Infection rootkit help - Page 2

Résolu
  1. j'ai ca .

    Date : Futur (événements : 3)
    Analyse (événements : 3)
    17/02/2009 23:22:12 Supprimés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus f:\system volume information\_restore{e02ecb69-b263-48b8-8590-1c69421e854d}\rp118\a0070509.com
    17/02/2009 23:22:12 Détectés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus f:\system volume information\_restore{e02ecb69-b263-48b8-8590-1c69421e854d}\rp118\a0070509.com
    17/02/2009 23:22:12 Supprimés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus f:\system volume information\_restore{e02ecb69-b263-48b8-8590-1c69421e854d}\rp118\a0070508.com
    17/02/2009 23:22:04 Détectés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus f:\system volume information\_restore{e02ecb69-b263-48b8-8590-1c69421e854d}\rp118\a0070508.com
    17/02/2009 23:20:46 Un programme malveillant a été découvert Kaspersky Anti-Virus
    17/02/2009 23:02:13 Les bases sont fortement dépassées Kaspersky Anti-Virus
    Analyse (événements : 3)
    17/02/2009 23:02:13 Lancement de la tâche Kaspersky Anti-Virus Antivirus Fichiers
    Analyse (événements : 3)
    17/02/2009 23:02:13 Lancement de la tâche Kaspersky Anti-Virus Antivirus Courrier et "Chat"
    Analyse (événements : 3)
    17/02/2009 23:02:14 Lancement de la tâche Kaspersky Anti-Virus Antivirus Internet
    Analyse (événements : 3)
    17/02/2009 23:02:14 Lancement de la tâche Kaspersky Anti-Virus Anti-phishing
    Analyse (événements : 3)
    17/02/2009 23:54:42 Interdit Explorateur Windows Ouverture C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
    Analyse (événements : 3)
    17/02/2009 23:02:14 Lancement de la tâche Kaspersky Anti-Virus Défense Proactive
    Analyse (événements : 3)
    17/02/2009 23:02:14 Lancement de la tâche Kaspersky Anti-Virus Analyse rapide
    17/02/2009 23:04:27 Fin de la tâche Kaspersky Anti-Virus Analyse rapide
    17/02/2009 23:07:36 Lancement de la tâche Kaspersky Anti-Virus Analyse complète
    Analyse (événements : 3)
    17/02/2009 23:05:01 Fin de la tâche Kaspersky Anti-Virus Mise à jour
    17/02/2009 23:02:41 Lancement de la tâche Kaspersky Anti-Virus Mise à jour
    Date : Futur (événements : 3)
    Analyse (événements : 3)
    18/02/2009 12:33:38 Un programme malveillant a été découvert Kaspersky Anti-Virus
    18/02/2009 04:59:36 La protection en temps réel ne fonctionne pas Kaspersky Anti-Virus
    18/02/2009 00:13:10 Supprimés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus c:\qoobox\quarantine\f\recycler\s-5-8-52-100000556-100024634-100019059-9874.com.vir
    18/02/2009 00:13:10 Détectés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus c:\qoobox\quarantine\f\recycler\s-5-8-52-100000556-100024634-100019059-9874.com.vir
    18/02/2009 00:13:10 Supprimés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus c:\qoobox\quarantine\f\recycler\s-1-8-97-100014437-100011688-100019248-5298.com.vir
    18/02/2009 00:12:59 Détectés: Rootkit.Win32.TDSS.eyj Kaspersky Anti-Virus c:\qoobox\quarantine\f\recycler\s-1-8-97-100014437-100011688-100019248-5298.com.vir
    18/02/2009 00:05:33 Un programme malveillant a été découvert Kaspersky Anti-Virus
    Analyse (événements : 3)
    18/02/2009 11:07:02 Lancement de la tâche Kaspersky Anti-Virus Antivirus Fichiers
    Analyse (événements : 3)
    18/02/2009 11:07:02 Lancement de la tâche Kaspersky Anti-Virus Antivirus Courrier et "Chat"
    Analyse (événements : 3)
    18/02/2009 11:07:02 Lancement de la tâche Kaspersky Anti-Virus Antivirus Internet
    Analyse (événements : 3)
    18/02/2009 11:07:02 Lancement de la tâche Kaspersky Anti-Virus Anti-phishing
    Analyse (événements : 3)
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 11:07:02 Interdit Kaspersky Anti-Virus Modification REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP8\Trace\Default
    18/02/2009 00:34:07 Interdit Explorateur Windows Ouverture C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
    18/02/2009 00:18:38 Interdit Explorateur Windows Ouverture C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
    18/02/2009 00:13:46 Interdit Explorateur Windows Ouverture C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
    Analyse (événements : 3)
    18/02/2009 14:49:18 Non terminé: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    18/02/2009 14:49:18 Détectés: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    18/02/2009 14:49:06 Détectés: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    18/02/2009 11:07:02 Lancement de la tâche Kaspersky Anti-Virus Défense Proactive
    18/02/2009 00:17:56 Non terminé: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    18/02/2009 00:17:56 Détectés: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    18/02/2009 00:17:47 Détectés: Suspicious driver installation Core Temp C:\DOCUMENTS AND SETTINGS\GEGE\BUREAU\CORE TEMP.EXE
    Analyse (événements : 3)
    18/02/2009 13:00:33 Fin de la tâche Kaspersky Anti-Virus Recherche de virus
    18/02/2009 12:59:39 Lancement de la tâche Kaspersky Anti-Virus Recherche de virus
    18/02/2009 12:33:44 Fin de la tâche Kaspersky Anti-Virus Recherche de virus
    18/02/2009 12:33:16 Lancement de la tâche Kaspersky Anti-Virus Recherche de virus
    18/02/2009 02:15:13 Fin de la tâche Kaspersky Anti-Virus Analyse complète
    18/02/2009 00:31:50 Fin de la tâche Kaspersky Anti-Virus Recherche de virus
    18/02/2009 00:31:49 Lancement de la tâche Kaspersky Anti-Virus Recherche de virus
    Analyse (événements : 3)
    18/02/2009 19:28:07 Fin de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 19:27:08 Lancement de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 17:22:32 Fin de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 15:47:09 Lancement de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 13:28:26 Fin de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 13:27:08 Lancement de la tâche Kaspersky Anti-Virus Mise à jour
    18/02/2009 11:08:27 Fin de la tâche Kaspersky Anti-Virus Mise à jour Tous les composants n'ont pas été mis à jour
    18/02/2009 11:08:00 Lancement de la tâche Kaspersky Anti-Virus Mise à jour

    alors ca a l'air bon non?
    merci de ton aide
    1. Modérateur
      /!\ Seul gegedu17 peut suivre cette procédure. /!\

      1/

      ---> Ouvre le Bloc-notes.

