Infection rootkit help - Page 2

Résolu
Précédent
  • 1
  • 2
  1. gegedu17 Messages postés 11 Statut Membre
     
    j'ai ca .

    Date : Futur (événements : 3)
    Analyse (événements : 3)
    17/02/2009 23:22:12 Supprimés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus f:\system volume information\_restore{e02ecb69-b263-48b8-8590-1c69421e854d}\rp118\a0070509.com
    17/02/2009 23:22:12 Détectés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus f:\system volume information\_restore{e02ecb69-b263-48b8-8590-1c69421e854d}\rp118\a0070509.com
    17/02/2009 23:22:12 Supprimés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus f:\system volume information\_restore{e02ecb69-b263-48b8-8590-1c69421e854d}\rp118\a0070508.com
    17/02/2009 23:22:04 Détectés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus f:\system volume information\_restore{e02ecb69-b263-48b8-8590-1c69421e854d}\rp118\a0070508.com
    17/02/2009 23:20:46 Un programme malveillant a été découvert Kaspersky Anti-Virus
    17/02/2009 23:02:13 Les bases sont fortement dépassées Kaspersky Anti-Virus
    Analyse (événements : 3)
    17/02/2009 23:02:13 Lancement de la tâche Kaspersky Anti-Virus Antivirus Fichiers
    Analyse (événements : 3)
    17/02/2009 23:02:13 Lancement de la tâche Kaspersky Anti-Virus Antivirus Courrier et "Chat"
    Analyse (événements : 3)
    17/02/2009 23:02:14 Lancement de la tâche Kaspersky Anti-Virus Antivirus Internet
    Analyse (événements : 3)
    17/02/2009 23:02:14 Lancement de la tâche Kaspersky Anti-Virus Anti-phishing
    Analyse (événements : 3)
    17/02/2009 23:54:42 Interdit Explorateur Windows Ouverture C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
    Analyse (événements : 3)
    17/02/2009 23:02:14 Lancement de la tâche Kaspersky Anti-Virus Défense Proactive
    Analyse (événements : 3)
    17/02/2009 23:02:14 Lancement de la tâche Kaspersky Anti-Virus Analyse rapide
    17/02/2009 23:04:27 Fin de la tâche Kaspersky Anti-Virus Analyse rapide
    17/02/2009 23:07:36 Lancement de la tâche Kaspersky Anti-Virus Analyse complète
    Analyse (événements : 3)
    17/02/2009 23:05:01 Fin de la tâche Kaspersky Anti-Virus Mise à jour
    17/02/2009 23:02:41 Lancement de la tâche Kaspersky Anti-Virus Mise à jour
    Date : Futur (événements : 3)
    Analyse (événements : 3)
    18/02/2009 12:33:38 Un programme malveillant a été découvert Kaspersky Anti-Virus
    18/02/2009 04:59:36 La protection en temps réel ne fonctionne pas Kaspersky Anti-Virus
    18/02/2009 00:13:10 Supprimés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus c:\qoobox\quarantine\f\recycler\s-5-8-52-100000556-100024634-100019059-9874.com.vir
    18/02/2009 00:13:10 Détectés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus c:\qoobox\quarantine\f\recycler\s-5-8-52-100000556-100024634-100019059-9874.com.vir
    18/02/2009 00:13:10 Supprimés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus c:\qoobox\quarantine\f\recycler\s-1-8-97-100014437-100011688-100019248-5298.com.vir
    18/02/2009 00:12:59 Détectés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus c:\qoobox\quarantine\f\recycler\s-1-8-97-100014437-100011688-100019248-5298.com.vir
    18/02/2009 00:05:33 Un programme malveillant a été découvert Kaspersky Anti-Virus
    Analyse (événements : 3)
    18/02/2009 11:07:02 Lancement de la tâche Kaspersky Anti-Virus Antivirus Fichiers
    Analyse (événements : 3)
    18/02/2009 11:07:02 Lancement de la tâche Kaspersky Anti-Virus Antivirus Courrier et "Chat"
    Analyse (événements : 3)
    18/02/2009 11:07:02 Lancement de la tâche Kaspersky Anti-Virus Antivirus Internet
    Analyse (événements : 3)
    18/02/2009 11:07:02 Lancement de la tâche Kaspersky Anti-Virus Anti-phishing
    Analyse (événements : 3)
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 00:34:07 Interdit Explorateur Windows Ouverture C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
    18/02/2009 00:18:38 Interdit Explorateur Windows Ouverture C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
    18/02/2009 00:13:46 Interdit Explorateur Windows Ouverture C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
    Analyse (événements : 3)
    18/02/2009 14:49:18 Non terminé: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    18/02/2009 14:49:18 Détectés: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    18/02/2009 14:49:06 Détectés: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    18/02/2009 11:07:02 Lancement de la tâche Kaspersky Anti-Virus Défense Proactive
    18/02/2009 00:17:56 Non terminé: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    18/02/2009 00:17:56 Détectés: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    18/02/2009 00:17:47 Détectés: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    Analyse (événements : 3)
    18/02/2009 13:00:33 Fin de la tâche Kaspersky Anti-Virus Recherche de virus
    18/02/2009 12:59:39 Lancement de la tâche Kaspersky Anti-Virus Recherche de virus
    18/02/2009 12:33:44 Fin de la tâche Kaspersky Anti-Virus Recherche de virus
    18/02/2009 12:33:16 Lancement de la tâche Kaspersky Anti-Virus Recherche de virus
    18/02/2009 02:15:13 Fin de la tâche Kaspersky Anti-Virus Analyse complète
    18/02/2009 00:31:50 Fin de la tâche Kaspersky Anti-Virus Recherche de virus
    18/02/2009 00:31:49 Lancement de la tâche Kaspersky Anti-Virus Recherche de virus
    Analyse (événements : 3)
    18/02/2009 19:28:07 Fin de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 19:27:08 Lancement de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 17:22:32 Fin de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 15:47:09 Lancement de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 13:28:26 Fin de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 13:27:08 Lancement de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 11:08:27 Fin de la tâche Kaspersky Anti-Virus Mise à jour Tous les composants n'ont pas été mis à jour
    18/02/2009 11:08:00 Lancement de la tâche Kaspersky Anti-Virus Mise à jour

    alors ca a l'air bon non?
    merci de ton aide
    0
  2. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 325
     
    /!\ Seul gegedu17 peut suivre cette procédure. /!\

    1/

    ---> Ouvre le Bloc-notes.

