Infection virusremover 2009, help !!!!!

phenix3675 -  
Bonjour,

problème avec virusremover 2009, pages de pubs intempestives, programmes voulant s'installer malgré tout, bref le plantage dès qu'internet est ouvert.

Merci pour votre aide !!
Configuration: Windows XP
Internet Explorer 7.0

54 réponses

Résumé de la discussion

Problème central : une infection par virusremover 2009 provoque des publicités intempestives et des tentatives d'installation lors de la navigation, et entraîne le plantage lors de l'ouverture d'internet. Les éléments de réponse présentent principalement l'élimination de composants malveillants via Malwarebytes Anti-Malware et les nettoyages de clés et fichiers issus de Trojan.Vundo et de Trojans BHO, avec suppression et redémarrage. Des éléments précisés dans les rapports incluent des fichiers et entrées de registre infectés (par exemple des Run keys et des Browser Helper Objects) et des DLL malveillantes à supprimer ou mettre en quarantaine. En cas de persistance, une ré-évaluation des services et des tâches planifiées peut être nécessaire pour prévenir une réinfection.

Bobot (l’IA à votre service)
  1. phenix3675 Auteur
    Alors après redémarrage et toutes les recommandations suivies, j'ai une fenêtre windows qui me dit qu'il n'y a pas de disque dans le lecteur et visiblement il y a un fichier windows manquant (grave ou pas, je ne sais pas) et encore des encarts de pubs qui viennent, sinon voici le rapport MBAM :

    Malwarebytes' Anti-Malware 1.30
    Version de la base de données: 1392
    Windows 5.1.2600 Service Pack 2

    26/04/2009 20:56:50
    mbam-log-2009-04-26 (20-56-50).txt

    Type de recherche: Examen rapide
    Eléments examinés: 54771
    Temps écoulé: 5 minute(s), 26 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 2
    Clé(s) du Registre infectée(s): 22
    Valeur(s) du Registre infectée(s): 5
    Elément(s) de données du Registre infecté(s): 3
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 7

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    C:\WINDOWS\system32\katovibu.dll (Trojan.Vundo.H) -> Delete on reboot.
    c:\WINDOWS\system32\zenatosi.dll (Trojan.BHO) -> Delete on reboot.

    Clé(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ab8eb6ef-538e-4da5-adc4-f314857a4a11} (Trojan.BHO.H) -> Delete on reboot.
    HKEY_CLASSES_ROOT\CLSID\{ab8eb6ef-538e-4da5-adc4-f314857a4a11} (Trojan.BHO.H) -> Delete on reboot.
    HKEY_CLASSES_ROOT\bho_cpv.workhorse (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{63334394-3da3-4b29-a041-03535909d361} (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{2e4a04a1-a24d-45ae-aca4-949778400813} (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\bho_cpv.workhorse.1 (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\bho_myjavacore.mjcore (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{e0f01490-dcf3-4357-95aa-169a8c2b2190} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{17e44256-51e0-4d46-a0c8-44e80ab4ba5b} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{d88e1558-7c2d-407a-953a-c044f5607cea} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{d88e1558-7c2d-407a-953a-c044f5607cea} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d88e1558-7c2d-407a-953a-c044f5607cea} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\bho_myjavacore.mjcore.1 (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\AppID\{80ef304a-b1c4-425c-8535-95ab6f1eefb8} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\AppID\BHO_MyJavaCore.DLL (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\fc8ce21d (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.BHO) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpmffbfd181 (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rimilepudu (Trojan.Agent) -> Delete on reboot.

    Elément(s) de données du Registre infecté(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.BHO) -> Data: c:\windows\system32\zenatosi.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.BHO) -> Data: system32\zenatosi.dll -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    C:\WINDOWS\system32\katovibu.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\ubivotak.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\vihobuwu.dll (Trojan.BHO.H) -> Delete on reboot.
    C:\Program Files\WWShow\WWShow.dll (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\Program Files\Jcore\Jcore2.dll (Trojan.BHO) -> Quarantined and deleted successfully.
    c:\WINDOWS\system32\zenatosi.dll (Trojan.BHO) -> Delete on reboot.
    C:\WINDOWS\system32\bijapeka.dll (Trojan.Agent) -> Delete on reboot.

    Ensuite voici les 2 fichiers log.txt :

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by Vincent at 2009-04-26 21:07:13
    Microsoft Windows XP Professionnel Service Pack 2
    System drive C: has 24 GB (31%) free of 76 GB
    Total RAM: 447 MB (20% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:07:20, on 26/04/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16827)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    c:\APPS\HIDSERVICE\HIDSERVICE.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    c:\APPS\Powercinema\Kernel\TV\CLSched.exe
    C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Apps\Powercinema\PCMService.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\OrangeHSS\Launcher\Launcher.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
    C:\Documents and Settings\Vincent\Application Data\pidle\pidle.exe
    C:\Documents and Settings\Vincent\Application Data\Twain\Twain.exe
    C:\Documents and Settings\Vincent\Application Data\digifast\digifast.exe
    C:\Documents and Settings\Vincent\Application Data\Microsoft\Windows\vnxqjni.exe
    C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\OrangeHSS\systray\systrayapp.exe
    C:\Program Files\OrangeHSS\Deskboard\deskboard.exe
    C:\Program Files\OrangeHSS\connectivity\connectivitymanager.exe
    C:\Program Files\OrangeHSS\connectivity\CoreCom\CoreCom.exe
    C:\Program Files\OrangeHSS\connectivity\CoreCom\OraConfigRecover.exe
    C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
    C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\Program Files\Java\jre6\bin\jucheck.exe
    C:\Documents and Settings\Vincent\Bureau\RSIT.exe
    C:\Program Files\Trend Micro\HijackThis\Vincent.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
    O1 - Hosts: 82.98.231.89 url.adtrgt.com
    O1 - Hosts: 82.98.231.89 googleads2.gdoubleclick.net
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {ab8eb6ef-538e-4da5-adc4-f314857a4a11} - C:\WINDOWS\system32\vihobuwu.dll (file missing)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
    O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKLM\..\Run: [CTCheck] C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [ORAHSSSessionManager] "C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe"
    O4 - HKLM\..\Run: [prnet] "C:\WINDOWS\system32\prnet.tmp"
    O4 - HKLM\..\Run: [rimilepudu] Rundll32.exe "C:\WINDOWS\system32\bijapeka.dll",s
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
    O4 - HKCU\..\Run: [prnet] "C:\WINDOWS\system32\prnet.tmp"
    O4 - HKCU\..\Run: [pidle] "C:\Documents and Settings\Vincent\Application Data\pidle\pidle.exe" 61A847B5BBF728173599284503996897C881250221C8670836AC4FA7C8833201749139
    O4 - HKCU\..\Run: [Twain] C:\Documents and Settings\Vincent\Application Data\Twain\Twain.exe
    O4 - HKCU\..\Run: [DigiFast] C:\Documents and Settings\Vincent\Application Data\digifast\digifast.exe
    O4 - HKCU\..\Run: [K2ufG:u5Hml1i] C:\Documents and Settings\Vincent\Application Data\Microsoft\Windows\vnxqjni.exe
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Logiciel Kodak EasyShare.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O15 - Trusted Zone: http://*.mappy.com
    O15 - Trusted Zone: http://*.orange.fr
    O15 - Trusted Zone: http://rw.search.ke.voila.fr
    O15 - Trusted Zone: http://orange.weborama.fr
    O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - https://www.eset.com/
    O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/...
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://www.triforce.fr/plugin/DivXBrowserPlugin.cab
    O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://198.165.92.244/activex/AxisCamControl.cab
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O20 - AppInit_DLLs: C:\WINDOWS\system32\tosilihu.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
    O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
    O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
    O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
    1
    2. Lyonnais92 Contributeur sécurité
      Bonsoir,

      1) Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

      2) Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton Bureau à partir de ce lien :

      https://download.cnet.com/Malwarebytes/3000-8022_4-10804572.html

      3) A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

      4) Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

      5) Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

      6) MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue. La fenêtre principale de MBAM s'affiche :

      7) Dans l'onglet analyse, vérifie que "Exécuter une analyse rapide" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

      8) MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

      9) A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

      10) Si des malwares ont été détectés, leur liste s'affiche.
      En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

      11) MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

      12) Ferme MBAM en cliquant sur Quitter.

      13) Poste le rapport dans ta réponse

      ======

      fais redémarrer l'ordi si le rapport mentionne des éléments à supprimer au redémarrage (delete in reboot).

      ===============
      ● Télécharge ici :

      http://images.malwareremoval.com/random/RSIT.exe

      random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau.

      ● Double-clique sur RSIT.exe afin de lancer RSIT.

      ● Lis le contenu de l'écran Disclaimer puis clique sur Continue (si tu acceptes les conditions).

      ● Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

      ● Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront.

      ● Poste le contenu de log.txt
      0
      1. phenix3675 Auteur
        Oui mais je l'ai noté résolu car je n'ai plus le même pseudo puisque je me suis inscrit comme membre.
        Je ne voulais pas que tout soit confondu et qu'il y ait mélange dans les pseudos voili voilou :-)

        C'est grave ???
        0
        1. ^^Marie^^
          Salut

          J'ai fermé l'autre, suis les recommandations de Lyonnais

          +
          0
      3. Lyonnais92 Contributeur sécurité
        Re,

        très infecté.

        ===========

        malgré des logiciels de sécurité en nombre pléthorique :

        2 parefeu ZoneAlarm et kaspersky

        3 anti virus, Kaspersky, Nod 32 et MacAfee

        Tu as des licences payantes sur quoi ?

        ==============
        On va utiliser ComboFix.exe. Rends toi sur cette page web pour obtenir les liens de téléchargement, ainsi que des instructions pour exécuter l'outil:

        https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

        * Vérifie que tu as fermé/désactivé tous les programmes anti-virus, anti-malware ou anti-spyware afin qu'ils n'interfèrent pas avec le travail de ComboFix.

        Envoie le contenu de C:\ComboFix.txt dans ta prochaine réponse afin que je l'examine.

        Tu ne réactives qu'un parefeu et un antivirus.
        0
        1. phenix3675 Auteur
          Re,

          alors oui, il y a pleins de sécurité mais rien ne fonctionne !!!
          Bref je n'ai rien relancé pour le moment comme pare-feu et comme antivirus sachant que mes anti-virus sont, normalement, out et pour le pare feu, j'en sais rien.

          Sinon voici le rapport ComboFix :

          (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
          .

          c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
          c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
          c:\documents and settings\Vincent\Application Data\.#
          c:\documents and settings\Vincent\Application Data\.#\MBX@1798@334160.###
          c:\documents and settings\Vincent\Application Data\.#\MBX@1798@334190.###
          c:\documents and settings\Vincent\Application Data\.#\MBX@1798@3341C0.###
          c:\documents and settings\Vincent\Application Data\.#\MBX@4658@334160.###
          c:\documents and settings\Vincent\Application Data\.#\MBX@4658@334190.###
          c:\documents and settings\Vincent\Application Data\.#\MBX@4658@3341C0.###
          c:\documents and settings\Vincent\Application Data\.#\MBX@81C0@334160.###
          c:\documents and settings\Vincent\Application Data\.#\MBX@81C0@334190.###
          c:\documents and settings\Vincent\Application Data\.#\MBX@81C0@3341C0.###
          c:\documents and settings\Vincent\Application Data\twain\Twain.exe
          c:\documents and settings\Vincent\Local Settings\Temporary Internet Files\bestwiner.stt
          c:\documents and settings\Vincent\Local Settings\Temporary Internet Files\CPV.stt
          c:\documents and settings\Vincent\Local Settings\Temporary Internet Files\fbk.sts
          c:\windows\system32\404Fix.exe
          c:\windows\system32\ahtn.htm
          c:\windows\system32\boyesofo.dll
          c:\windows\system32\drivers\ovfsthhosejtplqftfxvtrdpvwlcyntirpqild.sys
          c:\windows\system32\dumphive.exe
          c:\windows\system32\IEDFix.C.exe
          c:\windows\system32\IEDFix.exe
          c:\windows\system32\o4Patch.exe
          c:\windows\system32\ovfsthdcpqbctrxfuhjpftdvesquaugqlilisb.dll
          c:\windows\system32\ovfsthislbpvgcomwigrqhjadoetkgjsssfrcv.dll
          c:\windows\system32\ovfsthjtodsnyowikqgmchowgllqymsdulgfsc.dll
          c:\windows\system32\ovfsthlytjnkrfujcgrlarenjhostxtpqnfygs.dat
          c:\windows\system32\ovfsthqaommlxxhevyfakangptjpkdhlurbblg.dat
          c:\windows\system32\Process.exe
          c:\windows\system32\pufalulo.dll
          c:\windows\system32\SrchSTS.exe
          c:\windows\system32\tawiraji.dll
          c:\windows\system32\test.ttt
          c:\windows\system32\tmp.reg
          c:\windows\system32\tosilihu.dll
          c:\windows\system32\uniq.tll
          c:\windows\system32\VACFix.exe
          c:\windows\system32\VCCLSID.exe
          c:\windows\system32\warning.gif
          c:\windows\system32\win32hlp.cnf
          c:\windows\system32\WS2Fix.exe
          c:\windows\system32\yuyewupe.exe
          c:\windows\TEMP\logishrd\LVPrcInj05.dll

          ----- BITS: Il y a peut-être des sites infectés -----

          hxxp://83.149.105.228
          .
          ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
          .

          -------\Service_ovfsthswiviamjjfaqgcuxhuhqcjdivbxxxqfr

          ((((((((((((((((((((((((((((( Fichiers créés du 2009-05-26 au 2009-4-26 ))))))))))))))))))))))))))))))))))))
          .

          2009-04-26 19:07 . 2009-04-26 19:07 -------- d-----w C:\rsit
          2009-04-26 16:14 . 2009-04-26 16:14 -------- d-----w c:\documents and settings\All Users\Application Data\eGames
          2009-04-26 16:14 . 2009-04-26 16:14 -------- d-----w c:\documents and settings\Vincent\Application Data\eGames
          2009-04-26 15:24 . 2009-04-26 15:36 -------- d-----w c:\documents and settings\Vincent\Application Data\digifast
          2009-04-26 15:19 . 2009-04-26 21:32 -------- d-----w c:\documents and settings\Vincent\Application Data\Twain
          2009-04-26 15:14 . 2009-04-26 18:56 -------- d-----w c:\program files\WWShow
          2009-04-26 15:09 . 2009-04-26 18:56 -------- d-----w c:\program files\Jcore
          2009-04-25 19:42 . 2009-04-25 19:42 -------- d-----w c:\program files\Fichiers communs\SWF Studio
          2009-04-25 17:27 . 2009-04-25 17:28 12288 ----a-w c:\windows\system32\ftp_non_crp.exe
          2009-04-25 15:03 . 2009-04-25 15:03 -------- d-----w c:\documents and settings\Vincent\Application Data\pidle
          2009-04-25 15:02 . 2009-04-25 15:02 182911 ----a-w c:\windows\system32\prnet.tmp
          2009-04-20 13:48 . 2009-04-20 13:48 -------- d-----w c:\documents and settings\All Users\Application Data\Gogii
          2009-04-18 20:57 . 2009-04-18 20:57 -------- d-----w c:\program files\Party Down
          2009-04-18 20:57 . 2009-04-18 20:57 -------- d-----w c:\program files\Satisfashion
          2009-04-18 20:56 . 2009-04-24 19:11 -------- d-----w c:\program files\Nanny Mania 2
          2009-04-18 20:54 . 2009-04-18 20:54 -------- d-----w c:\program files\Clueless
          2009-04-17 11:19 . 2009-04-17 11:19 -------- d-----w c:\program files\ColiPoste
          2009-04-15 11:34 . 2009-03-06 14:00 286720 ------w c:\windows\system32\dllcache\pdh.dll
          2009-04-15 11:34 . 2009-02-09 10:03 401408 ------w c:\windows\system32\dllcache\rpcss.dll
          2009-04-15 11:34 . 2009-02-06 09:41 227840 ------w c:\windows\system32\dllcache\wmiprvse.exe
          2009-04-15 11:34 . 2005-07-26 04:29 60416 ------w c:\windows\system32\dllcache\colbact.dll
          2009-04-15 11:34 . 2009-02-09 10:03 740352 ------w c:\windows\system32\dllcache\ntdll.dll
          2009-04-15 11:34 . 2009-02-09 10:03 735232 ------w c:\windows\system32\dllcache\lsasrv.dll
          2009-04-15 11:34 . 2009-02-09 10:03 686080 ------w c:\windows\system32\dllcache\advapi32.dll
          2009-04-15 11:34 . 2009-02-09 10:03 473088 ------w c:\windows\system32\dllcache\fastprox.dll
          2009-04-15 11:34 . 2009-02-09 09:53 111104 ------w c:\windows\system32\dllcache\services.exe
          2009-04-15 11:34 . 2009-02-06 09:54 35328 ------w c:\windows\system32\dllcache\sc.exe
          2009-04-15 11:33 . 2008-12-16 12:49 351232 ------w c:\windows\system32\dllcache\winhttp.dll
          2009-04-15 11:33 . 2008-04-21 21:27 219136 ------w c:\windows\system32\dllcache\wordpad.exe
          2009-04-11 20:34 . 2009-04-11 20:34 -------- d-----w c:\documents and settings\Vincent\Local Settings\Application Data\Episode 4 de Ma Star Academy
          2009-04-10 15:51 . 2009-04-10 15:52 -------- d-----w c:\program files\Wendy's Wellness
          2009-04-10 15:42 . 2009-04-10 15:42 -------- d-----w c:\documents and settings\Vincent\Application Data\Shape games
          2009-04-09 15:09 . 2007-01-16 11:56 450560 ----a-w c:\windows\system32\drivers\WlanBZXP.sys
          2009-04-09 15:01 . 2008-06-20 10:10 65536 ----a-w c:\windows\system32\Autodial2000.dll
          2009-04-09 15:01 . 2006-03-01 17:53 94208 ----a-w c:\windows\system32\w32n50.dll
          2009-04-09 15:01 . 2006-03-01 17:53 32128 ----a-w c:\windows\system32\pcandis5.sys
          2009-04-09 15:01 . 2003-09-23 09:38 34688 ----a-w c:\windows\system32\pcampr5.sys
          2009-04-09 15:01 . 2009-04-09 15:12 -------- d-----w c:\program files\OrangeHSS
          2009-04-09 15:01 . 2009-04-09 15:09 -------- d-----w c:\program files\Fichiers communs\France Telecom
          2009-04-08 20:20 . 2009-04-08 20:20 -------- d-----w c:\documents and settings\Vincent\Application Data\Fuzzy Games
          2009-04-04 12:47 . 2009-04-04 12:47 -------- d-----w c:\documents and settings\Vincent\Application Data\BigFishv1002fr

