Svchost Erreur d'application

Merci beaucoup !
J'ai réalisé les opérations dans l'ordre, pour Ccleaner je l'ai passé dans le registre et ai fait réparé toutes les erreurs j'espère que c'est ce qu'il fallait faire. Enfin j'ai téléchargé et scanné par LopR et voci le rapport obtenu :

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2300 @ 1.66GHz )
BIOS : Phoenix NoteBIOS 4.0 Release 6.1
USER : Philipon Chloé ( Administrator )
BOOT : Fail-safe with network boot
Antivirus : McAfee VirusScan (Not Activated)
Firewall : Norton Internet Security 2006 2006 (Not Activated)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:29 Go)
D:\ (Local Disk) - NTFS - Total:67 Go (Free:20 Go)
F:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 16/03/2009|22:33 )

--------------------\\ Listing des dossiers dans APPLIC~1

[01/01/2005|23:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[21/03/2006|11:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
[20/03/2006|14:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[21/03/2006|11:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[01/01/2005|22:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sony Corporation

[03/01/2009|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[13/03/2007|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/07/2007|11:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[20/09/2006|23:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[13/03/2007|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData
[31/05/2008|10:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[23/12/2007|00:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[14/09/2008|22:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[20/03/2006|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[24/09/2008|11:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[25/03/2007|16:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[05/01/2009|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/01/2005|22:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[23/01/2007|23:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[01/01/2005|22:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VAIO Media Platform
[20/09/2006|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[23/12/2007|00:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[12/05/2008|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[01/01/2005|23:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[21/03/2006|11:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Google
[20/03/2006|14:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[21/03/2006|11:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/01/2005|22:53] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sony Corporation

[30/09/2006|19:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
[05/12/2006|19:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[20/03/2006|14:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[05/12/2006|19:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\sony

[23/01/2007|22:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Google
[20/03/2006|14:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[02/03/2009|22:40] C:\DOCUME~1\PHILIP~1\APPLIC~1\Adobe
[28/09/2006|17:32] C:\DOCUME~1\PHILIP~1\APPLIC~1\AdobeUM
[04/01/2009|00:49] C:\DOCUME~1\PHILIP~1\APPLIC~1\Apple Computer
[22/01/2009|12:49] C:\DOCUME~1\PHILIP~1\APPLIC~1\dvdcss
[22/08/2008|14:21] C:\DOCUME~1\PHILIP~1\APPLIC~1\FreeXplorer
[27/09/2006|11:51] C:\DOCUME~1\PHILIP~1\APPLIC~1\Google
[25/11/2006|20:03] C:\DOCUME~1\PHILIP~1\APPLIC~1\Help
[13/02/2009|22:04] C:\DOCUME~1\PHILIP~1\APPLIC~1\HP
[20/03/2006|14:47] C:\DOCUME~1\PHILIP~1\APPLIC~1\Identities
[15/09/2008|09:02] C:\DOCUME~1\PHILIP~1\APPLIC~1\Image Zone Express
[20/09/2006|00:17] C:\DOCUME~1\PHILIP~1\APPLIC~1\InterVideo
[28/11/2007|20:01] C:\DOCUME~1\PHILIP~1\APPLIC~1\Leadertech
[19/09/2006|21:49] C:\DOCUME~1\PHILIP~1\APPLIC~1\Macromedia
[24/09/2008|11:11] C:\DOCUME~1\PHILIP~1\APPLIC~1\Malwarebytes
[12/11/2008|21:18] C:\DOCUME~1\PHILIP~1\APPLIC~1\Microsoft
[21/03/2007|01:43] C:\DOCUME~1\PHILIP~1\APPLIC~1\Microsoft Web Folders
[22/09/2006|18:33] C:\DOCUME~1\PHILIP~1\APPLIC~1\Nikon
[01/04/2007|21:35] C:\DOCUME~1\PHILIP~1\APPLIC~1\Opera
[03/11/2008|12:12] C:\DOCUME~1\PHILIP~1\APPLIC~1\Real
[26/03/2007|23:33] C:\DOCUME~1\PHILIP~1\APPLIC~1\Samsung
[28/11/2007|20:02] C:\DOCUME~1\PHILIP~1\APPLIC~1\Sonic
[20/09/2006|22:42] C:\DOCUME~1\PHILIP~1\APPLIC~1\sony
[10/01/2009|12:11] C:\DOCUME~1\PHILIP~1\APPLIC~1\Sony Corporation
[19/10/2006|22:04] C:\DOCUME~1\PHILIP~1\APPLIC~1\Sun
[23/01/2007|23:12] C:\DOCUME~1\PHILIP~1\APPLIC~1\Symantec
[27/09/2006|11:11] C:\DOCUME~1\PHILIP~1\APPLIC~1\Template
[11/03/2009|11:00] C:\DOCUME~1\PHILIP~1\APPLIC~1\uTorrent
[18/07/2008|22:35] C:\DOCUME~1\PHILIP~1\APPLIC~1\vlc
[11/03/2009|08:45] C:\DOCUME~1\PHILIP~1\APPLIC~1\WinRAR

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[09/03/2009 23:00][--a------] C:\WINDOWS\tasks\At24.job
[09/03/2009 22:00][--a------] C:\WINDOWS\tasks\At23.job
[15/03/2009 21:00][--a------] C:\WINDOWS\tasks\At22.job
[09/03/2009 20:00][--a------] C:\WINDOWS\tasks\At21.job
[09/03/2009 19:00][--a------] C:\WINDOWS\tasks\At20.job
[09/03/2009 18:00][--a------] C:\WINDOWS\tasks\At19.job
[09/03/2009 17:00][--a------] C:\WINDOWS\tasks\At18.job
[10/03/2009 16:00][--a------] C:\WINDOWS\tasks\At17.job
[10/03/2009 15:00][--a------] C:\WINDOWS\tasks\At16.job
[10/03/2009 14:00][--a------] C:\WINDOWS\tasks\At15.job
[10/03/2009 13:00][--a------] C:\WINDOWS\tasks\At14.job
[10/03/2009 12:00][--a------] C:\WINDOWS\tasks\At13.job
[11/03/2009 11:00][--a------] C:\WINDOWS\tasks\At12.job
[11/03/2009 10:00][--a------] C:\WINDOWS\tasks\At11.job
[11/03/2009 09:00][--a------] C:\WINDOWS\tasks\At10.job
[09/03/2009 08:00][--a------] C:\WINDOWS\tasks\At9.job
[09/03/2009 07:00][--a------] C:\WINDOWS\tasks\At8.job
[09/03/2009 06:00][--a------] C:\WINDOWS\tasks\At7.job
[09/03/2009 05:00][--a------] C:\WINDOWS\tasks\At6.job
[09/03/2009 04:00][--a------] C:\WINDOWS\tasks\At5.job
[09/03/2009 03:00][--a------] C:\WINDOWS\tasks\At4.job
[09/03/2009 02:00][--a------] C:\WINDOWS\tasks\At3.job
[09/03/2009 01:00][--a------] C:\WINDOWS\tasks\At2.job
[10/03/2009 00:28][--a------] C:\WINDOWS\tasks\At1.job
[28/02/2009 15:53][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/03/2009 16:00][--a------] C:\WINDOWS\tasks\HPpromotions journeysoftware.job
[01/03/2009 19:25][--ah-----] C:\WINDOWS\tasks\HubTask 0 {0E7C166E-2D2F-4269-9034-DE1898BF2B1A} 0~0.job
[15/02/2009 01:00][--a------] C:\WINDOWS\tasks\McDefragTask.job
[01/03/2009 01:00][--a------] C:\WINDOWS\tasks\McQcTask.job
[16/03/2009 15:46][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[25/12/2007|00:00] C:\Program Files\Adobe
[20/03/2006|15:39] C:\Program Files\Apoint
[12/11/2008|21:24] C:\Program Files\Apple Software Update
[22/09/2006|18:26] C:\Program Files\ArcSoft
[13/09/2008|20:45] C:\Program Files\Bonjour
[19/02/2007|20:28] C:\Program Files\BT Business Broadband
[19/02/2007|20:28] C:\Program Files\BT Business Broadband 220V
[22/09/2008|08:33] C:\Program Files\CCleaner
[20/03/2006|14:43] C:\Program Files\ComPlus Applications
[20/03/2006|15:30] C:\Program Files\CONEXANT
[31/10/2008|23:44] C:\Program Files\eMule
[19/02/2009|21:53] C:\Program Files\Fichiers communs
[06/06/2008|19:03] C:\Program Files\Free
[15/02/2009|16:14] C:\Program Files\Free iPod Video Converter
[24/12/2007|05:37] C:\Program Files\Google
[21/03/2006|11:04] C:\Program Files\Google AFE
[14/09/2008|22:42] C:\Program Files\Hewlett-Packard
[14/09/2008|22:43] C:\Program Files\HP
[19/02/2009|21:57] C:\Program Files\InstallShield Installation Information
[20/03/2006|16:24] C:\Program Files\Intel
[13/02/2009|22:14] C:\Program Files\Internet Explorer
[21/03/2006|11:04] C:\Program Files\InterVideo
[03/01/2009|17:13] C:\Program Files\iPod
[21/03/2006|11:03] C:\Program Files\ISP
[03/01/2009|17:14] C:\Program Files\iTunes
[07/01/2009|22:50] C:\Program Files\Java
[13/09/2008|20:56] C:\Program Files\McAfee
[25/03/2007|16:14] C:\Program Files\McAfee.com
[15/02/2009|17:52] C:\Program Files\Messenger
[05/01/2009|21:31] C:\Program Files\Microsoft
[18/05/2008|19:49] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[20/03/2006|14:48] C:\Program Files\microsoft frontpage
[24/05/2008|13:41] C:\Program Files\Microsoft Office
[01/01/2005|22:57] C:\Program Files\Microsoft SQL Server
[01/01/2005|23:02] C:\Program Files\Microsoft Works
[01/01/2005|23:05] C:\Program Files\Microsoft.NET
[26/09/2008|10:46] C:\Program Files\Movie Maker
[12/11/2008|21:18] C:\Program Files\MSECACHE
[20/03/2006|14:42] C:\Program Files\MSN
[20/03/2006|14:42] C:\Program Files\MSN Gaming Zone
[18/11/2006|00:46] C:\Program Files\MSXML 4.0
[26/09/2008|10:42] C:\Program Files\NetMeeting
[26/11/2007|22:17] C:\Program Files\Norton Ghost
[26/09/2008|10:41] C:\Program Files\Outlook Express
[04/11/2006|23:23] C:\Program Files\PCFriendly
[23/12/2007|00:28] C:\Program Files\Photo Viewer
[14/07/2007|10:27] C:\Program Files\Picasa2
[12/01/2009|19:08] C:\Program Files\QuickTime
[19/09/2006|21:35] C:\Program Files\Raccourcis de programmes
[03/11/2008|12:09] C:\Program Files\Real
[01/01/2005|22:53] C:\Program Files\Roxio
[08/08/2008|10:07] C:\Program Files\Safari
[21/09/2006|20:08] C:\Program Files\SAGEM
[26/03/2007|23:33] C:\Program Files\Samsung
[20/03/2006|14:45] C:\Program Files\Services en ligne
[20/03/2006|15:41] C:\Program Files\SigmaTel
[07/01/2007|19:57] C:\Program Files\Skype
[16/01/2008|21:42] C:\Program Files\Sony
[23/01/2007|23:14] C:\Program Files\Symantec
[21/09/2006|20:07] C:\Program Files\Tiscali Broadband
[16/01/2008|21:36] C:\Program Files\Toshiba
[16/03/2009|13:49] C:\Program Files\Trend Micro
[01/01/2005|22:58] C:\Program Files\Uninstall Information
[21/03/2006|11:05] C:\Program Files\Utimaco
[13/10/2008|17:21] C:\Program Files\uTorrent
[18/07/2008|22:23] C:\Program Files\VideoLAN
[26/11/2007|22:19] C:\Program Files\VUGames
[12/11/2008|21:18] C:\Program Files\Windows Installer Clean Up
[05/01/2009|21:30] C:\Program Files\Windows Live
[05/01/2009|21:30] C:\Program Files\Windows Live SkyDrive
[12/11/2008|21:01] C:\Program Files\Windows Media Connect 2
[18/10/2007|19:09] C:\Program Files\Windows Media Player
[26/09/2008|10:41] C:\Program Files\Windows NT
[20/03/2006|14:43] C:\Program Files\Windows Plus
[20/03/2006|14:45] C:\Program Files\WindowsUpdate
[11/03/2009|08:44] C:\Program Files\WinRAR
[22/08/2008|14:21] C:\Program Files\Wizou
[20/03/2006|14:48] C:\Program Files\xerox
[26/03/2007|23:27] C:\Program Files\XviD

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[25/12/2007|00:08] C:\Program Files\Fichiers communs\Adobe
[03/01/2009|17:13] C:\Program Files\Fichiers communs\Apple
[01/01/2005|23:05] C:\Program Files\Fichiers communs\DESIGNER
[14/09/2008|22:43] C:\Program Files\Fichiers communs\HP
[21/03/2006|11:04] C:\Program Files\Fichiers communs\InstallShield
[21/03/2006|11:04] C:\Program Files\Fichiers communs\InterVideo
[21/03/2006|10:54] C:\Program Files\Fichiers communs\Java
[25/12/2007|00:08] C:\Program Files\Fichiers communs\Macrovision Shared
[23/07/2008|18:45] C:\Program Files\Fichiers communs\McAfee
[06/03/2009|00:31] C:\Program Files\Fichiers communs\Microsoft Shared
[20/03/2006|14:45] C:\Program Files\Fichiers communs\MSSoap
[26/11/2007|22:15] C:\Program Files\Fichiers communs\Nikon
[20/03/2006|15:37] C:\Program Files\Fichiers communs\ODBC
[03/11/2008|12:09] C:\Program Files\Fichiers communs\Real
[20/03/2006|14:45] C:\Program Files\Fichiers communs\Services
[01/01/2005|22:53] C:\Program Files\Fichiers communs\Sonic Shared
[01/01/2005|22:58] C:\Program Files\Fichiers communs\Sony Shared
[20/03/2006|15:37] C:\Program Files\Fichiers communs\SpeechEngines
[26/03/2007|23:33] C:\Program Files\Fichiers communs\ST System Shared
[20/09/2006|22:42] C:\Program Files\Fichiers communs\SWF Studio
[23/01/2007|23:17] C:\Program Files\Fichiers communs\Symantec Shared
[26/09/2008|11:13] C:\Program Files\Fichiers communs\System
[05/01/2009|21:25] C:\Program Files\Fichiers communs\Windows Live
[12/05/2008|20:52] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[23/01/2007|22:40] C:\Program Files\Fichiers communs\Wise Installation Wizard
[03/11/2008|12:09] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 22 Processes )

iexplore.exe ~ [PID:1504]

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData
C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData\globData.mk4
C:\DOCUME~1\PHILIP~1\Cookies\philipon_chloé@advertising[2].txt

--------------------\\ Verification du Registre

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-16 22:34:42
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
disk error: C:\WINDOWS\System32\
please note that you need administrator rights to perform deep scan

--------------------\\ Recherche d'autres infections

C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Tasks\At10.job
C:\WINDOWS\Tasks\At11.job
C:\WINDOWS\Tasks\At12.job
C:\WINDOWS\Tasks\At13.job
C:\WINDOWS\Tasks\At14.job
C:\WINDOWS\Tasks\At15.job
C:\WINDOWS\Tasks\At16.job
C:\WINDOWS\Tasks\At17.job
C:\WINDOWS\Tasks\At18.job
C:\WINDOWS\Tasks\At19.job
C:\WINDOWS\Tasks\At2.job
C:\WINDOWS\Tasks\At20.job
C:\WINDOWS\Tasks\At21.job
C:\WINDOWS\Tasks\At22.job
C:\WINDOWS\Tasks\At23.job
C:\WINDOWS\Tasks\At24.job
C:\WINDOWS\Tasks\At3.job
C:\WINDOWS\Tasks\At4.job
C:\WINDOWS\Tasks\At5.job
C:\WINDOWS\Tasks\At6.job
C:\WINDOWS\Tasks\At7.job
C:\WINDOWS\Tasks\At8.job
C:\WINDOWS\Tasks\At9.job

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[b]==> WAREOUT <==/b

--------------------\\ ROOTKIT !!

Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV]

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack11[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack17[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack18[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack19[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack2[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack3[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VideoAccessCodec_crack2[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VideoAccessCodec_crack[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack10[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack12[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack1[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack20[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack21[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack8[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack9[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack13[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack14[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack22[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack23[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack4[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack5[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VideoAccessCodec_crack3[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VideoAccessCodec_crack4[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack15[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack16[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack24[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack6[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack7[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VideoAccessCodec_crack5[1].jpg
C:\DOCUME~1\PHILIP~1\Mes documents\Ma musique\iTunes\iTunes Music\Disque dur Violaine\Jacques Dutronc - Crack Boum Hue.mp3


[F:46][D:6]-> C:\DOCUME~1\PHILIP~1\LOCALS~1\Temp
[F:74][D:0]-> C:\DOCUME~1\PHILIP~1\Cookies
[F:3437][D:5]-> C:\DOCUME~1\PHILIP~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 16/03/2009|22:35 - Option : [1]

--------------------\\ Fin du rapport a 22:35:47


Est ce que mon problème est résolu ? ou dois je faire encore quelques manip ?
Merci d'avance et merci encore pour la rapidité de votre réponse à mon problème !!!

Bonjour !
Je viens de réaliser les manip, voici le rapport de LopR suivi du rapport de Rooter. Encore un grand merci !