    ---> Copie le texte ci-dessous par sélection puis Ctrl+C :

    KillAll::

    File::
    c:\windows\system32\drivers\gaopdxxboejkdu.sy_
    c:\windows\system32\drivers\gaopdxptusvurm.sy_
    c:\windows\system32\gaopdxcounte_

    --> Colle la sélection dans le Bloc-notes.

    --> Enregistre ce fichier sur le Bureau (Impératif).

    --> Nom du fichier : CFScript
    --> Type du fichier : tous les fichiers
    --> Clique sur Enregistrer.
    --> Quitte le Bloc-notes.

    2/

    --> Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture :
    http://www.searchengines.pl/phpbb203/pliki/picasso/virus/programs/combofix/combofix_cfscript.gif

    --> Une fenêtre bleue va apparaître : au message qui apparaît, tu acceptes.

    --> Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises : c'est normal !
    Ne touche à rien tant que le scan n'est pas terminé.

    --> Une fois le scan achevé, un rapport va s'afficher : poste-le.

    --> Si le fichier ne s'ouvre pas, il se trouve ici C:\Combofix.txt
    0
  3. gegedu17 Messages postés 11 Statut Membre
     
    ok merci beaucoup j'etais persuadé de plus rien avoir mais je préféré quand même demander!
    c'etait quoi??

    voila le rapport

    ComboFix 09-02-17.02 - gege 2009-02-19 9:50:00.4 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.3070.2496 [GMT 1:00]
    Lancé depuis: c:\documents and settings\gege\Bureau\ComboFix.exe
    Commutateurs utilisés :: c:\documents and settings\gege\Bureau\CFScript.txt
    AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated)
    * Un nouveau point de restauration a été créé

    FILE ::
    c:\windows\system32\drivers\gaopdxptusvurm.sy_
    c:\windows\system32\drivers\gaopdxxboejkdu.sy_
    c:\windows\system32\gaopdxcounte_
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\system32\drivers\gaopdxptusvurm.sy_
    c:\windows\system32\drivers\gaopdxxboejkdu.sy_
    c:\windows\system32\gaopdxcounte_

    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2009-01-19 au 2009-02-19 ))))))))))))))))))))))))))))))))))))
    .