      ---> Copie le texte ci-dessous par sélection puis Ctrl+C :

      KillAll::

      File::
      c:\windows\system32\drivers\gaopdxxboejkdu.sy_
      c:\windows\system32\drivers\gaopdxptusvurm.sy_
      c:\windows\system32\gaopdxcounte_

      --> Colle la sélection dans le Bloc-notes.

      --> Enregistre ce fichier sur le Bureau (Impératif).

      --> Nom du fichier : CFScript
      --> Type du fichier : tous les fichiers
      --> Clique sur Enregistrer.
      --> Quitte le Bloc-notes.

      2/

      --> Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture :
      http://www.searchengines.pl/phpbb203/pliki/picasso/virus/programs/combofix/combofix_cfscript.gif

      --> Une fenêtre bleue va apparaître : au message qui apparaît, tu acceptes.

      --> Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises : c'est normal !
      Ne touche à rien tant que le scan n'est pas terminé.

      --> Une fois le scan achevé, un rapport va s'afficher : poste-le.

      --> Si le fichier ne s'ouvre pas, il se trouve ici C:\Combofix.txt
      1. ok merci beaucoup j'etais persuadé de plus rien avoir mais je préféré quand même demander!
        c'etait quoi??

        voila le rapport

        ComboFix 09-02-17.02 - gege 2009-02-19 9:50:00.4 - NTFSx86
        Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.3070.2496 [GMT 1:00]
        Lancé depuis: c:\documents and settings\gege\Bureau\ComboFix.exe
        Commutateurs utilisés :: c:\documents and settings\gege\Bureau\CFScript.txt
        AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated)
        * Un nouveau point de restauration a été créé

        FILE ::
        c:\windows\system32\drivers\gaopdxptusvurm.sy_
        c:\windows\system32\drivers\gaopdxxboejkdu.sy_
        c:\windows\system32\gaopdxcounte_
        .

        (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
        .

        c:\windows\system32\drivers\gaopdxptusvurm.sy_
        c:\windows\system32\drivers\gaopdxxboejkdu.sy_
        c:\windows\system32\gaopdxcounte_

        .
        ((((((((((((((((((((((((((((( Fichiers créés du 2009-01-19 au 2009-02-19 ))))))))))))))))))))))))))))))))))))
        .