          .
          (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
          .
          2009-04-26 19:04 . 2008-11-13 07:28 59317 ----a-w C:\logfile
          2009-04-26 12:50 . 2008-10-30 19:26 -------- d-----w c:\documents and settings\Vincent\Application Data\uTorrent
          2009-04-26 12:49 . 2008-12-04 14:31 -------- d-----w c:\program files\Trend Micro
          2009-04-26 11:24 . 2009-01-26 11:24 51712 --sha-w c:\windows\system32\vataguhi.exe
          2009-04-21 21:24 . 2008-11-02 09:41 -------- d-----w c:\documents and settings\Vincent\Application Data\Image Zone Express
          2009-04-18 19:16 . 2008-11-26 18:31 -------- d-----w c:\program files\Oberon Media
          2009-04-17 20:00 . 2008-12-23 11:05 -------- d-----w c:\program files\Microsoft Games
          2009-04-17 19:56 . 2009-03-03 18:30 -------- d-----w c:\program files\SdLL
          2009-04-17 19:56 . 2008-10-23 14:07 -------- d--h--w c:\program files\InstallShield Installation Information
          2009-04-17 19:54 . 2009-03-03 17:48 -------- d-----w c:\documents and settings\Vincent\Application Data\Desperate Housewives
          2009-04-16 05:36 . 2004-08-18 14:11 83634 ----a-w c:\windows\system32\perfc00C.dat
          2009-04-16 05:36 . 2004-08-18 14:11 505242 ----a-w c:\windows\system32\perfh00C.dat
          2009-04-12 15:16 . 2008-10-26 21:22 -------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
          2009-04-11 19:46 . 2009-01-08 14:35 -------- d-----w c:\documents and settings\All Users\Application Data\BigFishGamesCache
          2009-03-26 21:10 . 2009-03-26 21:10 -------- d-----w c:\documents and settings\Vincent\Application Data\Boolat Games
          2009-03-21 14:20 . 2009-03-21 14:20 1051136 ------w c:\windows\system32\dllcache\kernel32.dll
          2009-03-14 17:06 . 2009-03-14 17:05 -------- d-----w c:\documents and settings\Vincent\Application Data\TVU networks
          2009-03-14 17:05 . 2009-03-14 17:05 -------- d-----w c:\documents and settings\All Users\Application Data\TVU networks
          2009-03-13 16:32 . 2009-03-12 10:47 -------- d-----w c:\program files\Microsoft Silverlight
          2009-03-12 10:49 . 2008-10-23 14:11 86184 ----a-w c:\documents and settings\Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
          2009-03-12 10:47 . 2008-10-23 18:16 -------- d-----w c:\program files\Windows Live
          2009-03-12 10:46 . 2009-03-12 10:46 -------- d-----w c:\program files\Microsoft Sync Framework
          2009-03-12 10:44 . 2009-03-12 10:44 -------- d-----w c:\program files\Microsoft SQL Server Compact Edition
          2009-03-12 10:40 . 2009-03-12 10:40 -------- d-----w c:\program files\Microsoft
          2009-03-12 10:40 . 2009-03-12 10:40 -------- d-----w c:\program files\Windows Live SkyDrive
          2009-03-12 10:35 . 2009-03-12 10:35 -------- d-----w c:\program files\Fichiers communs\Windows Live
          2009-03-11 19:28 . 2008-11-23 08:46 -------- d-----w c:\program files\eMule
          2009-03-10 20:18 . 2008-09-05 22:30 970120 ------w c:\windows\system32\dllcache\WgaTray.exe
          2009-03-10 20:18 . 2008-09-05 22:30 265088 ------w c:\windows\system32\dllcache\wgaLogon.dll
          2009-03-07 22:46 . 2009-01-07 21:22 268 ---ha-w C:\sqmdata19.sqm
          2009-03-07 22:46 . 2009-01-07 21:22 244 ---ha-w C:\sqmnoopt19.sqm
          2009-03-06 23:19 . 2008-12-30 14:10 268 ---ha-w C:\sqmdata18.sqm
          2009-03-06 23:19 . 2008-12-30 14:10 244 ---ha-w C:\sqmnoopt18.sqm
          2009-03-06 16:58 . 2008-12-29 23:03 268 ---ha-w C:\sqmdata17.sqm
          2009-03-06 16:58 . 2008-12-29 23:03 244 ---ha-w C:\sqmnoopt17.sqm
          2009-03-06 16:50 . 2008-11-02 16:34 -------- d-----w c:\documents and settings\All Users\Application Data\Sandlot Games
          2009-03-06 14:00 . 2004-08-18 14:11 286720 ----a-w c:\windows\system32\pdh.dll
          2009-03-05 21:42 . 2008-12-29 22:00 268 ---ha-w C:\sqmdata16.sqm
          2009-03-05 21:42 . 2008-12-29 22:00 244 ---ha-w C:\sqmnoopt16.sqm
          2009-03-04 21:38 . 2008-12-29 07:59 268 ---ha-w C:\sqmdata15.sqm
          2009-03-04 21:38 . 2008-12-29 07:59 244 ---ha-w C:\sqmnoopt15.sqm
          2009-03-04 16:51 . 2009-03-04 16:51 -------- d--h--r c:\documents and settings\Vincent\Application Data\SecuROM
          2009-03-04 16:51 . 2009-03-03 17:50 107888 ----a-w c:\windows\system32\CmdLineExt.dll
          2009-03-03 21:20 . 2008-12-29 07:46 268 ---ha-w C:\sqmdata14.sqm
          2009-03-03 21:20 . 2008-12-29 07:46 244 ---ha-w C:\sqmnoopt14.sqm
          2009-03-03 00:13 . 2008-08-20 05:37 826368 ------w c:\windows\system32\dllcache\wininet.dll
          2009-03-03 00:13 . 2004-08-18 14:11 826368 ----a-w c:\windows\system32\wininet.dll
          2009-03-02 19:49 . 2008-12-13 08:29 268 ---ha-w C:\sqmdata13.sqm
          2009-03-02 19:49 . 2008-12-13 08:29 244 ---ha-w C:\sqmnoopt13.sqm
          2009-03-01 18:50 . 2008-12-13 07:36 268 ---ha-w C:\sqmdata12.sqm
          2009-03-01 18:50 . 2008-12-13 07:36 244 ---ha-w C:\sqmnoopt12.sqm
          2009-03-01 08:18 . 2008-12-12 19:57 268 ---ha-w C:\sqmdata11.sqm
          2009-03-01 08:18 . 2008-12-12 19:57 244 ---ha-w C:\sqmnoopt11.sqm
          2009-02-28 04:54 . 2004-08-18 14:29 636072 ------w c:\windows\system32\dllcache\iexplore.exe
          2009-02-27 20:53 . 2008-12-12 09:02 268 ---ha-w C:\sqmdata10.sqm
          2009-02-27 20:53 . 2008-12-12 09:02 244 ---ha-w C:\sqmnoopt10.sqm
          2009-02-27 18:39 . 2009-02-27 18:39 -------- d-----w c:\documents and settings\All Users\Application Data\FamilyFlights
          2009-02-27 18:18 . 2009-02-27 18:18 -------- d-----w c:\documents and settings\Vincent\Application Data\SulusGames
          2009-02-26 19:16 . 2008-12-11 21:17 268 ---ha-w C:\sqmdata09.sqm
          2009-02-26 19:16 . 2008-12-11 21:17 244 ---ha-w C:\sqmnoopt09.sqm
          2009-02-25 22:08 . 2008-12-11 19:07 268 ---ha-w C:\sqmdata08.sqm
          2009-02-25 22:08 . 2008-12-11 19:07 244 ---ha-w C:\sqmnoopt08.sqm
          2009-02-24 17:55 . 2008-12-10 19:12 268 ---ha-w C:\sqmdata07.sqm
          2009-02-24 17:55 . 2008-12-10 19:12 244 ---ha-w C:\sqmnoopt07.sqm
          2009-02-20 10:20 . 2008-10-31 18:01 13824 ------w c:\windows\system32\dllcache\ieudinit.exe
          2009-02-20 10:20 . 2007-08-13 17:39 70656 ------w c:\windows\system32\dllcache\ie4uinit.exe
          2009-02-20 05:14 . 2007-08-13 16:56 161792 ------w c:\windows\system32\dllcache\ieakui.dll
          2009-02-17 20:25 . 2009-02-17 20:25 4096 ----a-w c:\windows\d3dx.dat
          2009-02-10 16:33 . 2009-02-10 16:33 453120 ------w c:\windows\system32\dllcache\wmiprvsd.dll
          2009-02-09 14:17 . 2008-10-23 14:39 1846400 ------w c:\windows\system32\dllcache\win32k.sys
          2009-02-09 14:17 . 2004-08-18 14:11 1846400 ----a-w c:\windows\system32\win32k.sys
          2009-02-09 11:43 . 2008-10-23 14:38 2188160 ------w c:\windows\system32\dllcache\ntoskrnl.exe
          2009-02-09 11:43 . 2004-08-18 14:11 2188160 ----a-w c:\windows\system32\ntoskrnl.exe
          2009-02-09 11:42 . 2008-10-23 14:38 2022912 ------w c:\windows\system32\dllcache\ntkrpamp.exe
          2009-02-09 11:42 . 2008-10-23 14:38 2065024 ------w c:\windows\system32\dllcache\ntkrnlpa.exe
          2009-02-09 11:42 . 2004-08-03 22:48 2065024 ----a-w c:\windows\system32\ntkrnlpa.exe
          2009-02-09 11:42 . 2008-10-23 14:38 2144768 ------w c:\windows\system32\dllcache\ntkrnlmp.exe
          2009-02-09 10:03 . 2004-08-18 14:11 401408 ----a-w c:\windows\system32\rpcss.dll
          2009-02-09 10:03 . 2004-08-18 14:11 740352 ----a-w c:\windows\system32\ntdll.dll
          2009-02-09 10:03 . 2004-08-18 14:10 735232 ----a-w c:\windows\system32\lsasrv.dll
          2009-02-09 10:03 . 2004-08-18 14:10 686080 ----a-w c:\windows\system32\advapi32.dll
          2009-02-09 09:53 . 2004-08-18 14:11 111104 ----a-w c:\windows\system32\services.exe
          2009-02-08 23:36 . 2008-12-09 09:05 244 ---ha-w C:\sqmnoopt06.sqm
          2009-02-08 23:36 . 2008-12-09 09:05 232 ---ha-w C:\sqmdata06.sqm
          2009-02-08 20:47 . 2008-12-08 21:21 232 ---ha-w C:\sqmdata05.sqm
          2009-02-08 20:47 . 2008-12-08 21:21 244 ---ha-w C:\sqmnoopt05.sqm
          2009-02-06 18:39 . 2009-02-06 18:39 308600 ----a-w c:\windows\WLXPGSS.SCR
          2009-02-06 17:52 . 2009-02-06 17:52 49504 ----a-w c:\windows\system32\sirenacm.dll
          2009-02-06 09:54 . 2004-08-18 14:11 35328 ----a-w c:\windows\system32\sc.exe
          2009-02-03 20:10 . 2009-02-03 20:10 55808 ------w c:\windows\system32\dllcache\secur32.dll
          2009-02-03 20:10 . 2004-08-18 14:11 55808 ----a-w c:\windows\system32\secur32.dll
          2009-01-21 21:48 . 2009-01-21 21:48 1544 ----a-w c:\program files\Encore plus de jeux.lnk
          2008-11-12 13:36 . 2008-11-12 13:36 18709 ----a-w c:\documents and settings\Vincent\Local Settings\Application Data\lafy.dat
          2008-11-12 13:36 . 2008-11-12 13:36 15592 -c--a-w c:\program files\Fichiers communs\acyfewyk._dl
          2008-11-12 13:36 . 2008-11-12 13:36 14187 ----a-w c:\documents and settings\Vincent\Local Settings\Application Data\qutubet.sys
          2008-11-12 13:36 . 2008-11-12 13:36 14776 ----a-w c:\documents and settings\Vincent\Local Settings\Application Data\qakutu.dat
          2008-11-12 13:36 . 2008-11-12 13:36 14781 ----a-w c:\documents and settings\Vincent\Local Settings\Application Data\qafizavug.pif
          2008-11-11 15:10 . 2008-11-11 15:10 121912 ----a-w c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
          2008-10-23 14:32 . 2008-10-23 14:32 130 ----a-w c:\documents and settings\Vincent\Local Settings\Application Data\fusioncache.dat
          2008-10-23 14:23 . 2008-10-23 14:32 51440 ----a-w c:\documents and settings\Vincent\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
          2009-01-25 15:02 . 2009-01-25 15:02 49152 --sha-w c:\windows\system32\dekeratu.dll.tmp
          2009-01-25 15:02 . 2009-01-25 15:02 49152 --sha-w c:\windows\system32\dewokike.dll.tmp
          2008-11-04 21:46 . 2008-11-01 17:07 2516 --sha-w c:\windows\system32\KGyGaAvL.sys
          2009-01-25 15:02 . 2009-01-25 15:02 49152 --sha-w c:\windows\system32\kovosuzu.dll.tmp
          .

          ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
          .
          .
          *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
          REGEDIT4

          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-02-06 3885408]
          "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-11-08 68856]
          "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360]
          "CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" [2007-07-17 868352]
          "prnet"="c:\windows\system32\prnet.tmp" [2009-04-25 182911]
          "pidle"="c:\documents and settings\Vincent\Application Data\pidle\pidle.exe" [2009-04-25 56832]
          "DigiFast"="c:\documents and settings\Vincent\Application Data\digifast\digifast.exe" [2009-04-26 225792]
          "K2ufG:u5Hml1i"="c:\documents and settings\Vincent\Application Data\Microsoft\Windows\vnxqjni.exe" [2009-04-26 35840]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
          "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
          "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
          "ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-05 61440]
          "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-06 136600]
          "PCMService"="c:\apps\Powercinema\PCMService.exe" [2005-05-11 127118]
          "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
          "LogitechCommunicationsManager"="c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2008-02-13 564496]
          "LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-02-13 2196240]
          "SsAAD.exe"="c:\progra~1\Sony\SONICS~1\SsAAD.exe" [2005-01-24 81920]
          "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-03 36352]
          "CTCheck"="c:\program files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe" [2007-11-06 397312]
          "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-11-04 413696]
          "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
          "ORAHSSSessionManager"="c:\program files\OrangeHSS\SessionManager\SessionManager.exe" [2008-06-10 107248]
          "prnet"="c:\windows\system32\prnet.tmp" [2009-04-25 182911]
          "SoundMan"="SOUNDMAN.EXE" - c:\windows\soundman.exe [2005-10-24 90112]

          [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
          "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]

          c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
          Barre d'‚tat systŠme d'ATI CATALYST.lnk - c:\program files\ATI Technologies\ATI.ACE\CLI.exe [2005-8-6 61440]
          HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]
          Logiciel Kodak EasyShare.lnk - c:\program files\Kodak\Kodak EasyShare software\bin\EasyShare.exe [2007-9-19 282624]
          Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2008-10-24 66864]
          Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [2000-1-21 65588]

          [HKEY_LOCAL_MACHINE\software\microsoft\security center]
          "UpdatesDisableNotify"=dword:00000001

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
          "EnableFirewall"= 0 (0x0)

          [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
          "%windir%\\system32\\sessmgr.exe"=
          "c:\\APPS\\Powercinema\\PowerCinema.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
          "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
          "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
          "c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
          "c:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 7.0.1.325\\French\\setup.exe"=
          "c:\\Program Files\\uTorrent\\uTorrent.exe"=
          "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
          "c:\\Program Files\\eMule\\emule.exe"=
          "c:\\Program Files\\iTunes\\iTunes.exe"=
          "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
          "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
          "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
          "c:\\Program Files\\OrangeHSS\\Connectivity\\ConnectivityManager.exe"=
          "c:\\WINDOWS\\system32\\javaw.exe"=
          "c:\\Program Files\\iPod\\bin\\iPodService.exe"=
          "c:\\Program Files\\Fichiers communs\\Apple\\Mobile Device Support\\bin\\AppleMobileDeviceService.exe"=

          R3 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
          S0 SI3112r;ATI-437A Serial ATA Controller;c:\windows\system32\DRIVERS\SI3112r.sys [2004-08-27 97920]
          S2 fssfltr;fssfltr;c:\windows\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152]
          S2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
          S3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;c:\windows\system32\DRIVERS\WlanBZXP.sys [2007-01-16 450560]

          .
          Contenu du dossier 'Tâches planifiées'

          2009-03-21 c:\windows\Tasks\AppleSoftwareUpdate.job
          - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
          .
          - - - - ORPHELINS SUPPRIMES - - - -

          BHO-{ab8eb6ef-538e-4da5-adc4-f314857a4a11} - c:\windows\system32\vihobuwu.dll
          HKLM-Run-rimilepudu - c:\windows\system32\bijapeka.dll

          .
          ------- Examen supplémentaire -------
          .
          uStart Page = hxxp://www.orange.fr/
          uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
          mWindow Title =
          Trusted Zone: mappy.com
          Trusted Zone: orange.fr
          Trusted Zone: voila.fr\rw.search.ke
          Trusted Zone: weborama.fr\orange
          Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          .

          **************************************************************************

          catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2009-04-26 23:36
          Windows 5.1.2600 Service Pack 2 NTFS

          Recherche de processus cachés ...

          Recherche d'éléments en démarrage automatique cachés ...

          Recherche de fichiers cachés ...

          Scan terminé avec succès
          Fichiers cachés: 0

          **************************************************************************
          .
          --------------------- DLLs chargées dans les processus actifs ---------------------

          - - - - - - - > 'winlogon.exe'(824)
          c:\windows\system32\Ati2evxx.dll

          - - - - - - - > 'explorer.exe'(5460)
          c:\windows\TEMP\logishrd\LVPrcInj01.dll
          c:\progra~1\WINDOW~2\wmpband.dll
          c:\program files\OrangeHSS\Launcher\Inactivity.Dll
          c:\windows\system32\WPDShServiceObj.dll
          c:\windows\system32\msi.dll
          c:\windows\system32\PortableDeviceTypes.dll
          c:\windows\system32\PortableDeviceApi.dll
          .
          ------------------------ Autres processus actifs ------------------------
          .
          c:\windows\system32\ati2evxx.exe
          c:\windows\system32\ati2evxx.exe
          c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          c:\apps\Powercinema\Kernel\TV\CLCapSvc.exe
          c:\windows\system32\CTSVCCDA.EXE
          c:\program files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
          c:\progra~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\[u]0/u\FTRTSVC.exe
          c:\program files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
          c:\apps\HIDSERVICE\HidService.exe
          c:\program files\Java\jre6\bin\jqs.exe
          c:\program files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
          c:\program files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
          c:\apps\Powercinema\Kernel\TV\CLSched.exe
          c:\program files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
          c:\windows\system32\wscntfy.exe
          c:\windows\system32\wbem\wmiapsrv.exe
          c:\program files\Fichiers communs\Sony Shared\AVLib\SSScsiSV.exe
          c:\program files\OrangeHSS\Launcher\Launcher.exe
          c:\program files\iPod\bin\iPodService.exe
          c:\program files\Fichiers communs\LogiShrd\LQCVFX\COCIManager.exe
          c:\program files\HP\Digital Imaging\bin\hpqste08.exe
          c:\program files\OrangeHSS\Systray\SystrayApp.exe
          c:\program files\OrangeHSS\Deskboard\Deskboard.exe
          c:\program files\OrangeHSS\Connectivity\ConnectivityManager.exe
          c:\progra~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\[u]0/u\AlertModule.exe
          c:\program files\OrangeHSS\Connectivity\corecom\CoreCom.exe
          c:\program files\OrangeHSS\Connectivity\corecom\OraConfigRecover.exe
          c:\progra~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\[u]0/u\FTCOMModule.exe
          c:\program files\Java\jre6\bin\jucheck.exe
          .
          **************************************************************************
          .
          Heure de fin: 2009-04-26 23:49 - La machine a redémarré
          ComboFix-quarantined-files.txt 2009-04-26 21:48

          Avant-CF: 24 723 046 400 octets libres
          Après-CF: 24 814 374 912 octets libres

          370 --- E O F --- 2009-04-15 22:36

          J'attends de tes nouvelles.

          @+ tard
          0
          1. Lyonnais92 Contributeur sécurité
            Bonjour,

            on continue comme ça :

            Copie ou imprime les instructions avant

            Déconnecte toi d'internet et ferme toutes tes applications.

            Désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

            Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :

            Folder::
            c:\documents and settings\Vincent\Application Data\digifast
            c:\documents and settings\Vincent\Application Data\Twain
            c:\program files\WWShow
            c:\program files\Jcore

            File::
            c:\windows\system32\ftp_non_crp.exe
            c:\documents and settings\Vincent\Application Data\pidle
            c:\windows\system32\prnet.tmp
            c:\documents and settings\Vincent\Application Data\digifast\digifast.exe
            c:\documents and settings\Vincent\Application Data\Microsoft\Windows\vnxqjni.exe
            c:\windows\system32\vataguhi.exe

            Registry::
            [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
            "prnet"= -
            "pidle"=
            "DigiFast"= -
            "K2ufG:u5Hml1i"= -

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
            "prnet"= -

            [HKEY_LOCAL_MACHINE\software\microsoft\security center]
            "UpdatesDisableNotify"=dword:00000000

            Enregistre ce fichier sous le nom CFscript

            Fait un glisser/déposer de ce fichier CFscript sur le fichier ComboFix.exe

            Clique sur le fichier CFscript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFscrïpt vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.

            Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

            Ne touche à rien tant que le scan n'est pas terminé.

            Réactive ton parefeu, ton antivirus, la garde de ton antispyware

            Une fois le scan achevé, un rapport va s'afficher: poste son contenu.

            Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

            Attention : cette manip a été fait pour cet ordi. Tout réutilisation peut endommager sévèrement le système d'exploitation.

            ===================

            Tu réactives Kaspersky (parefeu et antivirus) (on verra plus tard ce que l'on fait).

            Tu remets un rapport RSIT
            0
            1. phenix3675 Auteur
              Je ne sais pas si tu as eu le rapport car ça ne marque pas que mon message a fonctionné !!!!

              Préviens-moi car je suis dans le flou, merci.

              @+
              0
              1. phenix3675 Auteur
                bon ben j'ai l'impression que rapport assez long ne passe pas mais pour les petits messages c'est ok alors j'attends de savoir si c'est passé quand même par mail.

                Merci
                0
                1. Lyonnais92 Contributeur sécurité
                  Re,

                  je n'ai pas eu le rapport.

                  poste les 100 premières lignes.
                  0
                  1. phenix3675 Auteur
                    Alors voilà les (environs) 100 premières lignes :

                    ComboFix 09-04-25.A3 - Vincent 27/04/2009 14:00.5 - NTFSx86
                    Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.447.112 [GMT 2:00]
                    Lancé depuis: c:\documents and settings\Vincent\Bureau\ComboFix.exe
                    Commutateurs utilisés :: c:\documents and settings\Vincent\Bureau\CFscript
                    AV: Kaspersky Anti-Virus *On-access scanning disabled* (Outdated)
                    * Un nouveau point de restauration a été créé

                    FILE ::
                    c:\documents and settings\Vincent\Application Data\digifast\digifast.exe
                    c:\documents and settings\Vincent\Application Data\Microsoft\Windows\vnxqjni.exe
                    c:\documents and settings\Vincent\Application Data\pidle
                    c:\windows\system32\ftp_non_crp.exe
                    c:\windows\system32\prnet.tmp
                    c:\windows\system32\vataguhi.exe
                    .

                    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                    .

                    c:\documents and settings\Vincent\Application Data\digifast
                    c:\documents and settings\Vincent\Application Data\digifast\config.cfg
                    c:\documents and settings\Vincent\Application Data\digifast\DFUninstall.exe
                    c:\documents and settings\Vincent\Application Data\digifast\digifast.exe
                    c:\documents and settings\Vincent\Application Data\Microsoft\Windows\vnxqjni.exe
                    c:\documents and settings\Vincent\Application Data\Twain
                    c:\documents and settings\Vincent\Local Settings\Temporary Internet Files\fbk.sts
                    c:\program files\Jcore
                    c:\program files\WWShow
                    c:\windows\system32\ftp_non_crp.exe
                    c:\windows\system32\prnet.tmp
                    c:\windows\system32\vataguhi.exe
                    c:\windows\TEMP\logishrd\LVPrcInj01.dll

                    .
                    ((((((((((((((((((((((((((((( Fichiers créés du 2009-05-27 au 2009-4-27 ))))))))))))))))))))))))))))))))))))
                    .