    2009-02-18 22:05 . 2009-02-18 22:06 <REP> d-------- c:\program files\Winamp
    2009-02-18 22:05 . 2009-02-18 22:10 <REP> d-------- c:\documents and settings\gege\Application Data\Winamp
    2009-02-18 22:05 . 2007-03-08 00:51 129,784 --------- c:\windows\system32\pxafs.dll
    2009-02-18 13:23 . 2009-02-18 13:23 262,144 --a------ c:\windows\system32\wrap_oal.dll
    2009-02-18 13:23 . 2009-02-18 13:23 86,016 --a------ c:\windows\system32\OpenAL32.dll
    2009-02-18 13:01 . 2009-02-18 13:01 <REP> d-------- c:\windows\system32\Futuremark
    2009-02-18 13:01 . 2004-10-25 20:02 21,664 --a------ c:\windows\system32\drivers\Entech.sys
    2009-02-18 13:01 . 1999-11-02 10:01 6,173 --a------ c:\windows\system32\drivers\Entech.vxd
    2009-02-18 13:01 . 2004-06-22 15:44 5,632 --a------ c:\windows\system32\drivers\Entech64.sys
    2009-02-18 13:01 . 2001-11-19 19:05 3,972 --a------ c:\windows\system32\drivers\PciBus.sys
    2009-02-18 12:59 . 2009-02-18 12:59 <REP> d-------- c:\program files\Futuremark
    2009-02-18 12:46 . 2006-06-29 13:07 14,048 --------- c:\windows\system32\spmsg2.dll
    2009-02-17 22:57 . 2009-02-17 22:57 <REP> d-------- c:\program files\Kaspersky Lab
    2009-02-17 22:57 . 2009-02-19 09:53 <REP> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab
    2009-02-17 22:57 . 2009-02-17 23:04 101,287 --a------ c:\windows\system32\drivers\klin.dat
    2009-02-17 22:57 . 2009-02-17 23:04 89,601 --a------ c:\windows\system32\drivers\klick.dat
    2009-02-17 22:40 . 2009-02-17 22:40 <REP> d-------- C:\rsit
    2009-02-17 22:40 . 2009-02-17 22:40 <REP> d-------- c:\program files\trend micro
    2009-02-17 22:36 . 2009-02-17 22:36 <REP> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
    2009-02-17 13:01 . 2009-01-25 17:14 <REP> d--h----- c:\documents and settings\angelique\Voisinage réseau
    2009-02-17 13:01 . 2009-01-25 17:14 <REP> d--h----- c:\documents and settings\angelique\Voisinage d'impression
    2009-02-17 13:01 . 2009-01-25 10:18 <REP> d--h----- c:\documents and settings\angelique\Modèles
    2009-02-17 13:01 . 2009-01-25 17:14 <REP> d-------- c:\documents and settings\angelique\Mes documents
    2009-02-17 13:01 . 2009-01-25 17:14 <REP> dr------- c:\documents and settings\angelique\Menu Démarrer
    2009-02-17 13:01 . 2009-01-25 17:14 <REP> d-------- c:\documents and settings\angelique\Favoris
    2009-02-17 13:01 . 2009-02-08 22:03 <REP> d-------- c:\documents and settings\angelique\Bureau
    2009-02-17 13:01 . 2009-02-17 13:01 <REP> d-------- c:\documents and settings\angelique
    2009-02-17 12:56 . 2009-01-25 17:14 <REP> d--h----- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Voisinage réseau
    2009-02-17 12:56 . 2009-01-25 17:14 <REP> d--h----- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Voisinage d'impression
    2009-02-17 12:56 . 2009-01-25 10:18 <REP> d--h----- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Modèles
    2009-02-17 12:56 . 2009-01-25 17:14 <REP> d-------- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Mes documents
    2009-02-17 12:56 . 2009-01-25 17:14 <REP> dr------- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Menu Démarrer
    2009-02-17 12:56 . 2009-01-25 17:14 <REP> d-------- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Favoris
    2009-02-17 12:56 . 2009-02-08 22:03 <REP> d-------- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Bureau
    2009-02-17 12:56 . 2009-02-17 12:56 <REP> d-------- c:\documents and settings\angelique.ET-9R5C7T85V9YF
    2009-02-17 12:29 . 2009-02-17 22:52 <REP> d-------- c:\program files\F-Secure Internet Security
    2009-02-17 12:29 . 2009-02-17 12:29 <REP> d-------- c:\documents and settings\All Users\Application Data\fssg
    2009-02-17 12:28 . 2009-02-17 23:04 33,808 --a------ c:\windows\system32\drivers\klbg.sys
    2009-02-17 12:28 . 2008-04-30 17:06 24,592 --a------ c:\windows\system32\drivers\klim5.sys
    2009-02-17 12:27 . 2009-02-17 00:31 <REP> d-------- c:\documents and settings\All Users\Application Data\f-secure
    2009-02-17 12:07 . 2009-02-17 12:07 <REP> d-------- c:\windows\ERUNT
    2009-02-17 12:07 . 2009-02-17 12:07 579,584 --a--c--- c:\windows\system32\dllcache\user32.dll
    2009-02-17 11:09 . 2009-02-17 11:09 2,335,270 --a------ c:\windows\system32\[u]0/u604.mht
    2009-02-17 11:09 . 2008-04-14 03:33 731,136 --a------ c:\windows\system32\6066.tmp
    2009-02-17 11:09 . 2009-02-17 11:09 54,624 --a------ c:\windows\system32\8855.sys
    2009-02-17 10:25 . 2009-02-17 10:25 <REP> d-------- c:\documents and settings\All Users\Application Data\Nero
    2009-02-17 10:25 . 2009-02-19 09:51 4,870,688 --ahs---- c:\windows\system32\drivers\fidbox.dat
    2009-02-17 10:25 . 2009-02-19 09:51 286,752 --ahs---- c:\windows\system32\drivers\fidbox2.dat
    2009-02-17 10:25 . 2009-02-19 09:51 41,228 --ahs---- c:\windows\system32\drivers\fidbox.idx
    2009-02-17 10:25 . 2009-02-19 09:51 3,108 --ahs---- c:\windows\system32\drivers\fidbox2.idx
    2009-02-17 09:32 . 2009-02-17 09:39 <REP> d-------- c:\documents and settings\gege\Pavark
    2009-02-17 02:36 . 2009-02-17 22:39 <REP> d-------- C:\SDFix
    2009-02-17 02:01 . 2008-04-13 19:40 36,352 --a------ c:\windows\system32\drivers\disk.sys
    2009-02-17 01:01 . 2009-02-17 23:01 <REP> d-------- c:\program files\Spybot - Search & Destroy
    2009-02-17 01:01 . 2009-02-17 22:56 <REP> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2009-02-17 00:37 . 2009-02-17 00:37 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
    2009-02-17 00:37 . 2009-02-17 00:37 <REP> d-------- c:\documents and settings\gege\Application Data\Malwarebytes
    2009-02-17 00:37 . 2009-02-17 00:37 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
    2009-02-17 00:37 . 2009-02-11 10:19 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
    2009-02-17 00:37 . 2009-02-11 10:19 15,504 --a------ c:\windows\system32\drivers\mbam.sys