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU T2300 @ 1.66GHz )
BIOS : Phoenix NoteBIOS 4.0 Release 6.1
USER : Philipon Chloé ( Administrator )
BOOT : Fail-safe with network boot
Antivirus : McAfee VirusScan (Not Activated)
Firewall : Norton Internet Security 2006 2006 (Not Activated)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:29 Go)
D:\ (Local Disk) - NTFS - Total:67 Go (Free:20 Go)
F:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [2] ( 17/03/2009| 8:47 )


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData\globData.mk4
Supprime! - C:\DOCUME~1\PHILIP~1\Cookies\philipon_chloé@advertising[2].txt
Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\espionServerData

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


--------------------\\ Listing des dossiers dans APPLIC~1

[01/01/2005|23:01] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
[21/03/2006|11:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
[20/03/2006|14:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[21/03/2006|11:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[01/01/2005|22:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sony Corporation

[03/01/2009|17:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[13/03/2007|20:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[01/07/2007|11:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
[20/09/2006|23:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
[31/05/2008|10:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
[23/12/2007|00:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[14/09/2008|22:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
[20/03/2006|16:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel
[24/09/2008|11:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[25/03/2007|16:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
[05/01/2009|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[01/01/2005|22:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sony Corporation
[23/01/2007|23:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[01/01/2005|22:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\VAIO Media Platform
[20/09/2006|23:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[23/12/2007|00:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
[12/05/2008|20:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[01/01/2005|23:01] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Adobe
[21/03/2006|11:04] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Google
[20/03/2006|14:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[21/03/2006|11:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[01/01/2005|22:53] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sony Corporation

[30/09/2006|19:07] C:\DOCUME~1\LOCALS~1\APPLIC~1\Google
[05/12/2006|19:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\Macromedia
[20/03/2006|14:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[05/12/2006|19:53] C:\DOCUME~1\LOCALS~1\APPLIC~1\sony

[23/01/2007|22:52] C:\DOCUME~1\NETWOR~1\APPLIC~1\Google
[20/03/2006|14:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

[02/03/2009|22:40] C:\DOCUME~1\PHILIP~1\APPLIC~1\Adobe
[28/09/2006|17:32] C:\DOCUME~1\PHILIP~1\APPLIC~1\AdobeUM
[04/01/2009|00:49] C:\DOCUME~1\PHILIP~1\APPLIC~1\Apple Computer
[22/01/2009|12:49] C:\DOCUME~1\PHILIP~1\APPLIC~1\dvdcss
[22/08/2008|14:21] C:\DOCUME~1\PHILIP~1\APPLIC~1\FreeXplorer
[27/09/2006|11:51] C:\DOCUME~1\PHILIP~1\APPLIC~1\Google
[25/11/2006|20:03] C:\DOCUME~1\PHILIP~1\APPLIC~1\Help
[13/02/2009|22:04] C:\DOCUME~1\PHILIP~1\APPLIC~1\HP
[20/03/2006|14:47] C:\DOCUME~1\PHILIP~1\APPLIC~1\Identities
[15/09/2008|09:02] C:\DOCUME~1\PHILIP~1\APPLIC~1\Image Zone Express
[20/09/2006|00:17] C:\DOCUME~1\PHILIP~1\APPLIC~1\InterVideo
[28/11/2007|20:01] C:\DOCUME~1\PHILIP~1\APPLIC~1\Leadertech
[19/09/2006|21:49] C:\DOCUME~1\PHILIP~1\APPLIC~1\Macromedia
[24/09/2008|11:11] C:\DOCUME~1\PHILIP~1\APPLIC~1\Malwarebytes
[12/11/2008|21:18] C:\DOCUME~1\PHILIP~1\APPLIC~1\Microsoft
[21/03/2007|01:43] C:\DOCUME~1\PHILIP~1\APPLIC~1\Microsoft Web Folders
[22/09/2006|18:33] C:\DOCUME~1\PHILIP~1\APPLIC~1\Nikon
[01/04/2007|21:35] C:\DOCUME~1\PHILIP~1\APPLIC~1\Opera
[03/11/2008|12:12] C:\DOCUME~1\PHILIP~1\APPLIC~1\Real
[26/03/2007|23:33] C:\DOCUME~1\PHILIP~1\APPLIC~1\Samsung
[28/11/2007|20:02] C:\DOCUME~1\PHILIP~1\APPLIC~1\Sonic
[20/09/2006|22:42] C:\DOCUME~1\PHILIP~1\APPLIC~1\sony
[10/01/2009|12:11] C:\DOCUME~1\PHILIP~1\APPLIC~1\Sony Corporation
[19/10/2006|22:04] C:\DOCUME~1\PHILIP~1\APPLIC~1\Sun
[23/01/2007|23:12] C:\DOCUME~1\PHILIP~1\APPLIC~1\Symantec
[27/09/2006|11:11] C:\DOCUME~1\PHILIP~1\APPLIC~1\Template
[11/03/2009|11:00] C:\DOCUME~1\PHILIP~1\APPLIC~1\uTorrent
[18/07/2008|22:35] C:\DOCUME~1\PHILIP~1\APPLIC~1\vlc
[11/03/2009|08:45] C:\DOCUME~1\PHILIP~1\APPLIC~1\WinRAR

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[09/03/2009 23:00][--a------] C:\WINDOWS\tasks\At24.job
[09/03/2009 22:00][--a------] C:\WINDOWS\tasks\At23.job
[15/03/2009 21:00][--a------] C:\WINDOWS\tasks\At22.job
[09/03/2009 20:00][--a------] C:\WINDOWS\tasks\At21.job
[09/03/2009 19:00][--a------] C:\WINDOWS\tasks\At20.job
[09/03/2009 18:00][--a------] C:\WINDOWS\tasks\At19.job
[09/03/2009 17:00][--a------] C:\WINDOWS\tasks\At18.job
[10/03/2009 16:00][--a------] C:\WINDOWS\tasks\At17.job
[10/03/2009 15:00][--a------] C:\WINDOWS\tasks\At16.job
[10/03/2009 14:00][--a------] C:\WINDOWS\tasks\At15.job
[10/03/2009 13:00][--a------] C:\WINDOWS\tasks\At14.job
[10/03/2009 12:00][--a------] C:\WINDOWS\tasks\At13.job
[11/03/2009 11:00][--a------] C:\WINDOWS\tasks\At12.job
[11/03/2009 10:00][--a------] C:\WINDOWS\tasks\At11.job
[11/03/2009 09:00][--a------] C:\WINDOWS\tasks\At10.job
[09/03/2009 08:00][--a------] C:\WINDOWS\tasks\At9.job
[09/03/2009 07:00][--a------] C:\WINDOWS\tasks\At8.job
[09/03/2009 06:00][--a------] C:\WINDOWS\tasks\At7.job
[09/03/2009 05:00][--a------] C:\WINDOWS\tasks\At6.job
[09/03/2009 04:00][--a------] C:\WINDOWS\tasks\At5.job
[09/03/2009 03:00][--a------] C:\WINDOWS\tasks\At4.job
[09/03/2009 02:00][--a------] C:\WINDOWS\tasks\At3.job
[09/03/2009 01:00][--a------] C:\WINDOWS\tasks\At2.job
[10/03/2009 00:28][--a------] C:\WINDOWS\tasks\At1.job
[28/02/2009 15:53][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/03/2009 16:00][--a------] C:\WINDOWS\tasks\HPpromotions journeysoftware.job
[01/03/2009 19:25][--ah-----] C:\WINDOWS\tasks\HubTask 0 {0E7C166E-2D2F-4269-9034-DE1898BF2B1A} 0~0.job
[15/02/2009 01:00][--a------] C:\WINDOWS\tasks\McDefragTask.job
[01/03/2009 01:00][--a------] C:\WINDOWS\tasks\McQcTask.job
[16/03/2009 22:47][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing des dossiers dans C:\Program Files

[25/12/2007|00:00] C:\Program Files\Adobe
[20/03/2006|15:39] C:\Program Files\Apoint
[12/11/2008|21:24] C:\Program Files\Apple Software Update
[22/09/2006|18:26] C:\Program Files\ArcSoft
[13/09/2008|20:45] C:\Program Files\Bonjour
[19/02/2007|20:28] C:\Program Files\BT Business Broadband
[19/02/2007|20:28] C:\Program Files\BT Business Broadband 220V
[22/09/2008|08:33] C:\Program Files\CCleaner
[20/03/2006|14:43] C:\Program Files\ComPlus Applications
[20/03/2006|15:30] C:\Program Files\CONEXANT
[31/10/2008|23:44] C:\Program Files\eMule
[19/02/2009|21:53] C:\Program Files\Fichiers communs
[06/06/2008|19:03] C:\Program Files\Free
[15/02/2009|16:14] C:\Program Files\Free iPod Video Converter
[24/12/2007|05:37] C:\Program Files\Google
[21/03/2006|11:04] C:\Program Files\Google AFE
[14/09/2008|22:42] C:\Program Files\Hewlett-Packard
[14/09/2008|22:43] C:\Program Files\HP
[19/02/2009|21:57] C:\Program Files\InstallShield Installation Information
[20/03/2006|16:24] C:\Program Files\Intel
[13/02/2009|22:14] C:\Program Files\Internet Explorer
[21/03/2006|11:04] C:\Program Files\InterVideo
[03/01/2009|17:13] C:\Program Files\iPod
[21/03/2006|11:03] C:\Program Files\ISP
[03/01/2009|17:14] C:\Program Files\iTunes
[07/01/2009|22:50] C:\Program Files\Java
[13/09/2008|20:56] C:\Program Files\McAfee
[25/03/2007|16:14] C:\Program Files\McAfee.com
[15/02/2009|17:52] C:\Program Files\Messenger
[05/01/2009|21:31] C:\Program Files\Microsoft
[18/05/2008|19:49] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[20/03/2006|14:48] C:\Program Files\microsoft frontpage
[24/05/2008|13:41] C:\Program Files\Microsoft Office
[01/01/2005|22:57] C:\Program Files\Microsoft SQL Server
[01/01/2005|23:02] C:\Program Files\Microsoft Works
[01/01/2005|23:05] C:\Program Files\Microsoft.NET
[26/09/2008|10:46] C:\Program Files\Movie Maker
[12/11/2008|21:18] C:\Program Files\MSECACHE
[20/03/2006|14:42] C:\Program Files\MSN
[20/03/2006|14:42] C:\Program Files\MSN Gaming Zone
[18/11/2006|00:46] C:\Program Files\MSXML 4.0
[26/09/2008|10:42] C:\Program Files\NetMeeting
[26/11/2007|22:17] C:\Program Files\Norton Ghost
[26/09/2008|10:41] C:\Program Files\Outlook Express
[04/11/2006|23:23] C:\Program Files\PCFriendly
[23/12/2007|00:28] C:\Program Files\Photo Viewer
[14/07/2007|10:27] C:\Program Files\Picasa2
[12/01/2009|19:08] C:\Program Files\QuickTime
[19/09/2006|21:35] C:\Program Files\Raccourcis de programmes
[03/11/2008|12:09] C:\Program Files\Real
[01/01/2005|22:53] C:\Program Files\Roxio
[08/08/2008|10:07] C:\Program Files\Safari
[21/09/2006|20:08] C:\Program Files\SAGEM
[26/03/2007|23:33] C:\Program Files\Samsung
[20/03/2006|14:45] C:\Program Files\Services en ligne
[20/03/2006|15:41] C:\Program Files\SigmaTel
[07/01/2007|19:57] C:\Program Files\Skype
[16/01/2008|21:42] C:\Program Files\Sony
[23/01/2007|23:14] C:\Program Files\Symantec
[21/09/2006|20:07] C:\Program Files\Tiscali Broadband
[16/01/2008|21:36] C:\Program Files\Toshiba
[16/03/2009|13:49] C:\Program Files\Trend Micro
[01/01/2005|22:58] C:\Program Files\Uninstall Information
[21/03/2006|11:05] C:\Program Files\Utimaco
[13/10/2008|17:21] C:\Program Files\uTorrent
[18/07/2008|22:23] C:\Program Files\VideoLAN
[26/11/2007|22:19] C:\Program Files\VUGames
[12/11/2008|21:18] C:\Program Files\Windows Installer Clean Up
[05/01/2009|21:30] C:\Program Files\Windows Live
[05/01/2009|21:30] C:\Program Files\Windows Live SkyDrive
[12/11/2008|21:01] C:\Program Files\Windows Media Connect 2
[18/10/2007|19:09] C:\Program Files\Windows Media Player
[26/09/2008|10:41] C:\Program Files\Windows NT
[20/03/2006|14:43] C:\Program Files\Windows Plus
[20/03/2006|14:45] C:\Program Files\WindowsUpdate
[11/03/2009|08:44] C:\Program Files\WinRAR
[22/08/2008|14:21] C:\Program Files\Wizou
[20/03/2006|14:48] C:\Program Files\xerox
[26/03/2007|23:27] C:\Program Files\XviD

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[25/12/2007|00:08] C:\Program Files\Fichiers communs\Adobe
[03/01/2009|17:13] C:\Program Files\Fichiers communs\Apple
[01/01/2005|23:05] C:\Program Files\Fichiers communs\DESIGNER
[14/09/2008|22:43] C:\Program Files\Fichiers communs\HP
[21/03/2006|11:04] C:\Program Files\Fichiers communs\InstallShield
[21/03/2006|11:04] C:\Program Files\Fichiers communs\InterVideo
[21/03/2006|10:54] C:\Program Files\Fichiers communs\Java
[25/12/2007|00:08] C:\Program Files\Fichiers communs\Macrovision Shared
[23/07/2008|18:45] C:\Program Files\Fichiers communs\McAfee
[06/03/2009|00:31] C:\Program Files\Fichiers communs\Microsoft Shared
[20/03/2006|14:45] C:\Program Files\Fichiers communs\MSSoap
[26/11/2007|22:15] C:\Program Files\Fichiers communs\Nikon
[20/03/2006|15:37] C:\Program Files\Fichiers communs\ODBC
[03/11/2008|12:09] C:\Program Files\Fichiers communs\Real
[20/03/2006|14:45] C:\Program Files\Fichiers communs\Services
[01/01/2005|22:53] C:\Program Files\Fichiers communs\Sonic Shared
[01/01/2005|22:58] C:\Program Files\Fichiers communs\Sony Shared
[20/03/2006|15:37] C:\Program Files\Fichiers communs\SpeechEngines
[26/03/2007|23:33] C:\Program Files\Fichiers communs\ST System Shared
[20/09/2006|22:42] C:\Program Files\Fichiers communs\SWF Studio
[23/01/2007|23:17] C:\Program Files\Fichiers communs\Symantec Shared
[26/09/2008|11:13] C:\Program Files\Fichiers communs\System
[05/01/2009|21:25] C:\Program Files\Fichiers communs\Windows Live
[12/05/2008|20:52] C:\Program Files\Fichiers communs\WindowsLiveInstaller
[23/01/2007|22:40] C:\Program Files\Fichiers communs\Wise Installation Wizard
[03/11/2008|12:09] C:\Program Files\Fichiers communs\xing shared

--------------------\\ Process

( 22 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

C:\DOCUME~1\PHILIP~1\Cookies\philipon_chloé@32vegas[1].txt
C:\DOCUME~1\PHILIP~1\Cookies\philipon_chloé@banner.32vegas[2].txt

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE


--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-17 08:48:16
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
disk error: C:\WINDOWS\System32\
please note that you need administrator rights to perform deep scan

--------------------\\ Recherche d'autres infections

C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Tasks\At10.job
C:\WINDOWS\Tasks\At11.job
C:\WINDOWS\Tasks\At12.job
C:\WINDOWS\Tasks\At13.job
C:\WINDOWS\Tasks\At14.job
C:\WINDOWS\Tasks\At15.job
C:\WINDOWS\Tasks\At16.job
C:\WINDOWS\Tasks\At17.job
C:\WINDOWS\Tasks\At18.job
C:\WINDOWS\Tasks\At19.job
C:\WINDOWS\Tasks\At2.job
C:\WINDOWS\Tasks\At20.job
C:\WINDOWS\Tasks\At21.job
C:\WINDOWS\Tasks\At22.job
C:\WINDOWS\Tasks\At23.job
C:\WINDOWS\Tasks\At24.job
C:\WINDOWS\Tasks\At3.job
C:\WINDOWS\Tasks\At4.job
C:\WINDOWS\Tasks\At5.job
C:\WINDOWS\Tasks\At6.job
C:\WINDOWS\Tasks\At7.job
C:\WINDOWS\Tasks\At8.job
C:\WINDOWS\Tasks\At9.job

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[b]==> WAREOUT <==/b

--------------------\\ ROOTKIT !!

Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV]

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack11[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack17[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack18[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack19[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack2[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack3[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VideoAccessCodec_crack2[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VideoAccessCodec_crack[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack10[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack12[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack1[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack20[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack21[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack8[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack9[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack13[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack14[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack22[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack23[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack4[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack5[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VideoAccessCodec_crack3[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VideoAccessCodec_crack4[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack15[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack16[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack24[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack6[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack7[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VideoAccessCodec_crack5[1].jpg
C:\DOCUME~1\PHILIP~1\Mes documents\Ma musique\iTunes\iTunes Music\Disque dur Violaine\Jacques Dutronc - Crack Boum Hue.mp3


[F:49][D:6]-> C:\DOCUME~1\PHILIP~1\LOCALS~1\Temp
[F:79][D:0]-> C:\DOCUME~1\PHILIP~1\Cookies
[F:3652][D:5]-> C:\DOCUME~1\PHILIP~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 16/03/2009|22:35 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - 17/03/2009| 8:49 - Option : [2]

--------------------\\ Fin du rapport a 8:49:34


Et donc pour Rooter :
Microsoft Windows XP Professional (5.1.2600) Service Pack 3

C:\ [Fixed] - NTFS - (Total:76300 Mo/Free:1419 Mo)
D:\ [Fixed] - NTFS - (Total:69170 Mo/Free:237 Mo)
F:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)

17/03/2009| 8:51

----------------------\\ Processes..

--Locked-- [System Process]
---------- System
---------- \SystemRoot\System32\smss.exe
---------- \??\C:\WINDOWS\system32\csrss.exe
---------- \??\C:\WINDOWS\system32\winlogon.exe
---------- C:\WINDOWS\system32\services.exe
---------- C:\WINDOWS\system32\lsass.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\Explorer.EXE
---------- C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
---------- C:\Program Files\McAfee\MPF\MPFSrv.exe
---------- c:\PROGRA~1\mcafee.com\agent\mcagent.exe
---------- C:\WINDOWS\system32\ctfmon.exe
---------- c:\PROGRA~1\mcafee\msc\mcuimgr.exe
---------- C:\Documents and Settings\Philipon Chloé\Bureau\Rooter.exe
---------- C:\WINDOWS\system32\cmd.exe
---------- C:\Rooter$\RK.exe

----------------------\\ Search..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[b]==> WAREOUT <==/b

Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe
Trojan ! .. C:\WINDOWS\system32\r23FPkfk.exe

----------------------\\ Tasks

C:\WINDOWS\tasks\At1.job
C:\WINDOWS\tasks\At11.job
C:\WINDOWS\tasks\At12.job
C:\WINDOWS\tasks\At13.job
C:\WINDOWS\tasks\At14.job
C:\WINDOWS\tasks\At15.job
C:\WINDOWS\tasks\At16.job
C:\WINDOWS\tasks\At17.job
C:\WINDOWS\tasks\At18.job
C:\WINDOWS\tasks\At19.job
C:\WINDOWS\tasks\At2.job
C:\WINDOWS\tasks\At21.job
C:\WINDOWS\tasks\At22.job
C:\WINDOWS\tasks\At23.job
C:\WINDOWS\tasks\At24.job
C:\WINDOWS\tasks\At3.job
C:\WINDOWS\tasks\At4.job
C:\WINDOWS\tasks\At5.job
C:\WINDOWS\tasks\At6.job
C:\WINDOWS\tasks\At7.job
C:\WINDOWS\tasks\At8.job
C:\WINDOWS\tasks\At9.job

----------------------\\ ROOTKIT !!

HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV
HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_TDSSSERV
HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_TDSSSERV
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV

----------------------\\ Cracks & Keygens..

C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack11[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack17[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack18[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack19[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack2[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VAC_crack3[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VideoAccessCodec_crack2[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\P5BMFCUE\VideoAccessCodec_crack[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack10[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack12[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack1[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack20[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack21[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack8[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\TOWW7UIB\VAC_crack9[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack13[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack14[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack22[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack23[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack4[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VAC_crack5[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VideoAccessCodec_crack3[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\YDTIQ1HP\VideoAccessCodec_crack4[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack15[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack16[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack24[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack6[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack7[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VAC_crack[1].jpg
C:\DOCUME~1\PHILIP~1\Local Settings\Temporary Internet Files\Content.IE5\ZTR6Q2SR\VideoAccessCodec_crack5[1].jpg


1 - "C:\Rooter$\Rooter_1.txt" - 17/03/2009| 8:52

----------------------\\ Scan completed at 8:52

Bonjour,
Voici le rapport de OTmoveIt :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder C:\WINDOWS\system32\r23FPkfk.exe not found.
C:\WINDOWS\tasks\At1.job moved successfully.
C:\WINDOWS\tasks\At11.job moved successfully.
C:\WINDOWS\tasks\At12.job moved successfully.
C:\WINDOWS\tasks\At13.job moved successfully.
C:\WINDOWS\tasks\At14.job moved successfully.
C:\WINDOWS\tasks\At15.job moved successfully.
C:\WINDOWS\tasks\At16.job moved successfully.
C:\WINDOWS\tasks\At17.job moved successfully.
C:\WINDOWS\tasks\At18.job moved successfully.
C:\WINDOWS\tasks\At19.job moved successfully.
C:\WINDOWS\tasks\At2.job moved successfully.
C:\WINDOWS\tasks\At21.job moved successfully.
C:\WINDOWS\tasks\At22.job moved successfully.
C:\WINDOWS\tasks\At23.job moved successfully.
C:\WINDOWS\tasks\At24.job moved successfully.
C:\WINDOWS\tasks\At3.job moved successfully.
C:\WINDOWS\tasks\At4.job moved successfully.
C:\WINDOWS\tasks\At5.job moved successfully.
C:\WINDOWS\tasks\At6.job moved successfully.
C:\WINDOWS\tasks\At7.job moved successfully.
C:\WINDOWS\tasks\At8.job moved successfully.
C:\WINDOWS\tasks\At9.job moved successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\mcafee_qA5qvDjI7NVfSPx scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\mcmsc_ISAs7LXoNboYWTZ scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\mcmsc_r8tyYp4nl81yhk5 scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.9.0 log created on 03172009_232050

Files moved on Reboot...
File C:\WINDOWS\temp\mcafee_qA5qvDjI7NVfSPx not found!
File C:\WINDOWS\temp\mcmsc_ISAs7LXoNboYWTZ not found!
File C:\WINDOWS\temp\mcmsc_r8tyYp4nl81yhk5 not found!