                    2009-04-27 05:31 . 2009-04-27 05:31 -------- d-----w c:\windows\l2schemas
                    2009-04-27 05:31 . 2009-04-27 05:31 -------- d-----w c:\windows\system32\fr
                    2009-04-27 05:31 . 2009-04-27 05:31 -------- d-----w c:\windows\system32\bits
                    2009-04-27 05:28 . 2009-04-27 05:31 -------- d-----w c:\windows\ServicePackFiles
                    2009-04-26 19:07 . 2009-04-26 19:07 -------- d-----w C:\rsit
                    2009-04-26 16:14 . 2009-04-26 16:14 -------- d-----w c:\documents and settings\All Users\Application Data\eGames
                    2009-04-26 16:14 . 2009-04-26 16:14 -------- d-----w c:\documents and settings\Vincent\Application Data\eGames
                    2009-04-25 19:42 . 2009-04-25 19:42 -------- d-----w c:\program files\Fichiers communs\SWF Studio
                    2009-04-25 15:03 . 2009-04-25 15:03 -------- d-----w c:\documents and settings\Vincent\Application Data\pidle
                    2009-04-20 13:48 . 2009-04-20 13:48 -------- d-----w c:\documents and settings\All Users\Application Data\Gogii
                    2009-04-18 20:57 . 2009-04-18 20:57 -------- d-----w c:\program files\Party Down
                    2009-04-18 20:57 . 2009-04-18 20:57 -------- d-----w c:\program files\Satisfashion
                    2009-04-18 20:56 . 2009-04-24 19:11 -------- d-----w c:\program files\Nanny Mania 2
                    2009-04-18 20:54 . 2009-04-18 20:54 -------- d-----w c:\program files\Clueless
                    2009-04-17 11:19 . 2009-04-17 11:19 -------- d-----w c:\program files\ColiPoste
                    2009-04-15 11:33 . 2008-12-16 12:31 354304 ------w c:\windows\system32\dllcache\winhttp.dll
                    2009-04-15 11:33 . 2008-04-21 21:15 219136 ------w c:\windows\system32\dllcache\wordpad.exe
                    2009-04-11 20:34 . 2009-04-11 20:34 -------- d-----w c:\documents and settings\Vincent\Local Settings\Application Data\Episode 4 de Ma Star Academy
                    2009-04-10 15:51 . 2009-04-10 15:52 -------- d-----w c:\program files\Wendy's Wellness
                    2009-04-10 15:42 . 2009-04-10 15:42 -------- d-----w c:\documents and settings\Vincent\Application Data\Shape games
                    2009-04-09 15:09 . 2007-01-16 11:56 450560 ----a-w c:\windows\system32\drivers\WlanBZXP.sys
                    2009-04-09 15:01 . 2008-06-20 10:10 65536 ----a-w c:\windows\system32\Autodial2000.dll
                    2009-04-09 15:01 . 2006-03-01 17:53 94208 ----a-w c:\windows\system32\w32n50.dll
                    2009-04-09 15:01 . 2006-03-01 17:53 32128 ----a-w c:\windows\system32\pcandis5.sys
                    2009-04-09 15:01 . 2003-09-23 09:38 34688 ----a-w c:\windows\system32\pcampr5.sys
                    2009-04-09 15:01 . 2009-04-09 15:12 -------- d-----w c:\program files\OrangeHSS
                    2009-04-09 15:01 . 2009-04-09 15:09 -------- d-----w c:\program files\Fichiers communs\France Telecom
                    2009-04-08 20:20 . 2009-04-08 20:20 -------- d-----w c:\documents and settings\Vincent\Application Data\Fuzzy Games
                    2009-04-04 12:47 . 2009-04-04 12:47 -------- d-----w c:\documents and settings\Vincent\Application Data\BigFishv1002fr

                    .
                    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                    .
                    2009-04-27 11:54 . 2008-11-13 07:28 59925 ----a-w C:\logfile
                    2009-04-27 05:33 . 2004-08-18 14:31 86331 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
                    2009-04-27 05:25 . 2004-08-05 12:00 252240 ----a-w C:\NTLDR
                    2009-04-26 12:50 . 2008-10-30 19:26 -------- d-----w c:\documents and settings\Vincent\Application Data\uTorrent
                    2009-04-26 12:49 . 2008-12-04 14:31 -------- d-----w c:\program files\Trend Micro
                    2009-04-21 21:24 . 2008-11-02 09:41 -------- d-----w c:\documents and settings\Vincent\Application Data\Image Zone Express
                    2009-04-18 19:16 . 2008-11-26 18:31 -------- d-----w c:\program files\Oberon Media
                    2009-04-17 20:00 . 2008-12-23 11:05 -------- d-----w c:\program files\Microsoft Games
                    2009-04-17 19:56 . 2009-03-03 18:30 -------- d-----w c:\program files\SdLL
                    2009-04-17 19:56 . 2008-10-23 14:07 -------- d--h--w c:\program files\InstallShield Installation Information
                    2009-04-17 19:54 . 2009-03-03 17:48 -------- d-----w c:\documents and settings\Vincent\Application Data\Desperate Housewives
                    2009-04-16 05:36 . 2004-08-18 14:11 83634 ----a-w c:\windows\system32\perfc00C.dat
                    2009-04-16 05:36 . 2004-08-18 14:11 505242 ----a-w c:\windows\system32\perfh00C.dat
                    2009-04-12 15:16 . 2008-10-26 21:22 -------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
                    2009-04-11 19:46 . 2009-01-08 14:35 -------- d-----w c:\documents and settings\All Users\Application Data\BigFishGamesCache
                    2009-03-26 21:10 . 2009-03-26 21:10 -------- d-----w c:\documents and settings\Vincent\Application Data\Boolat Games
                    2009-03-21 14:07 . 2009-03-21 14:07 1054720 ------w c:\windows\system32\dllcache\kernel32.dll
                    2009-03-14 17:06 . 2009-03-14 17:05 -------- d-----w c:\documents and settings\Vincent\Application Data\TVU networks
                    2009-03-14 17:05 . 2009-03-14 17:05 -------- d-----w c:\documents and settings\All Users\Application Data\TVU networks
                    2009-03-13 16:32 . 2009-03-12 10:47 -------- d-----w c:\program files\Microsoft Silverlight
                    2009-03-12 10:49 . 2008-10-23 14:11 86184 ----a-w c:\documents and settings\Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
                    2009-03-12 10:47 . 2008-10-23 18:16 -------- d-----w c:\program files\Windows Live
                    2009-03-12 10:46 . 2009-03-12 10:46 -------- d-----w c:\program files\Microsoft Sync Framework
                    2009-03-12 10:44 . 2009-03-12 10:44 -------- d-----w c:\program files\Microsoft SQL Server Compact Edition
                    2009-03-12 10:40 . 2009-03-12 10:40 -------- d-----w c:\program files\Microsoft
                    2009-03-12 10:40 . 2009-03-12 10:40 -------- d-----w c:\program files\Windows Live SkyDrive
                    2009-03-12 10:35 . 2009-03-12 10:35 -------- d-----w c:\program files\Fichiers communs\Windows Live
                    2009-03-11 19:28 . 2008-11-23 08:46 -------- d-----w c:\program files\eMule
                    2009-03-10 20:18 . 2008-09-05 22:30 970120 ------w c:\windows\system32\dllcache\WgaTray.exe
                    2009-03-10 20:18 . 2008-09-05 22:30 265088 ------w c:\windows\system32\dllcache\wgaLogon.dll
                    2009-03-07 22:46 . 2009-01-07 21:22 268 ---ha-w C:\sqmdata19.sqm
                    2009-03-07 22:46 . 2009-01-07 21:22 244 ---ha-w C:\sqmnoopt19.sqm
                    2009-03-06 23:19 . 2008-12-30 14:10 268 ---ha-w C:\sqmdata18.sqm
                    2009-03-06 23:19 . 2008-12-30 14:10 244 ---ha-w C:\sqmnoopt18.sqm
                    2009-03-06 16:58 . 2008-12-29 23:03 268 ---ha-w C:\sqmdata17.sqm
                    2009-03-06 16:58 . 2008-12-29 23:03 244 ---ha-w C:\sqmnoopt17.sqm
                    2009-03-06 16:50 . 2008-11-02 16:34 -------- d-----w c:\documents and settings\All Users\Application Data\Sandlot Games
                    2009-03-06 14:20 . 2009-04-15 11:34 286720 ------w c:\windows\system32\dllcache\pdh.dll
                    2009-03-06 14:20 . 2004-08-18 14:11 286720 ----a-w c:\windows\system32\pdh.dll
                    2009-03-05 21:42 . 2008-12-29 22:00 268 ---ha-w C:\sqmdata16.sqm
                    2009-03-05 21:42 . 2008-12-29 22:00 244 ---ha-w C:\sqmnoopt16.sqm
                    2009-03-04 21:38 . 2008-12-29 07:59 268 ---ha-w C:\sqmdata15.sqm
                    2009-03-04 21:38 . 2008-12-29 07:59 244 ---ha-w C:\sqmnoopt15.sqm
                    2009-03-04 16:51 . 2009-03-04 16:51 -------- d--h--r c:\documents and settings\Vincent\Application Data\SecuROM
                    2009-03-04 16:51 . 2009-03-03 17:50 107888 ----a-w c:\windows\system32\CmdLineExt.dll
                    2009-03-03 21:20 . 2008-12-29 07:46 268 ---ha-w C:\sqmdata14.sqm
                    2009-03-03 21:20 . 2008-12-29 07:46 244 ---ha-w C:\sqmnoopt14.sqm
                    2009-03-03 00:13 . 2008-08-20 05:37 826368 ------w c:\windows\system32\dllcache\wininet.dll
                    2009-03-03 00:13 . 2004-08-18 14:11 826368 ----a-w c:\windows\system32\wininet.dll
                    2009-03-02 19:49 . 2008-12-13 08:29 268 ---ha-w C:\sqmdata13.sqm
                    2009-03-02 19:49 . 2008-12-13 08:29 244 ---ha-w C:\sqmnoopt13.sqm
                    2009-03-01 18:50 . 2008-12-13 07:36 268 ---ha-w C:\sqmdata12.sqm
                    2009-03-01 18:50 . 2008-12-13 07:36 244 ---ha-w C:\sqmnoopt12.sqm
                    2009-03-01 08:18 . 2008-12-12 19:57 268 ---ha-w C:\sqmdata11.sqm
                    2009-03-01 08:18 . 2008-12-12 19:57 244 ---ha-w C:\sqmnoopt11.sqm
                    2009-02-28 04:54 . 2004-08-18 14:29 636072 ------w c:\windows\system32\dllcache\iexplore.exe
                    2009-02-27 20:53 . 2008-12-12 09:02 268 ---ha-w C:\sqmdata10.sqm
                    2009-02-27 20:53 . 2008-12-12 09:02 244 ---ha-w C:\sqmnoopt10.sqm
                    2009-02-27 18:39 . 2009-02-27 18:39 -------- d-----w c:\documents and settings\All Users\Application Data\FamilyFlights
                    2009-02-27 18:18 . 2009-02-27 18:18 -------- d-----w c:\documents and settings\Vincent\Application Data\SulusGames
                    2009-02-26 19:16 . 2008-12-11 21:17 268 ---ha-w C:\sqmdata09.sqm
                    2009-02-26 19:16 . 2008-12-11 21:17 244 ---ha-w C:\sqmnoopt09.sqm
                    2009-02-25 22:08 . 2008-12-11 19:07 268 ---ha-w C:\sqmdata08.sqm
                    2009-02-25 22:08 . 2008-12-11 19:07 244 ---ha-w C:\sqmnoopt08.sqm
                    2009-02-24 17:55 . 2008-12-10 19:12 268 ---ha-w C:\sqmdata07.sqm
                    2009-02-24 17:55 . 2008-12-10 19:12 244 ---ha-w C:\sqmnoopt07.sqm
                    2009-02-20 10:20 . 2008-10-31 18:01 13824 ------w c:\windows\system32\dllcache\ieudinit.exe
                    2009-02-20 10:20 . 2007-08-13 17:39 70656 ------w c:\windows\system32\dllcache\ie4uinit.exe
                    2009-02-20 05:14 . 2007-08-13 16:56 161792 ------w c:\windows\system32\dllcache\ieakui.dll
                    2009-02-17 20:25 . 2009-02-17 20:25 4096 ----a-w c:\windows\d3dx.dat
                    2009-02-10 17:06 . 2009-02-10 17:06 2068096 ------w c:\windows\system32\dllcache\ntkrnlpa.exe
                    2009-02-10 17:06 . 2004-08-03 22:48 2068096 ----a-w c:\windows\system32\ntkrnlpa.exe
                    2009-02-09 14:05 . 2008-10-23 14:39 1846912 ------w c:\windows\system32\dllcache\win32k.sys
                    2009-02-09 14:05 . 2004-08-18 14:11 1846912 ----a-w c:\windows\system32\win32k.sys
                    2009-02-09 11:24 . 2009-04-15 11:34 2191104 ------w c:\windows\system32\dllcache\ntoskrnl.exe
                    2009-02-09 11:24 . 2004-08-18 14:11 2191104 ----a-w c:\windows\system32\ntoskrnl.exe
                    2009-02-09 11:23 . 2009-04-15 11:34 2025984 ------w c:\windows\system32\dllcache\ntkrpamp.exe
                    2009-02-09 11:23 . 2009-04-15 11:34 2147328 ------w c:\windows\system32\dllcache\ntkrnlmp.exe
                    2009-02-09 11:23 . 2009-04-15 11:34 111104 ------w c:\windows\system32\dllcache\services.exe
                    2009-02-09 11:23 . 2004-08-18 14:11 111104 ----a-w c:\windows\system32\services.exe
                    2009-02-09 10:53 . 2009-04-15 11:34 735744 ------w c:\windows\system32\dllcache\lsasrv.dll
                    2009-02-09 10:53 . 2004-08-18 14:10 735744 ----a-w c:\windows\system32\lsasrv.dll
                    2009-02-09 10:53 . 2009-04-15 11:34 401408 ------w c:\windows\system32\dllcache\rpcss.dll
                    2009-02-09 10:53 . 2009-04-15 11:34 739840 ------w c:\windows\system32\dllcache\ntdll.dll
                    2009-02-09 10:53 . 2009-04-15 11:34 685568 ------w c:\windows\system32\dllcache\advapi32.dll
                    2009-02-09 10:53 . 2009-04-15 11:34 473600 ------w c:\windows\system32\dllcache\fastprox.dll
                    2009-02-09 10:53 . 2009-04-15 11:34 453120 ------w c:\windows\system32\dllcache\wmiprvsd.dll
                    2009-02-09 10:53 . 2004-08-18 14:11 401408 ----a-w c:\windows\system32\rpcss.dll
                    2009-02-09 10:53 . 2004-08-18 14:11 739840 ----a-w c:\windows\system32\ntdll.dll
                    2009-02-09 10:53 . 2004-08-18 14:10 685568 ----a-w c:\windows\system32\advapi32.dll
                    2009-02-08 23:36 . 2008-12-09 09:05 244 ---ha-w C:\sqmnoopt06.sqm
                    2009-02-08 23:36 . 2008-12-09 09:05 232 ---ha-w C:\sqmdata06.sqm
                    2009-02-08 20:47 . 2008-12-08 21:21 232 ---ha-w C:\sqmdata05.sqm
                    2009-02-08 20:47 . 2008-12-08 21:21 244 ---ha-w C:\sqmnoopt05.sqm
                    2009-02-06 18:39 . 2009-02-06 18:39 308600 ----a-w c:\windows\WLXPGSS.SCR
                    2009-02-06 17:52 . 2009-02-06 17:52 49504 ----a-w c:\windows\system32\sirenacm.dll
                    2009-02-06 10:39 . 2009-04-15 11:34 35328 ------w c:\windows\system32\dllcache\sc.exe
                    2009-02-06 10:39 . 2004-08-18 14:11 35328 ----a-w c:\windows\system32\sc.exe
                    2009-02-06 10:10 . 2009-04-15 11:34 227840 ------w c:\windows\system32\dllcache\wmiprvse.exe
                    2009-02-03 19:58 . 2009-02-03 19:58 56832 ------w c:\windows\system32\dllcache\secur32.dll
                    2009-01-25 15:02 . 2009-01-25 15:02 49152 --sha-w c:\windows\system32\dekeratu.dll.tmp
                    2009-01-25 15:02 . 2009-01-25 15:02 49152 --sha-w c:\windows\system32\dewokike.dll.tmp
                    2008-11-04 21:46 . 2008-11-01 17:07 2516 --sha-w c:\windows\system32\KGyGaAvL.sys
                    2009-01-25 15:02 . 2009-01-25 15:02 49152 --sha-w c:\windows\system32\kovosuzu.dll.tmp
                    .
                    0
                    1. Lyonnais92 Contributeur sécurité
                      Re,