    2009-02-16 21:13 . 2007-01-18 13:00 3,968 --a------ c:\windows\system32\drivers\AvgArCln.sys
    2009-02-16 21:09 . 2009-02-16 22:39 <REP> d-------- c:\program files\Sophos
    2009-02-16 18:41 . 2009-02-16 18:41 <REP> d-------- c:\windows\Sun
    2009-02-16 18:36 . 2009-02-16 18:36 <REP> d-------- c:\program files\Alwil Software
    2009-02-16 11:15 . 2009-02-19 09:12 <REP> d-------- c:\program files\eMule
    2009-02-16 09:54 . 2009-02-16 10:42 <REP> d-------- c:\program files\Serious Sam 2
    2009-02-15 21:39 . 2009-02-15 21:39 <REP> d-------- c:\documents and settings\All Users\Application Data\Age of Empires 3
    2009-02-15 21:33 . 2009-02-17 00:36 <REP> d-------- c:\program files\Hard Disk Sentinel
    2009-02-15 12:16 . 2008-07-29 13:33 446,464 --a------ c:\windows\system32\nvunrm.exe
    2009-02-15 12:16 . 2008-07-29 13:30 6,045 --a------ c:\windows\system32\nvnrm.nvu
    2009-02-15 12:03 . 2008-08-27 13:58 453,152 --a------ c:\windows\system32\NVUNINST.EXE
    2009-02-15 12:03 . 2008-07-10 04:07 7,143 --a------ c:\windows\system32\nvide.nvu
    2009-02-15 11:42 . 2009-02-15 11:57 <REP> d-------- c:\program files\Atheros
    2009-02-15 10:38 . 2009-02-15 10:38 <REP> d-------- C:\Drivers
    2009-02-14 22:15 . 2009-02-14 22:15 <REP> d-------- c:\documents and settings\All Users\Application Data\Blizzard
    2009-02-14 22:07 . 2009-02-16 11:19 <REP> d-------- c:\program files\Fichiers communs\Blizzard Entertainment
    2009-02-14 19:09 . 2008-04-13 19:40 43,904 --a------ c:\windows\system32\drivers\sbp2port.sys
    2009-02-14 19:09 . 2008-04-13 19:40 43,904 --a--c--- c:\windows\system32\dllcache\sbp2port.sys
    2009-02-14 16:38 . 2009-02-14 16:38 <REP> d-------- c:\documents and settings\All Users\Application Data\ATI
    2009-02-14 16:35 . 2009-02-14 16:36 <REP> d-------- c:\program files\ATI Technologies
    2009-02-14 16:35 . 2009-01-13 21:05 593,920 --------- c:\windows\system32\ati2sgag.exe
    2009-02-14 16:33 . 2008-08-21 02:37 3,107,788 -ra------ c:\windows\system32\ativvaxx.dat
    2009-02-14 16:33 . 2008-08-21 02:37 3,107,788 -ra------ c:\windows\system32\ativva5x.dat
    2009-02-14 16:33 . 2008-08-21 02:37 887,724 -ra------ c:\windows\system32\ativva6x.dat
    2009-02-14 16:33 . 2009-01-14 05:49 425,984 --a------ c:\windows\system32\ATIDEMGX.dll
    2009-02-14 16:33 . 2009-01-14 04:37 307,200 --a------ c:\windows\system32\atiiiexx.dll
    2009-02-14 16:33 . 2008-10-29 23:13 180,720 --a------ c:\windows\system32\atiicdxx.dat
    2009-02-14 16:33 . 2008-11-21 04:26 15,362 --a------ c:\windows\atiogl.xml
    2009-02-14 16:33 . 2007-08-31 14:20 7,167 -ra------ c:\windows\system32\atifglpf.xml
    2009-02-14 16:25 . 2009-02-14 16:25 10 --a------ c:\windows\WININIT.INI
    2009-02-14 12:42 . 2009-02-14 12:42 319 --a------ c:\windows\game.ini
    2009-02-14 12:34 . 2009-02-14 12:34 <REP> d-------- c:\program files\Activision
    2009-02-14 12:32 . 2009-02-14 12:32 <REP> d--hs---- c:\windows\ftpcache
    2009-02-14 11:35 . 2006-05-20 16:16 1,184,984 --a------ c:\windows\system32\wvc1dmod.dll
    2009-02-14 11:35 . 2006-05-11 19:21 626,688 --a------ c:\windows\system32\vp7vfw.dll
    2009-02-14 10:23 . 2009-02-14 10:23 <REP> d-------- c:\documents and settings\gege\Application Data\ATI
    2009-02-14 10:17 . 2009-02-14 15:35 <REP> d-------- C:\ATI
    2009-02-14 10:06 . 2009-02-14 10:06 0 --a------ c:\windows\ativpsrm.bin
    2009-02-14 10:05 . 2008-07-02 20:38 89,600 --a------ c:\windows\system32\drivers\AtiHdmi.sys
    2009-02-13 17:04 . 2009-02-13 17:04 <REP> d--h----- c:\documents and settings\All Users\Application Data\~0
    2009-02-13 15:01 . 2009-02-13 15:47 <REP> d-------- c:\documents and settings\gege\Application Data\LimeWire
    2009-02-13 15:00 . 2009-02-13 15:00 <REP> d-------- c:\program files\Java
    2009-02-13 15:00 . 2009-02-16 18:40 410,984 --a------ c:\windows\system32\deploytk.dll
    2009-02-13 15:00 . 2009-02-16 18:40 73,728 --a------ c:\windows\system32\javacpl.cpl
    2009-02-13 12:40 . 2009-02-13 12:40 <REP> d-------- c:\program files\CCleaner
    2009-02-13 12:07 . 2009-02-13 12:07 <REP> d-------- c:\documents and settings\gege\Application Data\Uniblue
    2009-02-12 22:15 . 2002-12-10 02:20 102,439 --a------ c:\windows\system32\sipr3260.dll
    2009-02-12 22:11 . 2009-02-14 11:35 <REP> d-------- c:\program files\VSO
    2009-02-12 22:11 . 2009-02-15 15:37 <REP> d-------- c:\documents and settings\gege\Application Data\Vso
    2009-02-12 22:11 . 2006-09-29 13:24 217,127 --a------ c:\windows\system32\drv43260.dll
    2009-02-12 22:11 . 2006-09-29 13:25 208,935 --a------ c:\windows\system32\drv33260.dll
    2009-02-12 22:11 . 2006-09-29 13:26 176,165 --a------ c:\windows\system32\drv23260.dll
    2009-02-12 22:11 . 2007-03-18 21:37 65,602 --a------ c:\windows\system32\cook3260.dll
    2009-02-12 22:11 . 2009-02-14 11:35 47,360 --a------ c:\windows\system32\drivers\pcouffin.sys
    2009-02-12 22:11 . 2009-02-14 11:35 47,360 --a------ c:\documents and settings\gege\Application Data\pcouffin.sys
    2009-02-12 20:08 . 2009-02-12 20:08 23,392 --a------ c:\windows\system32\nscompat.tlb
    2009-02-12 20:08 . 2009-02-12 20:08 16,832 --a------ c:\windows\system32\amcompat.tlb
    2009-02-10 12:28 . 2009-02-14 18:40 <REP> d-------- c:\program files\Microsoft Games
    2009-02-10 12:28 . 1997-07-06 19:22 756,736 --------- c:\windows\system32\ir41_32.dll
    2009-02-10 12:24 . 2009-02-10 12:24 <REP> d-------- c:\windows\Logs
    2009-02-10 12:24 . 2009-02-14 12:25 138,464 --a------ c:\windows\system32\drivers\PnkBstrK.sys
    2009-02-10 12:24 . 2009-02-14 12:25 111,928 --a------ c:\windows\system32\PnkBstrB.exe
    2009-02-10 12:24 . 2009-02-12 14:55 22,328 --a------ c:\documents and settings\gege\Application Data\PnkBstrK.sys
    2009-02-10 12:23 . 2009-02-12 14:54 682,280 --a------ c:\windows\system32\pbsvc.exe
    2009-02-10 12:23 . 2009-02-12 14:54 66,872 --a------ c:\windows\system32\PnkBstrA.exe