        2009-02-18 22:05 . 2009-02-18 22:06 <REP> d-------- c:\program files\Winamp
        2009-02-18 22:05 . 2009-02-18 22:10 <REP> d-------- c:\documents and settings\gege\Application Data\Winamp
        2009-02-18 22:05 . 2007-03-08 00:51 129,784 --------- c:\windows\system32\pxafs.dll
        2009-02-18 13:23 . 2009-02-18 13:23 262,144 --a------ c:\windows\system32\wrap_oal.dll
        2009-02-18 13:23 . 2009-02-18 13:23 86,016 --a------ c:\windows\system32\OpenAL32.dll
        2009-02-18 13:01 . 2009-02-18 13:01 <REP> d-------- c:\windows\system32\Futuremark
        2009-02-18 13:01 . 2004-10-25 20:02 21,664 --a------ c:\windows\system32\drivers\Entech.sys
        2009-02-18 13:01 . 1999-11-02 10:01 6,173 --a------ c:\windows\system32\drivers\Entech.vxd
        2009-02-18 13:01 . 2004-06-22 15:44 5,632 --a------ c:\windows\system32\drivers\Entech64.sys
        2009-02-18 13:01 . 2001-11-19 19:05 3,972 --a------ c:\windows\system32\drivers\PciBus.sys
        2009-02-18 12:59 . 2009-02-18 12:59 <REP> d-------- c:\program files\Futuremark
        2009-02-18 12:46 . 2006-06-29 13:07 14,048 --------- c:\windows\system32\spmsg2.dll
        2009-02-17 22:57 . 2009-02-17 22:57 <REP> d-------- c:\program files\Kaspersky Lab
        2009-02-17 22:57 . 2009-02-19 09:53 <REP> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab
        2009-02-17 22:57 . 2009-02-17 23:04 101,287 --a------ c:\windows\system32\drivers\klin.dat
        2009-02-17 22:57 . 2009-02-17 23:04 89,601 --a------ c:\windows\system32\drivers\klick.dat
        2009-02-17 22:40 . 2009-02-17 22:40 <REP> d-------- C:\rsit
        2009-02-17 22:40 . 2009-02-17 22:40 <REP> d-------- c:\program files\trend micro
        2009-02-17 22:36 . 2009-02-17 22:36 <REP> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
        2009-02-17 13:01 . 2009-01-25 17:14 <REP> d--h----- c:\documents and settings\angelique\Voisinage réseau
        2009-02-17 13:01 . 2009-01-25 17:14 <REP> d--h----- c:\documents and settings\angelique\Voisinage d'impression
        2009-02-17 13:01 . 2009-01-25 10:18 <REP> d--h----- c:\documents and settings\angelique\Modèles
        2009-02-17 13:01 . 2009-01-25 17:14 <REP> d-------- c:\documents and settings\angelique\Mes documents
        2009-02-17 13:01 . 2009-01-25 17:14 <REP> dr------- c:\documents and settings\angelique\Menu Démarrer
        2009-02-17 13:01 . 2009-01-25 17:14 <REP> d-------- c:\documents and settings\angelique\Favoris
        2009-02-17 13:01 . 2009-02-08 22:03 <REP> d-------- c:\documents and settings\angelique\Bureau
        2009-02-17 13:01 . 2009-02-17 13:01 <REP> d-------- c:\documents and settings\angelique
        2009-02-17 12:56 . 2009-01-25 17:14 <REP> d--h----- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Voisinage réseau
        2009-02-17 12:56 . 2009-01-25 17:14 <REP> d--h----- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Voisinage d'impression
        2009-02-17 12:56 . 2009-01-25 10:18 <REP> d--h----- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Modèles
        2009-02-17 12:56 . 2009-01-25 17:14 <REP> d-------- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Mes documents
        2009-02-17 12:56 . 2009-01-25 17:14 <REP> dr------- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Menu Démarrer
        2009-02-17 12:56 . 2009-01-25 17:14 <REP> d-------- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Favoris
        2009-02-17 12:56 . 2009-02-08 22:03 <REP> d-------- c:\documents and settings\angelique.ET-9R5C7T85V9YF\Bureau
        2009-02-17 12:56 . 2009-02-17 12:56 <REP> d-------- c:\documents and settings\angelique.ET-9R5C7T85V9YF
        2009-02-17 12:29 . 2009-02-17 22:52 <REP> d-------- c:\program files\F-Secure Internet Security
        2009-02-17 12:29 . 2009-02-17 12:29 <REP> d-------- c:\documents and settings\All Users\Application Data\fssg
        2009-02-17 12:28 . 2009-02-17 23:04 33,808 --a------ c:\windows\system32\drivers\klbg.sys
        2009-02-17 12:28 . 2008-04-30 17:06 24,592 --a------ c:\windows\system32\drivers\klim5.sys
        2009-02-17 12:27 . 2009-02-17 00:31 <REP> d-------- c:\documents and settings\All Users\Application Data\f-secure
        2009-02-17 12:07 . 2009-02-17 12:07 <REP> d-------- c:\windows\ERUNT
        2009-02-17 12:07 . 2009-02-17 12:07 579,584 --a--c--- c:\windows\system32\dllcache\user32.dll
        2009-02-17 11:09 . 2009-02-17 11:09 2,335,270 --a------ c:\windows\system32\[u]0/u604.mht
        2009-02-17 11:09 . 2008-04-14 03:33 731,136 --a------ c:\windows\system32\6066.tmp
        2009-02-17 11:09 . 2009-02-17 11:09 54,624 --a------ c:\windows\system32\8855.sys
        2009-02-17 10:25 . 2009-02-17 10:25 <REP> d-------- c:\documents and settings\All Users\Application Data\Nero
        2009-02-17 10:25 . 2009-02-19 09:51 4,870,688 --ahs---- c:\windows\system32\drivers\fidbox.dat
        2009-02-17 10:25 . 2009-02-19 09:51 286,752 --ahs---- c:\windows\system32\drivers\fidbox2.dat
        2009-02-17 10:25 . 2009-02-19 09:51 41,228 --ahs---- c:\windows\system32\drivers\fidbox.idx
        2009-02-17 10:25 . 2009-02-19 09:51 3,108 --ahs---- c:\windows\system32\drivers\fidbox2.idx
        2009-02-17 09:32 . 2009-02-17 09:39 <REP> d-------- c:\documents and settings\gege\Pavark
        2009-02-17 02:36 . 2009-02-17 22:39 <REP> d-------- C:\SDFix
        2009-02-17 02:01 . 2008-04-13 19:40 36,352 --a------ c:\windows\system32\drivers\disk.sys
        2009-02-17 01:01 . 2009-02-17 23:01 <REP> d-------- c:\program files\Spybot - Search & Destroy
        2009-02-17 01:01 . 2009-02-17 22:56 <REP> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
        2009-02-17 00:37 . 2009-02-17 00:37 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
        2009-02-17 00:37 . 2009-02-17 00:37 <REP> d-------- c:\documents and settings\gege\Application Data\Malwarebytes
        2009-02-17 00:37 . 2009-02-17 00:37 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
        2009-02-17 00:37 . 2009-02-11 10:19 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
        2009-02-17 00:37 . 2009-02-11 10:19 15,504 --a------ c:\windows\system32\drivers\mbam.sys
        2009-02-16 21:13 . 2007-01-18 13:00 3,968 --a------ c:\windows\system32\drivers\AvgArCln.sys
        2009-02-16 21:09 . 2009-02-16 22:39 <REP> d-------- c:\program files\Sophos
        2009-02-16 18:41 . 2009-02-16 18:41 <REP> d-------- c:\windows\Sun
        2009-02-16 18:36 . 2009-02-16 18:36 <REP> d-------- c:\program files\Alwil Software
        2009-02-16 11:15 . 2009-02-19 09:12 <REP> d-------- c:\program files\eMule
        2009-02-16 09:54 . 2009-02-16 10:42 <REP> d-------- c:\program files\Serious Sam 2
        2009-02-15 21:39 . 2009-02-15 21:39 <REP> d-------- c:\documents and settings\All Users\Application Data\Age of Empires 3
        2009-02-15 21:33 . 2009-02-17 00:36 <REP> d-------- c:\program files\Hard Disk Sentinel
        2009-02-15 12:16 . 2008-07-29 13:33 446,464 --a------ c:\windows\system32\nvunrm.exe
        2009-02-15 12:16 . 2008-07-29 13:30 6,045 --a------ c:\windows\system32\nvnrm.nvu
        2009-02-15 12:03 . 2008-08-27 13:58 453,152 --a------ c:\windows\system32\NVUNINST.EXE
        2009-02-15 12:03 . 2008-07-10 04:07 7,143 --a------ c:\windows\system32\nvide.nvu
        2009-02-15 11:42 . 2009-02-15 11:57 <REP> d-------- c:\program files\Atheros
        2009-02-15 10:38 . 2009-02-15 10:38 <REP> d-------- C:\Drivers
        2009-02-14 22:15 . 2009-02-14 22:15 <REP> d-------- c:\documents and settings\All Users\Application Data\Blizzard
        2009-02-14 22:07 . 2009-02-16 11:19 <REP> d-------- c:\program files\Fichiers communs\Blizzard Entertainment
        2009-02-14 19:09 . 2008-04-13 19:40 43,904 --a------ c:\windows\system32\drivers\sbp2port.sys
        2009-02-14 19:09 . 2008-04-13 19:40 43,904 --a--c--- c:\windows\system32\dllcache\sbp2port.sys
        2009-02-14 16:38 . 2009-02-14 16:38 <REP> d-------- c:\documents and settings\All Users\Application Data\ATI
        2009-02-14 16:35 . 2009-02-14 16:36 <REP> d-------- c:\program files\ATI Technologies
        2009-02-14 16:35 . 2009-01-13 21:05 593,920 --------- c:\windows\system32\ati2sgag.exe
        2009-02-14 16:33 . 2008-08-21 02:37 3,107,788 -ra------ c:\windows\system32\ativvaxx.dat
        2009-02-14 16:33 . 2008-08-21 02:37 3,107,788 -ra------ c:\windows\system32\ativva5x.dat
        2009-02-14 16:33 . 2008-08-21 02:37 887,724 -ra------ c:\windows\system32\ativva6x.dat
        2009-02-14 16:33 . 2009-01-14 05:49 425,984 --a------ c:\windows\system32\ATIDEMGX.dll
        2009-02-14 16:33 . 2009-01-14 04:37 307,200 --a------ c:\windows\system32\atiiiexx.dll
        2009-02-14 16:33 . 2008-10-29 23:13 180,720 --a------ c:\windows\system32\atiicdxx.dat
        2009-02-14 16:33 . 2008-11-21 04:26 15,362 --a------ c:\windows\atiogl.xml
        2009-02-14 16:33 . 2007-08-31 14:20 7,167 -ra------ c:\windows\system32\atifglpf.xml
        2009-02-14 16:25 . 2009-02-14 16:25 10 --a------ c:\windows\WININIT.INI
        2009-02-14 12:42 . 2009-02-14 12:42 319 --a------ c:\windows\game.ini
        2009-02-14 12:34 . 2009-02-14 12:34 <REP> d-------- c:\program files\Activision
        2009-02-14 12:32 . 2009-02-14 12:32 <REP> d--hs---- c:\windows\ftpcache
        2009-02-14 11:35 . 2006-05-20 16:16 1,184,984 --a------ c:\windows\system32\wvc1dmod.dll
        2009-02-14 11:35 . 2006-05-11 19:21 626,688 --a------ c:\windows\system32\vp7vfw.dll
        2009-02-14 10:23 . 2009-02-14 10:23 <REP> d-------- c:\documents and settings\gege\Application Data\ATI
        2009-02-14 10:17 . 2009-02-14 15:35 <REP> d-------- C:\ATI
        2009-02-14 10:06 . 2009-02-14 10:06 0 --a------ c:\windows\ativpsrm.bin
        2009-02-14 10:05 . 2008-07-02 20:38 89,600 --a------ c:\windows\system32\drivers\AtiHdmi.sys
        2009-02-13 17:04 . 2009-02-13 17:04 <REP> d--h----- c:\documents and settings\All Users\Application Data\~0
        2009-02-13 15:01 . 2009-02-13 15:47 <REP> d-------- c:\documents and settings\gege\Application Data\LimeWire
        2009-02-13 15:00 . 2009-02-13 15:00 <REP> d-------- c:\program files\Java
        2009-02-13 15:00 . 2009-02-16 18:40 410,984 --a------ c:\windows\system32\deploytk.dll
        2009-02-13 15:00 . 2009-02-16 18:40 73,728 --a------ c:\windows\system32\javacpl.cpl
        2009-02-13 12:40 . 2009-02-13 12:40 <REP> d-------- c:\program files\CCleaner
        2009-02-13 12:07 . 2009-02-13 12:07 <REP> d-------- c:\documents and settings\gege\Application Data\Uniblue
        2009-02-12 22:15 . 2002-12-10 02:20 102,439 --a------ c:\windows\system32\sipr3260.dll
        2009-02-12 22:11 . 2009-02-14 11:35 <REP> d-------- c:\program files\VSO
        2009-02-12 22:11 . 2009-02-15 15:37 <REP> d-------- c:\documents and settings\gege\Application Data\Vso
        2009-02-12 22:11 . 2006-09-29 13:24 217,127 --a------ c:\windows\system32\drv43260.dll
        2009-02-12 22:11 . 2006-09-29 13:25 208,935 --a------ c:\windows\system32\drv33260.dll
        2009-02-12 22:11 . 2006-09-29 13:26 176,165 --a------ c:\windows\system32\drv23260.dll
        2009-02-12 22:11 . 2007-03-18 21:37 65,602 --a------ c:\windows\system32\cook3260.dll
        2009-02-12 22:11 . 2009-02-14 11:35 47,360 --a------ c:\windows\system32\drivers\pcouffin.sys
        2009-02-12 22:11 . 2009-02-14 11:35 47,360 --a------ c:\documents and settings\gege\Application Data\pcouffin.sys
        2009-02-12 20:08 . 2009-02-12 20:08 23,392 --a------ c:\windows\system32\nscompat.tlb
        2009-02-12 20:08 . 2009-02-12 20:08 16,832 --a------ c:\windows\system32\amcompat.tlb
        2009-02-10 12:28 . 2009-02-14 18:40 <REP> d-------- c:\program files\Microsoft Games
        2009-02-10 12:28 . 1997-07-06 19:22 756,736 --------- c:\windows\system32\ir41_32.dll
        2009-02-10 12:24 . 2009-02-10 12:24 <REP> d-------- c:\windows\Logs
        2009-02-10 12:24 . 2009-02-14 12:25 138,464 --a------ c:\windows\system32\drivers\PnkBstrK.sys
        2009-02-10 12:24 . 2009-02-14 12:25 111,928 --a------ c:\windows\system32\PnkBstrB.exe
        2009-02-10 12:24 . 2009-02-12 14:55 22,328 --a------ c:\documents and settings\gege\Application Data\PnkBstrK.sys
        2009-02-10 12:23 . 2009-02-12 14:54 682,280 --a------ c:\windows\system32\pbsvc.exe
        2009-02-10 12:23 . 2009-02-12 14:54 66,872 --a------ c:\windows\system32\PnkBstrA.exe