Ensuite j'ai Redémarré le PC et passer Ccleaner avec les réglages demandés sans problème/
Toutefois et malheureusement à ce stade là il m'est encore impossible de télécharger Malwarebyte's Antimalwares, je tombe bien sur le site de Malekal avec le lien pour télécharger mais le résultat est :
Internet Explorer ne peut afficher la page !!!
comment puis je donc faire pour récupérer ce soft ?
Merci d'avance de vos réponses et encore merci pour votre aide !

voilà c'est fait j'ai supprimé r23FPkfk.exe de système 32. Je l'ai fait en mode sans échec.
D'ailleurs je fonctionne uniquement en mode sans échec depuis quelques jours maintenant afin que
la fenêtre "erreur d'application" n'arrive plus ou que les applications telles que IE puisse se lancer.
En tous les cas merci de votre aide et de me consacrer autant de temps/
J'espère qu'une solution existe !

J'ai donc lancé Rooter après avoir supprimé le.exe suspect qui se trouvait dans système 32.
Voici le rapport de Rooter :
Microsoft Windows XP Professional (5.1.2600) Service Pack 3

C:\ [Fixed] - NTFS - (Total:76300 Mo/Free:1535 Mo)
D:\ [Fixed] - NTFS - (Total:69170 Mo/Free:237 Mo)
F:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)

18/03/2009| 0:25

----------------------\\ Processes..

--Locked-- [System Process]
---------- System
---------- \SystemRoot\System32\smss.exe
---------- \??\C:\WINDOWS\system32\csrss.exe
---------- \??\C:\WINDOWS\system32\winlogon.exe
---------- C:\WINDOWS\system32\services.exe
---------- C:\WINDOWS\system32\lsass.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
---------- C:\Program Files\McAfee\MPF\MPFSrv.exe
---------- C:\WINDOWS\Explorer.EXE
---------- c:\PROGRA~1\mcafee.com\agent\mcagent.exe
---------- c:\PROGRA~1\mcafee\msc\mcuimgr.exe
---------- C:\WINDOWS\system32\ctfmon.exe
---------- C:\Documents and Settings\Philipon Chloé\Bureau\Rooter.exe
---------- C:\WINDOWS\system32\cmd.exe
---------- C:\Rooter$\RK.exe

----------------------\\ Search..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[b]==> WAREOUT <==/b

----------------------\\ ROOTKIT !!

HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV
HKLM\SYSTEM\ControlSet002\Enum\Root\LEGACY_TDSSSERV
HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_TDSSSERV
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV


1 - "C:\Rooter$\Rooter_1.txt" - 17/03/2009| 8:52
2 - "C:\Rooter$\Rooter_2.txt" - 18/03/2009| 0:26

----------------------\\ Scan completed at 0:26

Voici donc les rapports générés par Smitfraud : le 1er pour la recherche a donné :
SmitFraudFix v2.404

Rapport fait à 0:55:23,20, 18/03/2009
Executé à partir de C:\Documents and Settings\Philipon Chloé\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\cmd.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\svchost.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

C:\WINDOWS\Tasks\At??.job PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Philipon Chloé


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\PHILIP~1\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Philipon Chloé\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\PHILIP~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"


»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!



»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Intel(R) PRO/100 VE Network Connection - Miniport d'ordonnancement de paquets
DNS Server Search Order: 212.27.40.240
DNS Server Search Order: 212.27.40.241

HKLM\SYSTEM\CCS\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: NameServer=85.255.112.192,85.255.112.25
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: NameServer=85.255.112.192,85.255.112.25
HKLM\SYSTEM\CS2\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Et le second après redémarrage et fait en mode sans échec :
SmitFraudFix v2.404

Rapport fait à 1:02:23,48, 18/03/2009
Executé à partir de C:\Documents and Settings\Philipon Chloé\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\WINDOWS\Tasks\At??.job supprimé

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: NameServer=85.255.112.192,85.255.112.25
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: NameServer=85.255.112.192,85.255.112.25
HKLM\SYSTEM\CS2\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Voilà je continue les manip

Bien j'ai donc réalisé les manip et voici donc les deux derniers rapports...Je vais redémarrer ma machine en mode normal et on va voir ce qui se passe. En tous cas voici le rapport de SDFix suivi de celui de Hijackthis :

[b]SDFix: Version 1.240 [/b]
Run by Philipon Chloé on 18/03/2009 at 01:32

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]:

No Trojan Files Found






Removing Temp Files

[b]ADS Check [/b]:



[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-18 01:41:30
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

disk error: C:\WINDOWS\system32\config\system, 0
scanning hidden registry entries ...

disk error: C:\WINDOWS\system32\config\software, 0
disk error: C:\Documents and Settings\Philipon Chloé\ntuser.dat, 0
scanning hidden files ...

disk error: C:\WINDOWS\

please note that you need administrator rights to perform deep scan

[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Adobe\\Photoshop Elements 4.0\\AdobePhotoshopElementsMediaServer.exe"="C:\\Program Files\\Adobe\\Photoshop Elements 4.0\\AdobePhotoshopElementsMediaServer.exe:*:Disabled:Adobe Photoshop Elements Media Server"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Adobe\\Photoshop Elements 6.0\\AdobePhotoshopElementsMediaServer.exe"="C:\\Program Files\\Adobe\\Photoshop Elements 6.0\\AdobePhotoshopElementsMediaServer.exe:*:Disabled:Adobe Photoshop Elements Media Server"
"C:\\Program Files\\Fichiers communs\\McAfee\\MNA\\McNASvc.exe"="C:\\Program Files\\Fichiers communs\\McAfee\\MNA\\McNASvc.exe:*:Enabled:McAfee Network Agent"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:µTorrent"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"="C:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[b]Remaining Files [/b]:



[b]Files with Hidden Attributes [/b]:

Wed 11 Mar 2009 91,136 ..SHR --- "C:\RECYCLER\S-5-0-33-100017353-100004868-100030660-5051.com"
Sat 14 Jul 2007 5,388,088 A..H. --- "C:\Program Files\Picasa2\setup.exe"
Sun 24 Sep 2006 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sat 13 Sep 2008 20,487 A.SHR --- "C:\Program Files\McAfee\MQC\MRU.bak"
Sat 13 Sep 2008 265 A.SHR --- "C:\Program Files\McAfee\MQC\qcconf.bak"
Sat 20 Oct 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Wed 13 Jun 2007 255,488 A..H. --- "C:\Documents and Settings\Philipon Chlo‚\Application Data\Microsoft\Word\~WRL0005.tmp"
Mon 29 Oct 2007 33,792 A..H. --- "C:\Documents and Settings\Philipon Chlo‚\Application Data\Microsoft\Word\~WRL0243.tmp"
Mon 29 Oct 2007 34,816 A..H. --- "C:\Documents and Settings\Philipon Chlo‚\Application Data\Microsoft\Word\~WRL1508.tmp"
Mon 29 Oct 2007 33,792 A..H. --- "C:\Documents and Settings\Philipon Chlo‚\Application Data\Microsoft\Word\~WRL2270.tmp"
Wed 20 Sep 2006 9,506 A.SH. --- "C:\Documents and Settings\Philipon Chlo‚\Mes documents\Ma musique\Sauvegarde de la licence\drmv2key.bak"
Thu 22 Mar 2007 282,624 A..H. --- "C:\Documents and Settings\Philipon Chlo‚\Mes documents\Candidature\Resume PDF\CV\~WRL0578.tmp"

[b]Finished![/b]


Toutefois je suis encore en mode sans échec pour arriver à ce que Internet Explorer s'ouvre correctement...
Et voici le rapport Hijackthis toujours réalisé en mode sans échec :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:02:44, on 18/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
c:\PROGRA~1\mcafee\msc\mcuimgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [VAIOCameraUtility] "C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe"
O4 - HKLM\..\Run: [SonyPowerCfg] C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
O4 - HKLM\..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Run: [Switcher.exe] C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
O4 - HKLM\..\Run: [PDService.exe] C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [VAIO Update 3] "C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Transfert par Image Converter 2 Plus - C:\Program Files\Sony\Image Converter 2\menu.htm
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/
O15 - Trusted Zone: *.sony-europe.com
O15 - Trusted Zone: *.sonystyle-europe.com
O15 - Trusted Zone: *.vaio-link.com
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.fr/s/v/19.13/uploader2.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Norton Protection Center Service (NSCService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe (file missing)
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

Bonjour,
Il m'a été impossible de désactiver Mcafee pendant comboFix mais celui-ci a pu aller jusqu'au bout...
apparemment tout refonctionne comme il faut...Voici les rapports, d'abord celui de ComboFix :

ComboFix 09-03-15.01 - Philipon Chloé 2009-03-19 0:45:47.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1022.629 [GMT 1:00]
Lancé depuis: c:\documents and settings\Philipon Chloé\Bureau\ComboFix.exe
AV: McAfee VirusScan *On-access scanning disabled* (Updated)
FW: McAfee Personal Firewall *enabled*
* Resident AV is active


AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\recycler\S-5-0-33-100017353-100004868-100030660-5051.com
c:\windows\system32\404Fix.exe
c:\windows\system32\Agent.OMZ.Fix.exe
c:\windows\system32\drivers\gaopdxofcbnkshldlhtkmyxahkbqlmfdkaclbm.sys
c:\windows\system32\dumphive.exe
c:\windows\system32\gaopdxcounter
c:\windows\system32\gaopdxkmuaxbgrkgfswwcvnorcganlavbqympm.dll
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\o4Patch.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe
d:\recycler\S-5-0-33-100017353-100004868-100030660-5051.com

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_gaopdxserv.sys
-------\Legacy_TDSSSERV


((((((((((((((((((((((((((((( Fichiers créés du 2009-02-19 au 2009-03-19 ))))))))))))))))))))))))))))))))))))
.

2009-03-19 00:13 . 2009-03-19 00:13 <REP> d-------- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-03-18 01:31 . 2009-03-18 01:31 579,584 --a--c--- c:\windows\system32\dllcache\user32.dll
2009-03-18 01:28 . 2009-03-18 01:28 <REP> d-------- c:\windows\ERUNT
2009-03-18 01:23 . 2009-03-18 01:41 <REP> d-------- C:\SDFix
2009-03-17 23:20 . 2009-03-17 23:20 <REP> d-------- C:\_OTMoveIt
2009-03-17 08:51 . 2009-03-18 00:26 <REP> d-------- C:\Rooter$
2009-03-16 22:33 . 2009-03-17 08:49 <REP> d-------- C:\Lop SD
2009-03-16 13:49 . 2009-03-16 13:49 <REP> d-------- c:\program files\Trend Micro

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-18 23:16 --------- d-----w c:\program files\Fichiers communs\Symantec Shared
2009-03-17 22:43 --------- d-----w c:\program files\CCleaner
2009-03-11 10:00 --------- d-----w c:\documents and settings\Philipon Chloé\Application Data\uTorrent
2009-02-19 20:57 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-15 15:14 --------- d-----w c:\program files\Free iPod Video Converter
2009-02-13 21:04 --------- d-----w c:\documents and settings\Philipon Chloé\Application Data\HP
2009-01-22 11:49 --------- d-----w c:\documents and settings\Philipon Chloé\Application Data\dvdcss
2009-01-12 17:58 27,288,880 ----a-w c:\program files\QuickTimeInstaller.exe
2009-01-11 15:50 7,410,632 ----a-w c:\program files\daemon4302-lite.exe
2006-09-27 10:11 0 ----a-w c:\documents and settings\Philipon Chloé\Application Data\wklnhst.dat
2008-09-26 10:14 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008091520080922\index.dat
2008-09-26 10:14 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008092620080927\index.dat
.

