quartz.dll + 2008-05-07 05:11:24 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP3GDR\quartz.dll + 2008-05-07 05:04:59 1,294,336 ----a-w c:\windows\$hf_mig$\KB951698\SP3QFE\quartz.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB951698\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB951698\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB951698\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB951698\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB951698\update\updspapi.dll + 2006-08-16 12:13:24 100,352 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\6to4svc.dll + 2008-06-20 10:44:08 138,368 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\afd.sys + 2008-06-20 17:37:01 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\dnsapi.dll + 2008-06-20 17:37:01 247,808 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll + 2008-06-20 10:44:42 360,960 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE cpip.sys + 2008-06-20 09:32:39 225,920 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE cpip6.sys + 2008-06-20 11:40:08 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\afd.sys + 2008-06-20 17:47:22 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\dnsapi.dll + 2008-06-20 17:47:22 247,808 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll + 2008-06-20 11:51:12 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR cpip.sys + 2008-06-20 11:08:27 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR cpip6.sys + 2008-06-20 11:48:03 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\afd.sys + 2008-06-20 17:44:02 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\dnsapi.dll + 2008-06-20 17:44:02 247,808 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll + 2008-06-20 11:59:02 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE cpip.sys + 2008-06-20 11:16:44 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE cpip6.sys + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951748\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951748\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951748\update\spcustom.dll + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951748\update\updspapi.dll + 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe + 2008-05-09 10:51:45 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll + 2008-05-09 10:51:45 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll + 2008-05-09 10:51:45 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll + 2008-05-09 10:51:45 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll + 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe + 2008-05-09 10:51:45 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll + 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe + 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll + 2008-05-01 15:04:51 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll + 2008-05-01 14:36:26 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll + 2008-05-01 14:39:23 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll + 2008-06-24 16:30:27 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll + 2008-06-24 16:44:02 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll + 2008-06-24 16:53:52 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll + 2008-06-23 15:40:01 124,928 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\advpack.dll + 2008-06-23 15:40:01 347,136 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtmsft.dll + 2008-06-23 15:40:01 214,528 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\dxtrans.dll + 2008-06-23 15:40:01 132,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\extmgr.dll + 2008-06-23 15:40:01 63,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\icardie.dll + 2008-06-23 08:23:18 70,656 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ie4uinit.exe + 2008-06-23 15:40:01 153,088 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakeng.dll + 2008-06-23 15:40:01 230,400 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieaksie.dll + 2008-06-21 05:23:53 161,792 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dat + 2008-06-23 15:40:02 383,488 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieapfltr.dll + 2008-06-23 15:40:02 388,608 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iedkcs32.dll + 2008-06-23 15:40:04 6,068,736 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieframe.dll + 2008-06-23 15:40:04 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iernonce.dll + 2008-06-23 15:40:04 267,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iertutil.dll + 2008-06-23 08:23:18 13,824 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\ieudinit.exe + 2008-06-23 08:23:52 625,664 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe + 2008-06-23 15:40:05 27,648 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\jsproxy.dll + 2008-06-23 15:40:05 459,264 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeeds.dll + 2008-06-23 15:40:05 52,224 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msfeedsbs.dll + 2008-06-23 15:40:07 3,594,240 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll + 2008-06-23 15:40:07 477,696 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtmled.dll + 2008-06-23 15:40:07 193,024 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\msrating.dll + 2008-06-23 15:40:07 671,232 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mstime.dll + 2008-06-23 15:40:07 102,912 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\occache.dll + 2008-06-23 15:40:07 44,544 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\pngfilt.dll + 2008-06-23 15:40:07 105,984 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\url.dll + 2008-06-23 15:40:08 1,162,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\urlmon.dll + 2008-06-23 15:40:08 233,472 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\webcheck.dll + 2008-06-23 15:40:08 827,904 ----a-w c:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB953838-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB953838-IE7\update\updspapi.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll + 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll + 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll + 2008-09-10 01:12:14 1,379,840 ----a-w c:\windows\$hf_mig$\KB954459\SP3QFE\msxml6.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB954459\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB954459\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB954459\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB954459\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954459\update\updspapi.dll + 2008-10-03 09:50:27 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3QFE\strmdll.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB954600\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB954600\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB954600\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB954600\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB954600\update\updspapi.dll + 2008-09-04 17:12:47 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3QFE\msxml3.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB955069\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB955069\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB955069\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB955069\update\update.exe + 2008-07-09 12:10:36 406,392 ----a-w c:\windows\$hf_mig$\KB955069\update\updspapi.dll + 2008-10-23 10:17:49 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3QFE zchange.exe + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB955839\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB955839\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB955839\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB955839\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB955839\update\updspapi.dll + 2008-08-26 09:10:25 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll + 2008-08-26 09:10:25 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll + 2008-08-26 09:10:25 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll + 2008-08-26 09:10:25 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll + 2008-08-26 09:10:25 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll + 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe + 2008-08-26 09:10:26 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll + 2008-08-26 09:10:26 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll + 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat + 2008-08-26 09:10:26 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll + 2008-08-26 09:10:26 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll + 2008-10-03 16:22:30 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll + 2008-08-26 09:10:27 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll + 2008-08-26 09:10:27 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll + 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe + 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe + 2008-08-26 09:10:27 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll + 2008-08-26 09:10:27 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll + 2008-08-26 09:10:27 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll + 2008-08-26 09:10:28 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll + 2008-08-26 09:10:28 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll + 2008-08-26 09:10:28 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll + 2008-08-26 09:10:29 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll + 2008-08-26 09:10:29 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll + 2008-08-26 09:10:29 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll + 2008-08-26 09:10:29 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll + 2008-08-26 09:10:29 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll + 2008-08-26 09:10:29 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll + 2008-08-26 09:10:29 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll + 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll + 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe + 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe + 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll + 2008-10-23 12:44:51 286,720 ----a-w c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll + 2008-07-08 13:03:54 18,296 ----a-w c:\windows\$hf_mig$\KB956802\spmsg.dll + 2008-07-08 13:03:55 234,872 ----a-w c:\windows\$hf_mig$\KB956802\spuninst.exe + 2008-07-08 13:03:54 26,488 ----a-w c:\windows\$hf_mig$\KB956802\update\spcustom.dll + 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB956802\update\update.exe + 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956802\update\updspapi.dll + 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll + 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE tkrnlmp.exe + 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE tkrnlpa.exe + 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE tkrpamp.exe + 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE toskrnl.exe + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll + 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe + 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll + 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll + 2008-10-24 11:41:11 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys + 2008-07-08 13:03:54 18,296 ----a-w c:\windows\$hf_mig$\KB957097\spmsg.dll + 2008-07-08 13:03:55 234,872 ----a-w c:\windows\$hf_mig$\KB957097\spuninst.exe + 2008-07-08 13:03:54 26,488 ----a-w c:\windows\$hf_mig$\KB957097\update\spcustom.dll + 2008-07-08 13:03:57 767,352 ----a-w c:\windows\$hf_mig$\KB957097\update\update.exe + 2008-07-08 13:04:05 406,392 ----a-w c:\windows\$hf_mig$\KB957097\update\updspapi.dll + 2008-10-16 19:33:14 124,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\advpack.dll + 2008-10-16 19:33:14 347,136 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtmsft.dll + 2008-10-16 19:33:14 214,528 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtrans.dll + 2008-10-16 19:33:14 132,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\extmgr.dll + 2008-10-16 19:33:14 63,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\icardie.dll + 2008-10-16 12:46:08 70,656 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ie4uinit.exe + 2008-10-16 19:33:14 153,088 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakeng.dll + 2008-10-16 19:33:14 230,400 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieaksie.dll + 2008-10-15 06:33:26 161,792 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakui.dll + 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dat + 2008-10-16 19:33:15 380,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dll + 2008-10-16 19:33:15 388,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iedkcs32.dll + 2008-10-16 19:33:16 6,068,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieframe.dll + 2008-10-16 19:33:16 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iernonce.dll + 2008-10-16 19:33:16 267,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iertutil.dll + 2008-10-16 12:46:08 13,824 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieudinit.exe + 2008-10-15 06:34:58 633,632 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe + 2008-10-16 19:33:17 27,648 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\jsproxy.dll + 2008-10-16 19:33:18 459,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeeds.dll + 2008-10-16 19:33:18 52,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeedsbs.dll + 2008-10-16 19:33:19 3,595,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll + 2008-10-16 19:33:20 477,696 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtmled.dll + 2008-10-16 19:33:20 193,024 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msrating.dll + 2008-10-16 19:33:21 671,232 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mstime.dll + 2008-10-16 19:33:21 102,912 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\occache.dll + 2008-10-16 19:33:21 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\pngfilt.dll + 2008-10-16 19:33:21 105,984 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\url.dll + 2008-10-16 19:33:21 1,163,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\urlmon.dll + 2008-10-16 19:33:22 233,472 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\webcheck.dll + 2008-10-16 19:33:22 827,904 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\updspapi.dll + 2008-10-15 16:31:32 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP3QFE etapi32.dll + 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB958644\spmsg.dll + 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB958644\spuninst.exe + 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll + 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB958644\update\update.exe + 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll + 2008-12-13 06:27:45 3,594,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll + 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\update.exe + 2007-03-06