        .
        (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
        .
        2009-02-18 11:59 --------- d--h--w c:\program files\InstallShield Installation Information
        2009-02-14 17:39 --------- d-----w c:\program files\Fichiers communs\InstallShield
        2009-01-25 17:49 --------- d-----w c:\program files\Picasa2
        2009-01-25 17:48 --------- d-----w c:\program files\Google
        2009-01-25 14:03 --------- d-----w c:\program files\ASUS
        2009-01-25 14:00 --------- d-----w c:\program files\InterVideo Information Service
        2009-01-25 13:59 --------- d-----w c:\program files\InterVideo
        2009-01-25 12:41 --------- d-----w c:\program files\NVIDIA Corporation
        2009-01-25 12:34 --------- d-----w c:\program files\Analog Devices
        2009-01-25 11:24 --------- d-----w c:\program files\VideoLAN
        2009-01-25 09:55 --------- d-----w c:\program files\ma-config.com
        2009-01-25 09:55 --------- d-----w c:\documents and settings\All Users\Application Data\ma-config.com
        2009-01-25 09:31 --------- d-----w c:\program files\Neuf
        2009-01-25 09:20 --------- d-----w c:\program files\microsoft frontpage
        2009-01-25 09:18 --------- d-----w c:\program files\Services en ligne
        2009-01-15 07:19 6,301,248 ------w c:\windows\system32\drivers\nv4_mini.sys
        2009-01-14 07:14 3,455,488 ----a-w c:\windows\system32\drivers\ati2mtag.sys
        2009-01-14 03:43 53,248 ----a-w c:\windows\system32\drivers\ati2erec.dll
        .