((((((((((((((((((((((((((((( snapshot@2008-09-24_14.44.22.67 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
+ 2008-05-09 10:51:45 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
+ 2008-05-09 10:51:45 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
+ 2008-05-09 10:51:45 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
+ 2008-05-09 10:51:45 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
+ 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
+ 2008-05-09 10:51:45 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
+ 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
+ 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
+ 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
+ 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
+ 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
+ 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
+ 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
+ 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
+ 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
+ 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
+ 2008-09-10 01:12:14 1,379,840 ----a-w c:\windows\$hf_mig$\KB954459\SP3QFE\msxml6.dll
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB954459\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB954459\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB954459\update\spcustom.dll
+ 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB954459\update\update.exe
+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954459\update\updspapi.dll
+ 2008-10-03 09:50:27 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3QFE\strmdll.dll
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB954600\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB954600\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB954600\update\spcustom.dll
+ 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB954600\update\update.exe
+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB954600\update\updspapi.dll
+ 2008-09-04 17:12:47 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3QFE\msxml3.dll
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB955069\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB955069\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB955069\update\spcustom.dll
+ 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB955069\update\update.exe
+ 2008-07-09 12:10:36 406,392 ----a-w c:\windows\$hf_mig$\KB955069\update\updspapi.dll
+ 2008-10-23 10:17:49 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB955839\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB955839\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB955839\update\spcustom.dll
+ 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB955839\update\update.exe
+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB955839\update\updspapi.dll
+ 2008-08-26 09:10:25 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
+ 2008-08-26 09:10:25 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
+ 2008-08-26 09:10:25 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
+ 2008-08-26 09:10:25 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
+ 2008-08-26 09:10:25 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
+ 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
+ 2008-08-26 09:10:26 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
+ 2008-08-26 09:10:26 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
+ 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
+ 2008-08-26 09:10:26 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
+ 2008-08-26 09:10:26 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
+ 2008-10-03 16:22:30 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
+ 2008-08-26 09:10:27 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
+ 2008-08-26 09:10:27 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
+ 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
+ 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
+ 2008-08-26 09:10:27 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
+ 2008-08-26 09:10:27 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
+ 2008-08-26 09:10:27 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
+ 2008-08-26 09:10:28 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
+ 2008-08-26 09:10:28 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
+ 2008-08-26 09:10:28 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
+ 2008-08-26 09:10:29 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
+ 2008-08-26 09:10:29 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
+ 2008-08-26 09:10:29 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
+ 2008-08-26 09:10:29 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
+ 2008-08-26 09:10:29 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
+ 2008-08-26 09:10:29 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
+ 2008-08-26 09:10:29 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
+ 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
+ 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
+ 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
+ 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
+ 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
+ 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
+ 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
+ 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
+ 2008-10-23 12:44:51 286,720 ----a-w c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
+ 2008-07-08 13:03:54 18,296 ----a-w c:\windows\$hf_mig$\KB956802\spmsg.dll
+ 2008-07-08 13:03:55 234,872 ----a-w c:\windows\$hf_mig$\KB956802\spuninst.exe
+ 2008-07-08 13:03:54 26,488 ----a-w c:\windows\$hf_mig$\KB956802\update\spcustom.dll
+ 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB956802\update\update.exe
+ 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956802\update\updspapi.dll
+ 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
+ 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
+ 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
+ 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
+ 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
+ 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
+ 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
+ 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
+ 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
+ 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
+ 2008-10-24 11:41:11 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys
+ 2008-07-08 13:03:54 18,296 ----a-w c:\windows\$hf_mig$\KB957097\spmsg.dll
+ 2008-07-08 13:03:55 234,872 ----a-w c:\windows\$hf_mig$\KB957097\spuninst.exe
+ 2008-07-08 13:03:54 26,488 ----a-w c:\windows\$hf_mig$\KB957097\update\spcustom.dll
+ 2008-07-08 13:03:57 767,352 ----a-w c:\windows\$hf_mig$\KB957097\update\update.exe
+ 2008-07-08 13:04:05 406,392 ----a-w c:\windows\$hf_mig$\KB957097\update\updspapi.dll
+ 2008-10-16 19:33:14 124,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\advpack.dll
+ 2008-10-16 19:33:14 347,136 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtmsft.dll
+ 2008-10-16 19:33:14 214,528 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtrans.dll
+ 2008-10-16 19:33:14 132,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\extmgr.dll
+ 2008-10-16 19:33:14 63,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\icardie.dll
+ 2008-10-16 12:46:08 70,656 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ie4uinit.exe
+ 2008-10-16 19:33:14 153,088 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakeng.dll
+ 2008-10-16 19:33:14 230,400 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieaksie.dll
+ 2008-10-15 06:33:26 161,792 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dat
+ 2008-10-16 19:33:15 380,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dll
+ 2008-10-16 19:33:15 388,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iedkcs32.dll
+ 2008-10-16 19:33:16 6,068,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieframe.dll
+ 2008-10-16 19:33:16 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iernonce.dll
+ 2008-10-16 19:33:16 267,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iertutil.dll
+ 2008-10-16 12:46:08 13,824 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieudinit.exe
+ 2008-10-15 06:34:58 633,632 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe
+ 2008-10-16 19:33:17 27,648 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\jsproxy.dll
+ 2008-10-16 19:33:18 459,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeeds.dll
+ 2008-10-16 19:33:18 52,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeedsbs.dll
+ 2008-10-16 19:33:19 3,595,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
+ 2008-10-16 19:33:20 477,696 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtmled.dll
+ 2008-10-16 19:33:20 193,024 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msrating.dll
+ 2008-10-16 19:33:21 671,232 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mstime.dll
+ 2008-10-16 19:33:21 102,912 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\occache.dll
+ 2008-10-16 19:33:21 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\pngfilt.dll
+ 2008-10-16 19:33:21 105,984 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\url.dll
+ 2008-10-16 19:33:21 1,163,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\urlmon.dll
+ 2008-10-16 19:33:22 233,472 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\webcheck.dll
+ 2008-10-16 19:33:22 827,904 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spmsg.dll
+ 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spuninst.exe
+ 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\spcustom.dll
+ 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\update.exe
+ 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\updspapi.dll
+ 2008-10-15 16:31:32 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB958644\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB958644\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll
+ 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB958644\update\update.exe
+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll
+ 2008-12-11 12:33:59 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3QFE\srv.sys
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB958687\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB958687\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB958687\update\spcustom.dll
+ 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB958687\update\update.exe
+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB958687\update\updspapi.dll
+ 2008-12-13 06:27:45 3,594,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
+ 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spmsg.dll
+ 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spuninst.exe
+ 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\spcustom.dll
+ 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\update.exe
+ 2007-03-06 01:35:47 394,976 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\updspapi.dll
+ 2008-07-09 07:40:22 18,296 ----a-w c:\windows\$hf_mig$\KB960715\spmsg.dll
+ 2008-07-09 07:40:24 234,872 ----a-w c:\windows\$hf_mig$\KB960715\spuninst.exe
+ 2008-07-09 07:40:22 26,488 ----a-w c:\windows\$hf_mig$\KB960715\update\spcustom.dll
+ 2008-11-15 17:18:14 767,352 ----a-w c:\windows\$hf_mig$\KB960715\update\update.exe
+ 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB960715\update\updspapi.dll
+ 2008-12-20 23:47:28 124,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\advpack.dll
+ 2008-12-20 23:47:28 347,136 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtmsft.dll
+ 2008-12-20 23:47:28 214,528 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtrans.dll
+ 2008-12-20 23:47:28 132,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\extmgr.dll
+ 2008-12-20 23:47:28 63,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\icardie.dll
+ 2008-12-19 09:41:51 70,656 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ie4uinit.exe
+ 2008-12-20 23:47:28 153,088 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakeng.dll
+ 2008-12-20 23:47:28 230,400 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieaksie.dll
+ 2008-12-19 05:24:02 161,792 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dat
+ 2008-12-20 23:47:29 380,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dll
+ 2008-12-20 23:47:29 388,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iedkcs32.dll
+ 2008-12-20 23:47:30 6,068,736 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieframe.dll
+ 2008-12-20 23:47:30 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iernonce.dll
+ 2008-12-20 23:47:31 267,776 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iertutil.dll
+ 2008-12-19 09:41:52 13,824 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieudinit.exe
+ 2008-12-19 05:25:30 634,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iexplore.exe
+ 2008-12-20 23:47:31 27,648 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\jsproxy.dll
+ 2008-12-20 23:47:31 459,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeeds.dll
+ 2008-12-20 23:47:31 52,224 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeedsbs.dll
+ 2009-01-16 16:20:14 3,596,288 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
+ 2008-12-20 23:47:33 477,696 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtmled.dll
+ 2008-12-20 23:47:33 193,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msrating.dll
+ 2008-12-20 23:47:34 671,232 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mstime.dll
+ 2008-12-20 23:47:34 102,912 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\occache.dll
+ 2008-12-20 23:47:34 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\pngfilt.dll
+ 2008-12-20 23:47:34 105,984 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\url.dll
+ 2008-12-20 23:47:35 1,163,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\urlmon.dll
+ 2008-12-20 23:47:35 233,472 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\webcheck.dll
+ 2008-12-20 23:47:36 827,904 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spmsg.dll
+ 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spuninst.exe
+ 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\spcustom.dll
+ 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\update.exe
+ 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\updspapi.dll
+ 2008-06-17 19:04:03 8,518,144 ----a-w c:\windows\$hf_mig$\KB967715\SP3QFE\shell32.dll
+ 2008-07-09 07:40:22 18,296 ----a-w c:\windows\$hf_mig$\KB967715\spmsg.dll
+ 2008-07-09 07:40:24 234,872 ----a-w c:\windows\$hf_mig$\KB967715\spuninst.exe
+ 2008-07-09 07:40:22 26,488 ----a-w c:\windows\$hf_mig$\KB967715\update\spcustom.dll
+ 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB967715\update\update.exe
+ 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB967715\update\updspapi.dll
+ 2004-08-10 12:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
+ 2006-08-16 11:59:27 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
+ 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
+ 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
+ 2004-08-10 12:00:00 189,952 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
+ 2004-08-10 12:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
+ 2004-08-10 12:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
+ 2004-08-10 12:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
+ 2004-08-10 12:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
+ 2004-08-10 12:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
+ 2004-08-10 12:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
+ 2004-08-10 12:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
+ 2004-08-10 12:00:00 188,672 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
+ 2004-08-10 12:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
+ 2004-08-10 12:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
+ 2004-08-10 12:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
+ 2004-08-10 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
+ 2004-08-10 12:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
+ 2004-08-10 12:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
+ 2004-08-10 12:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
+ 2004-08-10 12:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
+ 2004-08-10 12:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
+ 2004-08-10 12:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
+ 2004-08-10 12:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
+ 2004-08-10 12:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
+ 2004-08-10 12:00:00 685,056 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
+ 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
+ 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
+ 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
+ 2004-08-10 12:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
+ 2004-08-10 12:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
+ 2006-10-12 13:55:58 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
+ 2007-03-09 14:00:38 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
+ 2004-08-10 12:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
+ 2004-08-10 12:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
+ 2004-08-10 12:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
+ 2006-10-12 11:54:07 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
+ 2004-08-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
+ 2004-08-10 12:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
+ 2004-08-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
+ 2004-08-10 12:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
+ 2004-08-10 12:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
+ 2004-08-10 12:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
+ 2004-08-10 12:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
+ 2004-08-10 12:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
+ 2004-08-10 12:00:00 41,216 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
+ 2004-08-10 12:00:00 41,600 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
+ 2004-08-10 12:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
+ 2004-08-10 12:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
+ 2004-08-10 12:00:00 176,640 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
+ 2004-08-10 12:00:00 302,592 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
+ 2004-08-10 12:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
+ 2002-06-21 16:31:20 20,480 -c----w c:\windows\$NtServicePackUninstall$\aspnet_filter.dll
+ 2007-01-02 15:34:04 200,704 -c----w c:\windows\$NtServicePackUninstall$\aspnet_isapi.dll
+ 2004-08-03 21:11:06 24,576 -c----w c:\windows\$NtServicePackUninstall$\aspnet_regiis.exe
+ 2002-06-21 16:31:22 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_state.exe
+ 2007-01-02 15:34:04 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_wp.exe
+ 2004-08-10 12:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
+ 2004-08-10 12:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
+ 2004-08-10 12:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
+ 2004-08-10 12:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
+ 2004-08-10 12:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
+ 2004-08-03 21:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
+ 2004-08-10 12:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
+ 2004-08-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
+ 2004-08-10 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
+ 2004-08-10 12:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
+ 2004-08-10 12:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
+ 2004-08-10 12:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
+ 2004-08-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
+ 2004-08-10 12:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
+ 2004-08-10 12:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
+ 2005-03-02 18:10:36 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
+ 2004-08-10 12:00:00 625,152 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
+ 2004-08-10 12:00:00 638,976 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
+ 2004-08-10 12:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
+ 2004-08-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
+ 2004-08-10 12:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
+ 2004-08-10 12:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
+ 2004-08-10 12:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
+ 2004-08-10 12:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
+ 2001-08-17 21:57:54 14,080 -c----w c:\windows\$NtServicePackUninstall$\battc.sys
+ 2004-08-10 12:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
+ 2004-08-10 12:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
+ 2004-08-10 12:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
+ 2004-08-10 12:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
+ 2004-08-10 12:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
+ 2004-08-10 12:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
+ 2004-08-10 12:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
+ 2004-08-10 12:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
+ 2006-09-14 08:38:02 1,022,976 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
+ 2004-08-10 12:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
+ 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
+ 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
+ 2004-08-10 12:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
+ 2004-08-10 12:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
+ 2004-08-10 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
+ 2004-08-10 12:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
+ 2004-08-10 12:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
+ 2004-08-10 12:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
+ 2004-08-10 12:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
+ 2005-07-26 04:39:54 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
+ 2004-08-10 12:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
+ 2005-07-26 04:39:54 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
+ 2004-08-03 23:10:18 17,024 -c----w c:\windows\$NtServicePackUninstall$\ccdecode.sys
+ 2004-08-10 12:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
+ 2006-09-14 08:38:02 152,064 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
+ 2005-09-10 01:55:14 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
+ 2004-08-10 12:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
+ 2004-08-10 12:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
+ 2004-08-10 12:00:00 467,968 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
+ 2004-08-10 12:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
+ 2004-08-10 12:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
+ 2004-08-10 12:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
+ 2004-08-10 12:00:00 1,352,704 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
+ 2006-06-22 05:13:45 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
+ 2004-08-10 12:00:00 56,832 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
+ 2004-08-10 12:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
+ 2004-08-10 12:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
+ 2005-07-26 04:39:55 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
+ 2005-07-26 04:39:55 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
+ 2004-08-10 12:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
+ 2004-08-10 12:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
+ 2004-08-10 12:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
+ 2004-08-10 12:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
+ 2004-08-10 12:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
+ 2004-08-03 23:07:40 14,080 -c----w c:\windows\$NtServicePackUninstall$\cmbatt.sys
+ 2004-08-10 12:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
+ 2004-08-10 12:00:00 400,896 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
+ 2004-08-10 12:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
+ 2004-08-10 12:00:00 352,256 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
+ 2004-08-10 12:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
+ 2004-08-10 12:00:00 40,448 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
+ 2004-08-10 12:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
+ 2004-08-10 12:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
+ 2004-08-10 12:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
+ 2004-08-10 12:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
+ 2004-08-10 12:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
+ 2005-07-26 04:39:55 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
+ 2004-08-10 12:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
+ 2005-07-26 04:39:56 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
+ 2006-08-25 15:51:14 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
+ 2004-08-10 12:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
+ 2004-08-10 12:00:00 253,440 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
+ 2001-08-17 21:58:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\compbatt.sys
+ 2004-08-10 12:00:00 230,912 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
+ 2005-07-26 04:39:56 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
+ 2004-08-10 12:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
+ 2004-08-10 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
+ 2004-08-10 12:00:00 851,968 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
+ 2004-08-10 12:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
+ 2004-08-10 12:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
+ 2005-07-26 04:39:57 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
+ 2005-07-26 04:39:57 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
+ 2004-08-10 12:00:00 1,044,480 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
+ 2004-08-10 12:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
+ 2004-08-10 12:00:00 346,112 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
+ 2004-08-10 12:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
+ 2007-01-08 19:01:14 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
+ 2004-08-10 12:00:00 165,888 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
+ 2004-08-10 12:00:00 40,704 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
+ 2004-08-10 12:00:00 604,672 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
+ 2004-08-10 12:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
+ 2004-08-10 12:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
+ 2004-08-10 12:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
+ 2004-08-10 12:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
+ 2004-08-10 12:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
+ 2004-08-10 12:00:00 530,432 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
+ 2004-08-10 12:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
+ 2004-08-10 12:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
+ 2004-08-10 12:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
+ 2004-08-10 12:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
+ 2004-08-10 12:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
+ 2004-08-10 12:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
+ 2006-06-02 19:32:20 33,792 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
+ 2004-08-10 12:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
+ 2004-08-10 12:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
+ 2004-08-10 12:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
+ 2004-08-10 12:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
+ 2006-09-14 08:38:02 1,056,768 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
+ 2004-08-10 12:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
+ 2004-08-10 12:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
+ 2004-08-10 12:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
+ 2004-08-10 12:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
+ 2004-08-10 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
+ 2004-08-10 12:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
+ 2004-08-10 12:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
+ 2004-08-10 12:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
+ 2004-08-10 12:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
+ 2004-08-10 12:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
+ 2004-08-10 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
+ 2004-08-10 12:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
+ 2004-08-10 12:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
+ 2004-08-10 12:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
+ 2004-08-10 12:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
+ 2004-08-10 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
+ 2004-08-10 12:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
+ 2004-08-10 12:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
+ 2004-08-10 12:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
+ 2004-08-10 12:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
+ 2004-08-10 12:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
+ 2004-08-10 12:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
+ 2004-08-10 12:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
+ 2006-05-19 13:23:35 112,128 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
+ 2004-08-10 12:00:00 401,408 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
+ 2004-08-10 12:00:00 548,352 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
+ 2004-08-10 12:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
+ 2004-08-10 12:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
+ 2004-08-10 12:00:00 165,376 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
+ 2004-08-10 12:00:00 187,904 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
+ 2007-05-16 15:13:53 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
+ 2004-08-10 12:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
+ 2004-08-10 12:00:00 1,502,208 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
+ 2004-08-10 12:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
+ 2004-08-10 12:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
+ 2004-08-10 12:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
+ 2004-08-10 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
+ 2004-08-10 12:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
+ 2004-08-10 12:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
+ 2004-08-10 12:00:00 800,256 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
+ 2004-08-10 12:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
+ 2004-08-10 12:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
+ 2004-08-10 12:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
+ 2004-08-10 12:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
+ 2004-08-10 12:00:00 154,496 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
+ 2004-08-10 12:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
+ 2004-08-10 12:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
+ 2004-08-10 12:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
+ 2004-08-10 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
+ 2004-08-10 12:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
+ 2004-08-10 12:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
+ 2004-08-10 12:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
+ 2004-08-03 22:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
+ 2004-08-10 12:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
+ 2008-06-20 17:41:06 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
+ 2008-02-20 05:35:05 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
+ 2004-08-10 12:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
+ 2004-08-10 12:00:00 97,280 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
+ 2004-08-10 12:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
+ 2004-08-10 12:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
+ 2004-08-10 12:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
+ 2004-08-10 12:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
+ 2004-08-10 12:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
+ 2004-08-10 12:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
+ 2004-08-10 12:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
+ 2004-08-10 12:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
+ 2004-08-10 12:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
+ 2004-08-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
+ 2004-08-10 12:00:00 213,504 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
+ 2004-08-10 12:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
+ 2004-08-10 12:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
+ 2004-08-10 12:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
+ 2004-08-10 12:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
+ 2004-08-03 22:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
+ 2004-08-03 22:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
+ 2004-08-10 12:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
+ 2004-08-10 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
+ 2004-08-10 12:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
+ 2004-08-10 12:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
+ 2004-08-10 12:00:00 93,696 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
+ 2004-08-10 12:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
+ 2004-08-10 12:00:00 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
+ 2004-08-10 12:00:00 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
+ 2004-08-10 12:00:00 145,408 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
+ 2004-08-10 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
+ 2004-08-10 12:00:00 240,640 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
+ 2004-08-10 12:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
+ 2004-08-10 12:00:00 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
+ 2004-08-10 12:00:00 113,664 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
+ 2004-08-10 12:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
+ 2004-08-10 12:00:00 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
+ 2004-08-10 12:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
+ 2004-08-10 12:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
+ 2004-08-10 12:00:00 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
+ 2004-08-10 12:00:00 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
+ 2004-08-10 12:00:00 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
+ 2004-08-10 12:00:00 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
+ 2004-08-10 12:00:00 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
+ 2006-08-24 13:17:20 500,278 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
+ 2004-08-10 12:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
+ 2004-08-10 12:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\els.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
+ 2004-08-10 12:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
+ 2008-07-07 20:31:48 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
+ 2005-10-20 22:25:53 1,097,728 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
+ 2004-08-10 12:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
+ 2004-08-10 12:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
+ 2004-08-10 12:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
+ 2004-08-10 12:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
+ 2004-08-10 12:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
+ 2004-08-10 12:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
+ 2004-08-10 12:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\evtgprov.dll
+ 2007-06-13 13:22:28 1,037,312 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
+ 2004-08-10 12:00:00 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
+ 2004-08-10 12:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
+ 2004-08-10 12:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
+ 2004-08-10 12:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
+ 2004-08-10 12:00:00 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
+ 2004-08-10 12:00:00 80,896 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
+ 2004-08-10 12:00:00 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
+ 2004-08-10 12:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
+ 2004-08-10 12:00:00 76,288 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
+ 2004-08-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
+ 2004-08-10 12:00:00 348,160 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
+ 2004-08-10 12:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
+ 2004-08-10 12:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
+ 2004-08-10 12:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
+ 2006-08-21 12:26:15 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
+ 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
+ 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
+ 2004-08-10 12:00:00 386,560 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
+ 2005-10-17 21:21:08 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
+ 2004-08-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
+ 2004-08-10 12:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
+ 2004-08-10 12:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
+ 2004-08-10 12:00:00 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
+ 2003-03-24 14:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
+ 2002-05-14 13:08:54 94,208 -c----w c:\windows\$NtServicePackUninstall$\fpencode.dll
+ 2004-08-10 12:00:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
+ 2004-08-10 12:00:00 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
+ 2004-08-10 12:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
+ 2004-08-10 12:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
+ 2004-08-10 12:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
+ 2004-08-10 12:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
+ 2004-09-29 18:04:48 61,440 -c----w c:\windows\$NtServicePackUninstall$\gacutil.exe
+ 2008-02-20 06:51:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
+ 2004-08-10 12:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
+ 2004-08-10 12:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
+ 2004-08-10 12:00:00 577,536 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
+ 2004-08-10 12:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
+ 2004-08-10 12:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
+ 2004-08-10 12:00:00 201,216 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
+ 2004-08-10 12:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
+ 2004-08-10 12:00:00 125,440 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
+ 2004-08-10 12:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
+ 2004-08-10 12:00:00 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
+ 2005-09-28 23:35:25 134,272 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
+ 2005-09-28 23:35:25 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll
+ 2005-09-28 23:35:25 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll.000
+ 2004-08-10 12:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
+ 2004-08-12 16:45:54 137,728 -c----w c:\windows\$NtServicePackUninstall$\hdaudbus.sys
+ 2004-08-10 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\help.exe
+ 2004-08-10 12:00:00 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
+ 2004-08-10 12:00:00 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
+ 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
+ 2005-05-27 02:08:06 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
+ 2004-08-10 12:00:00 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
+ 2005-06-28 23:43:35 19,200 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys
+ 2005-06-28 23:43:35 19,200 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys.000
+ 2004-08-10 12:00:00 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
+ 2001-08-17 20:02:20 9,600 -c----w c:\windows\$NtServicePackUninstall$\hidusb.sys
+ 2006-07-21 08:27:28 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
+ 2004-08-10 12:00:00 347,648 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
+ 2004-08-10 12:00:00 336,384 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
+ 2004-08-10 12:00:00 146,944 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
+ 2004-08-10 12:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
+ 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
+ 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
+ 2004-08-10 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
+ 2004-08-10 12:00:00 43,008 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
+ 2004-11-17 17:42:33 354,304 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
+ 2004-08-04 00:41:24 54,400 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
+ 2004-08-10 12:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
+ 2004-08-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
+ 2004-08-10 12:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
+ 2005-06-29 01:49:41 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
+ 2004-08-10 12:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
+ 2004-08-10 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
+ 2004-08-10 12:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
+ 2004-08-10 12:00:00 218,624 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
+ 2004-08-10 12:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
+ 2004-08-10 12:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
+ 2004-08-10 12:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
+ 2004-08-10 12:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
+ 2004-08-10 12:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
+ 2004-08-10 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
+ 2004-08-10 12:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
+ 2004-08-10 12:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
+ 2006-10-17 12:06:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
+ 2004-08-10 12:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
+ 2004-08-10 12:00:00 142,848 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
+ 2004-08-10 12:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
+ 2004-08-10 12:00:00 508,416 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
+ 2004-08-10 12:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
+ 2004-08-10 12:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
+ 2004-08-10 12:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
+ 2004-08-10 12:00:00 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
+ 2004-08-10 12:00:00 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
+ 2004-08-10 12:00:00 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
+ 2004-08-10 12:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
+ 2004-08-10 12:00:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
+ 2008-04-11 18:51:06 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
+ 2004-08-10 12:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
+ 2004-08-10 12:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
+ 2004-08-10 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
+ 2004-08-10 12:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
+ 2004-08-10 12:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
+ 2004-08-10 12:00:00 126,464 -c----w c:\windows\$NtServicePackUninstall$\input.dll
+ 2004-08-27 21:58:12 40,320 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
+ 2004-08-10 12:00:00 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
+ 2004-08-10 12:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
+ 2006-05-19 13:23:35 95,744 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
+ 2004-08-10 12:00:00 167,424 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
+ 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
+ 2004-08-10 12:00:00 332,800 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
+ 2004-08-10 12:00:00 355,840 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
+ 2004-08-10 12:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
+ 2004-08-10 12:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
+ 2004-08-10 12:00:00 361,472 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
+ 2004-08-10 12:00:00 184,320 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
+ 2004-08-10 12:00:00 388,096 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
+ 2004-08-10 12:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
+ 2004-08-10 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
+ 2004-08-10 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
+ 2004-08-10 12:00:00 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
+ 2004-08-10 12:00:00 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
+ 2004-08-10 12:00:00 755,200 -c----w c:\windows\$NtServicePackUninstall$\ir50_32.dll
+ 2004-08-10 12:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
+ 2004-08-10 12:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
+ 2005-06-28 23:43:39 46,592 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys
+ 2005-06-28 23:43:39 46,592 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys.000
+ 2004-08-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
+ 2001-08-23 15:58:06 36,224 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
+ 2004-08-10 12:00:00 86,016 -c----w c:\windows\$NtService

Bonjour !
En effet, le rapport ComboFix n'était pas complet, le voici :

ComboFix 09-03-15.01 - Philipon Chloé 2009-03-19 0:45:47.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1022.629 [GMT 1:00]
Lancé depuis: c:\documents and settings\Philipon Chloé\Bureau\ComboFix.exe
AV: McAfee VirusScan *On-access scanning disabled* (Updated)
FW: McAfee Personal Firewall *enabled*
* Resident AV is active


AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\recycler\S-5-0-33-100017353-100004868-100030660-5051.com
c:\windows\system32\404Fix.exe
c:\windows\system32\Agent.OMZ.Fix.exe
c:\windows\system32\drivers\gaopdxofcbnkshldlhtkmyxahkbqlmfdkaclbm.sys
c:\windows\system32\dumphive.exe
c:\windows\system32\gaopdxcounter
c:\windows\system32\gaopdxkmuaxbgrkgfswwcvnorcganlavbqympm.dll
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\o4Patch.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe
d:\recycler\S-5-0-33-100017353-100004868-100030660-5051.com

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_gaopdxserv.sys
-------\Legacy_TDSSSERV


((((((((((((((((((((((((((((( Fichiers créés du 2009-02-19 au 2009-03-19 ))))))))))))))))))))))))))))))))))))
.

2009-03-19 00:13 . 2009-03-19 00:13 <REP> d-------- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-03-18 01:31 . 2009-03-18 01:31 579,584 --a--c--- c:\windows\system32\dllcache\user32.dll
2009-03-18 01:28 . 2009-03-18 01:28 <REP> d-------- c:\windows\ERUNT
2009-03-18 01:23 . 2009-03-18 01:41 <REP> d-------- C:\SDFix
2009-03-17 23:20 . 2009-03-17 23:20 <REP> d-------- C:\_OTMoveIt
2009-03-17 08:51 . 2009-03-18 00:26 <REP> d-------- C:\Rooter$
2009-03-16 22:33 . 2009-03-17 08:49 <REP> d-------- C:\Lop SD
2009-03-16 13:49 . 2009-03-16 13:49 <REP> d-------- c:\program files\Trend Micro

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-18 23:16 --------- d-----w c:\program files\Fichiers communs\Symantec Shared
2009-03-17 22:43 --------- d-----w c:\program files\CCleaner
2009-03-11 10:00 --------- d-----w c:\documents and settings\Philipon Chloé\Application Data\uTorrent
2009-02-19 20:57 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-15 15:14 --------- d-----w c:\program files\Free iPod Video Converter
2009-02-13 21:04 --------- d-----w c:\documents and settings\Philipon Chloé\Application Data\HP
2009-01-22 11:49 --------- d-----w c:\documents and settings\Philipon Chloé\Application Data\dvdcss
2009-01-12 17:58 27,288,880 ----a-w c:\program files\QuickTimeInstaller.exe
2009-01-11 15:50 7,410,632 ----a-w c:\program files\daemon4302-lite.exe
2006-09-27 10:11 0 ----a-w c:\documents and settings\Philipon Chloé\Application Data\wklnhst.dat
2008-09-26 10:14 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008091520080922\index.dat
2008-09-26 10:14 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008092620080927\index.dat
.