gen-hackman · Answer

ok il manque un bout :)

repasse mbam en mode sans echec en examen complet

et dis moi qui t avait repere ce trojan ?

Par contre trend micro = poubelle :

http://www.commentcamarche.net/telecharger/telechargement 55 antivir

tutoriel :

https://www.malekal.com/avira-free-security-antivirus-gratuit/

voila fais un scan avec et poste le rapport si tu veux ; cet antivirus est bien plus performant qu'avast !,et gratuit !!!

pour info :

http://www.memoclic.com/forum/99370-comparatif-avast-vs-antivir/

nbloquet · Answer

Je réponds d'un autre PC car je dois partir , j'ai relancé le scan mbam sur le pc infecté . J'espère que tout sera clean .
A propos de trend micro : nous avions avast et la société qui nous a placé le serveur a désinstallé avast et a mis  trend micro à la place sur chaque ordi .
Nous sommes 5 PC en réseau  et un serveur . Peut on mettre antivir sur les tours individuelles et laissé trend micro sur le serveur ( j'y touche pas car litige avec la société )
Je posterai le log demain
J'ai trouvé le virus grâce a F-secure sur le site de orange 
Merci beaucoup et bonne soirée

gen-hackman · Answer

nous avions avast et la société qui nous a placé le serveur a désinstallé avast et a mis trend micro à la place 

l'un ne vaut ppas plus que l autre

Peut on mettre antivir sur les tours individuelles et laissé trend micro sur le serveur 

oui je ne pense pas que ca pause probleme

 F-secure 

pas extra non plus :)

a plus

nbloquet · Answer

Bonjour , désolé pour la reponse tardive , pbl électrique du à la tempete .
Cet ordi est propre maintenant , mais j'en ai d'autre ...
Merci encore a +

gen-hackman · Answer

comment ca il est propre ?on a meme pas nettoyé encore!!

nbloquet · Answer

ah bon !
je fais quoi alors ?

Aide pour supprimer vundo fbw

21 réponses

Discussions similaires