                      poste la suite
                      0
                      1. phenix3675 Auteur
                        ((((((((((((((((((((((((((((( SnapShot@2009-04-26_21.36.38 )))))))))))))))))))))))))))))))))))))))))
                        .
                        + 2008-04-14 02:30 . 2008-04-14 02:30 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
                        + 2008-04-14 02:30 . 2008-04-14 02:30 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 50688 c:\windows\twain_32.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 50688 c:\windows\twain_32.dll
                        + 2009-04-27 12:04 . 2009-04-27 12:04 16384 c:\windows\Temp\Perflib_Perfdata_734.dat
                        + 2004-08-18 14:27 . 2008-04-14 02:33 11776 c:\windows\system32\xolehlp.dll
                        - 2004-08-18 14:27 . 2005-07-26 04:40 11776 c:\windows\system32\xolehlp.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 50176 c:\windows\system32\xmlprovi.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 50176 c:\windows\system32\xmlprovi.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 30720 c:\windows\system32\xcopy.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 30720 c:\windows\system32\xcopy.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 91648 c:\windows\system32\xactsrv.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 91648 c:\windows\system32\xactsrv.dll
                        + 2004-08-03 22:54 . 2008-04-14 02:33 52736 c:\windows\system32\wzcsapi.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 18432 c:\windows\system32\wtsapi32.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 18432 c:\windows\system32\wtsapi32.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 51200 c:\windows\system32\wstdecod.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 51200 c:\windows\system32\wstdecod.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 25088 c:\windows\system32\wsock32.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 25088 c:\windows\system32\wsock32.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 41984 c:\windows\system32\wsnmp32.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 19456 c:\windows\system32\wshtcpip.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 11264 c:\windows\system32\wshrm.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 14336 c:\windows\system32\wship6.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 14336 c:\windows\system32\wship6.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 90112 c:\windows\system32\wshext.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 36864 c:\windows\system32\wshcon.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 80896 c:\windows\system32\wscsvc.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 13824 c:\windows\system32\wscntfy.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 13824 c:\windows\system32\wscntfy.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 19968 c:\windows\system32\ws2help.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 19968 c:\windows\system32\ws2help.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 82432 c:\windows\system32\ws2_32.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 11776 c:\windows\system32\wpnpinst.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:34 32256 c:\windows\system32\wpabaln.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 32256 c:\windows\system32\wpabaln.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:33 94208 c:\windows\system32\wlnotify.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 94208 c:\windows\system32\wlnotify.dll
                        + 2008-04-14 02:33 . 2008-04-14 02:33 69120 c:\windows\system32\wlanapi.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 53760 c:\windows\system32\winsta.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 53760 c:\windows\system32\winsta.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 17408 c:\windows\system32\winshfhc.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 17408 c:\windows\system32\winshfhc.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 16896 c:\windows\system32\winrnr.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 16896 c:\windows\system32\winrnr.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 32256 c:\windows\system32\winipsec.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 75776 c:\windows\system32\wiascr.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 75776 c:\windows\system32\wiascr.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 66560 c:\windows\system32\wextract.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 66560 c:\windows\system32\wextract.exe
                        - 2004-08-18 14:11 . 2006-01-04 03:35 68096 c:\windows\system32\webclnt.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 68096 c:\windows\system32\webclnt.dll
                        + 2004-08-03 22:55 . 2008-04-14 02:34 23552 c:\windows\system32\wdmaud.drv
                        - 2004-08-03 22:55 . 2004-08-05 12:00 23552 c:\windows\system32\wdmaud.drv
                        + 2004-08-18 14:11 . 2008-04-14 02:33 49152 c:\windows\system32\wdigest.dll
                        - 2004-08-18 14:11 . 2006-03-24 04:37 49152 c:\windows\system32\wdigest.dll
                        - 2004-08-18 14:27 . 2004-08-05 12:00 99328 c:\windows\system32\wbem\wmiutils.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 99328 c:\windows\system32\wbem\wmiutils.dll
                        - 2004-08-18 14:27 . 2004-08-05 12:00 41472 c:\windows\system32\wbem\wmipsess.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 41472 c:\windows\system32\wbem\wmipsess.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 62464 c:\windows\system32\wbem\wmipjobj.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 61952 c:\windows\system32\wbem\wmipiprt.dll
                        - 2004-08-18 14:27 . 2004-08-05 12:00 60928 c:\windows\system32\wbem\wmicookr.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 60928 c:\windows\system32\wbem\wmicookr.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 88576 c:\windows\system32\wbem\wmiaprpl.dll
                        - 2004-08-18 14:27 . 2004-08-05 12:00 43520 c:\windows\system32\wbem\wbemsvc.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 43520 c:\windows\system32\wbem\wbemsvc.dll
                        - 2004-08-18 14:27 . 2004-08-05 12:00 18944 c:\windows\system32\wbem\wbemprox.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 18944 c:\windows\system32\wbem\wbemprox.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 44544 c:\windows\system32\wbem\wbemperf.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 44544 c:\windows\system32\wbem\wbemperf.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 71680 c:\windows\system32\wbem\wbemcons.dll
                        - 2004-08-18 14:27 . 2004-08-05 12:00 71680 c:\windows\system32\wbem\wbemcons.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 86528 c:\windows\system32\wbem\stdprov.dll
                        - 2004-08-18 14:27 . 2004-08-05 12:00 86528 c:\windows\system32\wbem\stdprov.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:34 36352 c:\windows\system32\wbem\scrcons.exe
                        - 2004-08-18 14:27 . 2004-08-05 12:00 92672 c:\windows\system32\wbem\policman.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 92672 c:\windows\system32\wbem\policman.dll
                        - 2004-08-18 14:27 . 2004-08-05 12:00 47104 c:\windows\system32\wbem\ncprov.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 47104 c:\windows\system32\wbem\ncprov.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:34 16896 c:\windows\system32\wbem\mofcomp.exe
                        - 2004-08-18 14:27 . 2004-08-05 12:00 16896 c:\windows\system32\wbem\mofcomp.exe
                        - 2004-08-18 14:27 . 2004-08-05 12:00 24576 c:\windows\system32\wbem\krnlprov.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 24576 c:\windows\system32\wbem\krnlprov.dll
                        + 2004-08-18 14:10 . 2008-04-14 02:33 21504 c:\windows\system32\wbem\evntrprv.dll
                        + 2004-08-18 14:10 . 2008-04-14 02:33 45056 c:\windows\system32\wbem\cmdevtgprov.dll
                        + 2004-08-18 14:11 . 2008-04-13 18:44 17664 c:\windows\system32\watchdog.sys
                        - 2004-08-18 14:11 . 2004-08-05 12:00 17664 c:\windows\system32\watchdog.sys
                        + 2004-08-18 14:11 . 2008-04-14 02:33 15872 c:\windows\system32\w3ssl.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 15872 c:\windows\system32\w3ssl.dll
                        + 2008-10-23 22:38 . 2008-04-14 02:33 54784 c:\windows\system32\vfwwdm32.dll
                        - 2008-10-23 22:38 . 2004-08-03 22:54 54784 c:\windows\system32\vfwwdm32.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 18944 c:\windows\system32\version.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 18944 c:\windows\system32\version.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 26624 c:\windows\system32\verifier.dll
                        + 2008-04-14 02:34 . 2008-04-14 02:34 28672 c:\windows\system32\verclsid.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:33 51712 c:\windows\system32\vdmredir.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 51712 c:\windows\system32\vdmredir.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 26112 c:\windows\system32\vdmdbg.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 26112 c:\windows\system32\vdmdbg.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 30749 c:\windows\system32\vbajet32.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 30749 c:\windows\system32\vbajet32.dll
                        - 2004-08-18 14:11 . 2006-10-04 13:32 50176 c:\windows\system32\utilman.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:34 50176 c:\windows\system32\utilman.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 19968 c:\windows\system32\usmt\log.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 19968 c:\windows\system32\usmt\log.dll
                        + 2008-04-13 16:44 . 2008-04-13 16:44 17920 c:\windows\system32\usmt\cobramsg.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 26624 c:\windows\system32\userinit.exe
                        - 2004-08-18 14:24 . 2004-08-03 22:54 77312 c:\windows\system32\usbui.dll
                        + 2004-08-18 14:24 . 2008-04-14 02:33 77312 c:\windows\system32\usbui.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 16896 c:\windows\system32\usbmon.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 16896 c:\windows\system32\usbmon.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 18432 c:\windows\system32\ups.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 18432 c:\windows\system32\ups.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 16896 c:\windows\system32\upnpcont.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:34 16896 c:\windows\system32\upnpcont.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 13824 c:\windows\system32\uniplat.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 13824 c:\windows\system32\uniplat.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 78848 c:\windows\system32\unimdmat.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 78848 c:\windows\system32\unimdmat.dll
                        + 2004-08-18 14:23 . 2008-04-14 02:32 76288 c:\windows\system32\uniime.dll
                        - 2004-08-18 14:23 . 2004-08-05 12:00 76288 c:\windows\system32\uniime.dll
                        - 2004-08-18 14:11 . 2006-10-04 13:38 36864 c:\windows\system32\umandlg.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 36864 c:\windows\system32\umandlg.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 26624 c:\windows\system32\udhisapi.dll
                        + 2008-07-14 11:09 . 2008-04-14 02:34 60416 c:\windows\system32\tzchange.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:33 57856 c:\windows\system32\twext.dll
                        + 2008-04-14 02:33 . 2008-04-14 02:33 50688 c:\windows\system32\tspkg.dll
                        + 2008-04-14 02:33 . 2008-04-14 02:33 53248 c:\windows\system32\tsgqec.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 12168 c:\windows\system32\tsddd.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 12168 c:\windows\system32\tsddd.dll
                        - 2004-08-18 14:27 . 2004-08-05 12:00 94208 c:\windows\system32\tscfgwmi.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 94208 c:\windows\system32\tscfgwmi.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 90112 c:\windows\system32\trkwks.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 12800 c:\windows\system32\tree.com
                        - 2004-08-18 14:11 . 2004-08-05 12:00 13312 c:\windows\system32\tracert.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:34 13312 c:\windows\system32\tracert.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:34 75264 c:\windows\system32\tlntsvr.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 75264 c:\windows\system32\tlntsvr.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 80384 c:\windows\system32\tlntsess.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:34 80384 c:\windows\system32\tlntsess.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 63488 c:\windows\system32\tlntadmn.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:34 63488 c:\windows\system32\tlntadmn.exe
                        - 2004-08-18 14:11 . 2005-05-11 02:30 78336 c:\windows\system32\telnet.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:34 78336 c:\windows\system32\telnet.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:33 47104 c:\windows\system32\tcpmonui.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 47104 c:\windows\system32\tcpmonui.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 46592 c:\windows\system32\tcpmon.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 46592 c:\windows\system32\tcpmon.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 14848 c:\windows\system32\tcpmib.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 14848 c:\windows\system32\tcpmib.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 79872 c:\windows\system32\tasklist.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:34 78336 c:\windows\system32\taskkill.exe
                        + 2004-08-18 14:10 . 2008-04-14 02:34 74240 c:\windows\system32\systeminfo.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:33 57856 c:\windows\system32\synceng.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 57856 c:\windows\system32\synceng.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 14336 c:\windows\system32\svchost.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:34 14336 c:\windows\system32\svchost.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 75776 c:\windows\system32\strmfilt.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 75776 c:\windows\system32\strmfilt.dll
                        + 2004-08-18 14:22 . 2008-04-14 02:33 76800 c:\windows\system32\storprop.dll
                        - 2004-08-18 14:22 . 2004-08-03 22:54 76800 c:\windows\system32\storprop.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 14848 c:\windows\system32\stimon.exe
                        - 2004-08-18 14:11 . 2004-08-05 12:00 14848 c:\windows\system32\stimon.exe
                        + 2004-08-18 14:11 . 2008-04-14 02:33 68608 c:\windows\system32\sti.dll
                        + 2004-08-18 14:27 . 2008-04-14 02:33 59392 c:\windows\system32\stclient.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:34 14336 c:\windows\system32\ssstars.scr
                        - 2004-08-18 14:11 . 2004-08-05 12:00 14336 c:\windows\system32\ssstars.scr
                        + 2004-08-18 14:11 . 2008-04-14 02:34 18944 c:\windows\system32\ssmyst.scr
                        - 2004-08-18 14:11 . 2004-08-05 12:00 18944 c:\windows\system32\ssmyst.scr
                        - 2004-08-18 14:11 . 2004-08-05 12:00 47104 c:\windows\system32\ssmypics.scr
                        + 2004-08-18 14:11 . 2008-04-14 02:34 47104 c:\windows\system32\ssmypics.scr
                        - 2004-08-18 14:11 . 2004-08-05 12:00 20992 c:\windows\system32\ssmarque.scr
                        + 2004-08-18 14:11 . 2008-04-14 02:34 20992 c:\windows\system32\ssmarque.scr
                        + 2004-08-18 14:11 . 2008-04-14 02:33 71680 c:\windows\system32\ssdpsrv.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 71680 c:\windows\system32\ssdpsrv.dll
                        + 2004-08-18 14:11 . 2008-04-14 02:33 34816 c:\windows\system32\ssdpapi.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 34816 c:\windows\system32\ssdpapi.dll
                        - 2004-08-18 14:11 . 2004-08-05 12:00 19968 c:\windows\system32\ssbezier.scr
                        + 2004-08-18 14:11 . 2008-04-14 02:34 19968 c:\windows\system32\ssbezier.scr
                        + 2004-08-18 14:11 . 2008-04-14 02:33 96768 c:\windows\system32\srvsvc.dll
                        - 2004-08-18 14:11 . 2004-12-07 19:34 96768 c:\windows\system32\srvsvc.dll
                        - 2004-08-18 14:29 . 2004-08-05 12:00 67584 c:\windows\system32\srclient.dll
                        + 2004-08-18 14:29 . 2008-04-14 02:33 67584 c:\windows\system32\srclient.dll
                        0
                        1. phenix3675 Auteur
                          + 2008-04-14 02:34 . 2008-04-14 02:34 20992 c:\windows\system32\spupdwxp.exe
                          - 2008-10-23 14:13 . 2008-07-09 07:40 26488 c:\windows\system32\spupdsvc.exe
                          + 2008-10-23 14:13 . 2007-08-10 06:18 26488 c:\windows\system32\spupdsvc.exe
                          - 2004-08-18 14:11 . 2005-06-10 23:53 57856 c:\windows\system32\spoolsv.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 57856 c:\windows\system32\spoolsv.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:33 75264 c:\windows\system32\spoolss.dll
                          + 2004-08-18 14:11 . 2008-04-13 17:34 11264 c:\windows\system32\spnpinst.exe
                          + 2008-10-30 22:01 . 2007-11-30 11:19 18296 c:\windows\system32\spmsg.dll
                          - 2008-10-30 22:01 . 2007-11-30 12:39 18296 c:\windows\system32\spmsg.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 12800 c:\windows\system32\spiisupd.exe
                          + 2004-08-18 14:11 . 2008-04-13 18:43 12800 c:\windows\system32\spiisupd.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 26112 c:\windows\system32\sort.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:33 18944 c:\windows\system32\snmpapi.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 18944 c:\windows\system32\snmpapi.dll
                          + 2008-04-14 02:33 . 2008-04-14 02:33 10752 c:\windows\system32\smtpapi.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:34 50688 c:\windows\system32\smss.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 50688 c:\windows\system32\smss.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 93184 c:\windows\system32\smlogsvc.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 93184 c:\windows\system32\smlogsvc.exe
                          + 2008-04-14 02:34 . 2008-04-14 02:34 73796 c:\windows\system32\slserv.exe
                          + 2008-04-14 02:34 . 2008-04-14 02:34 32866 c:\windows\system32\slrundll.exe
                          + 2008-04-14 02:33 . 2008-04-14 02:33 73832 c:\windows\system32\slcoinst.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 98304 c:\windows\system32\slbiop.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 98304 c:\windows\system32\slbiop.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 25600 c:\windows\system32\slayerxp.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 25600 c:\windows\system32\slayerxp.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 26112 c:\windows\system32\skeys.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 26112 c:\windows\system32\skeys.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 71168 c:\windows\system32\sigverif.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 71168 c:\windows\system32\sigverif.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:33 13824 c:\windows\system32\sigtab.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 13824 c:\windows\system32\sigtab.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 20480 c:\windows\system32\shutdown.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 20480 c:\windows\system32\shutdown.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 28160 c:\windows\system32\shscrap.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 28160 c:\windows\system32\shscrap.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:34 78848 c:\windows\system32\shrpubw.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 78848 c:\windows\system32\shrpubw.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 45056 c:\windows\system32\shmgrate.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:33 65024 c:\windows\system32\shimeng.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 68096 c:\windows\system32\shgina.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 68096 c:\windows\system32\shgina.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 25088 c:\windows\system32\shfolder.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 25088 c:\windows\system32\shfolder.dll
                          + 2008-04-14 02:34 . 2008-04-14 02:34 32768 c:\windows\system32\setupn.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:33 34304 c:\windows\system32\Setup\tabletoc.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 34304 c:\windows\system32\Setup\tabletoc.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 17408 c:\windows\system32\Setup\ocmsn.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 17408 c:\windows\system32\Setup\ocmsn.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 15872 c:\windows\system32\Setup\ocgen.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 15872 c:\windows\system32\Setup\ocgen.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 63488 c:\windows\system32\Setup\ntoc.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 63488 c:\windows\system32\Setup\ntoc.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 78336 c:\windows\system32\Setup\netoc.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 78336 c:\windows\system32\Setup\netoc.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 15360 c:\windows\system32\Setup\msgrocm.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 90112 c:\windows\system32\Setup\msdtcstp.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 16896 c:\windows\system32\Setup\medctroc.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 16896 c:\windows\system32\Setup\medctroc.dll
                          - 2004-08-18 14:10 . 2004-08-05 12:00 32828 c:\windows\system32\Setup\fp40ext.dll
                          + 2004-08-18 14:10 . 2008-04-14 02:33 32828 c:\windows\system32\Setup\fp40ext.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:34 23040 c:\windows\system32\setup.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 23040 c:\windows\system32\setup.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 32768 c:\windows\system32\sethc.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 32768 c:\windows\system32\sethc.exe
                          - 2004-08-18 14:27 . 2004-08-05 12:00 56320 c:\windows\system32\servdeps.dll
                          + 2004-08-18 14:27 . 2008-04-14 02:33 56320 c:\windows\system32\servdeps.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 39424 c:\windows\system32\sens.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 55296 c:\windows\system32\sendmail.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 55296 c:\windows\system32\sendmail.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 29696 c:\windows\system32\sendcmsg.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 29696 c:\windows\system32\sendcmsg.dll
                          + 2004-08-18 14:11 . 2009-02-03 19:58 56832 c:\windows\system32\secur32.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 18944 c:\windows\system32\seclogon.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 18944 c:\windows\system32\seclogon.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:34 19968 c:\windows\system32\secedit.exe
                          + 2004-08-03 22:54 . 2008-04-14 02:33 29184 c:\windows\system32\sdhcinst.dll
                          - 2004-08-03 22:54 . 2004-08-05 12:00 29184 c:\windows\system32\sdhcinst.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 78848 c:\windows\system32\sdbinst.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 78848 c:\windows\system32\sdbinst.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:33 22016 c:\windows\system32\sclgntfy.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 22016 c:\windows\system32\sclgntfy.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 71168 c:\windows\system32\scarddlg.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 71168 c:\windows\system32\scarddlg.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 13824 c:\windows\system32\savedump.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 13824 c:\windows\system32\savedump.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:33 64000 c:\windows\system32\samlib.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 64000 c:\windows\system32\samlib.dll
                          - 2004-08-18 14:29 . 2004-08-05 12:00 45568 c:\windows\system32\safrslv.dll
                          + 2004-08-18 14:29 . 2008-04-14 02:33 45568 c:\windows\system32\safrslv.dll
                          - 2004-08-18 14:29 . 2004-08-05 12:00 29696 c:\windows\system32\safrdm.dll
                          + 2004-08-18 14:29 . 2008-04-14 02:33 29696 c:\windows\system32\safrdm.dll
                          - 2004-08-18 14:29 . 2004-08-05 12:00 43520 c:\windows\system32\safrcdlg.dll
                          + 2004-08-18 14:29 . 2008-04-14 02:33 43520 c:\windows\system32\safrcdlg.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:34 14336 c:\windows\system32\runonce.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 14336 c:\windows\system32\runonce.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 33792 c:\windows\system32\rundll32.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 33792 c:\windows\system32\rundll32.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:33 44032 c:\windows\system32\rtutils.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 44032 c:\windows\system32\rtutils.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 31744 c:\windows\system32\rtipxmib.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 31744 c:\windows\system32\rtipxmib.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:34 78336 c:\windows\system32\rtcshare.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 78336 c:\windows\system32\rtcshare.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:33 92672 c:\windows\system32\rsvpsp.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 18944 c:\windows\system32\rsmps.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 18944 c:\windows\system32\rsmps.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 40960 c:\windows\system32\rshx32.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 40960 c:\windows\system32\rshx32.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 15872 c:\windows\system32\rsh.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 15872 c:\windows\system32\rsh.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 14848 c:\windows\system32\rexec.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 14848 c:\windows\system32\rexec.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 58880 c:\windows\system32\resutils.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 58880 c:\windows\system32\resutils.dll
                          + 2004-08-18 14:27 . 2008-04-14 02:33 61952 c:\windows\system32\remotepg.dll
                          - 2004-08-18 14:27 . 2004-08-05 12:00 61952 c:\windows\system32\remotepg.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 12288 c:\windows\system32\regsvr32.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 12288 c:\windows\system32\regsvr32.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 59904 c:\windows\system32\regsvc.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 59904 c:\windows\system32\regsvc.dll
                          - 2004-08-18 14:11 . 2004-08-05 12:00 49664 c:\windows\system32\regapi.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 49664 c:\windows\system32\regapi.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:34 53248 c:\windows\system32\reg.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 53248 c:\windows\system32\reg.exe
                          + 2004-08-18 14:27 . 2008-04-14 02:34 67072 c:\windows\system32\rdshost.exe
                          - 2004-08-18 14:27 . 2004-08-05 12:00 67072 c:\windows\system32\rdshost.exe
                          - 2004-08-18 14:27 . 2004-08-05 12:00 13824 c:\windows\system32\rdsaddin.exe
                          + 2004-08-18 14:27 . 2008-04-14 02:34 13824 c:\windows\system32\rdsaddin.exe
                          - 2004-08-18 14:27 . 2004-08-05 12:00 87176 c:\windows\system32\rdpwsx.dll
                          + 2004-08-18 14:27 . 2008-04-14 02:34 87176 c:\windows\system32\rdpwsx.dll
                          + 2004-08-18 14:27 . 2008-04-14 02:33 19968 c:\windows\system32\rdpsnd.dll
                          - 2004-08-18 14:27 . 2004-08-05 12:00 19968 c:\windows\system32\rdpsnd.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:34 92424 c:\windows\system32\rdpdd.dll
                          + 2004-08-18 14:27 . 2008-04-14 02:34 62976 c:\windows\system32\rdpclip.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 23040 c:\windows\system32\rcp.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 23040 c:\windows\system32\rcp.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 35840 c:\windows\system32\rcimlby.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:34 35840 c:\windows\system32\rcimlby.exe
                          + 2004-08-18 14:11 . 2008-04-14 02:33 58368 c:\windows\system32\rastapi.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 16384 c:\windows\system32\rassapi.dll