((((((((((((((((((((((((((((( snapshot@2008-09-24_14.44.22.67 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-05-07 09:07:23 135,168 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\cscript.exe
+ 2008-05-09 10:51:45 512,000 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\jscript.dll
+ 2008-05-09 10:51:45 180,224 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrobj.dll
+ 2008-05-09 10:51:45 172,032 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\scrrun.dll
+ 2008-05-09 10:51:45 430,080 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\vbscript.dll
+ 2008-05-08 11:24:44 155,648 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wscript.exe
+ 2008-05-09 10:51:45 90,112 ----a-w c:\windows\$hf_mig$\KB951978\SP3QFE\wshext.dll
+ 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB951978\spmsg.dll
+ 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB951978\spuninst.exe
+ 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB951978\update\spcustom.dll
+ 2007-11-30 12:39:26 767,352 ----a-w c:\windows\$hf_mig$\KB951978\update\update.exe
+ 2007-11-30 12:39:29 406,392 ----a-w c:\windows\$hf_mig$\KB951978\update\updspapi.dll
+ 2008-09-15 15:20:39 1,847,040 ----a-w c:\windows\$hf_mig$\KB954211\SP3QFE\win32k.sys
+ 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB954211\spmsg.dll
+ 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB954211\spuninst.exe
+ 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB954211\update\spcustom.dll
+ 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB954211\update\update.exe
+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954211\update\updspapi.dll
+ 2008-09-10 01:12:14 1,379,840 ----a-w c:\windows\$hf_mig$\KB954459\SP3QFE\msxml6.dll
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB954459\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB954459\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB954459\update\spcustom.dll
+ 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB954459\update\update.exe
+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB954459\update\updspapi.dll
+ 2008-10-03 09:50:27 247,326 ----a-w c:\windows\$hf_mig$\KB954600\SP3QFE\strmdll.dll
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB954600\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB954600\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB954600\update\spcustom.dll
+ 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB954600\update\update.exe
+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB954600\update\updspapi.dll
+ 2008-09-04 17:12:47 1,106,944 ----a-w c:\windows\$hf_mig$\KB955069\SP3QFE\msxml3.dll
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB955069\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB955069\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB955069\update\spcustom.dll
+ 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB955069\update\update.exe
+ 2008-07-09 12:10:36 406,392 ----a-w c:\windows\$hf_mig$\KB955069\update\updspapi.dll
+ 2008-10-23 10:17:49 62,976 ----a-w c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB955839\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB955839\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB955839\update\spcustom.dll
+ 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB955839\update\update.exe
+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB955839\update\updspapi.dll
+ 2008-08-26 09:10:25 124,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\advpack.dll
+ 2008-08-26 09:10:25 347,136 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtmsft.dll
+ 2008-08-26 09:10:25 214,528 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\dxtrans.dll
+ 2008-08-26 09:10:25 132,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\extmgr.dll
+ 2008-08-26 09:10:25 63,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\icardie.dll
+ 2008-08-25 08:43:21 70,656 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ie4uinit.exe
+ 2008-08-26 09:10:26 153,088 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakeng.dll
+ 2008-08-26 09:10:26 230,400 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieaksie.dll
+ 2008-08-23 05:54:50 161,792 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dat
+ 2008-08-26 09:10:26 380,928 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieapfltr.dll
+ 2008-08-26 09:10:26 388,608 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iedkcs32.dll
+ 2008-10-03 16:22:30 6,068,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieframe.dll
+ 2008-08-26 09:10:27 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iernonce.dll
+ 2008-08-26 09:10:27 267,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iertutil.dll
+ 2008-08-25 08:43:21 13,824 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\ieudinit.exe
+ 2008-08-23 05:56:16 635,848 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
+ 2008-08-26 09:10:27 27,648 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\jsproxy.dll
+ 2008-08-26 09:10:27 459,264 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeeds.dll
+ 2008-08-26 09:10:27 52,224 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msfeedsbs.dll
+ 2008-08-26 09:10:28 3,594,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
+ 2008-08-26 09:10:28 477,696 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtmled.dll
+ 2008-08-26 09:10:28 193,024 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\msrating.dll
+ 2008-08-26 09:10:29 671,232 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mstime.dll
+ 2008-08-26 09:10:29 102,912 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\occache.dll
+ 2008-08-26 09:10:29 44,544 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\pngfilt.dll
+ 2008-08-26 09:10:29 105,984 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\url.dll
+ 2008-08-26 09:10:29 1,162,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\urlmon.dll
+ 2008-08-26 09:10:29 233,472 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\webcheck.dll
+ 2008-08-26 09:10:29 827,904 ----a-w c:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spmsg.dll
+ 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB956390-IE7\spuninst.exe
+ 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\spcustom.dll
+ 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\update.exe
+ 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB956390-IE7\update\updspapi.dll
+ 2007-11-30 12:39:29 18,296 ----a-w c:\windows\$hf_mig$\KB956391\spmsg.dll
+ 2007-11-30 12:39:29 234,872 ----a-w c:\windows\$hf_mig$\KB956391\spuninst.exe
+ 2007-11-30 12:39:29 26,488 ----a-w c:\windows\$hf_mig$\KB956391\update\spcustom.dll
+ 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956391\update\update.exe
+ 2007-11-30 12:39:31 406,392 ----a-w c:\windows\$hf_mig$\KB956391\update\updspapi.dll
+ 2008-10-23 12:44:51 286,720 ----a-w c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
+ 2008-07-08 13:03:54 18,296 ----a-w c:\windows\$hf_mig$\KB956802\spmsg.dll
+ 2008-07-08 13:03:55 234,872 ----a-w c:\windows\$hf_mig$\KB956802\spuninst.exe
+ 2008-07-08 13:03:54 26,488 ----a-w c:\windows\$hf_mig$\KB956802\update\spcustom.dll
+ 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB956802\update\update.exe
+ 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956802\update\updspapi.dll
+ 2008-08-14 10:34:26 138,496 ----a-w c:\windows\$hf_mig$\KB956803\SP3QFE\afd.sys
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956803\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956803\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956803\update\spcustom.dll
+ 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB956803\update\update.exe
+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB956803\update\updspapi.dll
+ 2008-08-14 13:55:54 2,147,328 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlmp.exe
+ 2008-08-14 17:26:00 2,068,096 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
+ 2008-08-14 13:55:47 2,025,984 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrpamp.exe
+ 2008-08-14 17:26:02 2,191,232 ----a-w c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB956841\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB956841\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB956841\update\spcustom.dll
+ 2007-11-30 12:39:29 767,352 ----a-w c:\windows\$hf_mig$\KB956841\update\update.exe
+ 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB956841\update\updspapi.dll
+ 2008-09-08 11:37:19 333,824 ----a-w c:\windows\$hf_mig$\KB957095\SP3QFE\srv.sys
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB957095\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB957095\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB957095\update\spcustom.dll
+ 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB957095\update\update.exe
+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB957095\update\updspapi.dll
+ 2008-10-24 11:41:11 455,936 ----a-w c:\windows\$hf_mig$\KB957097\SP3QFE\mrxsmb.sys
+ 2008-07-08 13:03:54 18,296 ----a-w c:\windows\$hf_mig$\KB957097\spmsg.dll
+ 2008-07-08 13:03:55 234,872 ----a-w c:\windows\$hf_mig$\KB957097\spuninst.exe
+ 2008-07-08 13:03:54 26,488 ----a-w c:\windows\$hf_mig$\KB957097\update\spcustom.dll
+ 2008-07-08 13:03:57 767,352 ----a-w c:\windows\$hf_mig$\KB957097\update\update.exe
+ 2008-07-08 13:04:05 406,392 ----a-w c:\windows\$hf_mig$\KB957097\update\updspapi.dll
+ 2008-10-16 19:33:14 124,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\advpack.dll
+ 2008-10-16 19:33:14 347,136 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtmsft.dll
+ 2008-10-16 19:33:14 214,528 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\dxtrans.dll
+ 2008-10-16 19:33:14 132,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\extmgr.dll
+ 2008-10-16 19:33:14 63,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\icardie.dll
+ 2008-10-16 12:46:08 70,656 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ie4uinit.exe
+ 2008-10-16 19:33:14 153,088 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakeng.dll
+ 2008-10-16 19:33:14 230,400 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieaksie.dll
+ 2008-10-15 06:33:26 161,792 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dat
+ 2008-10-16 19:33:15 380,928 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieapfltr.dll
+ 2008-10-16 19:33:15 388,608 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iedkcs32.dll
+ 2008-10-16 19:33:16 6,068,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieframe.dll
+ 2008-10-16 19:33:16 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iernonce.dll
+ 2008-10-16 19:33:16 267,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iertutil.dll
+ 2008-10-16 12:46:08 13,824 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\ieudinit.exe
+ 2008-10-15 06:34:58 633,632 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe
+ 2008-10-16 19:33:17 27,648 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\jsproxy.dll
+ 2008-10-16 19:33:18 459,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeeds.dll
+ 2008-10-16 19:33:18 52,224 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msfeedsbs.dll
+ 2008-10-16 19:33:19 3,595,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
+ 2008-10-16 19:33:20 477,696 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtmled.dll
+ 2008-10-16 19:33:20 193,024 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\msrating.dll
+ 2008-10-16 19:33:21 671,232 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mstime.dll
+ 2008-10-16 19:33:21 102,912 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\occache.dll
+ 2008-10-16 19:33:21 44,544 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\pngfilt.dll
+ 2008-10-16 19:33:21 105,984 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\url.dll
+ 2008-10-16 19:33:21 1,163,264 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\urlmon.dll
+ 2008-10-16 19:33:22 233,472 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\webcheck.dll
+ 2008-10-16 19:33:22 827,904 ----a-w c:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spmsg.dll
+ 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB958215-IE7\spuninst.exe
+ 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\spcustom.dll
+ 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\update.exe
+ 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB958215-IE7\update\updspapi.dll
+ 2008-10-15 16:31:32 339,456 ----a-w c:\windows\$hf_mig$\KB958644\SP3QFE\netapi32.dll
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB958644\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB958644\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB958644\update\spcustom.dll
+ 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB958644\update\update.exe
+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB958644\update\updspapi.dll
+ 2008-12-11 12:33:59 333,952 ----a-w c:\windows\$hf_mig$\KB958687\SP3QFE\srv.sys
+ 2007-11-30 11:19:06 18,296 ----a-w c:\windows\$hf_mig$\KB958687\spmsg.dll
+ 2007-11-30 11:19:06 234,872 ----a-w c:\windows\$hf_mig$\KB958687\spuninst.exe
+ 2007-11-30 11:19:06 26,488 ----a-w c:\windows\$hf_mig$\KB958687\update\spcustom.dll
+ 2007-11-30 11:19:06 767,352 ----a-w c:\windows\$hf_mig$\KB958687\update\update.exe
+ 2007-11-30 11:19:10 406,392 ----a-w c:\windows\$hf_mig$\KB958687\update\updspapi.dll
+ 2008-12-13 06:27:45 3,594,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
+ 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spmsg.dll
+ 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB960714-IE7\spuninst.exe
+ 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\spcustom.dll
+ 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\update.exe
+ 2007-03-06 01:35:47 394,976 ----a-w c:\windows\$hf_mig$\KB960714-IE7\update\updspapi.dll
+ 2008-07-09 07:40:22 18,296 ----a-w c:\windows\$hf_mig$\KB960715\spmsg.dll
+ 2008-07-09 07:40:24 234,872 ----a-w c:\windows\$hf_mig$\KB960715\spuninst.exe
+ 2008-07-09 07:40:22 26,488 ----a-w c:\windows\$hf_mig$\KB960715\update\spcustom.dll
+ 2008-11-15 17:18:14 767,352 ----a-w c:\windows\$hf_mig$\KB960715\update\update.exe
+ 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB960715\update\updspapi.dll
+ 2008-12-20 23:47:28 124,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\advpack.dll
+ 2008-12-20 23:47:28 347,136 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtmsft.dll
+ 2008-12-20 23:47:28 214,528 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\dxtrans.dll
+ 2008-12-20 23:47:28 132,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\extmgr.dll
+ 2008-12-20 23:47:28 63,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\icardie.dll
+ 2008-12-19 09:41:51 70,656 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ie4uinit.exe
+ 2008-12-20 23:47:28 153,088 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakeng.dll
+ 2008-12-20 23:47:28 230,400 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieaksie.dll
+ 2008-12-19 05:24:02 161,792 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieakui.dll
+ 2007-04-17 09:32:38 2,455,488 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dat
+ 2008-12-20 23:47:29 380,928 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieapfltr.dll
+ 2008-12-20 23:47:29 388,608 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iedkcs32.dll
+ 2008-12-20 23:47:30 6,068,736 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieframe.dll
+ 2008-12-20 23:47:30 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iernonce.dll
+ 2008-12-20 23:47:31 267,776 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iertutil.dll
+ 2008-12-19 09:41:52 13,824 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\ieudinit.exe
+ 2008-12-19 05:25:30 634,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\iexplore.exe
+ 2008-12-20 23:47:31 27,648 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\jsproxy.dll
+ 2008-12-20 23:47:31 459,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeeds.dll
+ 2008-12-20 23:47:31 52,224 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msfeedsbs.dll
+ 2009-01-16 16:20:14 3,596,288 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
+ 2008-12-20 23:47:33 477,696 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtmled.dll
+ 2008-12-20 23:47:33 193,024 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\msrating.dll
+ 2008-12-20 23:47:34 671,232 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mstime.dll
+ 2008-12-20 23:47:34 102,912 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\occache.dll
+ 2008-12-20 23:47:34 44,544 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\pngfilt.dll
+ 2008-12-20 23:47:34 105,984 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\url.dll
+ 2008-12-20 23:47:35 1,163,264 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\urlmon.dll
+ 2008-12-20 23:47:35 233,472 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\webcheck.dll
+ 2008-12-20 23:47:36 827,904 ----a-w c:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
+ 2007-03-06 01:34:33 15,072 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spmsg.dll
+ 2007-03-06 01:34:38 216,800 ----a-w c:\windows\$hf_mig$\KB961260-IE7\spuninst.exe
+ 2007-03-06 01:34:31 22,752 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\spcustom.dll
+ 2007-03-06 01:34:56 727,776 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\update.exe
+ 2007-03-06 01:35:48 394,976 ----a-w c:\windows\$hf_mig$\KB961260-IE7\update\updspapi.dll
+ 2008-06-17 19:04:03 8,518,144 ----a-w c:\windows\$hf_mig$\KB967715\SP3QFE\shell32.dll
+ 2008-07-09 07:40:22 18,296 ----a-w c:\windows\$hf_mig$\KB967715\spmsg.dll
+ 2008-07-09 07:40:24 234,872 ----a-w c:\windows\$hf_mig$\KB967715\spuninst.exe
+ 2008-07-09 07:40:22 26,488 ----a-w c:\windows\$hf_mig$\KB967715\update\spcustom.dll
+ 2008-07-09 07:40:26 767,352 ----a-w c:\windows\$hf_mig$\KB967715\update\update.exe
+ 2008-07-09 07:40:35 406,392 ----a-w c:\windows\$hf_mig$\KB967715\update\updspapi.dll
+ 2004-08-10 12:00:00 53,248 -c----w c:\windows\$NtServicePackUninstall$\1394bus.sys
+ 2006-08-16 11:59:27 100,352 -c----w c:\windows\$NtServicePackUninstall$\6to4svc.dll
+ 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll
+ 2006-10-04 14:05:26 39,424 -c----w c:\windows\$NtServicePackUninstall$\acadproc.dll.000
+ 2004-08-10 12:00:00 189,952 -c----w c:\windows\$NtServicePackUninstall$\accwiz.exe