        ((((((((((((((((((((((((((((( SnapShot@2009-02-17_ 2.00.04.79 )))))))))))))))))))))))))))))))))))))))))
        .
        - 2009-02-10 11:26:26 68,608 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
        + 2009-02-18 11:42:50 69,120 ----a-w c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
        - 2009-02-10 11:26:32 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
        + 2009-02-18 11:42:53 72,192 ----a-w c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
        - 2009-02-10 11:26:32 4,308,992 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
        + 2009-02-18 11:42:38 4,444,160 ----a-w c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
        - 2009-02-10 11:26:33 482,304 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
        + 2009-02-18 11:42:54 483,840 ----a-w c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
        - 2009-02-10 11:26:31 2,878,976 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
        + 2009-02-18 11:42:46 3,036,160 ----a-w c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
        - 2009-02-10 11:26:23 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
        + 2009-02-18 11:42:55 258,048 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
        - 2009-02-10 11:26:23 114,176 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
        + 2009-02-18 11:42:55 113,664 ----a-w c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
        - 2009-02-10 11:26:36 260,096 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
        + 2009-02-18 11:42:53 261,120 ----a-w c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
        - 2009-02-10 11:26:28 5,025,792 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
        + 2009-02-18 11:42:43 5,431,296 ----a-w c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
        - 2009-02-10 11:26:26 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
        + 2009-02-18 11:42:48 10,752 ----a-w c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
        - 2009-02-10 11:26:23 503,808 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
        + 2009-02-18 11:42:44 507,904 ----a-w c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
        - 2009-02-10 11:26:24 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
        + 2009-02-18 11:42:50 13,312 ----a-w c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
        - 2009-02-10 11:26:32 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
        + 2009-02-18 11:42:51 8,192 ----a-w c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
        - 2009-02-10 11:26:32 36,864 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
        + 2009-02-18 11:42:52 77,824 ----a-w c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
        - 2009-02-10 11:26:32 5,632 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
        + 2009-02-18 11:42:52 6,656 ----a-w c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
        - 2009-02-10 11:26:25 413,696 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
        + 2009-02-18 11:42:55 348,160 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
        - 2009-02-10 11:26:25 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
        + 2009-02-18 11:42:55 36,864 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
        - 2009-02-10 11:26:25 647,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
        + 2009-02-18 11:42:56 655,360 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
        - 2009-02-10 11:26:26 73,728 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
        + 2009-02-18 11:42:57 77,824 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
        - 2009-02-10 11:26:25 745,472 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
        + 2009-02-18 11:42:52 749,568 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
        - 2009-02-10 11:26:37 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
        + 2009-02-18 11:42:52 110,592 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
        - 2009-02-10 11:26:37 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
        + 2009-02-18 11:42:51 372,736 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
        - 2009-02-10 11:26:22 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
        + 2009-02-18 11:42:54 28,672 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
        - 2009-02-10 11:26:37 667,648 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
        + 2009-02-18 11:42:51 671,744 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
        - 2009-02-10 11:26:37 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
        + 2009-02-18 11:42:39 5,632 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
        - 2009-02-10 11:26:23 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
        + 2009-02-18 11:42:55 12,800 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
        - 2009-02-10 11:26:23 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
        + 2009-02-18 11:42:51 32,768 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
        - 2009-02-10 11:26:23 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
        + 2009-02-18 11:42:50 7,168 ----a-w c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
        - 2009-02-10 11:26:35 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
        + 2009-02-18 11:42:52 110,592 ----a-w c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
        - 2009-02-10 11:26:26 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
        + 2009-02-18 11:42:53 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
        - 2009-02-10 11:26:35 389,120 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
        + 2009-02-18 11:42:45 425,984 ----a-w c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
        - 2009-02-10 11:26:34 716,800 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
        + 2009-02-18 11:42:46 741,376 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
        - 2009-02-10 11:26:24 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
        + 2009-02-18 11:42:46 933,888 ----a-w c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
        - 2009-02-10 11:26:31 5,050,368 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
        + 2009-02-18 11:42:57 5,070,848 ----a-w c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
        - 2009-02-10 11:26:27 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
        + 2009-02-18 11:42:56 188,416 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
        - 2009-02-10 11:26:27 397,312 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
        + 2009-02-18 11:42:49 401,408 ----a-w c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
        - 2009-02-10 11:26:27 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
        + 2009-02-18 11:42:54 81,920 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
        - 2009-02-10 11:26:36 700,416 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
        + 2009-02-18 11:42:40 630,784 ----a-w c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
        - 2009-02-10 11:26:34 368,640 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
        + 2009-02-18 11:42:55 372,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
        - 2009-02-10 11:26:36 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
        + 2009-02-18 11:42:54 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
        - 2009-02-10 11:26:34 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
        + 2009-02-18 11:42:53 299,008 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
        - 2009-02-10 11:26:34 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
        + 2009-02-18 11:42:53 131,072 ----a-w c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
        - 2009-02-10 11:26:26 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
        + 2009-02-18 11:42:40 258,048 ----a-w c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
        - 2009-02-10 11:26:28 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
        + 2009-02-18 11:42:40 114,688 ----a-w c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
        - 2009-02-10 11:26:36 835,584 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
        + 2009-02-18 11:42:48 884,736 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
        - 2009-02-10 11:26:29 86,016 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
        + 2009-02-18 11:42:48 90,112 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
        - 2009-02-10 11:26:29 823,296 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
        + 2009-02-18 11:42:47 839,680 ----a-w c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
        - 2009-02-10 11:26:30 5,316,608 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
        + 2009-02-18 11:42:49 5,013,504 ----a-w c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
        - 2009-02-10 11:26:30 2,035,712 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
        + 2009-02-18 11:42:41 2,068,480 ----a-w c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
        - 2009-02-10 11:26:35 3,018,752 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
        + 2009-02-18 11:42:47 3,076,096 ----a-w c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
        + 2009-02-19 08:05:01 27,136 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
        + 2009-02-19 08:05:02 884,736 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
        + 2009-02-19 08:05:02 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
        + 2009-02-19 08:05:02 15,360 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
        + 2009-02-19 08:05:03 876,544 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
        + 2009-02-19 08:05:03 81,920 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
        + 2009-02-19 08:05:05 1,695,744 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
        + 2009-02-19 08:05:05 167,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
        + 2009-02-19 08:05:06 122,880 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Vis#\d0e362fb3f519833bb02a486ff2751e1\Microsoft.Build.VisualJSharp.ni.dll
        + 2009-02-19 08:05:07 1,740,800 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
        + 2009-02-19 07:25:54 11,722,752 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
        + 2009-02-19 08:05:08 1,011,712 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
        + 2009-02-19 07:26:11 7,049,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
        + 2009-02-19 08:05:09 1,798,144 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
        + 2009-02-19 07:26:23 10,969,088 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
        + 2009-02-19 08:05:10 1,224,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
        + 2009-02-19 08:05:11 512,000 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
        + 2009-02-19 07:26:28 229,376 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
        + 2009-02-19 07:26:27 1,667,072 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\[u]0/ue83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
        + 2009-02-19 08:05:12 659,456 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
        + 2009-02-19 08:05:12 294,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
        + 2009-02-19 08:05:13 733,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
        + 2009-02-19 08:05:13 233,472 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
        + 2009-02-19 08:05:14 679,936 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
        + 2009-02-19 08:05:24 2,342,912 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
        + 2009-02-19 08:05:25 237,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
        + 2009-02-19 08:05:26 1,986,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
        + 2009-02-19 08:05:22 12,509,184 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
        + 2009-02-19 07:26:39 13,193,216 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
        + 2009-02-19 07:26:45 5,771,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
        + 2009-02-19 07:26:04 8,265,728 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
        + 2009-02-19 08:05:26 33,280 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjscor\3ec6ad2c76a5f150415c0262df1c6a61\vjscor.ni.dll