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-02-18 11:59 --------- d--h--w c:\program files\InstallShield Installation Information
    2009-02-14 17:39 --------- d-----w c:\program files\Fichiers communs\InstallShield
    2009-01-25 17:49 --------- d-----w c:\program files\Picasa2
    2009-01-25 17:48 --------- d-----w c:\program files\Google
    2009-01-25 14:03 --------- d-----w c:\program files\ASUS
    2009-01-25 14:00 --------- d-----w c:\program files\InterVideo Information Service
    2009-01-25 13:59 --------- d-----w c:\program files\InterVideo
    2009-01-25 12:41 --------- d-----w c:\program files\NVIDIA Corporation
    2009-01-25 12:34 --------- d-----w c:\program files\Analog Devices
    2009-01-25 11:24 --------- d-----w c:\program files\VideoLAN
    2009-01-25 09:55 --------- d-----w c:\program files\ma-config.com
    2009-01-25 09:55 --------- d-----w c:\documents and settings\All Users\Application Data\ma-config.com
    2009-01-25 09:31 --------- d-----w c:\program files\Neuf
    2009-01-25 09:20 --------- d-----w c:\program files\microsoft frontpage
    2009-01-25 09:18 --------- d-----w c:\program files\Services en ligne
    2009-01-15 07:19 6,301,248 ------w c:\windows\system32\drivers\nv4_mini.sys
    2009-01-14 07:14 3,455,488 ----a-w c:\windows\system32\drivers\ati2mtag.sys
    2009-01-14 03:43 53,248 ----a-w c:\windows\system32\drivers\ati2erec.dll
    .