                          + 2008-04-14 02:33 . 2008-04-14 02:33 61952 c:\windows\system32\rasqec.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:34 57344 c:\windows\system32\rasphone.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 57344 c:\windows\system32\rasphone.exe
                          - 2004-08-18 14:11 . 2004-08-05 12:00 61440 c:\windows\system32\rasman.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 61440 c:\windows\system32\rasman.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 79872 c:\windows\system32\raschap.dll
                          + 2004-08-18 14:11 . 2008-04-14 02:33 88576 c:\windows\system32\rasauto.dll
                          - 2004-08-18 14:29 . 2004-08-05 12:00 43520 c:\windows\system32\racpldlg.dll
                          + 2004-08-18 14:29 . 2008-04-14 02:33 43520 c:\windows\system32\racpldlg.dll
                          0
                          1. phenix3675 Auteur
                            + 2008-04-14 02:33 . 2008-04-14 02:33 76800 c:\windows\system32\qutil.dll
                            + 2004-08-18 14:27 . 2008-04-14 02:34 20992 c:\windows\system32\qprocess.exe
                            - 2004-08-18 14:27 . 2004-08-05 12:00 20992 c:\windows\system32\qprocess.exe
                            + 2004-08-18 14:29 . 2008-04-14 02:33 18944 c:\windows\system32\qmgrprxy.dll
                            - 2004-08-18 14:29 . 2004-08-05 12:00 18944 c:\windows\system32\qmgrprxy.dll
                            + 2008-04-14 02:33 . 2008-04-14 02:33 62464 c:\windows\system32\qcliprov.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 34304 c:\windows\system32\pstorsvc.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 34304 c:\windows\system32\pstorsvc.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 43520 c:\windows\system32\pstorec.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 43520 c:\windows\system32\pstorec.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 98816 c:\windows\system32\psbase.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 98816 c:\windows\system32\psbase.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 23040 c:\windows\system32\psapi.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 23040 c:\windows\system32\psapi.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 50688 c:\windows\system32\proquota.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:34 50688 c:\windows\system32\proquota.exe
                            - 2004-08-18 14:11 . 2004-08-05 12:00 27648 c:\windows\system32\profmap.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 27648 c:\windows\system32\profmap.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 17408 c:\windows\system32\powrprof.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 17408 c:\windows\system32\powrprof.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 49152 c:\windows\system32\powercfg.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:34 49152 c:\windows\system32\powercfg.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:33 58880 c:\windows\system32\pnrpnsp.dll
                            - 2004-08-03 22:54 . 2004-08-05 12:00 15360 c:\windows\system32\pjlmon.dll
                            + 2004-08-03 22:54 . 2008-04-14 02:33 15360 c:\windows\system32\pjlmon.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 19456 c:\windows\system32\ping.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:34 19456 c:\windows\system32\ping.exe
                            - 2004-08-18 14:11 . 2004-08-05 12:00 24064 c:\windows\system32\pidgen.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:32 24064 c:\windows\system32\pidgen.dll
                            - 2004-08-03 22:54 . 2004-08-05 12:00 35328 c:\windows\system32\pid.dll
                            + 2004-08-03 22:54 . 2008-04-14 02:33 35328 c:\windows\system32\pid.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 35840 c:\windows\system32\perfproc.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 35840 c:\windows\system32\perfproc.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 26624 c:\windows\system32\perfos.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 26624 c:\windows\system32\perfos.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 18432 c:\windows\system32\perfnet.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:34 15872 c:\windows\system32\perfmon.exe
                            - 2004-08-18 14:11 . 2004-08-05 12:00 15872 c:\windows\system32\perfmon.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:33 27136 c:\windows\system32\perfdisk.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 27136 c:\windows\system32\perfdisk.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 42496 c:\windows\system32\perfctrs.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 42496 c:\windows\system32\perfctrs.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 69632 c:\windows\system32\pautoenr.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:34 59904 c:\windows\system32\packager.exe
                            - 2004-08-18 14:11 . 2004-08-05 12:00 59904 c:\windows\system32\packager.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:33 68096 c:\windows\system32\osuninst.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 68096 c:\windows\system32\osuninst.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:34 71680 c:\windows\system32\openfiles.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 71680 c:\windows\system32\openfiles.exe
                            + 2004-08-18 14:29 . 2008-04-14 02:34 51712 c:\windows\system32\oobe\oobebaln.exe
                            - 2004-08-18 14:29 . 2004-08-05 12:00 51712 c:\windows\system32\oobe\oobebaln.exe
                            + 2004-08-18 14:29 . 2008-04-14 02:34 29184 c:\windows\system32\oobe\msoobe.exe
                            + 2004-08-18 14:29 . 2008-04-14 02:33 19456 c:\windows\system32\oobe\msobweb.dll
                            - 2004-08-18 14:29 . 2004-08-05 12:00 30720 c:\windows\system32\oobe\msobshel.dll
                            + 2004-08-18 14:29 . 2008-04-14 02:33 30720 c:\windows\system32\oobe\msobshel.dll
                            + 2004-08-18 14:29 . 2008-04-14 02:33 16384 c:\windows\system32\oobe\msobdl.dll
                            - 2004-08-18 14:29 . 2004-08-05 12:00 16384 c:\windows\system32\oobe\msobdl.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 84992 c:\windows\system32\olepro32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 37376 c:\windows\system32\olecnv32.dll
                            - 2004-08-18 14:11 . 2005-07-26 04:40 75264 c:\windows\system32\olecli32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 75264 c:\windows\system32\olecli32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 20511 c:\windows\system32\odtext32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 20511 c:\windows\system32\odtext32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 20510 c:\windows\system32\odpdx32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 20510 c:\windows\system32\odpdx32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 20510 c:\windows\system32\odfox32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 20510 c:\windows\system32\odfox32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 20510 c:\windows\system32\odexl32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 20510 c:\windows\system32\odexl32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 20511 c:\windows\system32\oddbse32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 20511 c:\windows\system32\oddbse32.dll
                            + 2004-08-18 14:11 . 2008-04-13 17:26 12288 c:\windows\system32\odbcp32r.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 12288 c:\windows\system32\odbcp32r.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:32 61471 c:\windows\system32\odbcji32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 98304 c:\windows\system32\odbcint.dll
                            + 2004-08-18 14:11 . 2007-03-28 12:56 98304 c:\windows\system32\odbcint.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 65536 c:\windows\system32\odbccu32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 65536 c:\windows\system32\odbccu32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 65536 c:\windows\system32\odbccr32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 65536 c:\windows\system32\odbccr32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 69632 c:\windows\system32\odbcconf.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:34 69632 c:\windows\system32\odbcconf.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:33 24576 c:\windows\system32\odbcbcp.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 24576 c:\windows\system32\odbcbcp.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 32768 c:\windows\system32\odbcad32.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:34 32768 c:\windows\system32\odbcad32.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:33 16384 c:\windows\system32\odbc32gt.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 16384 c:\windows\system32\odbc32gt.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 69632 c:\windows\system32\ocmanage.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 65536 c:\windows\system32\nwwks.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 64000 c:\windows\system32\nwapi32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 15360 c:\windows\system32\ntvdmd.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 91648 c:\windows\system32\ntprint.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 91648 c:\windows\system32\ntprint.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 40960 c:\windows\system32\ntmsapi.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 40960 c:\windows\system32\ntmsapi.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 44032 c:\windows\system32\ntlanman.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 67072 c:\windows\system32\ntdsapi.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 67072 c:\windows\system32\ntdsapi.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 79360 c:\windows\system32\nslookup.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:34 79360 c:\windows\system32\nslookup.exe
                            - 2004-08-18 14:11 . 2004-08-05 12:00 55296 c:\windows\system32\npptools.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 55296 c:\windows\system32\npptools.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:34 15360 c:\windows\system32\npp\nppagent.exe
                            - 2004-08-18 14:11 . 2004-08-05 12:00 15360 c:\windows\system32\npp\nppagent.exe
                            - 2004-08-18 14:11 . 2004-08-05 12:00 57344 c:\windows\system32\npp\ndisnpp.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 57344 c:\windows\system32\npp\ndisnpp.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:34 70656 c:\windows\system32\notepad.exe
                            - 2004-08-18 14:11 . 2004-08-05 12:00 70656 c:\windows\system32\notepad.exe
                            - 2004-08-18 14:29 . 2004-08-05 12:00 28672 c:\windows\system32\nmmkcert.dll
                            + 2004-08-18 14:29 . 2008-04-14 02:33 28672 c:\windows\system32\nmmkcert.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 98304 c:\windows\system32\nlhtml.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 83456 c:\windows\system32\netui0.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 83456 c:\windows\system32\netui0.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 37888 c:\windows\system32\netstat.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:34 37888 c:\windows\system32\netstat.exe
                            - 2004-08-18 14:11 . 2004-08-05 12:00 88576 c:\windows\system32\netsh.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:34 88576 c:\windows\system32\netsh.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:33 11776 c:\windows\system32\netrap.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 42496 c:\windows\system32\net.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:34 42496 c:\windows\system32\net.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:33 19456 c:\windows\system32\nddenb32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 19456 c:\windows\system32\nddenb32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 18432 c:\windows\system32\nddeapi.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 18432 c:\windows\system32\nddeapi.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 36352 c:\windows\system32\ncobjapi.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 36352 c:\windows\system32\ncobjapi.dll
                            - 2004-08-18 14:11 . 2006-10-04 13:32 55296 c:\windows\system32\narrator.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:34 55296 c:\windows\system32\narrator.exe
                            + 2008-04-14 02:33 . 2008-04-14 02:33 30208 c:\windows\system32\napipsec.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 91648 c:\windows\system32\mydocs.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 91648 c:\windows\system32\mydocs.dll
                            + 2004-08-18 14:27 . 2008-06-12 14:22 91648 c:\windows\system32\mtxoci.dll
                            - 2004-08-18 14:27 . 2008-06-12 14:18 91648 c:\windows\system32\mtxoci.dll
                            + 2004-08-18 14:27 . 2008-04-14 02:33 34304 c:\windows\system32\mtxlegih.dll
                            + 2004-08-18 14:27 . 2008-04-14 02:33 30720 c:\windows\system32\mtxdm.dll
                            - 2004-08-18 14:11 . 2008-06-12 14:18 66560 c:\windows\system32\mtxclu.dll
                            + 2004-08-18 14:11 . 2008-06-12 14:22 66560 c:\windows\system32\mtxclu.dll
                            + 2004-08-03 22:54 . 2008-04-14 02:33 16896 c:\windows\system32\msyuv.dll
                            + 2006-07-19 09:55 . 2008-04-14 02:04 93184 c:\windows\system32\msxml6r.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 72704 c:\windows\system32\msw3prt.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 72704 c:\windows\system32\msw3prt.dll
                            + 2004-08-18 14:11 . 2008-04-13 18:30 61440 c:\windows\system32\msvcrt40.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 61440 c:\windows\system32\msvcrt40.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 57344 c:\windows\system32\msvcirt.dll
                            + 2004-08-18 14:29 . 2008-04-14 02:34 12288 c:\windows\system32\mstinit.exe
                            - 2004-08-18 14:29 . 2004-08-05 12:00 12288 c:\windows\system32\mstinit.exe
                            + 2008-04-14 02:03 . 2008-04-14 02:03 81920 c:\windows\system32\msshavmsg.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 11264 c:\windows\system32\msrle32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 11264 c:\windows\system32\msrle32.dll
                            + 2004-08-18 14:11 . 2008-04-13 16:23 48128 c:\windows\system32\msprivs.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 48128 c:\windows\system32\msprivs.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 29696 c:\windows\system32\mspatcha.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 24576 c:\windows\system32\msorc32r.dll
                            + 2004-08-18 14:11 . 2007-03-28 12:56 24576 c:\windows\system32\msorc32r.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 25600 c:\windows\system32\mslbui.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 25600 c:\windows\system32\mslbui.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 15360 c:\windows\system32\msisip.dll
                            - 2004-08-18 14:11 . 2005-05-04 12:45 15360 c:\windows\system32\msisip.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:34 78848 c:\windows\system32\msiexec.exe
                            - 2004-08-18 14:11 . 2005-05-04 12:45 78848 c:\windows\system32\msiexec.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:33 51712 c:\windows\system32\msident.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 51712 c:\windows\system32\msident.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 33792 c:\windows\system32\msgsvc.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 33792 c:\windows\system32\msgsvc.dll
                            + 2004-08-18 14:27 . 2008-06-12 14:22 58880 c:\windows\system32\msdtclog.dll
                            - 2004-08-18 14:27 . 2008-06-12 14:18 58880 c:\windows\system32\msdtclog.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 14336 c:\windows\system32\msdmo.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 14336 c:\windows\system32\msdmo.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 68608 c:\windows\system32\msctfp.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 36864 c:\windows\system32\mscpxl32.dLL
                            + 2004-08-18 14:11 . 2008-04-14 02:33 36864 c:\windows\system32\mscpxl32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 12288 c:\windows\system32\mscpx32r.dLL
                            + 2004-08-18 14:11 . 2008-04-13 17:26 12288 c:\windows\system32\mscpx32r.dll
                            + 2004-08-18 14:29 . 2008-04-14 02:33 69632 c:\windows\system32\msconf.dll
                            - 2004-08-18 14:29 . 2004-08-05 12:00 69632 c:\windows\system32\msconf.dll
                            - 2004-08-18 14:11 . 2008-06-24 16:23 74240 c:\windows\system32\mscms.dll
                            + 2004-08-18 14:11 . 2008-06-24 16:44 74240 c:\windows\system32\mscms.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 57344 c:\windows\system32\msasn1.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 57344 c:\windows\system32\msasn1.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 86016 c:\windows\system32\msapsspc.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 86016 c:\windows\system32\msapsspc.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 72192 c:\windows\system32\msacm32.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 72192 c:\windows\system32\msacm32.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 49152 c:\windows\system32\mqupgrd.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 95744 c:\windows\system32\mqsec.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 95744 c:\windows\system32\mqsec.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 89088 c:\windows\system32\mqlogmgr.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 89088 c:\windows\system32\mqlogmgr.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 16896 c:\windows\system32\mqise.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 16896 c:\windows\system32\mqise.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 47616 c:\windows\system32\mqdscli.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:34 19968 c:\windows\system32\mqbkup.exe
                            - 2004-08-18 14:11 . 2004-08-05 12:00 19968 c:\windows\system32\mqbkup.exe
                            + 2004-08-18 14:11 . 2008-04-14 02:33 53248 c:\windows\system32\mprdim.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 87040 c:\windows\system32\mprapi.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 87040 c:\windows\system32\mprapi.dll
                            + 2004-08-18 14:11 . 2008-04-14 02:33 59904 c:\windows\system32\mpr.dll
                            - 2004-08-18 14:11 . 2004-08-05 12:00 59904 c:\windows\system32\mpr.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:34 16896 c:\windows\system32\more.com
                            + 2004-08-18 14:29 . 2008-04-14 02:34 32768 c:\windows\system32\mnmsrvc.exe
                            - 2004-08-18 14:29 . 2004-08-05 12:00 32768 c:\windows\system32\mnmsrvc.exe
                            - 2004-08-18 14:29 . 2004-08-05 12:00 34560 c:\windows\system32\mnmdd.dll
                            + 2004-08-18 14:29 . 2008-04-14 02:33 34560 c:\windows\system32\mnmdd.dll
                            + 2004-08-18 14:27 . 2008-04-14 02:33 17920 c:\windows\system32\mmfutil.dll
                            - 2004-08-18 14:27 . 2004-08-05 12:00 17920 c:\windows\system32\mmfutil.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 61440 c:\windows\system32\mmcshext.dll
                            + 2008-04-14 02:34 . 2008-04-14 02:34 33792 c:\windows\system32\mmcperf.exe
                            + 2004-08-18 14:10 . 2008-04-14 02:33 29696 c:\windows\system32\mimefilt.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 60928 c:\windows\system32\miglibnt.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 60928 c:\windows\system32\miglibnt.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 18944 c:\windows\system32\midimap.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 18944 c:\windows\system32\midimap.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 14848 c:\windows\system32\mgmtapi.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 14848 c:\windows\system32\mgmtapi.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 22528 c:\windows\system32\mfcsubs.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 22528 c:\windows\system32\mfcsubs.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 40960 c:\windows\system32\mf3216.dll
                            + 2008-04-14 02:33 . 2008-04-14 02:33 86016 c:\windows\system32\mdmxsdk.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 23552 c:\windows\system32\mciwave.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 23552 c:\windows\system32\mciwave.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 23040 c:\windows\system32\mciseq.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 23040 c:\windows\system32\mciseq.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 35328 c:\windows\system32\mciqtz32.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 35328 c:\windows\system32\mciqtz32.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 85504 c:\windows\system32\mciavi32.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 85504 c:\windows\system32\mciavi32.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 14336 c:\windows\system32\mcastmib.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:34 57344 c:\windows\system32\makecab.exe
                            - 2004-08-18 14:10 . 2006-10-04 13:32 73216 c:\windows\system32\magnify.exe
                            + 2004-08-18 14:10 . 2008-04-14 02:34 73216 c:\windows\system32\magnify.exe
                            + 2004-08-18 14:10 . 2008-04-14 02:34 13312 c:\windows\system32\lsass.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 13312 c:\windows\system32\lsass.exe
                            + 2004-08-18 14:10 . 2008-04-14 02:33 10240 c:\windows\system32\lprhelp.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 10240 c:\windows\system32\lprhelp.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 22016 c:\windows\system32\lpk.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 22016 c:\windows\system32\lpk.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 61952 c:\windows\system32\logman.exe
                            + 2004-08-18 14:10 . 2008-04-14 02:34 61952 c:\windows\system32\logman.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 75264 c:\windows\system32\locator.exe
                            + 2004-08-18 14:10 . 2008-04-14 02:34 75264 c:\windows\system32\locator.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 11776 c:\windows\system32\localui.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 11776 c:\windows\system32\localui.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 13824 c:\windows\system32\lmhsvc.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 13824 c:\windows\system32\lmhsvc.dll
                            - 2004-08-18 14:10 . 2005-09-01 01:43 19968 c:\windows\system32\linkinfo.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 19968 c:\windows\system32\linkinfo.dll
                            + 2004-08-18 14:27 . 2008-04-14 02:33 58880 c:\windows\system32\licwmi.dll
                            - 2004-08-18 14:27 . 2004-08-05 12:00 58880 c:\windows\system32\licwmi.dll
                            + 2008-04-14 02:33 . 2008-04-14 02:33 37376 c:\windows\system32\l2gpstore.dll
                            + 2008-04-14 02:33 . 2008-04-14 02:33 61440 c:\windows\system32\kmsvc.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 27648 c:\windows\system32\jgpl400.dll
                            + 2004-08-03 22:54 . 2008-04-14 02:33 47616 c:\windows\system32\iyuv_32.dll
                            - 2004-08-03 22:54 . 2004-08-05 12:00 47616 c:\windows\system32\iyuv_32.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 54784 c:\windows\system32\ixsso.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 54784 c:\windows\system32\ixsso.dll
                            - 2004-08-18 14:29 . 2004-08-05 12:00 32768 c:\windows\system32\isrdbg32.dll
                            + 2004-08-18 14:29 . 2008-04-14 02:33 32768 c:\windows\system32\isrdbg32.dll
                            - 2004-08-18 14:29 . 2004-08-05 12:00 86016 c:\windows\system32\isign32.dll
                            + 2004-08-18 14:29 . 2008-04-14 02:33 86016 c:\windows\system32\isign32.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 22016 c:\windows\system32\ipxwan.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:34 24576 c:\windows\system32\ipxroute.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 24576 c:\windows\system32\ipxroute.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 59904 c:\windows\system32\ipv6mon.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 59904 c:\windows\system32\ipv6mon.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:34 53760 c:\windows\system32\ipv6.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 53760 c:\windows\system32\ipv6.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 95744 c:\windows\system32\iphlpapi.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 95744 c:\windows\system32\iphlpapi.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:34 58368 c:\windows\system32\ipconfig.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 58368 c:\windows\system32\ipconfig.exe
                            + 2004-08-18 14:29 . 2008-04-14 02:02 50688 c:\windows\system32\inetres.dll
                            - 2004-08-18 14:29 . 2004-08-05 12:00 50688 c:\windows\system32\inetres.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 16384 c:\windows\system32\inetppui.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 16384 c:\windows\system32\inetppui.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 75264 c:\windows\system32\inetpp.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 75264 c:\windows\system32\inetpp.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 32768 c:\windows\system32\inetmib1.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 36921 c:\windows\system32\imeshare.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 36921 c:\windows\system32\imeshare.dll
                            + 2004-08-18 14:23 . 2008-04-14 02:32 10240 c:\windows\system32\IME\TINTLGNT\tmigrate.dll
                            - 2004-08-18 14:23 . 2004-08-05 12:00 10240 c:\windows\system32\IME\TINTLGNT\TMIGRATE.DLL
                            - 2004-08-18 14:23 . 2004-08-05 12:00 67584 c:\windows\system32\IME\PINTLGNT\PMIGRATE.DLL
                            + 2004-08-18 14:23 . 2008-04-14 02:32 67584 c:\windows\system32\IME\PINTLGNT\pmigrate.dll
                            - 2004-08-18 14:23 . 2004-08-05 12:00 70144 c:\windows\system32\IME\PINTLGNT\PINTLPHR.EXE
                            + 2004-08-18 14:23 . 2008-04-13 16:43 70144 c:\windows\system32\IME\PINTLGNT\pintlphr.exe
                            + 2004-08-18 14:29 . 2008-04-14 02:33 81920 c:\windows\system32\ils.dll
                            - 2004-08-18 14:29 . 2004-08-05 12:00 81920 c:\windows\system32\ils.dll
                            + 2004-08-18 14:29 . 2008-04-14 02:33 65536 c:\windows\system32\icwphbk.dll
                            - 2004-08-18 14:29 . 2004-08-05 12:00 65536 c:\windows\system32\icwphbk.dll
                            + 2004-08-18 14:29 . 2008-04-14 02:33 73728 c:\windows\system32\icwdial.dll
                            - 2004-08-18 14:29 . 2004-08-05 12:00 73728 c:\windows\system32\icwdial.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 80384 c:\windows\system32\iccvid.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 80384 c:\windows\system32\iccvid.dll
                            + 2004-08-18 14:27 . 2008-04-14 02:33 11264 c:\windows\system32\icaapi.dll
                            - 2004-08-18 14:27 . 2004-08-05 12:00 11264 c:\windows\system32\icaapi.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 43008 c:\windows\system32\htui.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 43008 c:\windows\system32\htui.dll
                            - 2004-08-18 14:10 . 2004-08-05 12:00 24576 c:\windows\system32\httpapi.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 24576 c:\windows\system32\httpapi.dll
                            + 2008-04-14 02:33 . 2008-04-14 02:33 32285 c:\windows\system32\hsfcisp2.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 72704 c:\windows\system32\hlink.dll
                            + 2004-08-18 14:50 . 2008-04-14 02:33 21504 c:\windows\system32\hidserv.dll
                            - 2004-08-18 14:50 . 2004-08-03 22:54 21504 c:\windows\system32\hidserv.dll
                            + 2004-08-03 22:54 . 2008-04-14 02:33 20992 c:\windows\system32\hid.dll
                            - 2004-08-03 22:54 . 2004-08-05 12:00 20992 c:\windows\system32\hid.dll
                            - 2004-08-18 14:10 . 2005-05-27 02:08 41472 c:\windows\system32\hhsetup.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:33 41472 c:\windows\system32\hhsetup.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:34 17408 c:\windows\system32\help.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 39424 c:\windows\system32\grpconv.exe
                            + 2004-08-18 14:10 . 2008-04-14 02:34 39424 c:\windows\system32\grpconv.exe
                            - 2004-08-18 14:10 . 2004-08-05 12:00 10240 c:\windows\system32\gpkrsrc.dll
                            + 2004-08-18 14:10 . 2008-04-14 01:59 10240 c:\windows\system32\gpkrsrc.dll
                            + 2004-08-18 14:10 . 2008-04-14 02:34 61952 c:\windows\system32\getmac.exe