+ 2004-08-10 12:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll
+ 2004-08-10 12:00:00 1,852,416 -c----w c:\windows\$NtServicePackUninstall$\acgenral.dll.000
+ 2004-08-10 12:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll
+ 2004-08-10 12:00:00 450,048 -c----w c:\windows\$NtServicePackUninstall$\aclayers.dll.000
+ 2004-08-10 12:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll
+ 2004-08-10 12:00:00 137,728 -c----w c:\windows\$NtServicePackUninstall$\aclua.dll.000
+ 2004-08-10 12:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\aclui.dll
+ 2004-08-10 12:00:00 188,672 -c----w c:\windows\$NtServicePackUninstall$\acpi.sys
+ 2004-08-10 12:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll
+ 2004-08-10 12:00:00 244,736 -c----w c:\windows\$NtServicePackUninstall$\acspecfc.dll.000
+ 2004-08-10 12:00:00 194,048 -c----w c:\windows\$NtServicePackUninstall$\activeds.dll
+ 2004-08-10 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\actmovie.exe
+ 2004-08-10 12:00:00 101,888 -c----w c:\windows\$NtServicePackUninstall$\actxprxy.dll
+ 2004-08-10 12:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll
+ 2004-08-10 12:00:00 116,224 -c----w c:\windows\$NtServicePackUninstall$\acxtrnal.dll.000
+ 2004-08-10 12:00:00 175,616 -c----w c:\windows\$NtServicePackUninstall$\adsldp.dll
+ 2004-08-10 12:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\adsldpc.dll
+ 2004-08-10 12:00:00 68,096 -c----w c:\windows\$NtServicePackUninstall$\adsmsext.dll
+ 2004-08-10 12:00:00 263,680 -c----w c:\windows\$NtServicePackUninstall$\adsnt.dll
+ 2004-08-10 12:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\adsnw.dll
+ 2004-08-10 12:00:00 685,056 -c----w c:\windows\$NtServicePackUninstall$\advapi32.dll
+ 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys
+ 2006-02-15 00:22:26 142,464 -c----w c:\windows\$NtServicePackUninstall$\aec.sys.000
+ 2008-06-20 10:44:38 138,368 -c----w c:\windows\$NtServicePackUninstall$\afd.sys
+ 2004-08-10 12:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentanm.dll
+ 2004-08-10 12:00:00 214,016 -c----w c:\windows\$NtServicePackUninstall$\agentctl.dll
+ 2006-10-12 13:55:58 42,496 -c----w c:\windows\$NtServicePackUninstall$\agentdp2.dll
+ 2007-03-09 14:00:38 57,344 -c----w c:\windows\$NtServicePackUninstall$\agentdpv.dll
+ 2004-08-10 12:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\agentmpx.dll
+ 2004-08-10 12:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agentpsh.dll
+ 2004-08-10 12:00:00 44,032 -c----w c:\windows\$NtServicePackUninstall$\agentsr.dll
+ 2006-10-12 11:54:07 256,512 -c----w c:\windows\$NtServicePackUninstall$\agentsvr.exe
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0405.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0406.dll
+ 2004-08-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt0407.dll
+ 2004-08-10 12:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\agt0408.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0409.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt040b.dll
+ 2004-08-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\agt040c.dll
+ 2004-08-10 12:00:00 19,968 -c----w c:\windows\$NtServicePackUninstall$\agt040e.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0410.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0413.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0414.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0415.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0416.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt0419.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041d.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\agt041f.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\agt0816.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\agt0c0a.dll
+ 2004-08-10 12:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\agtintl.dll
+ 2004-08-10 12:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\ahui.exe
+ 2004-08-10 12:00:00 44,544 -c----w c:\windows\$NtServicePackUninstall$\alg.exe
+ 2004-08-10 12:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\alrsvc.dll
+ 2004-08-10 12:00:00 41,216 -c----w c:\windows\$NtServicePackUninstall$\amdk6.sys
+ 2004-08-10 12:00:00 41,600 -c----w c:\windows\$NtServicePackUninstall$\amdk7.sys
+ 2004-08-10 12:00:00 70,656 -c----w c:\windows\$NtServicePackUninstall$\amstream.dll
+ 2004-08-10 12:00:00 126,976 -c----w c:\windows\$NtServicePackUninstall$\apphelp.dll
+ 2004-08-10 12:00:00 176,640 -c----w c:\windows\$NtServicePackUninstall$\appmgmts.dll
+ 2004-08-10 12:00:00 302,592 -c----w c:\windows\$NtServicePackUninstall$\appmgr.dll
+ 2004-08-10 12:00:00 60,800 -c----w c:\windows\$NtServicePackUninstall$\arp1394.sys
+ 2002-06-21 16:31:20 20,480 -c----w c:\windows\$NtServicePackUninstall$\aspnet_filter.dll
+ 2007-01-02 15:34:04 200,704 -c----w c:\windows\$NtServicePackUninstall$\aspnet_isapi.dll
+ 2004-08-03 21:11:06 24,576 -c----w c:\windows\$NtServicePackUninstall$\aspnet_regiis.exe
+ 2002-06-21 16:31:22 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_state.exe
+ 2007-01-02 15:34:04 32,768 -c----w c:\windows\$NtServicePackUninstall$\aspnet_wp.exe
+ 2004-08-10 12:00:00 30,720 -c----w c:\windows\$NtServicePackUninstall$\asr_fmt.exe
+ 2004-08-10 12:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\asr_pfu.exe
+ 2004-08-10 12:00:00 65,024 -c----w c:\windows\$NtServicePackUninstall$\asycfilt.dll
+ 2004-08-10 12:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\asyncmac.sys
+ 2004-08-10 12:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\at.exe
+ 2004-08-03 21:59:44 95,360 -c----w c:\windows\$NtServicePackUninstall$\atapi.sys
+ 2004-08-10 12:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\atl.dll
+ 2004-08-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\atmadm.exe
+ 2004-08-10 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\atmarpc.sys
+ 2004-08-10 12:00:00 285,696 -c----w c:\windows\$NtServicePackUninstall$\atmfd.dll
+ 2004-08-10 12:00:00 55,936 -c----w c:\windows\$NtServicePackUninstall$\atmlane.sys
+ 2004-08-10 12:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\atmlib.dll
+ 2004-08-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\attrib.exe
+ 2004-08-10 12:00:00 42,496 -c----w c:\windows\$NtServicePackUninstall$\audiosrv.dll
+ 2004-08-10 12:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\auditusr.exe
+ 2005-03-02 18:10:36 56,832 -c----w c:\windows\$NtServicePackUninstall$\authz.dll
+ 2004-08-10 12:00:00 625,152 -c----w c:\windows\$NtServicePackUninstall$\autochk.exe
+ 2004-08-10 12:00:00 638,976 -c----w c:\windows\$NtServicePackUninstall$\autoconv.exe
+ 2004-08-10 12:00:00 616,960 -c----w c:\windows\$NtServicePackUninstall$\autofmt.exe
+ 2004-08-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\autolfn.exe
+ 2004-08-10 12:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\avifil32.dll
+ 2004-08-10 12:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\basesrv.dll
+ 2004-08-10 12:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\batmeter.dll
+ 2004-08-10 12:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\batt.dll
+ 2001-08-17 21:57:54 14,080 -c----w c:\windows\$NtServicePackUninstall$\battc.sys
+ 2004-08-10 12:00:00 17,408 -c----w c:\windows\$NtServicePackUninstall$\bidispl.dll
+ 2004-08-10 12:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\bitsprx2.dll
+ 2004-08-10 12:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\bitsprx3.dll
+ 2004-08-10 12:00:00 71,680 -c----w c:\windows\$NtServicePackUninstall$\blastcln.exe
+ 2004-08-10 12:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\bootcfg.exe
+ 2004-08-10 12:00:00 71,552 -c----w c:\windows\$NtServicePackUninstall$\bridge.sys
+ 2004-08-10 12:00:00 70,144 -c----w c:\windows\$NtServicePackUninstall$\browselc.dll
+ 2004-08-10 12:00:00 77,312 -c----w c:\windows\$NtServicePackUninstall$\browser.dll
+ 2006-09-14 08:38:02 1,022,976 -c----w c:\windows\$NtServicePackUninstall$\browseui.dll
+ 2004-08-10 12:00:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\browsewm.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\bthci.dll
+ 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys
+ 2008-06-14 17:59:52 272,768 -c----w c:\windows\$NtServicePackUninstall$\bthport.sys.000
+ 2004-08-10 12:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\bthserv.dll
+ 2004-08-10 12:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\btpanui.dll
+ 2004-08-10 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\cabinet.dll
+ 2004-08-10 12:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\cabview.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\cacls.exe
+ 2004-08-10 12:00:00 385,024 -c----w c:\windows\$NtServicePackUninstall$\callcont.dll
+ 2004-08-10 12:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\camocx.dll
+ 2004-08-10 12:00:00 146,432 -c----w c:\windows\$NtServicePackUninstall$\capesnpn.dll
+ 2005-07-26 04:39:54 225,792 -c----w c:\windows\$NtServicePackUninstall$\catsrv.dll
+ 2004-08-10 12:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\catsrvps.dll
+ 2005-07-26 04:39:54 625,152 -c----w c:\windows\$NtServicePackUninstall$\catsrvut.dll
+ 2004-08-03 23:10:18 17,024 -c----w c:\windows\$NtServicePackUninstall$\ccdecode.sys
+ 2004-08-10 12:00:00 63,744 -c----w c:\windows\$NtServicePackUninstall$\cdfs.sys
+ 2006-09-14 08:38:02 152,064 -c----w c:\windows\$NtServicePackUninstall$\cdfview.dll
+ 2005-09-10 01:55:14 2,067,968 -c----w c:\windows\$NtServicePackUninstall$\cdosys.dll
+ 2004-08-10 12:00:00 49,536 -c----w c:\windows\$NtServicePackUninstall$\cdrom.sys
+ 2004-08-10 12:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\certcli.dll
+ 2004-08-10 12:00:00 467,968 -c----w c:\windows\$NtServicePackUninstall$\certmgr.dll
+ 2004-08-10 12:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\cfgbkend.dll
+ 2004-08-10 12:00:00 16,896 -c----w c:\windows\$NtServicePackUninstall$\cfgmgr32.dll
+ 2004-08-10 12:00:00 109,568 -c----w c:\windows\$NtServicePackUninstall$\cic.dll
+ 2004-08-10 12:00:00 1,352,704 -c----w c:\windows\$NtServicePackUninstall$\cimwin32.dll
+ 2006-06-22 05:13:45 69,120 -c----w c:\windows\$NtServicePackUninstall$\ciodm.dll
+ 2004-08-10 12:00:00 56,832 -c----w c:\windows\$NtServicePackUninstall$\cipher.exe
+ 2004-08-10 12:00:00 5,632 -c----w c:\windows\$NtServicePackUninstall$\cisvc.exe
+ 2004-08-10 12:00:00 49,664 -c----w c:\windows\$NtServicePackUninstall$\classpnp.sys
+ 2005-07-26 04:39:55 110,080 -c----w c:\windows\$NtServicePackUninstall$\clbcatex.dll
+ 2005-07-26 04:39:55 498,688 -c----w c:\windows\$NtServicePackUninstall$\clbcatq.dll
+ 2004-08-10 12:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cleanmgr.exe
+ 2004-08-10 12:00:00 77,824 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\cliconfg.exe
+ 2004-08-10 12:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\clipbrd.exe
+ 2004-08-10 12:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\clipsrv.exe
+ 2004-08-10 12:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\clusapi.dll
+ 2004-08-03 23:07:40 14,080 -c----w c:\windows\$NtServicePackUninstall$\cmbatt.sys
+ 2004-08-10 12:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\cmcfg32.dll
+ 2004-08-10 12:00:00 400,896 -c----w c:\windows\$NtServicePackUninstall$\cmd.exe
+ 2004-08-10 12:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\cmdevtgprov.dll
+ 2004-08-10 12:00:00 352,256 -c----w c:\windows\$NtServicePackUninstall$\cmdial32.dll
+ 2004-08-10 12:00:00 47,104 -c----w c:\windows\$NtServicePackUninstall$\cmdl32.exe
+ 2004-08-10 12:00:00 40,448 -c----w c:\windows\$NtServicePackUninstall$\cmmon32.exe
+ 2004-08-10 12:00:00 191,488 -c----w c:\windows\$NtServicePackUninstall$\cmprops.dll
+ 2004-08-10 12:00:00 13,824 -c----w c:\windows\$NtServicePackUninstall$\cmsetacl.dll
+ 2004-08-10 12:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\cmstp.exe
+ 2004-08-10 12:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\cmutil.dll
+ 2004-08-10 12:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\cnbjmon.dll
+ 2005-07-26 04:39:55 60,416 -c----w c:\windows\$NtServicePackUninstall$\colbact.dll
+ 2004-08-10 12:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\comaddin.dll
+ 2005-07-26 04:39:56 195,072 -c----w c:\windows\$NtServicePackUninstall$\comadmin.dll
+ 2006-08-25 15:51:14 617,472 -c----w c:\windows\$NtServicePackUninstall$\comctl32.dll
+ 2004-08-10 12:00:00 281,088 -c----w c:\windows\$NtServicePackUninstall$\comdlg32.dll
+ 2004-08-10 12:00:00 253,440 -c----w c:\windows\$NtServicePackUninstall$\compatui.dll
+ 2001-08-17 21:58:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\compbatt.sys
+ 2004-08-10 12:00:00 230,912 -c----w c:\windows\$NtServicePackUninstall$\compstui.dll
+ 2005-07-26 04:39:56 97,792 -c----w c:\windows\$NtServicePackUninstall$\comrepl.dll
+ 2004-08-10 12:00:00 9,728 -c----w c:\windows\$NtServicePackUninstall$\comrepl.exe
+ 2004-08-10 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\comrereg.exe
+ 2004-08-10 12:00:00 851,968 -c----w c:\windows\$NtServicePackUninstall$\comres.dll
+ 2004-08-10 12:00:00 259,584 -c----w c:\windows\$NtServicePackUninstall$\comsetup.dll
+ 2004-08-10 12:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\comsnap.dll
+ 2005-07-26 04:39:57 1,267,200 -c----w c:\windows\$NtServicePackUninstall$\comsvcs.dll
+ 2005-07-26 04:39:57 540,160 -c----w c:\windows\$NtServicePackUninstall$\comuid.dll
+ 2004-08-10 12:00:00 1,044,480 -c----w c:\windows\$NtServicePackUninstall$\conf.exe
+ 2004-08-10 12:00:00 45,056 -c----w c:\windows\$NtServicePackUninstall$\confmrsl.dll
+ 2004-08-10 12:00:00 346,112 -c----w c:\windows\$NtServicePackUninstall$\confmsp.dll
+ 2004-08-10 12:00:00 27,648 -c----w c:\windows\$NtServicePackUninstall$\conime.exe
+ 2007-01-08 19:01:14 17,408 -c----w c:\windows\$NtServicePackUninstall$\corpol.dll
+ 2004-08-10 12:00:00 165,888 -c----w c:\windows\$NtServicePackUninstall$\credui.dll
+ 2004-08-10 12:00:00 40,704 -c----w c:\windows\$NtServicePackUninstall$\crusoe.sys
+ 2004-08-10 12:00:00 604,672 -c----w c:\windows\$NtServicePackUninstall$\crypt32.dll
+ 2004-08-10 12:00:00 75,776 -c----w c:\windows\$NtServicePackUninstall$\cryptdlg.dll
+ 2004-08-10 12:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\cryptdll.dll
+ 2004-08-10 12:00:00 54,784 -c----w c:\windows\$NtServicePackUninstall$\cryptext.dll
+ 2004-08-10 12:00:00 63,488 -c----w c:\windows\$NtServicePackUninstall$\cryptnet.dll
+ 2004-08-10 12:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\cryptsvc.dll
+ 2004-08-10 12:00:00 530,432 -c----w c:\windows\$NtServicePackUninstall$\cryptui.dll
+ 2004-08-10 12:00:00 102,912 -c----w c:\windows\$NtServicePackUninstall$\cscdll.dll
+ 2004-08-10 12:00:00 98,304 -c----w c:\windows\$NtServicePackUninstall$\cscript.exe
+ 2004-08-10 12:00:00 337,920 -c----w c:\windows\$NtServicePackUninstall$\cscui.dll
+ 2004-08-10 12:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\csrsrv.dll
+ 2004-08-10 12:00:00 6,144 -c----w c:\windows\$NtServicePackUninstall$\csrss.exe
+ 2004-08-10 12:00:00 15,360 -c----w c:\windows\$NtServicePackUninstall$\ctfmon.exe
+ 2006-06-02 19:32:20 33,792 -c----w c:\windows\$NtServicePackUninstall$\custsat.dll
+ 2004-08-10 12:00:00 1,179,648 -c----w c:\windows\$NtServicePackUninstall$\d3d8.dll
+ 2004-08-10 12:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\d3d8thk.dll
+ 2004-08-10 12:00:00 1,689,088 -c----w c:\windows\$NtServicePackUninstall$\d3d9.dll
+ 2004-08-10 12:00:00 825,344 -c----w c:\windows\$NtServicePackUninstall$\d3dim700.dll
+ 2006-09-14 08:38:02 1,056,768 -c----w c:\windows\$NtServicePackUninstall$\danim.dll
+ 2004-08-10 12:00:00 55,296 -c----w c:\windows\$NtServicePackUninstall$\dataclen.dll
+ 2004-08-10 12:00:00 152,064 -c----w c:\windows\$NtServicePackUninstall$\datime.dll
+ 2004-08-10 12:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\davclnt.dll
+ 2004-08-10 12:00:00 640,000 -c----w c:\windows\$NtServicePackUninstall$\dbghelp.dll
+ 2004-08-10 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dbmsrpcn.dll
+ 2004-08-10 12:00:00 110,592 -c----w c:\windows\$NtServicePackUninstall$\dbnetlib.dll
+ 2004-08-10 12:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dbnmpntw.dll
+ 2004-08-10 12:00:00 1,788 -c----w c:\windows\$NtServicePackUninstall$\dcache.bin
+ 2004-08-10 12:00:00 40,960 -c----w c:\windows\$NtServicePackUninstall$\dcap32.dll
+ 2004-08-10 12:00:00 8,704 -c----w c:\windows\$NtServicePackUninstall$\dciman32.dll
+ 2004-08-10 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dcomcnfg.exe
+ 2004-08-10 12:00:00 31,744 -c----w c:\windows\$NtServicePackUninstall$\ddeshare.exe
+ 2004-08-10 12:00:00 266,240 -c----w c:\windows\$NtServicePackUninstall$\ddraw.dll
+ 2004-08-10 12:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\ddrawex.dll
+ 2004-08-10 12:00:00 25,088 -c----w c:\windows\$NtServicePackUninstall$\defrag.exe
+ 2004-08-10 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\devenum.dll
+ 2004-08-10 12:00:00 290,816 -c----w c:\windows\$NtServicePackUninstall$\devmgr.dll
+ 2004-08-10 12:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dfrgfat.exe
+ 2004-08-10 12:00:00 104,960 -c----w c:\windows\$NtServicePackUninstall$\dfrgntfs.exe
+ 2004-08-10 12:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\dfrgsnap.dll
+ 2004-08-10 12:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\dfrgui.dll
+ 2004-08-10 12:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dfsshlex.dll
+ 2004-08-10 12:00:00 115,200 -c----w c:\windows\$NtServicePackUninstall$\dgnet.dll
+ 2006-05-19 13:23:35 112,128 -c----w c:\windows\$NtServicePackUninstall$\dhcpcsvc.dll
+ 2004-08-10 12:00:00 401,408 -c----w c:\windows\$NtServicePackUninstall$\dhcpmon.dll
+ 2004-08-10 12:00:00 548,352 -c----w c:\windows\$NtServicePackUninstall$\dialer.exe
+ 2004-08-10 12:00:00 85,504 -c----w c:\windows\$NtServicePackUninstall$\diantz.exe
+ 2004-08-10 12:00:00 68,608 -c----w c:\windows\$NtServicePackUninstall$\digest.dll
+ 2004-08-10 12:00:00 165,376 -c----w c:\windows\$NtServicePackUninstall$\dinput.dll
+ 2004-08-10 12:00:00 187,904 -c----w c:\windows\$NtServicePackUninstall$\dinput8.dll
+ 2007-05-16 15:13:53 86,528 -c----w c:\windows\$NtServicePackUninstall$\directdb.dll
+ 2004-08-10 12:00:00 36,352 -c----w c:\windows\$NtServicePackUninstall$\disk.sys
+ 2004-08-10 12:00:00 1,502,208 -c----w c:\windows\$NtServicePackUninstall$\diskcopy.dll