    ((((((((((((((((((((((((((((( SnapShot@2009-02-17_ 2.00.04.79 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2009-02-10 11:26:26 68,608 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2009-02-18 11:42:50 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    - 2009-02-10 11:26:32 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-02-18 11:42:53 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    - 2009-02-10 11:26:32 4,308,992 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2009-02-18 11:42:38 4,444,160 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    - 2009-02-10 11:26:33 482,304 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2009-02-18 11:42:54 483,840 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    - 2009-02-10 11:26:31 2,878,976 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2009-02-18 11:42:46 3,036,160 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    - 2009-02-10 11:26:23 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2009-02-18 11:42:55 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    - 2009-02-10 11:26:23 114,176 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2009-02-18 11:42:55 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    - 2009-02-10 11:26:36 260,096 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2009-02-18 11:42:53 261,120 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    - 2009-02-10 11:26:28 5,025,792 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2009-02-18 11:42:43 5,431,296 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    - 2009-02-10 11:26:26 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-02-18 11:42:48 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    - 2009-02-10 11:26:23 503,808 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2009-02-18 11:42:44 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    - 2009-02-10 11:26:24 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2009-02-18 11:42:50 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    - 2009-02-10 11:26:32 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2009-02-18 11:42:51 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    - 2009-02-10 11:26:32 36,864 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2009-02-18 11:42:52 77,824 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    - 2009-02-10 11:26:32 5,632 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2009-02-18 11:42:52 6,656 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    - 2009-02-10 11:26:25 413,696 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2009-02-18 11:42:55 348,160 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    - 2009-02-10 11:26:25 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-02-18 11:42:55 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    - 2009-02-10 11:26:25 647,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2009-02-18 11:42:56 655,360 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    - 2009-02-10 11:26:26 73,728 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2009-02-18 11:42:57 77,824 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    - 2009-02-10 11:26:25 745,472 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2009-02-18 11:42:52 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    - 2009-02-10 11:26:37 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2009-02-18 11:42:52 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2009-02-10 11:26:37 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2009-02-18 11:42:51 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    - 2009-02-10 11:26:22 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2009-02-18 11:42:54 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    - 2009-02-10 11:26:37 667,648 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2009-02-18 11:42:51 671,744 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    - 2009-02-10 11:26:37 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2009-02-18 11:42:39 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    - 2009-02-10 11:26:23 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2009-02-18 11:42:55 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2009-02-10 11:26:23 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2009-02-18 11:42:51 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    - 2009-02-10 11:26:23 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2009-02-18 11:42:50 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    - 2009-02-10 11:26:35 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2009-02-18 11:42:52 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    - 2009-02-10 11:26:26 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2009-02-18 11:42:53 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    - 2009-02-10 11:26:35 389,120 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2009-02-18 11:42:45 425,984 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    - 2009-02-10 11:26:34 716,800 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2009-02-18 11:42:46 741,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    - 2009-02-10 11:26:24 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2009-02-18 11:42:46 933,888 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    - 2009-02-10 11:26:31 5,050,368 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2009-02-18 11:42:57 5,070,848 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    - 2009-02-10 11:26:27 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2009-02-18 11:42:56 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    - 2009-02-10 11:26:27 397,312 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2009-02-18 11:42:49 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    - 2009-02-10 11:26:27 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2009-02-18 11:42:54 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    - 2009-02-10 11:26:36 700,416 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2009-02-18 11:42:40 630,784 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    - 2009-02-10 11:26:34 368,640 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2009-02-18 11:42:55 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    - 2009-02-10 11:26:36 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2009-02-18 11:42:54 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    - 2009-02-10 11:26:34 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2009-02-18 11:42:53 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    - 2009-02-10 11:26:34 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2009-02-18 11:42:53 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    - 2009-02-10 11:26:26 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-02-18 11:42:40 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    - 2009-02-10 11:26:28 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2009-02-18 11:42:40 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    - 2009-02-10 11:26:36 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2009-02-18 11:42:48 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    - 2009-02-10 11:26:29 86,016 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2009-02-18 11:42:48 90,112 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    - 2009-02-10 11:26:29 823,296 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2009-02-18 11:42:47 839,680 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    - 2009-02-10 11:26:30 5,316,608 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2009-02-18 11:42:49 5,013,504 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    - 2009-02-10 11:26:30 2,035,712 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2009-02-18 11:42:41 2,068,480 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    - 2009-02-10 11:26:35 3,018,752 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2009-02-18 11:42:47 3,076,096 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2009-02-19 08:05:01 27,136 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
    + 2009-02-19 08:05:02 884,736 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
    + 2009-02-19 08:05:02 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
    + 2009-02-19 08:05:02 15,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
    + 2009-02-19 08:05:03 876,544 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
    + 2009-02-19 08:05:03 81,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
    + 2009-02-19 08:05:05 1,695,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
    + 2009-02-19 08:05:05 167,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
    + 2009-02-19 08:05:06 122,880 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Vis#\d0e362fb3f519833bb02a486ff2751e1\Microsoft.Build.VisualJSharp.ni.dll
    + 2009-02-19 08:05:07 1,740,800 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
    + 2009-02-19 07:25:54 11,722,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
    + 2009-02-19 08:05:08 1,011,712 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
    + 2009-02-19 07:26:11 7,049,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
    + 2009-02-19 08:05:09 1,798,144 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
    + 2009-02-19 07:26:23 10,969,088 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
    + 2009-02-19 08:05:10 1,224,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
    + 2009-02-19 08:05:11 512,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
    + 2009-02-19 07:26:28 229,376 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
    + 2009-02-19 07:26:27 1,667,072 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\[u]0/ue83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
    + 2009-02-19 08:05:12 659,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
    + 2009-02-19 08:05:12 294,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
    + 2009-02-19 08:05:13 733,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
    + 2009-02-19 08:05:13 233,472 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
    + 2009-02-19 08:05:14 679,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
    + 2009-02-19 08:05:24 2,342,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
    + 2009-02-19 08:05:25 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
    + 2009-02-19 08:05:26 1,986,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
    + 2009-02-19 08:05:22 12,509,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
    + 2009-02-19 07:26:39 13,193,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
    + 2009-02-19 07:26:45 5,771,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
    + 2009-02-19 07:26:04 8,265,728 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
    + 2009-02-19 08:05:26 33,280 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjscor\3ec6ad2c76a5f150415c0262df1c6a61\vjscor.ni.dll
    + 2009-02-19 08:05:27 139,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\VJSharpCodeProvider\200bb0de6d7ca7451fe6eb83ed1d66d1\VJSharpCodeProvider.ni.dll
    + 2009-02-19 08:05:27 34,816 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjsjbc\d4f226ec3f3048fad662c91f982db186\vjsjbc.ni.dll
    + 2009-02-19 08:05:32 8,429,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjslib\706a48380549750ee1305b7b57b38148\vjslib.ni.dll
    + 2009-02-19 08:05:33 48,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjslibcw\c93f9cf51ac036bdbe48948a3691f74a\vjslibcw.ni.dll
    + 2009-02-19 08:05:35 2,674,688 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\VJSSupUILib\b4fd86614b1a4dd0c11a6ad53e60d335\VJSSupUILib.ni.dll
    + 2009-02-19 08:05:35 50,176 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjsvwaux\aed9094b087f3adcb8a2b84e5247f612\vjsvwaux.ni.dll
    + 2009-02-19 08:05:39 7,368,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjswfc\[u]0/udd7002c5591b5ca694be863d4965989\vjswfc.ni.dll
    + 2009-02-19 08:05:40 25,600 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\VjsWfcBrowserStubLib\d8845b6d3de41990b475af94e7b0bac1\VjsWfcBrowserStubLib.ni.dll
    + 2009-02-19 08:05:40 450,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjswfccw\20fa8c7ad96c7f1d2f35b00ccf0f20dc\vjswfccw.ni.dll
    + 2009-02-19 08:05:43 3,633,152 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjswfchtml\b5c541fc2f3a1d684157edc29a701bbb\vjswfchtml.ni.dll
    + 2009-02-10 11:26:34 299,008 ------w c:\windows\assembly\temp\W5YBK1ENW5\System.Runtime.Remoting.dll
    + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\ERDNT\subs\ERDNT.EXE
    + 2008-08-07 14:27:04 163,328 ----a-w c:\windows\ERUNT\SDFIX\ERDNT.EXE
    + 2009-02-17 11:07:10 3,002,368 ----a-w c:\windows\ERUNT\SDFIX\Users\[u]0/u0000001\NTUSER.DAT
    + 2009-02-17 11:07:10 192,512 ----a-w c:\windows\ERUNT\SDFIX\Users\[u]0/u0000002\UsrClass.dat
    + 2008-08-07 14:27:04 163,328 ----a-w c:\windows\ERUNT\SDFIX_First_Run\ERDNT.EXE
    + 2009-02-17 11:07:09 3,002,368 ----a-w c:\windows\ERUNT\SDFIX_First_Run\Users\[u]0/u0000001\NTUSER.DAT
    + 2009-02-17 11:07:09 192,512 ----a-w c:\windows\ERUNT\SDFIX_First_Run\Users\[u]0/u0000002\UsrClass.dat
    - 2005-09-23 06:28:52 72,704 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2007-10-24 00:47:38 82,944 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    - 2005-09-23 06:28:52 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2007-10-24 00:47:38 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    - 2005-09-23 06:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2007-10-24 00:47:40 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    - 2005-09-23 06:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2007-10-24 00:47:42 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    - 2005-09-23 06:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2007-10-24 00:47:40 16,896 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    - 2005-09-23 06:28:52 86,528 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    + 2007-10-24 00:47:38 97,280 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    - 2005-09-23 06:28:36 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    + 2007-10-24 00:47:26 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    - 2005-09-23 06:28:42 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    + 2007-10-24 00:47:30 145,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    - 2005-09-23 06:28:44 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    + 2007-10-24 00:47:32 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    - 2005-09-23 06:29:04 183,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    + 2007-10-24 00:47:48 193,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    - 2005-09-23 06:28:28 208,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    + 2007-10-24 00:47:20 218,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    - 2005-09-23 06:28:56 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    + 2007-10-24 00:47:40 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    - 2005-09-23 06:28:58 138,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    + 2007-10-24 00:47:42 147,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    - 2005-09-23 06:28:36 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    + 2007-10-24 00:47:26 99,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    - 2005-09-23 06:28:58 55,488 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2007-10-24 00:47:42 59,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    - 2005-09-23 06:28:32 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2007-10-24 00:47:22 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    - 2005-09-23 06:28:32 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2007-10-24 00:47:22 22,024 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    - 2005-09-23 06:28:32 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    + 2007-10-24 00:47:22 17,928 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    - 2005-09-23 06:28:32 23,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    + 2007-10-24 00:47:22 33,288 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    - 2005-09-23 06:28:32 70,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2007-10-24 00:47:22 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    - 2005-09-23 06:28:32 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    + 2007-10-24 00:47:22 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    - 2005-09-23 06:28:32 26,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    + 2007-10-24 00:47:22 32,776 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    - 2005-09-23 06:28:32 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    + 2007-10-24 00:47:22 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    - 2005-09-23 06:28:32 