                            Il en faut encore ?????
                            0
                            1. phenix3675 Auteur
                              + 2004-08-18 14:10 . 2008-04-14 02:33 60416 c:\windows\system32\fwcfg.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 60416 c:\windows\system32\fwcfg.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 46080 c:\windows\system32\ftp.exe
                              + 2004-08-18 14:10 . 2008-04-14 02:34 46080 c:\windows\system32\ftp.exe
                              + 2008-04-14 02:33 . 2008-04-14 02:33 36864 c:\windows\system32\fr\mmcex.resources.dll
                              + 2008-04-14 02:33 . 2008-04-14 02:33 28672 c:\windows\system32\fr\microsoft.managementconsole.resources.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:34 29696 c:\windows\system32\format.com
                              + 2004-08-18 14:10 . 2008-04-14 02:34 21504 c:\windows\system32\fontview.exe
                              - 2004-08-18 14:10 . 2004-08-05 12:00 21504 c:\windows\system32\fontview.exe
                              + 2004-08-18 14:10 . 2008-04-14 02:33 80896 c:\windows\system32\fontsub.dll
                              - 2004-08-18 14:10 . 2005-10-17 21:21 80896 c:\windows\system32\fontsub.dll
                              + 2004-08-18 14:29 . 2008-04-14 02:34 23040 c:\windows\system32\fltmc.exe
                              + 2004-08-18 14:29 . 2008-04-14 02:33 16896 c:\windows\system32\fltlib.dll
                              - 2004-08-18 14:29 . 2004-08-05 12:00 16896 c:\windows\system32\fltlib.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 88064 c:\windows\system32\fldrclnr.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 88064 c:\windows\system32\fldrclnr.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 29184 c:\windows\system32\findstr.exe
                              + 2004-08-18 14:10 . 2008-04-14 02:34 29184 c:\windows\system32\findstr.exe
                              - 2004-08-18 14:10 . 2004-08-05 12:00 21504 c:\windows\system32\feclient.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 21504 c:\windows\system32\feclient.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 76288 c:\windows\system32\fdeploy.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 76288 c:\windows\system32\fdeploy.dll
                              + 2008-04-14 02:34 . 2008-04-14 02:34 20992 c:\windows\system32\faxpatch.exe
                              + 2004-08-18 14:10 . 2008-04-14 02:33 80896 c:\windows\system32\faultrep.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 80896 c:\windows\system32\faultrep.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:34 24064 c:\windows\system32\extrac32.exe
                              + 2004-08-18 14:10 . 2008-04-14 02:34 86528 c:\windows\system32\eventtriggers.exe
                              + 2004-08-18 14:10 . 2008-04-14 02:33 56320 c:\windows\system32\eventlog.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:34 53248 c:\windows\system32\eventcreate.exe
                              - 2004-08-18 14:10 . 2004-08-05 12:00 23040 c:\windows\system32\ersvc.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 23040 c:\windows\system32\ersvc.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 20480 c:\windows\system32\encapi.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 20480 c:\windows\system32\encapi.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 27136 c:\windows\system32\efsadu.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 27136 c:\windows\system32\efsadu.dll
                              + 2008-04-14 02:33 . 2008-04-14 02:33 33792 c:\windows\system32\eapsvc.dll
                              + 2008-04-14 02:33 . 2008-04-14 02:33 59392 c:\windows\system32\eapqec.dll
                              + 2008-04-14 02:33 . 2008-04-14 02:33 40960 c:\windows\system32\eappprxy.dll
                              + 2008-04-14 02:33 . 2008-04-14 02:33 94720 c:\windows\system32\eappgnui.dll
                              + 2008-04-14 02:33 . 2008-04-14 02:33 30720 c:\windows\system32\eapolqec.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 17920 c:\windows\system32\dvdupgrd.exe
                              + 2004-08-18 14:10 . 2008-04-14 02:34 17920 c:\windows\system32\dvdupgrd.exe
                              - 2004-08-18 14:10 . 2004-08-05 12:00 10752 c:\windows\system32\dumprep.exe
                              + 2004-08-18 14:10 . 2008-04-14 02:34 10752 c:\windows\system32\dumprep.exe
                              - 2004-08-18 14:10 . 2004-08-05 12:00 19456 c:\windows\system32\dswave.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 19456 c:\windows\system32\dswave.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 52736 c:\windows\system32\dssec.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 52736 c:\windows\system32\dssec.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 93696 c:\windows\system32\dskquota.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 93696 c:\windows\system32\dskquota.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 72192 c:\windows\system32\dsdmoprp.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 72192 c:\windows\system32\dsdmoprp.dll
                              - 2004-08-18 14:10 . 2004-08-05 12:00 16384 c:\windows\system32\ds32gt.dll
                              + 2004-08-18 14:10 . 2008-04-14 02:33 16384 c:\windows\system32\ds32gt.dll
                              - 2004-08-18 14:11 . 2004-08-05 12:00 14336 c:\windows\system32\drprov.dll
                              + 2004-08-18 14:11 . 2008-04-14 02:33 14336 c:\windows\system32\drprov.dll
                              + 2008-10-23 22:38 . 2008-04-13 18:46 19200 c:\windows\system32\drivers\wstcodec.sys
                              + 2008-10-23 14:01 . 2008-04-13 19:17 83072 c:\windows\system32\drivers\wdmaud.sys
                              + 2008-10-23 15:03 . 2004-08-03 20:29 25471 c:\windows\system32\drivers\watv10nt.sys
                              + 2008-10-23 15:03 . 2004-08-03 20:29 22271 c:\windows\system32\drivers\watv06nt.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:57 34560 c:\windows\system32\drivers\wanarp.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 34560 c:\windows\system32\drivers\wanarp.sys
                              + 2008-10-23 15:03 . 2004-08-03 20:29 11935 c:\windows\system32\drivers\wadv11nt.sys
                              + 2008-10-23 15:03 . 2004-08-03 20:29 11871 c:\windows\system32\drivers\wadv09nt.sys
                              + 2008-10-23 15:03 . 2004-08-03 20:29 11295 c:\windows\system32\drivers\wadv08nt.sys
                              + 2008-10-23 15:03 . 2004-08-03 20:29 11807 c:\windows\system32\drivers\wadv07nt.sys
                              + 2008-04-13 18:43 . 2008-04-13 18:43 14208 c:\windows\system32\drivers\wacompen.sys
                              + 2004-08-18 14:11 . 2008-04-14 01:56 53376 c:\windows\system32\drivers\volsnap.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 53376 c:\windows\system32\drivers\volsnap.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:44 81664 c:\windows\system32\drivers\videoprt.sys
                              + 2004-08-18 15:16 . 2008-04-13 18:36 42240 c:\windows\system32\drivers\viaagp.sys
                              - 2004-08-18 15:16 . 2004-08-03 21:07 42240 c:\windows\system32\drivers\VIAAGP.SYS
                              - 2004-08-18 14:11 . 2004-08-05 12:00 20992 c:\windows\system32\drivers\vga.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:44 20992 c:\windows\system32\drivers\vga.sys
                              + 2008-04-14 02:33 . 2008-04-14 02:33 11325 c:\windows\system32\drivers\vchnt5.dll
                              + 2008-10-23 22:21 . 2008-04-13 18:45 26368 c:\windows\system32\drivers\usbstor.sys
                              - 2008-10-23 22:23 . 2004-08-03 20:58 15104 c:\windows\system32\drivers\usbscan.sys
                              + 2008-10-23 22:23 . 2008-04-13 18:45 15104 c:\windows\system32\drivers\usbscan.sys
                              - 2008-10-23 22:21 . 2004-08-03 21:01 25856 c:\windows\system32\drivers\usbprint.sys
                              + 2008-10-23 22:21 . 2008-04-13 18:47 25856 c:\windows\system32\drivers\usbprint.sys
                              + 2004-08-03 21:08 . 2008-04-13 18:45 17152 c:\windows\system32\drivers\usbohci.sys
                              + 2004-08-03 21:08 . 2008-04-13 18:45 15872 c:\windows\system32\drivers\usbintel.sys
                              + 2004-08-03 21:08 . 2008-04-13 18:45 59520 c:\windows\system32\drivers\usbhub.sys
                              + 2008-10-23 14:00 . 2008-04-13 18:45 30208 c:\windows\system32\drivers\usbehci.sys
                              + 2004-08-18 14:49 . 2008-04-13 18:45 32128 c:\windows\system32\drivers\usbccgp.sys
                              + 2001-08-17 20:03 . 2008-04-13 18:45 25728 c:\windows\system32\drivers\usbcamd2.sys
                              + 2001-08-17 20:03 . 2008-04-13 18:45 25600 c:\windows\system32\drivers\usbcamd.sys
                              + 2008-10-23 14:01 . 2008-04-13 18:45 60032 c:\windows\system32\drivers\usbaudio.sys
                              + 2008-04-13 18:56 . 2008-04-13 18:56 12800 c:\windows\system32\drivers\usb8023x.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:56 12800 c:\windows\system32\drivers\usb8023.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:32 66048 c:\windows\system32\drivers\udfs.sys
                              + 2008-04-13 18:36 . 2008-04-13 18:36 44672 c:\windows\system32\drivers\uagp35.sys
                              + 2004-08-03 21:03 . 2008-04-13 18:56 12288 c:\windows\system32\drivers\tunmp.sys
                              - 2004-08-18 14:27 . 2004-08-03 22:55 40840 c:\windows\system32\drivers\termdd.sys
                              + 2004-08-18 14:27 . 2008-04-14 02:34 40840 c:\windows\system32\drivers\termdd.sys
                              - 2004-08-18 14:27 . 2004-08-05 12:00 21896 c:\windows\system32\drivers\tdtcp.sys
                              + 2004-08-18 14:27 . 2008-04-14 02:34 21896 c:\windows\system32\drivers\tdtcp.sys
                              - 2004-08-18 14:27 . 2004-08-05 12:00 12040 c:\windows\system32\drivers\tdpipe.sys
                              + 2004-08-18 14:27 . 2008-04-14 02:34 12040 c:\windows\system32\drivers\tdpipe.sys
                              + 2004-08-18 14:11 . 2008-04-13 19:00 19072 c:\windows\system32\drivers\tdi.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 14976 c:\windows\system32\drivers\tape.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:40 14976 c:\windows\system32\drivers\tape.sys
                              + 2008-10-23 14:01 . 2008-04-13 19:15 60800 c:\windows\system32\drivers\sysaudio.sys
                              - 2008-10-23 14:01 . 2004-08-03 21:15 60800 c:\windows\system32\drivers\sysaudio.sys
                              + 2008-10-23 14:01 . 2008-04-13 18:45 56576 c:\windows\system32\drivers\swmidi.sys
                              + 2008-10-23 22:38 . 2008-04-13 18:46 15232 c:\windows\system32\drivers\streamip.sys
                              + 2004-08-03 21:08 . 2008-04-13 18:45 49408 c:\windows\system32\drivers\stream.sys
                              + 2004-08-18 14:29 . 2008-04-14 02:10 73600 c:\windows\system32\drivers\sr.sys
                              - 2004-08-18 14:29 . 2004-08-05 12:00 73600 c:\windows\system32\drivers\sr.sys
                              + 2004-08-03 21:09 . 2008-04-13 18:46 25344 c:\windows\system32\drivers\sonydcam.sys
                              + 2008-10-23 15:03 . 2004-08-03 20:41 13240 c:\windows\system32\drivers\slwdmsup.sys
                              + 2008-10-23 15:03 . 2004-08-03 20:41 95424 c:\windows\system32\drivers\slnthal.sys
                              + 2008-10-23 22:38 . 2008-04-13 18:46 11136 c:\windows\system32\drivers\slip.sys
                              - 2008-10-23 22:38 . 2004-08-03 21:10 11136 c:\windows\system32\drivers\SLIP.sys
                              + 2004-08-18 14:24 . 2008-04-13 18:36 40960 c:\windows\system32\drivers\sisagp.sys
                              + 2004-08-03 20:59 . 2008-04-13 18:40 11392 c:\windows\system32\drivers\sfloppy.sys
                              - 2004-08-03 20:59 . 2004-08-05 12:00 11392 c:\windows\system32\drivers\sfloppy.sys
                              + 2004-08-03 20:59 . 2008-04-13 18:40 11008 c:\windows\system32\drivers\sffp_sd.sys
                              + 2008-04-13 18:40 . 2008-04-13 18:40 10240 c:\windows\system32\drivers\sffp_mmc.sys
                              + 2004-08-03 20:59 . 2008-04-13 18:40 11904 c:\windows\system32\drivers\sffdisk.sys
                              + 2004-08-03 22:41 . 2008-04-14 02:00 66048 c:\windows\system32\drivers\serial.sys
                              + 2004-08-03 20:59 . 2008-04-13 18:40 15744 c:\windows\system32\drivers\serenum.sys
                              + 2004-08-18 14:11 . 2008-04-13 16:39 20480 c:\windows\system32\drivers\secdrv.sys
                              + 2004-08-03 21:07 . 2008-04-13 18:36 79232 c:\windows\system32\drivers\sdbus.sys
                              + 2004-08-03 20:59 . 2008-04-13 18:40 96384 c:\windows\system32\drivers\scsiport.sys
                              + 2008-04-13 18:56 . 2008-04-13 18:56 30592 c:\windows\system32\drivers\rndismpx.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:56 30592 c:\windows\system32\drivers\rndismp.sys
                              + 2008-04-13 18:46 . 2008-04-13 18:46 59136 c:\windows\system32\drivers\rfcomm.sys
                              + 2004-08-18 14:25 . 2008-04-14 01:57 58752 c:\windows\system32\drivers\redbook.sys
                              + 2008-10-23 15:03 . 2004-08-03 20:41 13776 c:\windows\system32\drivers\recagent.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 48384 c:\windows\system32\drivers\raspptp.sys
                              + 2004-08-18 14:11 . 2008-04-13 19:19 48384 c:\windows\system32\drivers\raspptp.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:57 41472 c:\windows\system32\drivers\raspppoe.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 41472 c:\windows\system32\drivers\raspppoe.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 51328 c:\windows\system32\drivers\rasl2tp.sys
                              + 2004-08-18 14:11 . 2008-04-13 19:19 51328 c:\windows\system32\drivers\rasl2tp.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 69120 c:\windows\system32\drivers\psched.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:56 69120 c:\windows\system32\drivers\psched.sys
                              + 2004-08-03 22:38 . 2008-04-14 01:55 40064 c:\windows\system32\drivers\processr.sys
                              + 2004-08-03 20:59 . 2008-04-13 18:40 24960 c:\windows\system32\drivers\pciidex.sys
                              - 2004-08-03 22:37 . 2004-08-03 22:37 68608 c:\windows\system32\drivers\pci.sys
                              + 2004-08-03 22:37 . 2008-04-14 02:09 68608 c:\windows\system32\drivers\pci.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:40 19712 c:\windows\system32\drivers\partmgr.sys
                              + 2004-08-03 22:36 . 2008-04-14 02:09 80384 c:\windows\system32\drivers\parport.sys
                              - 2004-08-03 22:36 . 2004-08-05 12:00 80384 c:\windows\system32\drivers\parport.sys
                              + 2004-08-03 22:36 . 2008-04-14 02:09 46848 c:\windows\system32\drivers\p3.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:56 88320 c:\windows\system32\drivers\nwlnkipx.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 30848 c:\windows\system32\drivers\npfs.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:32 30848 c:\windows\system32\drivers\npfs.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 40320 c:\windows\system32\drivers\nmnt.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:53 40320 c:\windows\system32\drivers\nmnt.sys
                              - 2004-08-03 20:58 . 2004-08-05 12:00 61824 c:\windows\system32\drivers\nic1394.sys
                              + 2004-08-03 20:58 . 2008-04-13 18:51 61824 c:\windows\system32\drivers\nic1394.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:56 34688 c:\windows\system32\drivers\netbios.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:57 40576 c:\windows\system32\drivers\ndproxy.sys
                              + 2004-08-18 14:11 . 2008-04-13 19:20 91520 c:\windows\system32\drivers\ndiswan.sys
                              + 2004-08-03 21:03 . 2008-04-13 18:55 14592 c:\windows\system32\drivers\ndisuio.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:57 10112 c:\windows\system32\drivers\ndistapi.sys
                              - 2008-10-23 22:38 . 2004-08-03 21:10 10880 c:\windows\system32\drivers\NdisIP.sys
                              + 2008-10-23 22:38 . 2008-04-13 18:46 10880 c:\windows\system32\drivers\ndisip.sys
                              + 2008-10-23 22:38 . 2008-04-13 18:46 85248 c:\windows\system32\drivers\nabtsfec.sys
                              + 2008-04-13 18:43 . 2008-04-13 18:43 12672 c:\windows\system32\drivers\mutohpen.sys
                              - 2004-08-03 21:07 . 2004-08-03 21:07 15488 c:\windows\system32\drivers\mssmbios.sys
                              + 2004-08-03 21:07 . 2008-04-13 18:36 15488 c:\windows\system32\drivers\mssmbios.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 35072 c:\windows\system32\drivers\msgpc.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:56 35072 c:\windows\system32\drivers\msgpc.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:32 19072 c:\windows\system32\drivers\msfs.sys
                              - 2004-08-18 14:11 . 2004-08-05 12:00 19072 c:\windows\system32\drivers\msfs.sys
                              + 2004-08-18 14:11 . 2008-04-13 18:39 92544 c:\windows\system32\drivers\mqac.sys
                              + 2004-08-18 14:10 . 2008-04-13 18:39 42368 c:\windows\system32\drivers\mountmgr.sys
                              + 2004-08-03 22:37 . 2008-04-14 01:53 23680 c:\windows\system32\drivers\mouclass.sys
                              - 2004-08-03 22:37 . 2004-08-03 22:37 23680 c:\windows\system32\drivers\mouclass.sys
                              + 2004-08-03 22:37 . 2008-04-14 01:53 30336 c:\windows\system32\drivers\modem.sys
                              - 2004-08-03 22:37 . 2004-08-05 12:00 30336 c:\windows\system32\drivers\modem.sys
                              + 2004-08-03 21:07 . 2008-04-13 18:36 63744 c:\windows\system32\drivers\mf.sys
                              - 2004-08-03 21:07 . 2004-08-05 12:00 63744 c:\windows\system32\drivers\mf.sys
                              + 2008-10-23 15:03 . 2004-08-03 20:41 11868 c:\windows\system32\drivers\mdmxsdk.sys
                              + 2004-08-18 14:10 . 2008-04-13 18:31 92288 c:\windows\system32\drivers\ksecdd.sys
                              + 2004-08-18 14:50 . 2008-04-14 02:05 14720 c:\windows\system32\drivers\kbdhid.sys
                              - 2004-08-03 22:45 . 2004-08-03 22:45 25216 c:\windows\system32\drivers\kbdclass.sys
                              + 2004-08-03 22:45 . 2008-04-14 02:05 25216 c:\windows\system32\drivers\kbdclass.sys
                              + 2001-08-23 14:58 . 2008-04-14 02:04 37632 c:\windows\system32\drivers\isapnp.sys
                              - 2004-08-18 14:22 . 2004-08-05 12:00 11264 c:\windows\system32\drivers\irenum.sys
                              + 2004-08-18 14:22 . 2008-04-13 18:54 11264 c:\windows\system32\drivers\irenum.sys
                              + 2008-04-13 18:45 . 2008-04-13 18:45 46592 c:\windows\system32\drivers\irbus.sys
                              + 2004-08-18 14:10 . 2008-04-13 19:19 75264 c:\windows\system32\drivers\ipsec.sys
                              + 2004-08-18 14:10 . 2008-04-13 18:57 20864 c:\windows\system32\drivers\ipinip.sys
                              + 2004-08-18 14:10 . 2008-04-13 18:53 36608 c:\windows\system32\drivers\ip6fw.sys
                              + 2004-08-03 22:43 . 2008-04-14 02:03 40576 c:\windows\system32\drivers\intelppm.sys
                              + 2004-08-03 21:00 . 2008-04-13 18:40 42112 c:\windows\system32\drivers\imapi.sys
                              + 2004-08-03 22:41 . 2008-04-14 02:00 54144 c:\windows\system32\drivers\i8042prt.sys
                              + 2004-08-18 15:26 . 2008-04-13 18:41 18560 c:\windows\system32\drivers\i2omp.sys
                              - 2004-08-18 15:26 . 2004-08-03 21:00 18560 c:\windows\system32\drivers\i2omp.sys
                              + 2004-08-18 14:49 . 2008-04-13 18:45 10368 c:\windows\system32\drivers\hidusb.sys
                              + 2004-08-03 21:08 . 2008-04-13 18:45 24960 c:\windows\system32\drivers\hidparse.sys
                              - 2004-08-03 21:08 . 2004-08-05 12:00 24960 c:\windows\system32\drivers\hidparse.sys
                              + 2008-04-13 18:45 . 2008-04-13 18:45 19200 c:\windows\system32\drivers\hidir.sys
                              + 2004-08-03 21:08 . 2008-04-13 18:45 36864 c:\windows\system32\drivers\hidclass.sys
                              + 2008-04-14 01:59 . 2008-04-14 01:59 25856 c:\windows\system32\drivers\hidbth.sys
                              + 2008-11-17 12:26 . 2008-04-13 18:45 59136 c:\windows\system32\drivers\gckernel.sys
                              - 2008-11-17 12:26 . 2004-08-03 22:08 59136 c:\windows\system32\drivers\GcKernel.sys
                              + 2008-04-13 18:36 . 2008-04-13 18:36 46464 c:\windows\system32\drivers\gagp30kx.sys
                              - 2004-08-03 20:59 . 2004-08-05 12:00 20480 c:\windows\system32\drivers\flpydisk.sys
                              + 2004-08-03 20:59 . 2008-04-13 18:40 20480 c:\windows\system32\drivers\flpydisk.sys
                              + 2004-08-18 14:10 . 2008-04-14 01:57 44672 c:\windows\system32\drivers\fips.sys
                              - 2004-08-03 20:59 . 2004-08-05 12:00 27392 c:\windows\system32\drivers\fdc.sys
                              + 2004-08-03 20:59 . 2008-04-13 18:40 27392 c:\windows\system32\drivers\fdc.sys
                              + 2004-08-03 21:00 . 2008-04-13 18:38 71168 c:\windows\system32\drivers\dxg.sys
                              + 2008-10-23 14:01 . 2008-04-13 18:45 60160 c:\windows\system32\drivers\drmk.sys
                              - 2008-10-23 14:01 . 2004-08-03 21:07 52864 c:\windows\system32\drivers\DMusic.sys
                              + 2008-10-23 14:01 . 2008-04-13 18:45 52864 c:\windows\system32\drivers\dmusic.sys
                              - 2004-08-18 14:10 . 2004-08-05 12:00 14208 c:\windows\system32\drivers\diskdump.sys
                              + 2004-08-18 14:10 . 2008-04-13 18:40 14208 c:\windows\system32\drivers\diskdump.sys
                              - 2004-08-03 20:59 . 2004-08-05 12:00 36352 c:\windows\system32\drivers\disk.sys
                              + 2004-08-03 20:59 . 2008-04-13 18:40 36352 c:\windows\system32\drivers\disk.sys
                              + 2004-08-03 22:44 . 2008-04-14 02:02 40960 c:\windows\system32\drivers\crusoe.sys
                              + 2004-08-18 14:10 . 2008-04-13 19:16 49536 c:\windows\system32\drivers\classpnp.sys
                              + 2008-04-14 02:33 . 2008-04-14 02:33 15423 c:\windows\system32\drivers\ch7xxnt5.dll
                              + 2004-08-03 20:59 . 2008-04-13 18:40 62976 c:\windows\system32\drivers\cdrom.sys
                              + 2004-08-18 14:10 . 2008-04-13 19:14 63744 c:\windows\system32\drivers\cdfs.sys
                              - 2004-08-18 14:10 . 2004-08-05 12:00 63744 c:\windows\system32\drivers\cdfs.sys
                              - 2008-10-23 22:38 . 2004-08-03 21:10 17024 c:\windows\system32\drivers\CCDECODE.sys
                              + 2008-10-23 22:38 . 2008-04-13 18:46 17024 c:\windows\system32\drivers\ccdecode.sys
                              + 2008-04-13 18:46 . 2008-04-13 18:46 18944 c:\windows\system32\drivers\bthusb.sys
                              + 2008-04-13 18:46 . 2008-04-13 18:46 36480 c:\windows\system32\drivers\bthprint.sys
                              + 2008-04-13 18:46 . 2008-04-13 18:46 37888 c:\windows\system32\drivers\bthmodem.sys
                              + 2008-04-13 18:46 . 2008-04-13 18:46 17024 c:\windows\system32\drivers\bthenum.sys
                              - 2004-08-18 14:10 . 2004-08-05 12:00 71552 c:\windows\system32\drivers\bridge.sys
                              + 2004-08-18 14:10 . 2008-04-13 18:53 71552 c:\windows\system32\drivers\bridge.sys
                              + 2008-04-14 02:33 . 2008-04-14 02:33 17279 c:\windows\system32\drivers\atv10nt5.dll
                              + 2008-04-14 02:33 . 2008-04-14 02:33 14143 c:\windows\system32\drivers\atv06nt5.dll
                              + 2008-04-14 02:33 . 2008-04-14 02:33 25471 c:\windows\system32\drivers\atv04nt5.dll
                              + 2008-04-14 02:33 . 2008-04-14 02:33 11359 c:\windows\system32\drivers\atv02nt5.dll
                              + 2008-04-14 02:33 . 2008-04-14 02:33 21183 c:\windows\system32\drivers\atv01nt5.dll
                              + 2004-08-18 14:10 . 2008-04-13 18:51 55808 c:\windows\system32\drivers\atmlane.sys
                              + 2004-08-18 14:10 . 2008-04-13 18:51 59904 c:\windows\system32\drivers\atmarpc.sys
                              - 2004-08-18 14:10 . 2004-08-05 12:00 59904 c:\windows\system32\drivers\atmarpc.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 63488 c:\windows\system32\drivers\atinxsxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 31744 c:\windows\system32\drivers\atinxbxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 73216 c:\windows\system32\drivers\atintuxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 13824 c:\windows\system32\drivers\atinttxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 28672 c:\windows\system32\drivers\atinsnxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 52224 c:\windows\system32\drivers\atinraxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 14336 c:\windows\system32\drivers\atinpdxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 13824 c:\windows\system32\drivers\atinmdxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 57856 c:\windows\system32\drivers\atinbtxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 34735 c:\windows\system32\drivers\ati1xsxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 29455 c:\windows\system32\drivers\ati1xbxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 36463 c:\windows\system32\drivers\ati1tuxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 21343 c:\windows\system32\drivers\ati1ttxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 26367 c:\windows\system32\drivers\ati1snxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 63663 c:\windows\system32\drivers\ati1rvxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 30671 c:\windows\system32\drivers\ati1raxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 12047 c:\windows\system32\drivers\ati1pdxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 11615 c:\windows\system32\drivers\ati1mdxx.sys
                              + 2008-10-23 15:02 . 2004-08-03 20:29 56623 c:\windows\system32\drivers\ati1btxx.sys
                              + 2004-08-03 20:59 . 2008-04-13 18:40 96512 c:\windows\system32\drivers\atapi.sys
                              - 2004-08-18 14:10 . 2004-08-05 12:00 14336 c:\windows\system32\drivers\asyncmac.sys
                              + 2004-08-18 14:10 . 2008-04-13 18:57 14336 c:\windows\system32\drivers\asyncmac.sys
                              - 2004-08-03 20:58 . 2004-08-05 12:00 60800 c:\windows\system32\drivers\arp1394.sys
                              + 2004-08-03 20:58 . 2008-04-13 18:51 60800 c:\windows\system32\drivers\arp1394.sys
                              + 2004-08-03 22:37 . 2008-04-14 01:54 41856 c:\windows\system32\drivers\amdk7.sys
                              + 2004-08-03 22:37 . 2008-04-14 01:54 41472 c:\windows\system32\drivers\amdk6.sys
                              - 2004-08-18 15:04 . 2004-08-03 21:07 43008 c:\windows\system32\drivers\AMDAGP.SYS
                              + 2004-08-18 15:04 . 2008-04-13 18:36 43008 c:\windows\system32\drivers\amdagp.sys
                              - 2004-08-18 15:04 . 2004-08-03 21:07 42752 c:\windows\system32\drivers\ALIM1541.SYS