        + 2009-02-19 08:05:27 139,264 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\VJSharpCodeProvider\200bb0de6d7ca7451fe6eb83ed1d66d1\VJSharpCodeProvider.ni.dll
        + 2009-02-19 08:05:27 34,816 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjsjbc\d4f226ec3f3048fad662c91f982db186\vjsjbc.ni.dll
        + 2009-02-19 08:05:32 8,429,568 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjslib\706a48380549750ee1305b7b57b38148\vjslib.ni.dll
        + 2009-02-19 08:05:33 48,640 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjslibcw\c93f9cf51ac036bdbe48948a3691f74a\vjslibcw.ni.dll
        + 2009-02-19 08:05:35 2,674,688 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\VJSSupUILib\b4fd86614b1a4dd0c11a6ad53e60d335\VJSSupUILib.ni.dll
        + 2009-02-19 08:05:35 50,176 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjsvwaux\aed9094b087f3adcb8a2b84e5247f612\vjsvwaux.ni.dll
        + 2009-02-19 08:05:39 7,368,704 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjswfc\[u]0/udd7002c5591b5ca694be863d4965989\vjswfc.ni.dll
        + 2009-02-19 08:05:40 25,600 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\VjsWfcBrowserStubLib\d8845b6d3de41990b475af94e7b0bac1\VjsWfcBrowserStubLib.ni.dll
        + 2009-02-19 08:05:40 450,560 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjswfccw\20fa8c7ad96c7f1d2f35b00ccf0f20dc\vjswfccw.ni.dll
        + 2009-02-19 08:05:43 3,633,152 ----a-w c:\windows\assembly\NativeImages_v2.0.50727_32\vjswfchtml\b5c541fc2f3a1d684157edc29a701bbb\vjswfchtml.ni.dll
        + 2009-02-10 11:26:34 299,008 ------w c:\windows\assembly\temp\W5YBK1ENW5\System.Runtime.Remoting.dll
        + 2005-10-20 19:02:28 163,328 ----a-w c:\windows\ERDNT\subs\ERDNT.EXE
        + 2008-08-07 14:27:04 163,328 ----a-w c:\windows\ERUNT\SDFIX\ERDNT.EXE
        + 2009-02-17 11:07:10 3,002,368 ----a-w c:\windows\ERUNT\SDFIX\Users\[u]0/u0000001\NTUSER.DAT
        + 2009-02-17 11:07:10 192,512 ----a-w c:\windows\ERUNT\SDFIX\Users\[u]0/u0000002\UsrClass.dat
        + 2008-08-07 14:27:04 163,328 ----a-w c:\windows\ERUNT\SDFIX_First_Run\ERDNT.EXE
        + 2009-02-17 11:07:09 3,002,368 ----a-w c:\windows\ERUNT\SDFIX_First_Run\Users\[u]0/u0000001\NTUSER.DAT
        + 2009-02-17 11:07:09 192,512 ----a-w c:\windows\ERUNT\SDFIX_First_Run\Users\[u]0/u0000002\UsrClass.dat
        - 2005-09-23 06:28:52 72,704 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
        + 2007-10-24 00:47:38 82,944 ----a-w c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
        - 2005-09-23 06:28:52 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
        + 2007-10-24 00:47:38 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp10.dll
        - 2005-09-23 06:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
        + 2007-10-24 00:47:40 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
        - 2005-09-23 06:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
        + 2007-10-24 00:47:42 16,896 ----a-w c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
        - 2005-09-23 06:28:56 7,680 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
        + 2007-10-24 00:47:40 16,896 ----a-w c:\windows\Microsoft.NET\Framework\SharedReg12.dll
        - 2005-09-23 06:28:52 86,528 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
        + 2007-10-24 00:47:38 97,280 ----a-w c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
        - 2005-09-23 06:28:36 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
        + 2007-10-24 00:47:26 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
        - 2005-09-23 06:28:42 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
        + 2007-10-24 00:47:30 145,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
        - 2005-09-23 06:28:44 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
        + 2007-10-24 00:47:32 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
        - 2005-09-23 06:29:04 183,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
        + 2007-10-24 00:47:48 193,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
        - 2005-09-23 06:28:28 208,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
        + 2007-10-24 00:47:20 218,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
        - 2005-09-23 06:28:56 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
        + 2007-10-24 00:47:40 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
        - 2005-09-23 06:28:58 138,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
        + 2007-10-24 00:47:42 147,968 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
        - 2005-09-23 06:28:36 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
        + 2007-10-24 00:47:26 99,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
        - 2005-09-23 06:28:58 55,488 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
        + 2007-10-24 00:47:42 59,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
        - 2005-09-23 06:28:32 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
        + 2007-10-24 00:47:22 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
        - 2005-09-23 06:28:32 10,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
        + 2007-10-24 00:47:22 22,024 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
        - 2005-09-23 06:28:32 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
        + 2007-10-24 00:47:22 17,928 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
        - 2005-09-23 06:28:32 23,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
        + 2007-10-24 00:47:22 33,288 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
        - 2005-09-23 06:28:32 70,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
        + 2007-10-24 00:47:22 84,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
        - 2005-09-23 06:28:32 13,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
        + 2007-10-24 00:47:22 24,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
        - 2005-09-23 06:28:32 26,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
        + 2007-10-24 00:47:22 32,776 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
        - 2005-09-23 06:28:32 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
        + 2007-10-24 00:47:22 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
        - 2005-09-23 06:28:32 29,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
        + 2007-10-24 00:47:22 33,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
        + 2007-10-24 00:47:22 33,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
        - 2005-09-23 06:28:32 503,808 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
        + 2007-10-24 00:47:22 507,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
        - 2005-09-23 06:28:56 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
        + 2007-10-24 00:47:40 106,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
        - 2005-09-23 06:28:56 88,576 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
        + 2007-10-24 00:47:40 101,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
        - 2005-09-23 06:28:42 76,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
        + 2007-10-24 00:47:30 80,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
        - 2005-09-23 06:28:42 1,144,832 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
        + 2007-10-24 00:47:30 1,162,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
        - 2005-09-23 06:28:42 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
        + 2007-10-24 00:47:30 13,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
        - 2005-09-23 06:28:58 17,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
        + 2007-10-24 00:47:42 27,136 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
        - 2005-09-23 06:28:56 68,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
        + 2007-10-24 00:47:40 69,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
        - 2005-09-23 06:28:44 31,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
        + 2007-10-24 00:47:30 35,320 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
        - 2005-09-23 06:28:38 52,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
        + 2007-10-24 00:47:28 66,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
        - 2005-09-23 06:28:38 4,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
        + 2007-10-24 00:47:28 5,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
        - 2005-09-23 06:29:12 547,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
        + 2007-10-24 00:47:54 572,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
        - 2005-09-23 06:28:56 788,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
        + 2007-10-24 00:47:40 798,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
        - 2005-09-23 06:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
        + 2007-10-24 00:47:36 18,936 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
        - 2005-09-23 06:28:56 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
        + 2007-10-24 00:47:40 9,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
        - 2005-09-23 06:28:56 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
        + 2007-10-24 00:47:40 8,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
        - 2005-09-23 06:28:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
        + 2007-10-24 00:47:40 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
        - 2005-09-23 06:28:56 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
        + 2007-10-24 00:47:40 6,656 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
        - 2005-09-23 06:28:56 224,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
        + 2007-10-24 00:47:40 230,904 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
        - 2005-09-23 06:28:56 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
        + 2007-10-24 00:47:40 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
        - 2005-09-23 06:28:56 55,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
        + 2007-10-24 00:47:40 65,032 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
        - 2005-09-23 06:28:56 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
        + 2007-10-24 00:47:40 72,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
        - 2005-09-23 06:28:48 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
        + 2007-10-24 00:47:34 40,960 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
        - 2005-09-23 06:28:48 413,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
        + 2007-10-24 00:47:36 348,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
        - 2005-09-23 06:28:48 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
        + 2007-10-24 00:47:36 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
        - 2005-09-23 06:28:48 647,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
        + 2007-10-24 00:47:36 655,360 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
        - 2005-09-23 06:28:48 73,728 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
        + 2007-10-24 00:47:36 77,824 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
        - 2005-09-23 06:28:48 745,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
        + 2007-10-24 00:47:34 749,568 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
        - 2005-09-23 06:29:10 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
        + 2007-10-24 00:47:52 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
        - 2005-09-23 06:29:10 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
        + 2007-10-24 00:47:52 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
        - 2005-09-23 06:29:08 667,648 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
        + 2007-10-24 00:47:50 671,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
        - 2005-09-23 06:28:30 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
        + 2007-10-24 00:47:20 28,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
        - 2005-09-23 06:29:10 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
        + 2007-10-24 00:47:52 5,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
        - 2005-09-23 06:28:30 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
        + 2007-10-24 00:47:20 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
        - 2005-09-23 06:28:30 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