+ 2004-08-10 12:00:00 14,208 -c----w c:\windows\$NtServicePackUninstall$\diskdump.sys
+ 2004-08-10 12:00:00 167,936 -c----w c:\windows\$NtServicePackUninstall$\diskpart.exe
+ 2004-08-10 12:00:00 45,083 -c----w c:\windows\$NtServicePackUninstall$\dispex.dll
+ 2004-08-10 12:00:00 5,120 -c----w c:\windows\$NtServicePackUninstall$\dllhost.exe
+ 2004-08-10 12:00:00 225,280 -c----w c:\windows\$NtServicePackUninstall$\dmadmin.exe
+ 2004-08-10 12:00:00 28,672 -c----w c:\windows\$NtServicePackUninstall$\dmband.dll
+ 2004-08-10 12:00:00 800,256 -c----w c:\windows\$NtServicePackUninstall$\dmboot.sys
+ 2004-08-10 12:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\dmcompos.dll
+ 2004-08-10 12:00:00 273,920 -c----w c:\windows\$NtServicePackUninstall$\dmdlgs.dll
+ 2004-08-10 12:00:00 200,704 -c----w c:\windows\$NtServicePackUninstall$\dmdskmgr.dll
+ 2004-08-10 12:00:00 181,248 -c----w c:\windows\$NtServicePackUninstall$\dmime.dll
+ 2004-08-10 12:00:00 154,496 -c----w c:\windows\$NtServicePackUninstall$\dmio.sys
+ 2004-08-10 12:00:00 35,840 -c----w c:\windows\$NtServicePackUninstall$\dmloader.dll
+ 2004-08-10 12:00:00 15,872 -c----w c:\windows\$NtServicePackUninstall$\dmremote.exe
+ 2004-08-10 12:00:00 82,432 -c----w c:\windows\$NtServicePackUninstall$\dmscript.dll
+ 2004-08-10 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\dmserver.dll
+ 2004-08-10 12:00:00 105,984 -c----w c:\windows\$NtServicePackUninstall$\dmstyle.dll
+ 2004-08-10 12:00:00 103,424 -c----w c:\windows\$NtServicePackUninstall$\dmsynth.dll
+ 2004-08-10 12:00:00 104,448 -c----w c:\windows\$NtServicePackUninstall$\dmusic.dll
+ 2004-08-03 22:07:40 52,864 -c----w c:\windows\$NtServicePackUninstall$\dmusic.sys
+ 2004-08-10 12:00:00 58,880 -c----w c:\windows\$NtServicePackUninstall$\dmutil.dll
+ 2008-06-20 17:41:06 148,992 -c----w c:\windows\$NtServicePackUninstall$\dnsapi.dll
+ 2008-02-20 05:35:05 45,568 -c----w c:\windows\$NtServicePackUninstall$\dnsrslvr.dll
+ 2004-08-10 12:00:00 48,640 -c----w c:\windows\$NtServicePackUninstall$\docprop2.dll
+ 2004-08-10 12:00:00 97,280 -c----w c:\windows\$NtServicePackUninstall$\dpcdll.dll
+ 2004-08-10 12:00:00 30,208 -c----w c:\windows\$NtServicePackUninstall$\dplaysvr.exe
+ 2004-08-10 12:00:00 229,888 -c----w c:\windows\$NtServicePackUninstall$\dplayx.dll
+ 2004-08-10 12:00:00 24,064 -c----w c:\windows\$NtServicePackUninstall$\dpmodemx.dll
+ 2004-08-10 12:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnaddr.dll
+ 2004-08-10 12:00:00 375,296 -c----w c:\windows\$NtServicePackUninstall$\dpnet.dll
+ 2004-08-10 12:00:00 35,328 -c----w c:\windows\$NtServicePackUninstall$\dpnhpast.dll
+ 2004-08-10 12:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\dpnhupnp.dll
+ 2004-08-10 12:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\dpnlobby.dll
+ 2004-08-10 12:00:00 18,432 -c----w c:\windows\$NtServicePackUninstall$\dpnsvr.exe
+ 2004-08-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\dpvacm.dll
+ 2004-08-10 12:00:00 213,504 -c----w c:\windows\$NtServicePackUninstall$\dpvoice.dll
+ 2004-08-10 12:00:00 83,456 -c----w c:\windows\$NtServicePackUninstall$\dpvsetup.exe
+ 2004-08-10 12:00:00 116,736 -c----w c:\windows\$NtServicePackUninstall$\dpvvox.dll
+ 2004-08-10 12:00:00 57,856 -c----w c:\windows\$NtServicePackUninstall$\dpwsockx.dll
+ 2004-08-10 12:00:00 60,928 -c----w c:\windows\$NtServicePackUninstall$\driverquery.exe
+ 2004-08-03 22:08:00 60,288 -c----w c:\windows\$NtServicePackUninstall$\drmk.sys
+ 2004-08-03 22:07:58 2,944 -c----w c:\windows\$NtServicePackUninstall$\drmkaud.sys
+ 2004-08-10 12:00:00 14,336 -c----w c:\windows\$NtServicePackUninstall$\drprov.dll
+ 2004-08-10 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\ds32gt.dll
+ 2004-08-10 12:00:00 181,760 -c----w c:\windows\$NtServicePackUninstall$\dsdmo.dll
+ 2004-08-10 12:00:00 72,192 -c----w c:\windows\$NtServicePackUninstall$\dsdmoprp.dll
+ 2004-08-10 12:00:00 93,696 -c----w c:\windows\$NtServicePackUninstall$\dskquota.dll
+ 2004-08-10 12:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\dskquoui.dll
+ 2004-08-10 12:00:00 367,616 -c----w c:\windows\$NtServicePackUninstall$\dsound.dll
+ 2004-08-10 12:00:00 1,294,336 -c----w c:\windows\$NtServicePackUninstall$\dsound3d.dll
+ 2004-08-10 12:00:00 145,408 -c----w c:\windows\$NtServicePackUninstall$\dsprop.dll
+ 2004-08-10 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\dsprpres.dll
+ 2004-08-10 12:00:00 240,640 -c----w c:\windows\$NtServicePackUninstall$\dsquery.dll
+ 2004-08-10 12:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\dssec.dll
+ 2004-08-10 12:00:00 137,216 -c----w c:\windows\$NtServicePackUninstall$\dssenh.dll
+ 2004-08-10 12:00:00 113,664 -c----w c:\windows\$NtServicePackUninstall$\dsuiext.dll
+ 2004-08-10 12:00:00 19,456 -c----w c:\windows\$NtServicePackUninstall$\dswave.dll
+ 2004-08-10 12:00:00 10,752 -c----w c:\windows\$NtServicePackUninstall$\dumprep.exe
+ 2004-08-10 12:00:00 304,128 -c----w c:\windows\$NtServicePackUninstall$\duser.dll
+ 2004-08-10 12:00:00 17,920 -c----w c:\windows\$NtServicePackUninstall$\dvdupgrd.exe
+ 2004-08-10 12:00:00 180,224 -c----w c:\windows\$NtServicePackUninstall$\dwwin.exe
+ 2004-08-10 12:00:00 619,008 -c----w c:\windows\$NtServicePackUninstall$\dx7vb.dll
+ 2004-08-10 12:00:00 1,227,264 -c----w c:\windows\$NtServicePackUninstall$\dx8vb.dll
+ 2004-08-10 12:00:00 1,298,432 -c----w c:\windows\$NtServicePackUninstall$\dxdiag.exe
+ 2004-08-10 12:00:00 2,113,536 -c----w c:\windows\$NtServicePackUninstall$\dxdiagn.dll
+ 2004-08-10 12:00:00 71,040 -c----w c:\windows\$NtServicePackUninstall$\dxg.sys
+ 2006-08-24 13:17:20 500,278 -c----w c:\windows\$NtServicePackUninstall$\dxmasf.dll
+ 2004-08-10 12:00:00 27,136 -c----w c:\windows\$NtServicePackUninstall$\efsadu.dll
+ 2004-08-10 12:00:00 187,392 -c----w c:\windows\$NtServicePackUninstall$\els.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\encapi.dll
+ 2004-08-10 12:00:00 23,040 -c----w c:\windows\$NtServicePackUninstall$\ersvc.dll
+ 2008-07-07 20:31:48 253,952 -c----w c:\windows\$NtServicePackUninstall$\es.dll
+ 2005-10-20 22:25:53 1,097,728 -c----w c:\windows\$NtServicePackUninstall$\esent.dll
+ 2004-08-10 12:00:00 247,808 -c----w c:\windows\$NtServicePackUninstall$\esscli.dll
+ 2004-08-10 12:00:00 195,072 -c----w c:\windows\$NtServicePackUninstall$\eudcedit.exe
+ 2004-08-10 12:00:00 52,736 -c----w c:\windows\$NtServicePackUninstall$\eventcreate.exe
+ 2004-08-10 12:00:00 55,808 -c----w c:\windows\$NtServicePackUninstall$\eventlog.dll
+ 2004-08-10 12:00:00 81,408 -c----w c:\windows\$NtServicePackUninstall$\eventtriggers.exe
+ 2004-08-10 12:00:00 22,016 -c----w c:\windows\$NtServicePackUninstall$\evntrprv.dll
+ 2004-08-10 12:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\evtgprov.dll
+ 2007-06-13 13:22:28 1,037,312 -c----w c:\windows\$NtServicePackUninstall$\explorer.exe
+ 2004-08-10 12:00:00 380,957 -c----w c:\windows\$NtServicePackUninstall$\expsrv.dll
+ 2004-08-10 12:00:00 45,568 -c----w c:\windows\$NtServicePackUninstall$\extrac32.exe
+ 2004-08-10 12:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\exts.dll
+ 2004-08-10 12:00:00 143,360 -c----w c:\windows\$NtServicePackUninstall$\fastfat.sys
+ 2004-08-10 12:00:00 472,064 -c----w c:\windows\$NtServicePackUninstall$\fastprox.dll
+ 2004-08-10 12:00:00 80,896 -c----w c:\windows\$NtServicePackUninstall$\faultrep.dll
+ 2004-08-10 12:00:00 27,392 -c----w c:\windows\$NtServicePackUninstall$\fdc.sys
+ 2004-08-10 12:00:00 119,296 -c----w c:\windows\$NtServicePackUninstall$\fde.dll
+ 2004-08-10 12:00:00 76,288 -c----w c:\windows\$NtServicePackUninstall$\fdeploy.dll
+ 2004-08-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\feclient.dll
+ 2004-08-10 12:00:00 348,160 -c----w c:\windows\$NtServicePackUninstall$\filemgmt.dll
+ 2004-08-10 12:00:00 29,184 -c----w c:\windows\$NtServicePackUninstall$\findstr.exe
+ 2004-08-10 12:00:00 35,072 -c----w c:\windows\$NtServicePackUninstall$\fips.sys
+ 2004-08-10 12:00:00 88,064 -c----w c:\windows\$NtServicePackUninstall$\fldrclnr.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\flpydisk.sys
+ 2006-08-21 12:26:15 16,896 -c----w c:\windows\$NtServicePackUninstall$\fltlib.dll
+ 2006-08-21 09:14:58 23,040 -c----w c:\windows\$NtServicePackUninstall$\fltmc.exe
+ 2006-08-21 09:14:58 128,896 -c----w c:\windows\$NtServicePackUninstall$\fltmgr.sys
+ 2004-08-10 12:00:00 386,560 -c----w c:\windows\$NtServicePackUninstall$\fontext.dll
+ 2005-10-17 21:21:08 80,896 -c----w c:\windows\$NtServicePackUninstall$\fontsub.dll
+ 2004-08-10 12:00:00 21,504 -c----w c:\windows\$NtServicePackUninstall$\fontview.exe
+ 2004-08-10 12:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\forcedos.exe
+ 2004-08-10 12:00:00 25,600 -c----w c:\windows\$NtServicePackUninstall$\format.com
+ 2004-08-10 12:00:00 32,828 -c----w c:\windows\$NtServicePackUninstall$\fp40ext.dll
+ 2003-03-24 14:52:04 618,605 -c----w c:\windows\$NtServicePackUninstall$\fp4autl.dll
+ 2002-05-14 13:08:54 94,208 -c----w c:\windows\$NtServicePackUninstall$\fpencode.dll
+ 2004-08-10 12:00:00 9,344 -c----w c:\windows\$NtServicePackUninstall$\framebuf.dll
+ 2004-08-10 12:00:00 185,856 -c----w c:\windows\$NtServicePackUninstall$\framedyn.dll
+ 2004-08-10 12:00:00 193,024 -c----w c:\windows\$NtServicePackUninstall$\fsquirt.exe
+ 2004-08-10 12:00:00 46,080 -c----w c:\windows\$NtServicePackUninstall$\ftp.exe
+ 2004-08-10 12:00:00 60,416 -c----w c:\windows\$NtServicePackUninstall$\fwcfg.dll
+ 2004-08-10 12:00:00 132,608 -c----w c:\windows\$NtServicePackUninstall$\fxsocm.dll
+ 2004-09-29 18:04:48 61,440 -c----w c:\windows\$NtServicePackUninstall$\gacutil.exe
+ 2008-02-20 06:51:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\gdi32.dll
+ 2004-08-10 12:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\getmac.exe
+ 2004-08-10 12:00:00 123,904 -c----w c:\windows\$NtServicePackUninstall$\glu32.dll
+ 2004-08-10 12:00:00 577,536 -c----w c:\windows\$NtServicePackUninstall$\gpedit.dll
+ 2004-08-10 12:00:00 10,240 -c----w c:\windows\$NtServicePackUninstall$\gpkrsrc.dll
+ 2004-08-10 12:00:00 123,392 -c----w c:\windows\$NtServicePackUninstall$\gpresult.exe
+ 2004-08-10 12:00:00 201,216 -c----w c:\windows\$NtServicePackUninstall$\gptext.dll
+ 2004-08-10 12:00:00 39,424 -c----w c:\windows\$NtServicePackUninstall$\grpconv.exe
+ 2004-08-10 12:00:00 125,440 -c----w c:\windows\$NtServicePackUninstall$\guitrn.dll
+ 2004-08-10 12:00:00 57,344 -c----w c:\windows\$NtServicePackUninstall$\h323cc.dll
+ 2004-08-10 12:00:00 614,912 -c----w c:\windows\$NtServicePackUninstall$\h323msp.dll
+ 2005-09-28 23:35:25 134,272 -c----w c:\windows\$NtServicePackUninstall$\hal.dll
+ 2005-09-28 23:35:25 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll
+ 2005-09-28 23:35:25 134,272 -c----w c:\windows\$NtServicePackUninstall$\halmacpi.dll.000
+ 2004-08-10 12:00:00 7,168 -c----w c:\windows\$NtServicePackUninstall$\hccoin.dll
+ 2004-08-12 16:45:54 137,728 -c----w c:\windows\$NtServicePackUninstall$\hdaudbus.sys
+ 2004-08-10 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\help.exe
+ 2004-08-10 12:00:00 768,512 -c----w c:\windows\$NtServicePackUninstall$\helpctr.exe
+ 2004-08-10 12:00:00 743,936 -c----w c:\windows\$NtServicePackUninstall$\helpsvc.exe
+ 2005-05-26 23:22:01 10,752 -c----w c:\windows\$NtServicePackUninstall$\hh.exe
+ 2005-05-27 02:08:06 41,472 -c----w c:\windows\$NtServicePackUninstall$\hhsetup.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\hid.dll
+ 2004-08-10 12:00:00 36,224 -c----w c:\windows\$NtServicePackUninstall$\hidclass.sys
+ 2005-06-28 23:43:35 19,200 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys
+ 2005-06-28 23:43:35 19,200 -c----w c:\windows\$NtServicePackUninstall$\hidir.sys.000
+ 2004-08-10 12:00:00 24,960 -c----w c:\windows\$NtServicePackUninstall$\hidparse.sys
+ 2001-08-17 20:02:20 9,600 -c----w c:\windows\$NtServicePackUninstall$\hidusb.sys
+ 2006-07-21 08:27:28 72,704 -c----w c:\windows\$NtServicePackUninstall$\hlink.dll
+ 2004-08-10 12:00:00 347,648 -c----w c:\windows\$NtServicePackUninstall$\hnetcfg.dll
+ 2004-08-10 12:00:00 336,384 -c----w c:\windows\$NtServicePackUninstall$\hnetwiz.dll
+ 2004-08-10 12:00:00 146,944 -c----w c:\windows\$NtServicePackUninstall$\hotplug.dll
+ 2004-08-10 12:00:00 18,944 -c----w c:\windows\$NtServicePackUninstall$\hscupd.exe
+ 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys
+ 2006-03-17 00:33:10 262,784 -c----w c:\windows\$NtServicePackUninstall$\http.sys.000
+ 2004-08-10 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\httpapi.dll
+ 2004-08-10 12:00:00 43,008 -c----w c:\windows\$NtServicePackUninstall$\htui.dll
+ 2004-11-17 17:42:33 354,304 -c----w c:\windows\$NtServicePackUninstall$\hypertrm.dll
+ 2004-08-04 00:41:24 54,400 -c----w c:\windows\$NtServicePackUninstall$\i8042prt.sys
+ 2004-08-10 12:00:00 119,808 -c----w c:\windows\$NtServicePackUninstall$\iasrad.dll
+ 2004-08-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\icaapi.dll
+ 2004-08-10 12:00:00 80,384 -c----w c:\windows\$NtServicePackUninstall$\iccvid.dll
+ 2005-06-29 01:49:41 254,976 -c----w c:\windows\$NtServicePackUninstall$\icm32.dll
+ 2004-08-10 12:00:00 3,584 -c----w c:\windows\$NtServicePackUninstall$\icmp.dll
+ 2004-08-10 12:00:00 4,096 -c----w c:\windows\$NtServicePackUninstall$\iconlib.dll
+ 2004-08-10 12:00:00 61,440 -c----w c:\windows\$NtServicePackUninstall$\icwconn.dll
+ 2004-08-10 12:00:00 218,624 -c----w c:\windows\$NtServicePackUninstall$\icwconn1.exe
+ 2004-08-10 12:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\icwconn2.exe
+ 2004-08-10 12:00:00 73,728 -c----w c:\windows\$NtServicePackUninstall$\icwdial.dll
+ 2004-08-10 12:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\icwdl.dll
+ 2004-08-10 12:00:00 176,128 -c----w c:\windows\$NtServicePackUninstall$\icwhelp.dll
+ 2004-08-10 12:00:00 65,536 -c----w c:\windows\$NtServicePackUninstall$\icwphbk.dll
+ 2004-08-10 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\icwrmind.exe
+ 2004-08-10 12:00:00 49,152 -c----w c:\windows\$NtServicePackUninstall$\icwutil.dll
+ 2004-08-10 12:00:00 121,856 -c----w c:\windows\$NtServicePackUninstall$\idq.dll
+ 2006-10-17 12:06:00 78,336 -c----w c:\windows\$NtServicePackUninstall$\ieencode.dll
+ 2004-08-10 12:00:00 114,688 -c----w c:\windows\$NtServicePackUninstall$\iexpress.exe
+ 2004-08-10 12:00:00 142,848 -c----w c:\windows\$NtServicePackUninstall$\ifmon.dll
+ 2004-08-10 12:00:00 8,192 -c----w c:\windows\$NtServicePackUninstall$\igmpagnt.dll
+ 2004-08-10 12:00:00 508,416 -c----w c:\windows\$NtServicePackUninstall$\iis.dll
+ 2004-08-10 12:00:00 81,920 -c----w c:\windows\$NtServicePackUninstall$\ils.dll
+ 2004-08-10 12:00:00 144,384 -c----w c:\windows\$NtServicePackUninstall$\imagehlp.dll
+ 2004-08-10 12:00:00 150,016 -c----w c:\windows\$NtServicePackUninstall$\imapi.exe
+ 2004-08-10 12:00:00 41,856 -c----w c:\windows\$NtServicePackUninstall$\imapi.sys
+ 2004-08-10 12:00:00 36,921 -c----w c:\windows\$NtServicePackUninstall$\imeshare.dll
+ 2004-08-10 12:00:00 110,080 -c----w c:\windows\$NtServicePackUninstall$\imm32.dll
+ 2004-08-10 12:00:00 118,784 -c----w c:\windows\$NtServicePackUninstall$\imsinsnt.dll
+ 2004-08-10 12:00:00 282,624 -c----w c:\windows\$NtServicePackUninstall$\inetcfg.dll
+ 2008-04-11 18:51:06 683,520 -c----w c:\windows\$NtServicePackUninstall$\inetcomm.dll
+ 2004-08-10 12:00:00 33,280 -c----w c:\windows\$NtServicePackUninstall$\inetmib1.dll
+ 2004-08-10 12:00:00 75,264 -c----w c:\windows\$NtServicePackUninstall$\inetpp.dll
+ 2004-08-10 12:00:00 16,384 -c----w c:\windows\$NtServicePackUninstall$\inetppui.dll
+ 2004-08-10 12:00:00 50,688 -c----w c:\windows\$NtServicePackUninstall$\inetres.dll
+ 2004-08-10 12:00:00 20,480 -c----w c:\windows\$NtServicePackUninstall$\inetwiz.exe
+ 2004-08-10 12:00:00 147,456 -c----w c:\windows\$NtServicePackUninstall$\initpki.dll
+ 2004-08-10 12:00:00 126,464 -c----w c:\windows\$NtServicePackUninstall$\input.dll
+ 2004-08-27 21:58:12 40,320 -c----w c:\windows\$NtServicePackUninstall$\intelppm.sys
+ 2004-08-10 12:00:00 29,056 -c----w c:\windows\$NtServicePackUninstall$\ip6fw.sys
+ 2004-08-10 12:00:00 58,368 -c----w c:\windows\$NtServicePackUninstall$\ipconfig.exe
+ 2006-05-19 13:23:35 95,744 -c----w c:\windows\$NtServicePackUninstall$\iphlpapi.dll
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipinip.sys
+ 2004-08-10 12:00:00 167,424 -c----w c:\windows\$NtServicePackUninstall$\ipmontr.dll
+ 2004-09-29 22:28:37 134,912 -c----w c:\windows\$NtServicePackUninstall$\ipnat.sys
+ 2004-08-10 12:00:00 332,800 -c----w c:\windows\$NtServicePackUninstall$\ipnathlp.dll
+ 2004-08-10 12:00:00 355,840 -c----w c:\windows\$NtServicePackUninstall$\ippromon.dll
+ 2004-08-10 12:00:00 169,984 -c----w c:\windows\$NtServicePackUninstall$\iprtrmgr.dll
+ 2004-08-10 12:00:00 74,752 -c----w c:\windows\$NtServicePackUninstall$\ipsec.sys
+ 2004-08-10 12:00:00 361,472 -c----w c:\windows\$NtServicePackUninstall$\ipsecsnp.dll
+ 2004-08-10 12:00:00 184,320 -c----w c:\windows\$NtServicePackUninstall$\ipsecsvc.dll
+ 2004-08-10 12:00:00 388,096 -c----w c:\windows\$NtServicePackUninstall$\ipsmsnap.dll
+ 2004-08-10 12:00:00 53,760 -c----w c:\windows\$NtServicePackUninstall$\ipv6.exe
+ 2004-08-10 12:00:00 59,904 -c----w c:\windows\$NtServicePackUninstall$\ipv6mon.dll
+ 2004-08-10 12:00:00 24,576 -c----w c:\windows\$NtServicePackUninstall$\ipxroute.exe
+ 2004-08-10 12:00:00 20,992 -c----w c:\windows\$NtServicePackUninstall$\ipxwan.dll
+ 2004-08-10 12:00:00 120,320 -c----w c:\windows\$NtServicePackUninstall$\ir41_qc.dll
+ 2004-08-10 12:00:00 338,432 -c----w c:\windows\$NtServicePackUninstall$\ir41_qcx.dll
+ 2004-08-10 12:00:00 755,200 -c----w c:\windows\$NtServicePackUninstall$\ir50_32.dll
+ 2004-08-10 12:00:00 200,192 -c----w c:\windows\$NtServicePackUninstall$\ir50_qc.dll
+ 2004-08-10 12:00:00 183,808 -c----w c:\windows\$NtServicePackUninstall$\ir50_qcx.dll
+ 2005-06-28 23:43:39 46,592 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys
+ 2005-06-28 23:43:39 46,592 -c----w c:\windows\$NtServicePackUninstall$\irbus.sys.000
+ 2004-08-10 12:00:00 11,264 -c----w c:\windows\$NtServicePackUninstall$\irenum.sys
+ 2001-08-23 15:58:06 36,224 -c----w c:\windows\$NtServicePackUninstall$\isapnp.sys
+ 2004-08-10 12:00:00 86,016 -c----w c:\windows\$NtServicePackUninstall$\isign32.dll
+ 2004-08-10 12:00:00 32,768 -c----w c:\windows\$NtServicePackUninstall$\isrdbg32.dll
+ 2005-05-27