                              + 2004-08-18 15:04 . 2008-04-13 18:36 42752 c:\windows\system32\drivers\alim1541.sys
                              + 2004-08-18 15:13 . 2008-04-13 18:36 44928 c:\windows\system32\drivers\agpcpq.sys
                              - 2004-08-18 15:13 . 2004-08-03 21:07 44928 c:\windows\system32\drivers\AGPCPQ.SYS
                              + 2004-08-18 15:07 . 2008-04-13 18:36 42368 c:\windows\system32\drivers\agp440.sys
                              - 2004-08-18 15:07 . 2004-08-03 21:07 42368 c:\windows\system32\drivers\AGP440.SYS
                              + 2004-08-18 14:10 . 2008-04-14 02:34 65536 c:\windows\system32\driverquery.exe
                              0
                              1. phenix3675 Auteur
                                + 2004-08-18 14:10 . 2008-04-14 02:33 57344 c:\windows\system32\dpwsockx.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 83456 c:\windows\system32\dpvsetup.exe
                                + 2004-08-18 14:10 . 2008-04-14 02:34 83456 c:\windows\system32\dpvsetup.exe
                                - 2004-08-18 14:10 . 2004-08-05 12:00 21504 c:\windows\system32\dpvacm.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 21504 c:\windows\system32\dpvacm.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 18432 c:\windows\system32\dpnsvr.exe
                                + 2004-08-18 14:10 . 2008-04-14 02:34 18432 c:\windows\system32\dpnsvr.exe
                                + 2004-08-18 14:10 . 2008-04-14 02:33 60928 c:\windows\system32\dpnhupnp.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 60928 c:\windows\system32\dpnhupnp.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 35328 c:\windows\system32\dpnhpast.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 35328 c:\windows\system32\dpnhpast.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 24064 c:\windows\system32\dpmodemx.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 24064 c:\windows\system32\dpmodemx.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:34 29696 c:\windows\system32\dplaysvr.exe
                                + 2008-04-14 02:33 . 2008-04-14 02:33 56832 c:\windows\system32\dot3msm.dll
                                + 2008-04-14 02:33 . 2008-04-14 02:33 39936 c:\windows\system32\dot3gpclnt.dll
                                + 2008-04-14 02:33 . 2008-04-14 02:33 60928 c:\windows\system32\dot3cfg.dll
                                + 2008-04-14 02:33 . 2008-04-14 02:33 26112 c:\windows\system32\dot3api.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 48640 c:\windows\system32\docprop2.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 48640 c:\windows\system32\docprop2.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 45568 c:\windows\system32\dnsrslvr.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 45568 c:\windows\system32\dnsrslvr.dll
                                - 2004-08-03 22:54 . 2004-08-05 12:00 58880 c:\windows\system32\dmutil.dll
                                + 2004-08-03 22:54 . 2008-04-14 02:33 58880 c:\windows\system32\dmutil.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 24576 c:\windows\system32\dmserver.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 24576 c:\windows\system32\dmserver.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 82432 c:\windows\system32\dmscript.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 82432 c:\windows\system32\dmscript.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 15872 c:\windows\system32\dmremote.exe
                                + 2004-08-18 14:10 . 2008-04-14 02:34 15872 c:\windows\system32\dmremote.exe
                                + 2004-08-18 14:10 . 2008-04-14 02:33 35840 c:\windows\system32\dmloader.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 35840 c:\windows\system32\dmloader.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 61440 c:\windows\system32\dmcompos.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 61440 c:\windows\system32\dmcompos.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 28672 c:\windows\system32\dmband.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 28672 c:\windows\system32\dmband.dll
                                + 2004-08-18 14:27 . 2004-08-05 12:00 13894 c:\windows\system32\dllcache\zonelibm.dll
                                + 2004-08-18 14:27 . 2004-08-05 12:00 29760 c:\windows\system32\dllcache\znetm.dll
                                + 2004-08-18 14:27 . 2004-08-05 12:00 41029 c:\windows\system32\dllcache\zcorem.dll
                                + 2004-08-18 14:27 . 2004-08-05 12:00 36937 c:\windows\system32\dllcache\zclientm.exe
                                + 2004-08-18 14:23 . 2008-04-14 02:32 86073 c:\windows\system32\dllcache\voicesub.dll
                                - 2004-08-18 14:23 . 2004-08-05 12:00 86073 c:\windows\system32\dllcache\voicesub.dll
                                + 2004-08-18 14:27 . 2004-08-05 12:00 32339 c:\windows\system32\dllcache\uniansi.dll
                                - 2004-08-18 14:23 . 2004-08-05 12:00 10240 c:\windows\system32\dllcache\tmigrate.dll
                                + 2004-08-18 14:23 . 2008-04-14 02:32 10240 c:\windows\system32\dllcache\tmigrate.dll
                                + 2004-08-18 14:27 . 2004-08-05 12:00 66113 c:\windows\system32\dllcache\shvl.dll
                                + 2004-08-18 14:27 . 2004-08-05 12:00 48706 c:\windows\system32\dllcache\rvse.dll
                                - 2004-08-18 14:23 . 2004-08-05 12:00 67584 c:\windows\system32\dllcache\pmigrate.dll
                                + 2004-08-18 14:23 . 2008-04-14 02:32 67584 c:\windows\system32\dllcache\pmigrate.dll
                                + 2004-08-18 14:23 . 2008-04-13 16:43 70144 c:\windows\system32\dllcache\pintlphr.exe
                                - 2004-08-18 14:23 . 2004-08-05 12:00 70144 c:\windows\system32\dllcache\pintlphr.exe
                                - 2004-08-18 14:23 . 2004-08-05 12:00 53760 c:\windows\system32\dllcache\pintlcsd.dll
                                + 2004-08-18 14:23 . 2008-04-14 02:32 53760 c:\windows\system32\dllcache\pintlcsd.dll
                                - 2004-08-18 14:23 . 2004-08-05 12:00 15360 c:\windows\system32\dllcache\padrs804.dll
                                + 2004-08-18 14:23 . 2008-04-14 02:32 15360 c:\windows\system32\dllcache\padrs804.dll
                                - 2004-08-18 14:23 . 2004-08-05 12:00 15872 c:\windows\system32\dllcache\padrs404.dll
                                + 2004-08-18 14:23 . 2008-04-14 02:32 15872 c:\windows\system32\dllcache\padrs404.dll
                                + 2008-06-12 14:22 . 2008-06-12 14:22 91648 c:\windows\system32\dllcache\mtxoci.dll
                                - 2008-06-12 14:18 . 2008-06-12 14:18 91648 c:\windows\system32\dllcache\mtxoci.dll
                                + 2008-06-12 14:22 . 2008-06-12 14:22 66560 c:\windows\system32\dllcache\mtxclu.dll
                                - 2008-06-12 14:18 . 2008-06-12 14:18 66560 c:\windows\system32\dllcache\mtxclu.dll
                                + 2008-04-14 02:04 . 2008-04-14 02:04 93184 c:\windows\system32\dllcache\msxml6r.dll
                                + 2008-06-12 14:22 . 2008-06-12 14:22 58880 c:\windows\system32\dllcache\msdtclog.dll
                                - 2008-06-12 14:18 . 2008-06-12 14:18 58880 c:\windows\system32\dllcache\msdtclog.dll
                                - 2008-06-24 16:23 . 2008-06-24 16:23 74240 c:\windows\system32\dllcache\mscms.dll
                                + 2008-06-24 16:44 . 2008-06-24 16:44 74240 c:\windows\system32\dllcache\mscms.dll
                                - 2004-08-18 14:23 . 2004-08-05 12:00 81976 c:\windows\system32\dllcache\imjpdct.dll
                                + 2004-08-18 14:23 . 2008-04-14 02:31 81976 c:\windows\system32\dllcache\imjpdct.dll
                                + 2004-08-18 14:23 . 2008-04-14 02:31 86016 c:\windows\system32\dllcache\imekrmbx.dll
                                - 2004-08-18 14:23 . 2004-08-05 12:00 86016 c:\windows\system32\dllcache\imekrmbx.dll
                                + 2004-08-18 14:27 . 2004-08-05 12:00 57409 c:\windows\system32\dllcache\hrtz.dll
                                - 2004-08-18 14:23 . 2004-08-05 12:00 56320 c:\windows\system32\dllcache\chtskdic.dll
                                + 2004-08-18 14:23 . 2008-04-14 02:31 56320 c:\windows\system32\dllcache\chtskdic.dll
                                + 2004-08-18 14:23 . 2008-04-14 02:31 97792 c:\windows\system32\dllcache\chtmbx.dll
                                - 2004-08-18 14:23 . 2004-08-05 12:00 97792 c:\windows\system32\dllcache\chtmbx.dll
                                + 2004-08-18 14:27 . 2004-08-05 12:00 40515 c:\windows\system32\dllcache\chkr.dll
                                + 2004-08-18 14:27 . 2004-08-05 12:00 82501 c:\windows\system32\dllcache\bckg.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 32768 c:\windows\system32\dispex.dll
                                + 2008-04-14 02:33 . 2008-04-14 02:33 39936 c:\windows\system32\dimsroam.dll
                                + 2008-04-14 02:33 . 2008-04-14 02:33 19456 c:\windows\system32\dimsntfy.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 68608 c:\windows\system32\digest.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 68608 c:\windows\system32\digest.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:34 87040 c:\windows\system32\diantz.exe
                                + 2008-04-14 02:33 . 2008-04-14 02:33 49152 c:\windows\system32\dhcpqec.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 28672 c:\windows\system32\dfsshlex.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 28672 c:\windows\system32\dfsshlex.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 39936 c:\windows\system32\dfrgsnap.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 82944 c:\windows\system32\dfrgfat.exe
                                + 2004-08-18 14:10 . 2008-04-14 02:33 59904 c:\windows\system32\devenum.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 59904 c:\windows\system32\devenum.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 25088 c:\windows\system32\defrag.exe
                                + 2004-08-18 14:10 . 2008-04-14 02:33 25088 c:\windows\system32\defrag.exe
                                - 2004-08-18 14:10 . 2004-08-05 12:00 27136 c:\windows\system32\ddrawex.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 27136 c:\windows\system32\ddrawex.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 31744 c:\windows\system32\ddeshare.exe
                                - 2004-08-18 14:10 . 2004-08-05 12:00 31744 c:\windows\system32\ddeshare.exe
                                - 2004-08-18 14:10 . 2004-08-05 12:00 28672 c:\windows\system32\dbnmpntw.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 28672 c:\windows\system32\dbnmpntw.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 24576 c:\windows\system32\dbmsrpcn.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 24576 c:\windows\system32\dbmsrpcn.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 25600 c:\windows\system32\davclnt.dll
                                + 2004-08-18 14:10 . 2008-04-14 02:33 55296 c:\windows\system32\dataclen.dll
                                - 2004-08-18 14:10 . 2004-08-05 12:00 55296 c:\windows\system32\dataclen.dll
                                0
                                1. phenix3675 Auteur
                                  + 2004-08-18 14:11 . 2008-04-14 02:33 15360 c:\windows\system32\ctfmon.exe
                                  - 2004-08-18 14:11 . 2004-08-05 12:00 15360 c:\windows\system32\ctfmon.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 32256 c:\windows\system32\csrsrv.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 62464 c:\windows\system32\cryptsvc.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 64512 c:\windows\system32\cryptnet.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 54784 c:\windows\system32\cryptext.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 54784 c:\windows\system32\cryptext.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 33280 c:\windows\system32\cryptdll.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 33280 c:\windows\system32\cryptdll.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 75776 c:\windows\system32\cryptdlg.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 75776 c:\windows\system32\cryptdlg.dll
                                  + 2008-04-14 02:33 . 2008-04-14 02:33 12800 c:\windows\system32\credssp.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 35328 c:\windows\system32\corpol.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 35328 c:\windows\system32\corpol.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 27648 c:\windows\system32\conime.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 27648 c:\windows\system32\conime.exe
                                  + 2009-04-27 05:46 . 2009-04-27 05:46 32768 c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012009042720090428\index.dat
                                  - 2008-10-23 14:26 . 2009-04-26 19:00 32768 c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
                                  + 2008-10-23 14:26 . 2009-04-27 05:46 32768 c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
                                  - 2008-10-23 14:26 . 2009-04-26 19:00 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
                                  + 2008-10-23 14:26 . 2009-04-27 05:46 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
                                  - 2004-08-18 14:27 . 2005-07-26 04:39 97792 c:\windows\system32\comrepl.dll
                                  + 2004-08-18 14:27 . 2008-04-14 02:33 97792 c:\windows\system32\comrepl.dll
                                  + 2004-08-18 14:27 . 2008-04-14 02:33 28160 c:\windows\system32\comaddin.dll
                                  + 2004-08-18 14:27 . 2008-04-14 02:33 60416 c:\windows\system32\colbact.dll
                                  - 2004-08-18 14:27 . 2005-07-26 04:29 60416 c:\windows\system32\colbact.dll
                                  - 2004-08-03 22:54 . 2004-08-05 12:00 50688 c:\windows\system32\cnbjmon.dll
                                  + 2004-08-03 22:54 . 2008-04-14 02:33 50688 c:\windows\system32\cnbjmon.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 40960 c:\windows\system32\cmutil.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 40960 c:\windows\system32\cmutil.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 65536 c:\windows\system32\cmstp.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 65536 c:\windows\system32\cmstp.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 13312 c:\windows\system32\cmsetacl.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 39936 c:\windows\system32\cmmon32.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 25600 c:\windows\system32\cmdl32.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 15872 c:\windows\system32\cmcfg32.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 15872 c:\windows\system32\cmcfg32.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 58368 c:\windows\system32\clusapi.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 33280 c:\windows\system32\clipsrv.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 33280 c:\windows\system32\clipsrv.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 20480 c:\windows\system32\cliconfg.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 20480 c:\windows\system32\cliconfg.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 77824 c:\windows\system32\cliconfg.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 77824 c:\windows\system32\cliconfg.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 65536 c:\windows\system32\cleanmgr.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 65536 c:\windows\system32\cleanmgr.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 57344 c:\windows\system32\cipher.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 69120 c:\windows\system32\ciodm.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 69120 c:\windows\system32\ciodm.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 16896 c:\windows\system32\cfgmgr32.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:31 16896 c:\windows\system32\cfgmgr32.dll
                                  + 2004-08-18 14:27 . 2008-04-14 02:33 39424 c:\windows\system32\cfgbkend.dll
                                  - 2004-08-18 14:27 . 2004-08-05 12:00 39424 c:\windows\system32\cfgbkend.dll
                                  + 2004-08-18 14:27 . 2008-04-14 02:33 85504 c:\windows\system32\catsrvps.dll
                                  - 2004-08-18 14:27 . 2004-08-05 12:00 85504 c:\windows\system32\catsrvps.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 50688 c:\windows\system32\camocx.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 50688 c:\windows\system32\camocx.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 20992 c:\windows\system32\cacls.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 85504 c:\windows\system32\cabview.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 85504 c:\windows\system32\cabview.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 60416 c:\windows\system32\cabinet.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 50688 c:\windows\system32\btpanui.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 50688 c:\windows\system32\btpanui.dll
                                  + 2004-08-03 22:54 . 2008-04-14 02:33 30208 c:\windows\system32\bthserv.dll
                                  - 2004-08-03 22:54 . 2004-08-05 12:00 30208 c:\windows\system32\bthserv.dll
                                  + 2004-08-03 22:54 . 2008-04-14 02:33 20992 c:\windows\system32\bthci.dll
                                  - 2004-08-03 22:54 . 2004-08-05 12:00 20992 c:\windows\system32\bthci.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 78336 c:\windows\system32\browsewm.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 78336 c:\windows\system32\browsewm.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 77824 c:\windows\system32\browser.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 70144 c:\windows\system32\browselc.dll
                                  + 2004-08-18 14:10 . 2008-04-14 01:57 70144 c:\windows\system32\browselc.dll
                                  + 2004-08-18 14:11 . 2008-04-14 02:33 71680 c:\windows\system32\blastcln.exe
                                  - 2004-08-18 14:11 . 2004-08-05 12:00 71680 c:\windows\system32\blastcln.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 17408 c:\windows\system32\bidispl.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 17408 c:\windows\system32\bidispl.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 29184 c:\windows\system32\batmeter.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 52736 c:\windows\system32\basesrv.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 52736 c:\windows\system32\basesrv.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 85504 c:\windows\system32\avifil32.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 85504 c:\windows\system32\avifil32.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 11264 c:\windows\system32\autolfn.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 11264 c:\windows\system32\autolfn.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 62464 c:\windows\system32\authz.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 14336 c:\windows\system32\auditusr.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 14336 c:\windows\system32\auditusr.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 42496 c:\windows\system32\audiosrv.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 42496 c:\windows\system32\audiosrv.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 12288 c:\windows\system32\attrib.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 30208 c:\windows\system32\atmlib.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 30208 c:\windows\system32\atmlib.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 11264 c:\windows\system32\atmadm.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 11264 c:\windows\system32\atmadm.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 58880 c:\windows\system32\atl.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 58880 c:\windows\system32\atl.dll
                                  + 2008-04-14 02:33 . 2008-04-14 02:33 32768 c:\windows\system32\ativtmxx.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 25088 c:\windows\system32\at.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 25088 c:\windows\system32\at.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 65024 c:\windows\system32\asycfilt.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 65024 c:\windows\system32\asycfilt.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 32768 c:\windows\system32\asr_pfu.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 32768 c:\windows\system32\asr_pfu.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 30720 c:\windows\system32\asr_fmt.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 30720 c:\windows\system32\asr_fmt.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 70656 c:\windows\system32\amstream.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 70656 c:\windows\system32\amstream.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 17408 c:\windows\system32\alrsvc.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 17408 c:\windows\system32\alrsvc.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 44544 c:\windows\system32\alg.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 44544 c:\windows\system32\alg.exe
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 98304 c:\windows\system32\ahui.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 98304 c:\windows\system32\ahui.exe
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 68096 c:\windows\system32\adsmsext.dll
                                  - 2004-08-18 14:10 . 2004-08-05 12:00 68096 c:\windows\system32\adsmsext.dll
                                  + 2004-08-18 14:10 . 2008-04-14 02:33 98304 c:\windows\system32\actxprxy.dll
                                  + 2004-08-18 14:29 . 2008-04-14 02:33 58434 c:\windows\srchasst\srchctls.dll
                                  - 2004-08-18 14:29 . 2004-08-05 12:00 58434 c:\windows\srchasst\srchctls.dll
                                  + 2008-04-14 02:34 . 2008-04-14 02:34 32866 c:\windows\slrundll.exe
                                  0
                                  1. phenix3675 Auteur
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 82944 c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 33792 c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 18944 c:\windows\ServicePackFiles\i386\xrxscnui.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 11776 c:\windows\ServicePackFiles\i386\xolehlp.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 50176 c:\windows\ServicePackFiles\i386\xmlprovi.dll
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 30720 c:\windows\ServicePackFiles\i386\xcopy.exe
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 91648 c:\windows\ServicePackFiles\i386\xactsrv.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 52736 c:\windows\ServicePackFiles\i386\wzcsapi.dll
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 19455 c:\windows\ServicePackFiles\i386\wvchntxx.sys
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 32256 c:\windows\ServicePackFiles\i386\wups.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 18432 c:\windows\ServicePackFiles\i386\wtsapi32.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 51200 c:\windows\ServicePackFiles\i386\wstdecod.dll
                                    + 2008-04-13 18:46 . 2008-04-13 18:46 19200 c:\windows\ServicePackFiles\i386\wstcodec.sys
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 25088 c:\windows\ServicePackFiles\i386\wsock32.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 41984 c:\windows\ServicePackFiles\i386\wsnmp32.dll
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 12063 c:\windows\ServicePackFiles\i386\wsiintxx.sys
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 19456 c:\windows\ServicePackFiles\i386\wshtcpip.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 11264 c:\windows\ServicePackFiles\i386\wshrm.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 14336 c:\windows\ServicePackFiles\i386\wship6.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 90112 c:\windows\ServicePackFiles\i386\wshext.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 36864 c:\windows\ServicePackFiles\i386\wshcon.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 80896 c:\windows\ServicePackFiles\i386\wscsvc.dll
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 13824 c:\windows\ServicePackFiles\i386\wscntfy.exe
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 19968 c:\windows\ServicePackFiles\i386\ws2help.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 82432 c:\windows\ServicePackFiles\i386\ws2_32.dll
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 11776 c:\windows\ServicePackFiles\i386\wpnpinst.exe
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 32256 c:\windows\ServicePackFiles\i386\wpabaln.exe
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 99328 c:\windows\ServicePackFiles\i386\wmiutils.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 41472 c:\windows\ServicePackFiles\i386\wmipsess.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 62464 c:\windows\ServicePackFiles\i386\wmipjobj.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 61952 c:\windows\ServicePackFiles\i386\wmipiprt.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 60928 c:\windows\ServicePackFiles\i386\wmicookr.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 88576 c:\windows\ServicePackFiles\i386\wmiaprpl.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 94208 c:\windows\ServicePackFiles\i386\wlnotify.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 69120 c:\windows\ServicePackFiles\i386\wlanapi.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 53760 c:\windows\ServicePackFiles\i386\winsta.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 17408 c:\windows\ServicePackFiles\i386\winshfhc.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 16896 c:\windows\ServicePackFiles\i386\winrnr.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 32256 c:\windows\ServicePackFiles\i386\winipsec.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 75776 c:\windows\ServicePackFiles\i386\wiascr.dll
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 66560 c:\windows\ServicePackFiles\i386\wextract.exe
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 68096 c:\windows\ServicePackFiles\i386\webclnt.dll
                                    + 2008-04-13 19:17 . 2008-04-13 19:17 83072 c:\windows\ServicePackFiles\i386\wdmaud.sys
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 23552 c:\windows\ServicePackFiles\i386\wdmaud.drv
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 49152 c:\windows\ServicePackFiles\i386\wdigest.dll
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 23615 c:\windows\ServicePackFiles\i386\wch7xxnt.sys
                                    + 2008-04-14 01:57 . 2008-04-14 01:57 32128 c:\windows\ServicePackFiles\i386\wceusbsh.sys
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 43520 c:\windows\ServicePackFiles\i386\wbemsvc.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 18944 c:\windows\ServicePackFiles\i386\wbemprox.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 44544 c:\windows\ServicePackFiles\i386\wbemperf.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 71680 c:\windows\ServicePackFiles\i386\wbemcons.dll
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 25471 c:\windows\ServicePackFiles\i386\watv10nt.sys
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 22271 c:\windows\ServicePackFiles\i386\watv06nt.sys
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 33599 c:\windows\ServicePackFiles\i386\watv04nt.sys
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 19551 c:\windows\ServicePackFiles\i386\watv02nt.sys
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 29311 c:\windows\ServicePackFiles\i386\watv01nt.sys