        + 2007-10-24 00:47:20 12,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
        - 2005-09-23 06:28:30 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
        + 2007-10-24 00:47:20 7,168 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
        - 2005-09-23 06:28:32 87,552 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
        + 2007-10-24 00:47:22 97,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
        - 2005-09-23 06:28:48 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
        + 2007-10-24 00:47:36 69,632 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
        - 2005-09-23 06:28:56 800,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
        + 2007-10-24 00:47:40 822,280 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
        - 2005-09-23 06:28:56 73,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
        + 2007-10-24 00:47:40 83,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
        - 2005-09-23 06:28:56 288,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
        + 2007-10-24 00:47:40 308,224 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
        - 2005-09-23 06:28:56 36,864 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
        + 2007-10-24 00:47:40 47,104 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
        - 2005-09-23 06:28:56 326,144 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
        + 2007-10-24 00:47:40 348,672 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
        - 2005-09-23 06:28:56 81,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
        + 2007-10-24 00:47:40 94,208 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
        - 2005-09-23 06:28:56 4,308,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
        + 2007-10-24 00:47:40 4,444,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
        - 2005-09-23 06:28:56 102,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
        + 2007-10-24 00:47:40 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
        - 2005-09-23 06:29:00 330,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
        + 2007-10-24 00:47:44 340,992 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
        - 2005-09-23 06:28:56 67,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
        + 2007-10-24 00:47:40 77,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
        - 2005-09-23 06:28:50 9,216 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
        + 2007-10-24 00:47:36 18,944 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
        - 2005-09-23 06:28:56 226,816 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
        + 2007-10-24 00:47:40 242,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
        - 2005-09-23 06:28:56 66,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
        + 2007-10-24 00:47:40 70,144 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
        - 2005-09-23 06:28:56 10,240 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
        + 2007-10-24 00:47:40 19,456 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
        - 2005-09-23 06:28:50 5,615,616 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
        + 2007-10-24 00:47:36 5,814,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
        - 2005-09-23 06:29:00 22,528 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u409\mscorsecr.dll
        + 2007-10-24 00:47:44 31,744 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\[u]0/u409\mscorsecr.dll
        - 2005-09-23 06:28:56 96,440 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
        + 2007-10-24 00:47:40 101,880 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
        - 2005-09-23 06:28:56 14,848 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
        + 2007-10-24 00:47:40 24,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
        - 2005-09-23 06:28:56 78,336 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
        + 2007-10-24 00:47:40 89,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
        - 2005-09-23 06:28:50 136,192 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
        + 2007-10-24 00:47:36 144,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
        - 2005-09-23 06:28:56 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
        + 2007-10-24 00:47:40 53,248 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
        - 2005-09-23 06:28:56 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
        + 2007-10-24 00:47:40 32,768 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
        - 2005-09-23 06:29:02 59,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
        + 2007-10-24 00:47:46 61,952 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
        - 2005-09-23 06:28:58 7,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
        + 2007-10-24 00:47:42 16,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
        - 2005-09-23 06:28:56 107,520 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
        + 2007-10-24 00:47:40 119,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
        - 2005-09-23 06:29:00 85,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
        + 2007-10-24 00:47:44 95,232 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
        - 2005-09-23 06:28:56 377,344 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
        + 2007-10-24 00:47:40 392,696 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
        - 2005-09-23 06:28:56 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
        + 2007-10-24 00:47:40 110,592 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
        - 2005-09-23 06:28:58 389,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
        + 2007-10-24 00:47:42 425,984 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
        - 2005-09-23 06:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
        + 2007-10-24 00:47:40 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
        - 2005-09-23 06:28:56 2,878,976 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
        + 2007-10-24 00:47:40 3,036,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
        - 2005-09-23 06:28:56 482,304 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
        + 2007-10-24 00:47:40 483,840 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
        - 2005-09-23 06:28:56 716,800 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
        + 2007-10-24 00:47:40 741,376 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
        - 2005-09-23 06:28:38 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
        + 2007-10-24 00:47:28 933,888 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
        - 2005-09-23 06:28:56 5,050,368 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
        + 2007-10-24 00:47:40 5,070,848 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
        - 2005-09-23 06:28:56 397,312 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
        + 2007-10-24 00:47:40 401,408 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
        - 2005-09-23 06:28:56 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
        + 2007-10-24 00:47:40 188,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
        - 2005-09-23 06:28:56 3,018,752 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
        + 2007-10-24 00:47:40 3,076,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
        - 2005-09-23 06:28:56 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
        + 2007-10-24 00:47:40 81,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
        - 2005-09-23 06:28:56 700,416 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
        + 2007-10-24 00:47:40 630,784 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
        - 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
        + 2007-10-24 00:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
        - 2005-09-23 06:28:56 47,616 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
        + 2007-10-24 00:47:40 57,392 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
        - 2005-09-23 06:28:56 114,176 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
        + 2007-10-24 00:47:40 113,664 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
        - 2005-09-23 06:28:56 368,640 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
        + 2007-10-24 00:47:40 372,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
        - 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
        + 2007-10-24 00:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
        - 2005-09-23 06:28:56 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
        + 2007-10-24 00:47:40 299,008 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
        - 2005-09-23 06:28:56 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
        + 2007-10-24 00:47:40 131,072 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
        - 2005-09-23 06:28:56 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
        + 2007-10-24 00:47:40 258,048 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
        - 2005-09-23 06:28:56 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
        + 2007-10-24 00:47:40 114,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
        - 2005-09-23 06:28:56 260,096 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
        + 2007-10-24 00:47:40 261,120 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
        - 2005-09-23 06:28:56 5,025,792 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
        + 2007-10-24 00:47:40 5,431,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
        - 2005-09-23 06:28:56 835,584 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
        + 2007-10-24 00:47:40 884,736 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
        - 2005-09-23 06:28:56 86,016 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
        + 2007-10-24 00:47:40 90,112 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
        - 2005-09-23 06:28:56 823,296 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
        + 2007-10-24 00:47:40 839,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
        - 2005-09-23 06:28:56 5,316,608 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
        + 2007-10-24 00:47:40 5,013,504 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
        - 2005-09-23 06:28:56 2,035,712 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
        + 2007-10-24 00:47:40 2,068,480 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
        - 2005-09-23 06:28:56 71,680 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
        + 2007-10-24 00:47:40 81,400 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
        - 2005-09-23 06:29:06 1,140,920 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
        + 2007-10-24 00:47:48 1,172,472 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
        - 2005-09-23 06:28:30 1,306,624 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
        + 2007-10-24 00:47:20 1,344,000 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
        - 2005-09-23 06:28:32 298,496 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
        + 2007-10-24 00:47:22 434,688 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
        - 2005-09-23 06:28:56 28,160 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
        + 2007-10-24 00:47:40 37,896 ----a-w c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
        - 2005-09-23 06:28:38 83,456 ----a-w c:\windows\system32\dfshim.dll
        + 2007-10-24 00:47:28 96,760 ----a-w c:\windows\system32\dfshim.dll
        + 2007-03-22 19:24:58 28,160 -c----w c:\windows\system32\dllcache\FilterPipelinePrintProc.dll
        + 2007-03-22 19:25:42 677,376 -c----w c:\windows\system32\dllcache\PrintFilterPipelineSvc.exe
        + 2007-03-23 05:07:54 583,504 -c----w c:\windows\system32\dllcache\XPSSHHDR.dll
        + 2007-03-23 05:07:56 1,683,280 -c----w c:\windows\system32\dllcache\XpsSvcs.dll
        + 2008-07-21 16:34:36 121,872 ----a-w c:\windows\system32\drivers\kl1.sys
        + 2009-02-17 22:04:50 226,832 ----a-w c:\windows\system32\drivers\klif.sys
        + 2008-11-11 18:58:54 25,601 ----a-w c:\windows\system
        1. j'en ai 32 pages.... tu n'as pas tout comment on fait??
          je vais essayer de mettre le fichier word sur free et je te donne le lien
          1. voila! merci de ton aide