29,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2007-10-24 00:47:22 33,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2007-10-24 00:47:22 33,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    - 2005-09-23 06:28:32 503,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    + 2007-10-24 00:47:22 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    - 2005-09-23 06:28:56 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    + 2007-10-24 00:47:40 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    - 2005-09-23 06:28:56 88,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2007-10-24 00:47:40 101,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    - 2005-09-23 06:28:42 76,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    + 2007-10-24 00:47:30 80,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    - 2005-09-23 06:28:42 1,144,832 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    + 2007-10-24 00:47:30 1,162,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    - 2005-09-23 06:28:42 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    + 2007-10-24 00:47:30 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    - 2005-09-23 06:28:58 17,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    + 2007-10-24 00:47:42 27,136 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    - 2005-09-23 06:28:56 68,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    + 2007-10-24 00:47:40 69,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    - 2005-09-23 06:28:44 31,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2007-10-24 00:47:30 35,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    - 2005-09-23 06:28:38 52,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    + 2007-10-24 00:47:28 66,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    - 2005-09-23 06:28:38 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    + 2007-10-24 00:47:28 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    - 2005-09-23 06:29:12 547,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    + 2007-10-24 00:47:54 572,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    - 2005-09-23 06:28:56 788,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    + 2007-10-24 00:47:40 798,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    - 2005-09-23 06:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2007-10-24 00:47:36 18,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    - 2005-09-23 06:28:56 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    + 2007-10-24 00:47:40 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    - 2005-09-23 06:28:56 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    + 2007-10-24 00:47:40 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    - 2005-09-23 06:28:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    + 2007-10-24 00:47:40 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    - 2005-09-23 06:28:56 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    + 2007-10-24 00:47:40 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    - 2005-09-23 06:28:56 224,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    + 2007-10-24 00:47:40 230,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    - 2005-09-23 06:28:56 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2007-10-24 00:47:40 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    - 2005-09-23 06:28:56 55,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    + 2007-10-24 00:47:40 65,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    - 2005-09-23 06:28:56 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2007-10-24 00:47:40 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    - 2005-09-23 06:28:48 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    + 2007-10-24 00:47:34 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    - 2005-09-23 06:28:48 413,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    + 2007-10-24 00:47:36 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    - 2005-09-23 06:28:48 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2007-10-24 00:47:36 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    - 2005-09-23 06:28:48 647,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    + 2007-10-24 00:47:36 655,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    - 2005-09-23 06:28:48 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    + 2007-10-24 00:47:36 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    - 2005-09-23 06:28:48 745,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    + 2007-10-24 00:47:34 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    - 2005-09-23 06:29:10 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2007-10-24 00:47:52 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    - 2005-09-23 06:29:10 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    + 2007-10-24 00:47:52 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    - 2005-09-23 06:29:08 667,648 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    + 2007-10-24 00:47:50 671,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    - 2005-09-23 06:28:30 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    + 2007-10-24 00:47:20 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    - 2005-09-23 06:29:10 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    + 2007-10-24 00:47:52 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    - 2005-09-23 06:28:30 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    + 2007-10-24 00:47:20 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    - 2005-09-23 06:28:30 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2007-10-24 00:47:20 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    - 2005-09-23 06:28:30 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    + 2007-10-24 00:47:20 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    - 2005-09-23 06:28:32 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2007-10-24 00:47:22 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    - 2005-09-23 06:28:48 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    + 2007-10-24 00:47:36 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    - 2005-09-23 06:28:56 800,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2007-10-24 00:47:40 822,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    - 2005-09-23 06:28:56 73,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    + 2007-10-24 00:47:40 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    - 2005-09-23 06:28:56 288,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    + 2007-10-24 00:47:40 308,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    - 2005-09-23 06:28:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    + 2007-10-24 00:47:40 47,104 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    - 2005-09-23 06:28:56 326,144 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2007-10-24 00:47:40 348,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    - 2005-09-23 06:28:56 81,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2007-10-24 00:47:40 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    - 2005-09-23 06:28:56 4,308,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2007-10-24 00:47:40 4,444,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    - 2005-09-23 06:28:56 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    + 2007-10-24 00:47:40 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    - 2005-09-23 06:29:00 330,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    + 2007-10-24 00:47:44 340,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    - 2005-09-23 06:28:56 67,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    + 2007-10-24 00:47:40 77,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    - 2005-09-23 06:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    + 2007-10-24 00:47:36 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    - 2005-09-23 06:28:56 226,816 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    + 2007-10-24 00:47:40 242,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    - 2005-09-23 06:28:56 66,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    + 2007-10-24 00:47:40 70,144 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    - 2005-09-23 06:28:56 10,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    + 2007-10-24 00:47:40 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    - 2005-09-23 06:28:50 5,615,616 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2007-10-24 00:47:36 5,814,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    - 2005-09-23 06:29:00 22,528 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u409\mscorsecr.dll
    + 2007-10-24 00:47:44 31,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u409\mscorsecr.dll
    - 2005-09-23 06:28:56 96,440 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    + 2007-10-24 00:47:40 101,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    - 2005-09-23 06:28:56 14,848 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    + 2007-10-24 00:47:40 24,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    - 2005-09-23 06:28:56 78,336 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    + 2007-10-24 00:47:40 89,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    - 2005-09-23 06:28:50 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    + 2007-10-24 00:47:36 144,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    - 2005-09-23 06:28:56 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2007-10-24 00:47:40 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    - 2005-09-23 06:28:56 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    + 2007-10-24 00:47:40 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    - 2005-09-23 06:29:02 59,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    + 2007-10-24 00:47:46 61,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    - 2005-09-23 06:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2007-10-24 00:47:42 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    - 2005-09-23 06:28:56 107,520 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    + 2007-10-24 00:47:40 119,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    - 2005-09-23 06:29:00 85,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    + 2007-10-24 00:47:44 95,232 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    - 2005-09-23 06:28:56 377,344 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2007-10-24 00:47:40 392,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    - 2005-09-23 06:28:56 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2007-10-24 00:47:40 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    - 2005-09-23 06:28:58 389,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    + 2007-10-24 00:47:42 425,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    - 2005-09-23 06:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    + 2007-10-24 00:47:40 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    - 2005-09-23 06:28:56 2,878,976 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    + 2007-10-24 00:47:40 3,036,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    - 2005-09-23 06:28:56 482,304 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    + 2007-10-24 00:47:40 483,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    - 2005-09-23 06:28:56 716,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    + 2007-10-24 00:47:40 741,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    - 2005-09-23 06:28:38 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    + 2007-10-24 00:47:28 933,888 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    - 2005-09-23 06:28:56 5,050,368 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    + 2007-10-24 00:47:40 5,070,848 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    - 2005-09-23 06:28:56 397,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    + 2007-10-24 00:47:40 401,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    - 2005-09-23 06:28:56 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    + 2007-10-24 00:47:40 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    - 2005-09-23 06:28:56 3,018,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2007-10-24 00:47:40 3,076,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    - 2005-09-23 06:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    + 2007-10-24 00:47:40 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    - 2005-09-23 06:28:56 700,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    + 2007-10-24 00:47:40 630,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    - 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2007-10-24 00:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    - 2005-09-23 06:28:56 47,616 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    + 2007-10-24 00:47:40 57,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    - 2005-09-23 06:28:56 114,176 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    + 2007-10-24 00:47:40 113,664 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    - 2005-09-23 06:28:56 368,640 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    + 2007-10-24 00:47:40 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    - 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    + 2007-10-24 00:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    - 2005-09-23 06:28:56 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    + 2007-10-24 00:47:40 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    - 2005-09-23 06:28:56 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    + 2007-10-24 00:47:40 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    - 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2007-10-24 00:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    - 2005-09-23 06:28:56 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    + 2007-10-24 00:47:40 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    - 2005-09-23 06:28:56 260,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    + 2007-10-24 00:47:40 261,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    - 2005-09-23 06:28:56 5,025,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2007-10-24 00:47:40 5,431,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    - 2005-09-23 06:28:56 835,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    + 2007-10-24 00:47:40 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    - 2005-09-23 06:28:56 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    + 2007-10-24 00:47:40 90,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    - 2005-09-23 06:28:56 823,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    + 2007-10-24 00:47:40 839,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    - 2005-09-23 06:28:56 5,316,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2007-10-24 00:47:40 5,013,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    - 2005-09-23 06:28:56 2,035,712 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    + 2007-10-24 00:47:40 2,068,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    - 2005-09-23 06:28:56 71,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2007-10-24 00:47:40 81,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    - 2005-09-23 06:29:06 1,140,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2007-10-24 00:47:48 1,172,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    - 2005-09-23 06:28:30 1,306,624 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    + 2007-10-24 00:47:20 1,344,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    - 2005-09-23 06:28:32 298,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2007-10-24 00:47:22 434,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    - 2005-09-23 06:28:56 28,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    + 2007-10-24 00:47:40 37,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    - 2005-09-23 06:28:38 83,456 ----a-w c:\windows\system32\dfshim.dll
    + 2007-10-24 00:47:28 96,760 ----a-w c:\windows\system32\dfshim.dll
    + 2007-03-22 19:24:58 28,160 -c----w c:\windows\system32\dllcache\FilterPipelinePrintProc.dll
    + 2007-03-22 19:25:42 677,376 -c----w c:\windows\system32\dllcache\PrintFilterPipelineSvc.exe
    + 2007-03-23 05:07:54 583,504 -c----w c:\windows\system32\dllcache\XPSSHHDR.dll
    + 2007-03-23 05:07:56 1,683,280 -c----w c:\windows\system32\dllcache\XpsSvcs.dll
    + 2008-07-21 16:34:36 121,872 ----a-w c:\windows\system32\drivers\kl1.sys
    + 2009-02-17 22:04:50 226,832 ----a-w c:\windows\system32\drivers\klif.sys
    + 2008-11-11 18:58:54 25,601 ----a-w c:\windows\system
    0
  4. gegedu17 Messages postés 11 Statut Membre
     