Bonjour !
Ok c'est très bizarre car j'ai pourtant à chaque fois éxécuté ce que vous me préconisiez...Pour le rapport CTRL A puis CTRL C et CTRL V à chaque fois...Comme j'ai vidé ma corbeille depuis je n'ai donc qu'à relancer toutes ces applications et je vous poste uniquement celui de Rooter à la fin ou bien vous voulez tous les rapports des différentes appli ?
Merci !

Bon j'ai repassé ComboFix en désactivant McAfee puis j'ai passsé SmitFraudFix en mode sans échec option 2 puis SmitFraud Fix en mode normal option 5, j'ai enregistré à chaque fois le rapport édité par les softs sur mon bureau et voici le rapport de Rooter à la fin :
Microsoft Windows XP Professional (5.1.2600) Service Pack 3

C:\ [Fixed] - NTFS - (Total:76300 Mo/Free:4056 Mo)
D:\ [Fixed] - NTFS - (Total:69170 Mo/Free:3982 Mo)
E:\ [Removable] (Total:0 Mo/Free:0 Mo)
F:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)

21/03/2009|19:13

----------------------\\ Processes..

--Locked-- [System Process]
---------- System
---------- \SystemRoot\System32\smss.exe
---------- \??\C:\WINDOWS\system32\csrss.exe
---------- \??\C:\WINDOWS\system32\winlogon.exe
---------- C:\WINDOWS\system32\services.exe
---------- C:\WINDOWS\system32\lsass.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\System32\svchost.exe
---------- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
---------- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\spoolsv.exe
---------- C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
---------- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
---------- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
---------- C:\Program Files\Bonjour\mDNSResponder.exe
---------- C:\WINDOWS\eHome\ehRecvr.exe
---------- C:\WINDOWS\eHome\ehSched.exe
---------- C:\Program Files\Java\jre6\bin\jqs.exe
---------- C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
---------- c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
---------- c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
---------- C:\Program Files\McAfee\VirusScan\McShield.exe
---------- C:\Program Files\McAfee\MPF\MPFSrv.exe
---------- C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
---------- C:\WINDOWS\Explorer.EXE
---------- C:\WINDOWS\system32\nvsvc32.exe
---------- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
---------- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
---------- C:\WINDOWS\ehome\mcrdsvc.exe
---------- C:\Program Files\Apoint\Apoint.exe
---------- C:\WINDOWS\ehome\ehtray.exe
---------- C:\WINDOWS\system32\ICO.EXE
---------- C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe
---------- C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
---------- C:\Program Files\Sony\ISB Utility\ISBMgr.exe
---------- C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
---------- c:\PROGRA~1\mcafee.com\agent\mcagent.exe
---------- C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
---------- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
---------- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
---------- C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
---------- C:\Program Files\iTunes\iTunesHelper.exe
---------- C:\Program Files\Java\jre6\bin\jusched.exe
---------- C:\Program Files\Apoint\Apntex.exe
---------- C:\WINDOWS\system32\ctfmon.exe
---------- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
---------- C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
---------- C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
---------- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
---------- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
---------- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
---------- C:\WINDOWS\system32\dllhost.exe
---------- C:\Program Files\iPod\bin\iPodService.exe
---------- C:\WINDOWS\system32\wscntfy.exe
---------- C:\WINDOWS\system32\wbem\wmiapsrv.exe
---------- C:\WINDOWS\system32\wbem\wmiprvse.exe
---------- C:\WINDOWS\eHome\ehmsas.exe
---------- C:\WINDOWS\System32\alg.exe
---------- C:\WINDOWS\system32\wuauclt.exe
---------- c:\PROGRA~1\mcafee\msc\mcuimgr.exe
---------- C:\Documents and Settings\Philipon Chloé\Bureau\Rooter.exe
---------- C:\WINDOWS\system32\cmd.exe
---------- C:\Rooter$\RK.exe

----------------------\\ Search..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}]
NameServer REG_SZ 85.255.112.192,85.255.112.25
[b]==> WAREOUT <==/b

----------------------\\ ROOTKIT !!

HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV


1 - "C:\Rooter$\Rooter_1.txt" - 17/03/2009| 8:52
2 - "C:\Rooter$\Rooter_2.txt" - 18/03/2009| 0:26
3 - "C:\Rooter$\Rooter_3.txt" - 21/03/2009|19:14

----------------------\\ Scan completed at 19:14


Celui de Combo :
ComboFix 09-03-15.01 - Philipon Chloé 2009-03-21 18:41:23.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1022.432 [GMT 1:00]
Lancé depuis: c:\documents and settings\Philipon Chloé\Bureau\ComboFix.exe
AV: McAfee VirusScan *On-access scanning disabled* (Updated)
FW: McAfee Personal Firewall *enabled*

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

((((((((((((((((((((((((((((( Fichiers créés du 2009-02-21 au 2009-03-21 ))))))))))))))))))))))))))))))))))))
.

2009-03-19 21:52 . 2009-03-19 21:52 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-03-19 21:52 . 2009-02-11 10:19 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2009-03-19 21:52 . 2009-02-11 10:19 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2009-03-19 01:33 . 2009-03-19 01:34 1,374 --a------ c:\windows\imsins.BAK
2009-03-19 00:13 . 2009-03-19 00:13 <REP> d-------- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-03-18 01:31 . 2009-03-18 01:31 579,584 --a--c--- c:\windows\system32\dllcache\user32.dll
2009-03-18 01:28 . 2009-03-18 01:28 <REP> d-------- c:\windows\ERUNT
2009-03-18 01:23 . 2009-03-18 01:41 <REP> d-------- C:\SDFix
2009-03-17 23:20 . 2009-03-17 23:20 <REP> d-------- C:\_OTMoveIt
2009-03-17 08:51 . 2009-03-18 00:26 <REP> d-------- C:\Rooter$
2009-03-16 22:33 . 2009-03-17 08:49 <REP> d-------- C:\Lop SD
2009-03-16 13:49 . 2009-03-16 13:49 <REP> d-------- c:\program files\Trend Micro

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-21 17:26 --------- d-----w c:\documents and settings\Philipon Chloé\Application Data\uTorrent
2009-03-18 23:16 --------- d-----w c:\program files\Fichiers communs\Symantec Shared
2009-03-17 22:43 --------- d-----w c:\program files\CCleaner
2009-02-19 20:57 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-15 15:14 --------- d-----w c:\program files\Free iPod Video Converter
2009-02-13 21:04 --------- d-----w c:\documents and settings\Philipon Chloé\Application Data\HP
2009-02-09 14:05 1,846,912 ----a-w c:\windows\system32\win32k.sys
2009-01-22 11:49 --------- d-----w c:\documents and settings\Philipon Chloé\Application Data\dvdcss
2009-01-12 17:58 27,288,880 ----a-w c:\program files\QuickTimeInstaller.exe
2009-01-11 15:50 7,410,632 ----a-w c:\program files\daemon4302-lite.exe
2006-09-27 10:11 0 ----a-w c:\documents and settings\Philipon Chloé\Application Data\wklnhst.dat
2008-09-26 10:14 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008091520080922\index.dat
2008-09-26 10:14 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008092620080927\index.dat
.

((((((((((((((((((((((((((((( SnapShot_2009-03-19_ 1.07.54.96 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-02-13 21:01:11 593,920 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2009-03-19 00:38:09 593,920 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2009-02-13 21:01:12 12,288 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-03-19 00:38:10 12,288 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2009-02-13 21:01:11 135,168 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-03-19 00:38:08 135,168 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2009-02-13 21:01:12 11,264 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-03-19 00:38:10 11,264 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2009-02-13 21:01:12 27,136 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-03-19 00:38:10 27,136 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2009-02-13 21:01:12 4,096 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2009-03-19 00:38:10 4,096 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2009-02-13 21:01:13 794,624 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-03-19 00:38:10 794,624 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2009-02-13 21:01:11 249,856 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-03-19 00:38:09 249,856 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2009-02-13 21:01:11 61,440 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-03-19 00:38:09 61,440 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2009-02-13 21:01:13 23,040 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-03-19 00:38:10 23,040 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2009-02-13 21:01:10 286,720 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-03-19 00:38:08 286,720 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2009-02-13 21:01:10 409,600 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-03-19 00:38:08 409,600 ----a-r c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2009-02-13 21:03:46 12,288 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-03-19 00:38:37 12,288 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2009-02-13 21:03:46 135,168 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-03-19 00:38:36 135,168 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2009-02-13 21:03:46 11,264 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-03-19 00:38:37 11,264 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2009-02-13 21:03:47 27,136 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-03-19 00:38:37 27,136 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2009-02-13 21:03:48 4,096 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2009-03-19 00:38:38 4,096 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2009-02-13 21:03:48 794,624 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-03-19 00:38:38 794,624 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2009-02-13 21:03:46 249,856 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-03-19 00:38:37 249,856 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2009-02-13 21:03:48 23,040 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-03-19 00:38:38 23,040 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2009-02-13 21:03:45 286,720 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-03-19 00:38:36 286,720 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2009-02-13 21:03:45 409,600 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-03-19 00:38:36 409,600 ----a-r c:\windows\Installer\{9112040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2009-03-18 23:42:21 32,768 -c--a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2009-03-21 16:01:44 32,768 -c--a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
- 2009-03-18 23:42:21 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
+ 2009-03-21 16:01:44 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
- 2009-03-18 23:42:21 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2009-03-21 16:01:44 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-12-05 06:57:24 144,896 -c----w c:\windows\system32\dllcache\schannel.dll
- 2008-09-15 15:26:07 1,846,528 -c----w c:\windows\system32\dllcache\win32k.sys
+ 2009-02-09 14:05:54 1,846,912 -c----w c:\windows\system32\dllcache\win32k.sys
- 2009-03-17 22:31:52 248,696 ----a-w c:\windows\system32\FNTCACHE.DAT
+ 2009-03-19 00:41:10 248,696 ----a-w c:\windows\system32\FNTCACHE.DAT
- 2009-02-12 04:56:17 21,244,872 ----a-w c:\windows\system32\MRT.exe
+ 2009-02-25 20:54:59 24,768,960 ----a-w c:\windows\system32\MRT.exe
- 2008-04-14 02:33:40 144,384 ----a-w c:\windows\system32\schannel.dll
+ 2008-12-05 06:57:24 144,896 ----a-w c:\windows\system32\schannel.dll
- 2008-07-09 07:40:22 18,296 ------w c:\windows\system32\spmsg.dll
+ 2007-11-30 11:19:06 18,296 ------w c:\windows\system32\spmsg.dll
- 2007-08-10 06:18:14 26,488 ----a-w c:\windows\system32\spupdsvc.exe
+ 2007-07-27 08:41:38 26,488 ----a-w c:\windows\system32\spupdsvc.exe
- 2007-06-11 22:51:12 10,834,944 ----a-w c:\windows\system32\wmp.dll
+ 2008-11-11 17:34:42 10,838,016 ----a-w c:\windows\system32\wmp.dll
+ 2009-03-19 09:24:07 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_32c.dat
+ 2009-03-19 09:24:11 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_9f0.dat
+ 2008-04-15 17:49:31 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\GdiPlus.dll
.
-- Instantané actualisé --
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2008-12-02 3882312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-03-06 7557120]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2004-11-17 118784]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"VAIOCameraUtility"="c:\program files\Sony\VAIO Camera Utility\VCUServe.exe" [2005-12-27 69632]
"SonyPowerCfg"="c:\program files\Sony\VAIO Power Management\SPMgr.exe" [2005-12-13 217088]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 32768]
"Switcher.exe"="c:\program files\Sony\Wireless Switch Setting Utility\Switcher.exe" [2006-02-14 176128]
"PDService.exe"="c:\program files\Utimaco\SafeGuard PrivateDisk\pdservice.exe" [2004-07-06 40960]
"Acrobat Assistant 7.0"="c:\program files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2005-03-03 483328]
"Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2007-06-16 366400]
"VAIO Update 3"="c:\program files\Sony\VAIO Update 3\VAIOUpdt.exe" [2007-01-25 546936]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 6.0\apdproxy.exe" [2007-09-11 67488]
"mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2007-11-01 582992]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 49152]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-11-03 185872]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"Mouse Suite 98 Daemon"="ICO.EXE" [2002-03-14 c:\windows\system32\ico.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2005-06-16 49152]
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2006-09-21 962660]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-05-11 282624]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2005-05-20 17:42 73728 c:\windows\system32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.dvsd"= c:\progra~1\FICHIE~1\SONYSH~1\VideoLib\sonydv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
--a------ 2008-12-02 22:41 3882312 c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Adobe\\Photoshop Elements 4.0\\AdobePhotoshopElementsMediaServer.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Adobe\\Photoshop Elements 6.0\\AdobePhotoshopElementsMediaServer.exe"=
"c:\\Program Files\\Fichiers communs\\McAfee\\MNA\\McNASvc.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R1 PrivateDisk;PrivateDisk;c:\windows\system32\drivers\privatediskm.sys [2004-07-06 45627]
R2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6;c:\program files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [2007-09-11 124832]
R2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB;c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB --> c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB [?]
R3 SonyImgF;Sony Image Conversion Filter Driver;c:\windows\system32\drivers\SonyImgF.sys [2006-03-20 29184]
R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2006-03-20 808448]
S3 DMSKSSRh;DMSKSSRh;\??\c:\docume~1\PHILIP~1\LOCALS~1\Temp\DMSKSSRh.sys --> c:\docume~1\PHILIP~1\LOCALS~1\Temp\DMSKSSRh.sys [?]
S3 fbxusb;Carte réseau virtuelle FreeBox USB;c:\windows\system32\drivers\fbxusb32.sys [2008-08-06 21344]
S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB;c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB --> c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB [?]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
\Shell\AutoRun\command - G:\WDSetup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{50eb2ac8-fae2-11dd-a3f7-0013a9078aaf}]
\Shell\AutoRun\command - G:\WDSetup.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a4891089-60b7-11dc-a257-0013a9078aaf}]
\Shell\AutoRun\command - G:\LaunchU3.exe
.
Contenu du dossier 'Tâches planifiées'

2009-03-21 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2009-03-21 c:\windows\Tasks\HPpromotions journeysoftware.job
- c:\program files\hp\digital imaging\bin\hp promotions\journeysoftware\HPpromo.exe [2005-04-22 16:36]

2009-03-20 c:\windows\Tasks\HubTask 0 {0E7C166E-2D2F-4269-9034-DE1898BF2B1A} 0~0.job
- c:\program files\Fichiers communs\Sonic Shared\Sonic Central\Main\Mediahub.exe [2005-11-01 02:04]

2009-02-15 c:\windows\Tasks\McDefragTask.job
- c:\program files\mcafee\mqc\QcConsol.exe [2007-12-04 12:32]

2009-03-01 c:\windows\Tasks\McQcTask.job
- c:\program files\mcafee\mqc\QcConsol.exe [2007-12-04 12:32]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/ig?hl=fr&source=iglk
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
IE: Transfert par Image Converter 2 Plus - c:\program files\Sony\Image Converter 2\menu.htm
Trusted Zone: sony-europe.com
Trusted Zone: sonystyle-europe.com
Trusted Zone: vaio-link.com
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-21 18:45:15
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"C040111900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
"C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(916)
c:\windows\system32\VESWinlogon.dll
.
Heure de fin: 2009-03-21 18:47:34
ComboFix-quarantined-files.txt 2009-03-21 17:47:30
ComboFix2.txt 2009-03-19 00:09:16
ComboFix3.txt 2008-09-24 12:45:07

Avant-CF: 29 918 142 464 octets libres
Après-CF: 30,001,983,488 octets libres

236 --- E O F --- 2009-03-19 00:38:40

Celui de SmitFraudFix en mode sans échec :
SmitFraudFix v2.404

Rapport fait à 18:56:00,37, 21/03/2009
Executé à partir de C:\Documents and Settings\Philipon Chloé\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: NameServer=85.255.112.192,85.255.112.25
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: NameServer=85.255.112.192,85.255.112.25
HKLM\SYSTEM\CS2\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin


Puis SmitFraud en mode normal :
SmitFraudFix v2.404

Rapport fait à 19:11:27,42, 21/03/2009
Executé à partir de C:\Documents and Settings\Philipon Chloé\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» DNS Avant Fix

Description: Intel(R) PRO/Wireless 3945ABG Network Connection - Miniport d'ordonnancement de paquets
DNS Server Search Order: 212.27.40.240
DNS Server Search Order: 212.27.40.241

HKLM\SYSTEM\CCS\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: NameServer=85.255.112.192,85.255.112.25
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: NameServer=85.255.112.192,85.255.112.25
HKLM\SYSTEM\CS2\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241

»»»»»»»»»»»»»»»»»»»»»»»» DNS Après Fix

Description: Intel(R) PRO/Wireless 3945ABG Network Connection - Miniport d'ordonnancement de paquets
DNS Server Search Order: 212.27.40.240
DNS Server Search Order: 212.27.40.241

HKLM\SYSTEM\CCS\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: NameServer=85.255.112.192,85.255.112.25
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: NameServer=85.255.112.192,85.255.112.25
HKLM\SYSTEM\CS2\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241

Voilà en éspèrant que les rapports sont complets cette fois ci !
Merci d'avance !

Bonsoir,
j'ai éxécuté malwarebyte en examen approfondi et ai effacé la sélection (2 trojans dans le registre je crois). Voici le rapport :
Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1872
Windows 5.1.2600 Service Pack 3

23/03/2009 01:05:32
mbam-log-2009-03-23 (01-05-32).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 190920
Temps écoulé: 1 hour(s), 35 minute(s), 45 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{114a8753-986b-467a-abf1-05cab71c3e7d}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.192,85.255.112.25 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{a80d954f-6dbe-427e-be90-6e3626ad4504}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.192,85.255.112.25 -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Merci de votre aide !

Bonjour,
Voici le rapport de SmitFraud :
SmitFraudFix v2.404

Rapport fait à 9:34:20,64, 23/03/2009
Executé à partir de C:\Documents and Settings\Philipon Chloé\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Documents and Settings\Philipon Chloé\Bureau\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Philipon Chloé


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\PHILIP~1\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Philipon Chloé\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\PHILIP~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau



»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Intel(R) PRO/Wireless 3945ABG Network Connection - Miniport d'ordonnancement de paquets
DNS Server Search Order: 212.27.40.240
DNS Server Search Order: 212.27.40.241

HKLM\SYSTEM\CCS\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A80D954F-6DBE-427E-BE90-6E3626AD4504}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS2\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\..\{114A8753-986B-467A-ABF1-05CAB71C3E7D}: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Merci pour votre aide !

Et voci le rapport Hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:36:52, on 23/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ig?hl=fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [VAIOCameraUtility] "C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe"
O4 - HKLM\..\Run: [SonyPowerCfg] C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
O4 - HKLM\..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Run: [Switcher.exe] C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
O4 - HKLM\..\Run: [PDService.exe] C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [VAIO Update 3] "C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Transfert par Image Converter 2 Plus - C:\Program Files\Sony\Image Converter 2\menu.htm
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/fr/
O15 - Trusted Zone: *.sony-europe.com
O15 - Trusted Zone: *.sonystyle-europe.com
O15 - Trusted Zone: *.vaio-link.com
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.fr/s/v/19.13/uploader2.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

bien, j'ai relancé Hijackthis et fixé les problèmes cochés. Par contre je n'arrive pas à installer l'outil Flash_Disinfector de sUBs. McAfee me le détecte comme trojan et j'ai une erreur du type Espace disque insuffisant ou vérifier que le disque n'est pas protégé en écriture.
Dois je désactiver mon McAfee pour télécharger et installer l'outil Flash_Disinfector de sUBs ? car en effet j'ai utilisé un DD externe auquel je tiens et qui mériterait l'utilisation de cet outil..
merci de votre réponse et de votre aide précieuse !!!

Ok, j'ai pu télécharger et éxécuter l'outil Flash_Disinfector de sUBs; j'ai rétabli McAfee.
J'ai déjà Ccleaner version 2.17.853 (la dernière version selon le site) dois je à nouveau le télécharger et donc le désinstaller pour le réinstaller ?
Merci de votre aide !