            http://www.virustotal.com/fr/analisis/02bc18d19f242f89a241b1b2433b3d29

            1. Modérateur
              1/

              ---> Désinstalle HijackThis.

              ---> Télécharge ToolsCleaner2 sur ton Bureau.
              * Double-clique sur ToolsCleaner2.exe pour le lancer.
              * Clique sur Recherche et laisse le scan agir.
              * Clique sur Suppression pour finaliser.
              * Tu peux, si tu le souhaites, te servir des Options Facultatives.
              * Clique sur Quitter pour obtenir le rapport.
              * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

              2/

              ---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
              * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
              * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
              * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

              3/

              ---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger.

              ---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème.

              ==Prévention==

              Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

              Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer. Tu peux utiliser l'extension NoScript pour plus de sécurité.

              Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, onglet Mises à jour automatiques).

              Tu peux aussi modifier le fichier Hosts pour améliorer la sécurité de ton PC : Lien

              Par rapport au P2P : Lien

              Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) : Lien

              Sois plus vigilant(e) sur Internet ;)
              1. étape 1 ok ^^

                [ Rapport ToolsCleaner version 2.3.1 (par A.Rothstein & dj QUIOU) ]

                -->- Recherche:

                C:\Combofix.txt: trouvé !
                C:\SDFIX: trouvé !
                C:\Qoobox: trouvé !
                C:\Rsit: trouvé !
                C:\Documents and Settings\gege\Bureau\programmes\SdFix.exe: trouvé !
                C:\Documents and Settings\gege\Bureau\programmes\fsbl.exe: trouvé !
                C:\Documents and Settings\gege\Bureau\programmes\ComboFix.exe: trouvé !
                C:\Program Files\trend micro\HijackThis.exe: trouvé !
                C:\Program Files\trend micro\hijackthis.log: trouvé !

                ---------------------------------
                -->- Suppression:

                C:\Documents and Settings\gege\Bureau\programmes\SdFix.exe: supprimé !
                C:\Documents and Settings\gege\Bureau\programmes\fsbl.exe: supprimé !
                C:\Documents and Settings\gege\Bureau\programmes\ComboFix.exe: ERREUR DE SUPPRESSION !!
                C:\Program Files\trend micro\HijackThis.exe: supprimé !
                C:\Combofix.txt: supprimé !
                C:\Program Files\trend micro\hijackthis.log: supprimé !
                C:\SDFIX: supprimé !
                C:\Qoobox: supprimé !
                C:\Rsit: supprimé !
                1. ok j'ai fait tout ca et j'ai tout lu.
                  merci beaucoup d'avoir prit tout ce temps pour m'aider.
                  bonne continuation
                  1. Modérateur
                    Tu peux supprimer ToolsCleaner.

                    Plus de soucis ?
                    1. excuse-moi de t'accaparer comme ça
                      mais je t'ai posté des messages sur mon sujet
                      et j'ai l'impression qu'ils passent plus!!

                      c'est normal???

                      car j'ai problème!
                      j'ai scané ac Kaspersky et détecte "événements très critiques" et défrag! c nul, nul!!

                      encore scuse, mais ça fait 2 mess. que j'aurais écrit pour rien???
                      ça commence à me les .....

                      (pas toi bien sûr)
                  Précédent
                  • 1
                  • 2