    j'en ai 32 pages.... tu n'as pas tout comment on fait??
    je vais essayer de mettre le fichier word sur free et je te donne le lien
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 325
     
    ---> Peux-tu faire analyser le fichier suivant : c:\windows\system32\8855.sys

    ---> Sur VirusTotal et poster le lien de l'analyse :
    https://www.virustotal.com/gui/
    0
  7. gegedu17 Messages postés 11 Statut Membre
     
    voila! merci de ton aide

    http://www.virustotal.com/fr/analisis/02bc18d19f242f89a241b1b2433b3d29

    0
  8. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 325
     
    1/

    ---> Désinstalle HijackThis.

    ---> Télécharge ToolsCleaner2 sur ton Bureau.
    * Double-clique sur ToolsCleaner2.exe pour le lancer.
    * Clique sur Recherche et laisse le scan agir.
    * Clique sur Suppression pour finaliser.
    * Tu peux, si tu le souhaites, te servir des Options Facultatives.
    * Clique sur Quitter pour obtenir le rapport.
    * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    2/

    ---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
    * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
    * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
    * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

    3/

    ---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.

    ---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème.

    ==Prévention==

    Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

    Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer. Tu peux utiliser l'extension NoScript pour plus de sécurité.

    Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, onglet Mises à jour automatiques).

    Tu peux aussi modifier le fichier Hosts pour améliorer la sécurité de ton PC : Lien

    Par rapport au P2P : Lien

    Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien

    Sois plus vigilant(e) sur Internet ;)
    0
  9. gegedu17 Messages postés 11 Statut Membre
     
    étape 1 ok ^^

    [ Rapport ToolsCleaner version 2.3.1 (par A.Rothstein & dj QUIOU) ]

    -->- Recherche:

    C:\Combofix.txt: trouvé !
    C:\SDFIX: trouvé !
    C:\Qoobox: trouvé !
    C:\Rsit: trouvé !
    C:\Documents and Settings\gege\Bureau\programmes\SdFix.exe: trouvé !
    C:\Documents and Settings\gege\Bureau\programmes\fsbl.exe: trouvé !
    C:\Documents and Settings\gege\Bureau\programmes\ComboFix.exe: trouvé !
    C:\Program Files\trend micro\HijackThis.exe: trouvé !
    C:\Program Files\trend micro\hijackthis.log: trouvé !

    ---------------------------------
    -->- Suppression:

    C:\Documents and Settings\gege\Bureau\programmes\SdFix.exe: supprimé !
    C:\Documents and Settings\gege\Bureau\programmes\fsbl.exe: supprimé !
    C:\Documents and Settings\gege\Bureau\programmes\ComboFix.exe: ERREUR DE SUPPRESSION !!
    C:\Program Files\trend micro\HijackThis.exe: supprimé !
    C:\Combofix.txt: supprimé !
    C:\Program Files\trend micro\hijackthis.log: supprimé !
    C:\SDFIX: supprimé !
    C:\Qoobox: supprimé !
    C:\Rsit: supprimé !
    0
  10. gegedu17
     
    ok j'ai fait tout ca et j'ai tout lu.
    merci beaucoup d'avoir prit tout ce temps pour m'aider.
    bonne continuation
    0
  11. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 325
     
    Tu peux supprimer ToolsCleaner.

    Plus de soucis ?
    0
    1. seesaw Messages postés 351 Statut Membre 8
       
      excuse-moi de t'accaparer comme ça
      mais je t'ai posté des messages sur mon sujet
      et j'ai l'impression qu'ils passent plus!!

      c'est normal???

      car j'ai problème!
      j'ai scané ac Kaspersky et détecte "événements très critiques" et défrag! c nul, nul!!

      encore scuse, mais ça fait 2 mess. que j'aurais écrit pour rien???
      ça commence à me les .....

      (pas toi bien sûr)
      0
  12. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 325
     
    seesaw ---> Le site bogue.
    0
  13. gegedu17
     
    oui tout marche bien maintenant!
    encore merci.
    0
Précédent
  • 1
  • 2