                                    + 2008-04-13 18:44 . 2008-04-13 18:44 17664 c:\windows\ServicePackFiles\i386\watchdog.sys
                                    + 2008-04-13 18:57 . 2008-04-13 18:57 34560 c:\windows\ServicePackFiles\i386\wanarp.sys
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 53248 c:\windows\ServicePackFiles\i386\wamreg51.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 77824 c:\windows\ServicePackFiles\i386\wam51.dll
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 11935 c:\windows\ServicePackFiles\i386\wadv11nt.sys
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 11871 c:\windows\ServicePackFiles\i386\wadv09nt.sys
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 11295 c:\windows\ServicePackFiles\i386\wadv08nt.sys
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 11807 c:\windows\ServicePackFiles\i386\wadv07nt.sys
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 11775 c:\windows\ServicePackFiles\i386\wadv05nt.sys
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 12127 c:\windows\ServicePackFiles\i386\wadv02nt.sys
                                    + 2008-10-23 15:03 . 2004-08-03 20:29 12415 c:\windows\ServicePackFiles\i386\wadv01nt.sys
                                    + 2008-04-13 18:43 . 2008-04-13 18:43 14208 c:\windows\ServicePackFiles\i386\wacompen.sys
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 30208 c:\windows\ServicePackFiles\i386\wabmig.exe
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 85504 c:\windows\ServicePackFiles\i386\wabimp.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 32768 c:\windows\ServicePackFiles\i386\wabfind.dll
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 46080 c:\windows\ServicePackFiles\i386\wab.exe
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 15872 c:\windows\ServicePackFiles\i386\w3ssl.dll
                                    + 2008-04-14 01:56 . 2008-04-14 01:56 53376 c:\windows\ServicePackFiles\i386\volsnap.sys
                                    + 2008-04-13 18:44 . 2008-04-13 18:44 81664 c:\windows\ServicePackFiles\i386\videoprt.sys
                                    + 2008-04-13 18:36 . 2008-04-13 18:36 42240 c:\windows\ServicePackFiles\i386\viaagp.sys
                                    + 2008-04-13 18:44 . 2008-04-13 18:44 20992 c:\windows\ServicePackFiles\i386\vga.sys
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 54784 c:\windows\ServicePackFiles\i386\vfwwdm32.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 18944 c:\windows\ServicePackFiles\i386\version.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 26624 c:\windows\ServicePackFiles\i386\verifier.dll
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 28672 c:\windows\ServicePackFiles\i386\verclsid.exe
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 51712 c:\windows\ServicePackFiles\i386\vdmredir.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 26112 c:\windows\ServicePackFiles\i386\vdmdbg.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 11325 c:\windows\ServicePackFiles\i386\vchnt5.dll
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 30749 c:\windows\ServicePackFiles\i386\vbajet32.dll
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 50176 c:\windows\ServicePackFiles\i386\utilman.exe
                                    + 2008-04-14 02:34 . 2008-04-14 02:34 26624 c:\windows\ServicePackFiles\i386\userinit.exe
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 77312 c:\windows\ServicePackFiles\i386\usbui.dll
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 20608 c:\windows\ServicePackFiles\i386\usbuhci.sys
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 26368 c:\windows\ServicePackFiles\i386\usbstor.sys
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 26112 c:\windows\ServicePackFiles\i386\usbser.sys
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 15104 c:\windows\ServicePackFiles\i386\usbscan.sys
                                    + 2008-04-13 18:47 . 2008-04-13 18:47 25856 c:\windows\ServicePackFiles\i386\usbprint.sys
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 17152 c:\windows\ServicePackFiles\i386\usbohci.sys
                                    + 2008-04-14 02:33 . 2008-04-14 02:33 16896 c:\windows\ServicePackFiles\i386\usbmon.dll
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 15872 c:\windows\ServicePackFiles\i386\usbintel.sys
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 59520 c:\windows\ServicePackFiles\i386\usbhub.sys
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 30208 c:\windows\ServicePackFiles\i386\usbehci.sys
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 32128 c:\windows\ServicePackFiles\i386\usbccgp.sys
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 25728 c:\windows\ServicePackFiles\i386\usbcamd2.sys
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 25600 c:\windows\ServicePackFiles\i386\usbcamd.sys
                                    + 2008-04-13 18:45 . 2008-04-13 18:45 60032 c:\windows\ServicePackFiles\i386\usbaudio.sys
                                    + 2008-04-13 18:56 . 2008-04-13 18:56 12800 c:\windows\ServicePackFiles\i386\usb8023x.sys
                                    + 2008-04-13 18:56 . 2008-04-13 18:56 12800 c:\windows\ServicePackFiles\i386\usb8023.sys
                                    0
                                    1. phenix3675 Auteur
                                      + 2008-10-23 15:03 . 2004-08-03 22:43 32384 c:\windows\ServicePackFiles\i386\usb101et.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 37888 c:\windows\ServicePackFiles\i386\url.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 18432 c:\windows\ServicePackFiles\i386\ups.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 16896 c:\windows\ServicePackFiles\i386\upnpcont.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 13824 c:\windows\ServicePackFiles\i386\uniplat.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 78848 c:\windows\ServicePackFiles\i386\unimdmat.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 36864 c:\windows\ServicePackFiles\i386\umandlg.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 26624 c:\windows\ServicePackFiles\i386\udhisapi.dll
                                      + 2008-04-13 18:32 . 2008-04-13 18:32 66048 c:\windows\ServicePackFiles\i386\udfs.sys
                                      + 2008-04-13 18:36 . 2008-04-13 18:36 44672 c:\windows\ServicePackFiles\i386\uagp35.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 60416 c:\windows\ServicePackFiles\i386\tzchange.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 57856 c:\windows\ServicePackFiles\i386\twext.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 50688 c:\windows\ServicePackFiles\i386\twain_32.dll
                                      + 2008-04-13 18:56 . 2008-04-13 18:56 12288 c:\windows\ServicePackFiles\i386\tunmp.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 16384 c:\windows\ServicePackFiles\i386\ttyui.dll
                                      + 2008-04-14 01:54 . 2008-04-14 01:54 39936 c:\windows\ServicePackFiles\i386\ttyres.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 50688 c:\windows\ServicePackFiles\i386\tspkg.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 53248 c:\windows\ServicePackFiles\i386\tsgqec.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 12168 c:\windows\ServicePackFiles\i386\tsddd.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 25600 c:\windows\ServicePackFiles\i386\tscupdc.dll
                                      + 2007-10-30 10:06 . 2007-10-30 10:06 13801 c:\windows\ServicePackFiles\i386\tscuinst.vbs
                                      + 2007-12-12 10:33 . 2007-12-12 10:33 18917 c:\windows\ServicePackFiles\i386\tscinst.vbs
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 94208 c:\windows\ServicePackFiles\i386\tscfgwmi.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 90112 c:\windows\ServicePackFiles\i386\trkwks.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 12800 c:\windows\ServicePackFiles\i386\tree.com
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 13312 c:\windows\ServicePackFiles\i386\tracert.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 82944 c:\windows\ServicePackFiles\i386\tp4mon.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 33792 c:\windows\ServicePackFiles\i386\tools.dll
                                      + 2007-12-17 12:00 . 2007-12-17 12:00 66592 c:\windows\ServicePackFiles\i386\togac.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 75264 c:\windows\ServicePackFiles\i386\tlntsvr.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 80384 c:\windows\ServicePackFiles\i386\tlntsess.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 63488 c:\windows\ServicePackFiles\i386\tlntadmn.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 40840 c:\windows\ServicePackFiles\i386\termdd.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 78336 c:\windows\ServicePackFiles\i386\telnet.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 21896 c:\windows\ServicePackFiles\i386\tdtcp.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 12040 c:\windows\ServicePackFiles\i386\tdpipe.sys
                                      + 2008-04-13 19:00 . 2008-04-13 19:00 19072 c:\windows\ServicePackFiles\i386\tdi.sys
                                      + 2008-10-23 15:03 . 2003-04-14 18:29 16384 c:\windows\ServicePackFiles\i386\tcptsat.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 32827 c:\windows\ServicePackFiles\i386\tcptest.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 47104 c:\windows\ServicePackFiles\i386\tcpmonui.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 46592 c:\windows\ServicePackFiles\i386\tcpmon.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 14848 c:\windows\ServicePackFiles\i386\tcpmib.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 79872 c:\windows\ServicePackFiles\i386\tasklist.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 78336 c:\windows\ServicePackFiles\i386\taskkill.exe
                                      + 2008-04-13 18:40 . 2008-04-13 18:40 14976 c:\windows\ServicePackFiles\i386\tape.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 34304 c:\windows\ServicePackFiles\i386\tabletoc.dll
                                      + 2007-06-27 12:59 . 2007-06-27 12:59 61440 c:\windows\ServicePackFiles\i386\system.web.regularexpressions.dll
                                      + 2007-06-27 12:59 . 2007-06-27 12:59 77824 c:\windows\ServicePackFiles\i386\system.security.dll
                                      + 2008-04-13 16:11 . 2008-04-13 16:11 48640 c:\windows\ServicePackFiles\i386\system.enterpriseservices.thunk.dll
                                      + 2007-06-27 12:58 . 2007-06-27 12:58 65536 c:\windows\ServicePackFiles\i386\system.drawing.design.dll
                                      + 2007-06-27 12:58 . 2007-06-27 12:58 86016 c:\windows\ServicePackFiles\i386\system.directoryservices.dll
                                      + 2007-06-27 12:57 . 2007-06-27 12:57 77824 c:\windows\ServicePackFiles\i386\system.configuration.install.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 74240 c:\windows\ServicePackFiles\i386\sysinfo.exe
                                      + 2008-04-13 19:15 . 2008-04-13 19:15 60800 c:\windows\ServicePackFiles\i386\sysaudio.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 57856 c:\windows\ServicePackFiles\i386\synceng.dll
                                      + 2008-04-13 18:45 . 2008-04-13 18:45 56576 c:\windows\ServicePackFiles\i386\swmidi.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 14336 c:\windows\ServicePackFiles\i386\svchost.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 46592 c:\windows\ServicePackFiles\i386\svcext51.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 65601 c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 16449 c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 75776 c:\windows\ServicePackFiles\i386\strmfilt.dll
                                      + 2008-04-13 18:46 . 2008-04-13 18:46 15232 c:\windows\ServicePackFiles\i386\streamip.sys
                                      + 2008-04-13 18:45 . 2008-04-13 18:45 49408 c:\windows\ServicePackFiles\i386\stream.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 76800 c:\windows\ServicePackFiles\i386\storprop.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 14848 c:\windows\ServicePackFiles\i386\stimon.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 68608 c:\windows\ServicePackFiles\i386\sti.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 86528 c:\windows\ServicePackFiles\i386\stdprov.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 59392 c:\windows\ServicePackFiles\i386\stclient.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 33280 c:\windows\ServicePackFiles\i386\sstub.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 14336 c:\windows\ServicePackFiles\i386\ssstars.scr
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 46592 c:\windows\ServicePackFiles\i386\sspifilt.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 18944 c:\windows\ServicePackFiles\i386\ssmyst.scr
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 47104 c:\windows\ServicePackFiles\i386\ssmypics.scr
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 20992 c:\windows\ServicePackFiles\i386\ssmarque.scr
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 45568 c:\windows\ServicePackFiles\i386\ssinc51.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 71680 c:\windows\ServicePackFiles\i386\ssdpsrv.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 34816 c:\windows\ServicePackFiles\i386\ssdpapi.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 19968 c:\windows\ServicePackFiles\i386\ssbezier.scr
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 96768 c:\windows\ServicePackFiles\i386\srvsvc.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 67584 c:\windows\ServicePackFiles\i386\srclient.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 58434 c:\windows\ServicePackFiles\i386\srchctls.dll
                                      + 2008-04-14 02:10 . 2008-04-14 02:10 73600 c:\windows\ServicePackFiles\i386\sr.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 20992 c:\windows\ServicePackFiles\i386\spupdwxp.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 57856 c:\windows\ServicePackFiles\i386\spoolsv.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 75264 c:\windows\ServicePackFiles\i386\spoolss.dll
                                      + 2008-10-23 15:03 . 2008-04-13 17:34 11264 c:\windows\ServicePackFiles\i386\spnpinst.exe
                                      + 2008-04-13 18:43 . 2008-04-13 18:43 12800 c:\windows\ServicePackFiles\i386\spiisupd.exe
                                      + 2008-04-13 16:43 . 2008-04-13 16:43 62976 c:\windows\ServicePackFiles\i386\spgrmr.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 26112 c:\windows\ServicePackFiles\i386\sort.exe
                                      + 2008-04-13 18:46 . 2008-04-13 18:46 25344 c:\windows\ServicePackFiles\i386\sonydcam.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 39936 c:\windows\ServicePackFiles\i386\snmpthrd.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 18944 c:\windows\ServicePackFiles\i386\snmpapi.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 33280 c:\windows\ServicePackFiles\i386\snmp.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 34816 c:\windows\ServicePackFiles\i386\sniffpol.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 10752 c:\windows\ServicePackFiles\i386\smtpapi.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 50688 c:\windows\ServicePackFiles\i386\smss.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 93184 c:\windows\ServicePackFiles\i386\smlogsvc.exe
                                      + 2008-04-13 18:36 . 2008-04-13 18:36 16000 c:\windows\ServicePackFiles\i386\smbbatt.sys
                                      + 2008-10-23 15:03 . 2004-08-03 20:41 13240 c:\windows\ServicePackFiles\i386\slwdmsup.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 73796 c:\windows\ServicePackFiles\i386\slserv.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 32866 c:\windows\ServicePackFiles\i386\slrundll.exe
                                      + 2008-10-23 15:03 . 2004-08-03 20:41 95424 c:\windows\ServicePackFiles\i386\slnthal.sys
                                      + 2008-04-13 18:46 . 2008-04-13 18:46 11136 c:\windows\ServicePackFiles\i386\slip.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 73832 c:\windows\ServicePackFiles\i386\slcoinst.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 98304 c:\windows\ServicePackFiles\i386\slbiop.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 25600 c:\windows\ServicePackFiles\i386\slayerxp.dll
                                      + 2008-10-23 15:03 . 2004-08-03 20:31 63547 c:\windows\ServicePackFiles\i386\sla30nd5.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 26112 c:\windows\ServicePackFiles\i386\skeys.exe
                                      + 2008-10-23 15:03 . 2004-08-03 20:31 32768 c:\windows\ServicePackFiles\i386\sisnic.sys
                                      + 2008-04-13 18:36 . 2008-04-13 18:36 40960 c:\windows\ServicePackFiles\i386\sisagp.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 71168 c:\windows\ServicePackFiles\i386\sigverif.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 13824 c:\windows\ServicePackFiles\i386\sigtab.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 20480 c:\windows\ServicePackFiles\i386\shutdown.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 16437 c:\windows\ServicePackFiles\i386\shtml.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 20536 c:\windows\ServicePackFiles\i386\shtml.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 28160 c:\windows\ServicePackFiles\i386\shscrap.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 78848 c:\windows\ServicePackFiles\i386\shrpubw.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 45056 c:\windows\ServicePackFiles\i386\shmgrate.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 65024 c:\windows\ServicePackFiles\i386\shimeng.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 68096 c:\windows\ServicePackFiles\i386\shgina.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 25088 c:\windows\ServicePackFiles\i386\shfolder.dll
                                      + 2008-04-13 18:40 . 2008-04-13 18:40 11392 c:\windows\ServicePackFiles\i386\sfloppy.sys
                                      + 2008-04-13 18:40 . 2008-04-13 18:40 11008 c:\windows\ServicePackFiles\i386\sffp_sd.sys
                                      + 2008-04-13 18:40 . 2008-04-13 18:40 10240 c:\windows\ServicePackFiles\i386\sffp_mmc.sys
                                      + 2008-04-13 18:40 . 2008-04-13 18:40 11904 c:\windows\ServicePackFiles\i386\sffdisk.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 32768 c:\windows\ServicePackFiles\i386\setupn.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 73728 c:\windows\ServicePackFiles\i386\setup50.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 23040 c:\windows\ServicePackFiles\i386\setup.exe
                                      + 2007-12-17 11:59 . 2007-12-17 11:59 66592 c:\windows\ServicePackFiles\i386\setregni.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 32768 c:\windows\ServicePackFiles\i386\sethc.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 56320 c:\windows\ServicePackFiles\i386\servdeps.dll
                                      + 2008-04-14 02:00 . 2008-04-14 02:00 66048 c:\windows\ServicePackFiles\i386\serial.sys
                                      + 2008-04-13 18:40 . 2008-04-13 18:40 15744 c:\windows\ServicePackFiles\i386\serenum.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 39424 c:\windows\ServicePackFiles\i386\sens.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 55296 c:\windows\ServicePackFiles\i386\sendmail.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 29696 c:\windows\ServicePackFiles\i386\sendcmsg.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 56320 c:\windows\ServicePackFiles\i386\secur32.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 18944 c:\windows\ServicePackFiles\i386\seclogon.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 19968 c:\windows\ServicePackFiles\i386\secedit.exe
                                      + 2008-04-13 16:39 . 2008-04-13 16:39 20480 c:\windows\ServicePackFiles\i386\secdrv.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 29184 c:\windows\ServicePackFiles\i386\sdhcinst.dll
                                      + 2008-04-13 18:36 . 2008-04-13 18:36 79232 c:\windows\ServicePackFiles\i386\sdbus.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 78848 c:\windows\ServicePackFiles\i386\sdbinst.exe
                                      + 2008-04-13 18:45 . 2008-04-13 18:45 11520 c:\windows\ServicePackFiles\i386\scsiscan.sys
                                      + 2008-04-13 18:40 . 2008-04-13 18:40 96384 c:\windows\ServicePackFiles\i386\scsiport.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 36352 c:\windows\ServicePackFiles\i386\scrcons.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 22016 c:\windows\ServicePackFiles\i386\sclgntfy.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 71168 c:\windows\ServicePackFiles\i386\scarddlg.dll
                                      + 2008-04-13 18:40 . 2008-04-13 18:40 43904 c:\windows\ServicePackFiles\i386\sbp2port.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 13824 c:\windows\ServicePackFiles\i386\savedump.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 64000 c:\windows\ServicePackFiles\i386\samlib.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 45568 c:\windows\ServicePackFiles\i386\safrslv.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 29696 c:\windows\ServicePackFiles\i386\safrdm.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 43520 c:\windows\ServicePackFiles\i386\safrcdlg.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 29696 c:\windows\ServicePackFiles\i386\rw450ext.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 28160 c:\windows\ServicePackFiles\i386\rw430ext.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 29184 c:\windows\ServicePackFiles\i386\rw330ext.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 28160 c:\windows\ServicePackFiles\i386\rw001ext.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 14336 c:\windows\ServicePackFiles\i386\runonce.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 33792 c:\windows\ServicePackFiles\i386\rundll32.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 44032 c:\windows\ServicePackFiles\i386\rtutils.dll
                                      + 2008-10-23 15:03 . 2004-08-03 20:31 20992 c:\windows\ServicePackFiles\i386\rtl8139.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 31744 c:\windows\ServicePackFiles\i386\rtipxmib.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 78336 c:\windows\ServicePackFiles\i386\rtcshare.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 92672 c:\windows\ServicePackFiles\i386\rsvpsp.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 18944 c:\windows\ServicePackFiles\i386\rsmps.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 40960 c:\windows\ServicePackFiles\i386\rshx32.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 15872 c:\windows\ServicePackFiles\i386\rsh.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 61440 c:\windows\ServicePackFiles\i386\rrcm.dll
                                      + 2008-04-14 01:58 . 2008-04-14 01:58 79360 c:\windows\ServicePackFiles\i386\rocket.sys
                                      + 2008-04-13 18:56 . 2008-04-13 18:56 30592 c:\windows\ServicePackFiles\i386\rndismpx.sys
                                      + 2008-04-13 18:56 . 2008-04-13 18:56 30592 c:\windows\ServicePackFiles\i386\rndismp.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 12288 c:\windows\ServicePackFiles\i386\riafui2.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 12288 c:\windows\ServicePackFiles\i386\riafui1.dll
                                      + 2008-04-13 18:46 . 2008-04-13 18:46 59136 c:\windows\ServicePackFiles\i386\rfcomm.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 14848 c:\windows\ServicePackFiles\i386\rexec.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 58880 c:\windows\ServicePackFiles\i386\resutils.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 61952 c:\windows\ServicePackFiles\i386\remotepg.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 12288 c:\windows\ServicePackFiles\i386\regsvr32.exe
                                      + 2007-06-27 12:57 . 2007-06-27 12:57 11264 c:\windows\ServicePackFiles\i386\regsvcs.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 59904 c:\windows\ServicePackFiles\i386\regsvc.dll
                                      + 2007-06-27 12:57 . 2007-06-27 12:57 32768 c:\windows\ServicePackFiles\i386\regcode.dll
                                      + 2007-06-27 12:57 . 2007-06-27 12:57 28672 c:\windows\ServicePackFiles\i386\regasm.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 49664 c:\windows\ServicePackFiles\i386\regapi.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 53248 c:\windows\ServicePackFiles\i386\reg.exe
                                      + 2008-04-14 01:57 . 2008-04-14 01:57 58752 c:\windows\ServicePackFiles\i386\redbook.sys
                                      + 2008-10-23 15:03 . 2004-08-03 20:41 13776 c:\windows\ServicePackFiles\i386\recagent.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 67072 c:\windows\ServicePackFiles\i386\rdshost.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 13824 c:\windows\ServicePackFiles\i386\rdsaddin.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 87176 c:\windows\ServicePackFiles\i386\rdpwsx.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 19968 c:\windows\ServicePackFiles\i386\rdpsnd.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 92424 c:\windows\ServicePackFiles\i386\rdpdd.dll
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 62976 c:\windows\ServicePackFiles\i386\rdpclip.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 23040 c:\windows\ServicePackFiles\i386\rcp.exe
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 35840 c:\windows\ServicePackFiles\i386\rcimlby.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 58368 c:\windows\ServicePackFiles\i386\rastapi.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 16384 c:\windows\ServicePackFiles\i386\rassapi.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 61952 c:\windows\ServicePackFiles\i386\rasqec.dll
                                      + 2008-04-13 19:19 . 2008-04-13 19:19 48384 c:\windows\ServicePackFiles\i386\raspptp.sys
                                      + 2008-04-13 18:57 . 2008-04-13 18:57 41472 c:\windows\ServicePackFiles\i386\raspppoe.sys
                                      + 2008-04-14 02:34 . 2008-04-14 02:34 57344 c:\windows\ServicePackFiles\i386\rasphone.exe
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 61440 c:\windows\ServicePackFiles\i386\rasman.dll
                                      + 2008-04-13 19:19 . 2008-04-13 19:19 51328 c:\windows\ServicePackFiles\i386\rasl2tp.sys
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 79872 c:\windows\ServicePackFiles\i386\raschap.dll
                                      + 2008-04-14 02:33 . 2008-04-14 02:33 88576 c:\windows\ServicePackFiles\i386\rasauto.dll
                                      0
                                      • 1
                                      • 2
                                      • 3

                                      Discussions similaires

                                      Télécharger Encarta Junior
                                      98653773

                                      3 réponses
                                      recherche d'u
                                      mimi

                                      1 réponse
                                      Telecharger encarta junior 2015 Gratuit en Francais
                                      Chairman

                                      2 réponses
                                      téléchargement de encarta version française la plus recente
                                      cybert

                                      1 réponse
                                      Artcut 2009 , comment utiliser ce logiciel ?
                                      djoled

                                      15 réponses