Infectée: trojans, virus...
dabo79
Messages postés
17
Statut
Membre
-
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité -
Lyonnais92 Messages postés 25708 Statut Contributeur sécurité -
Bonjour,
Mon antivirus à détecté des menaces, mais je n' arrive pas à les neutraliser totalement. Je suis novice en informatique, ainsi toute aide sérieuse sera fortement appréciée. Par où dois je commencer?
Mon antivirus à détecté des menaces, mais je n' arrive pas à les neutraliser totalement. Je suis novice en informatique, ainsi toute aide sérieuse sera fortement appréciée. Par où dois je commencer?
A voir également:
- Infectée: trojans, virus...
- Comment savoir si une clé usb est infectée - Guide
- Clé USB infectée - Forum Clé USB / Carte mémoire
- Carte sim infectée ✓ - Forum Mobile
- Infection SIM ✓ - Forum Virus
- Clé usb infectée - Forum Virus
39 réponses
Bonjour,
pour voir ce qui se pase :
Ouvre ce lien et télécharge ZHPDiag :
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
hxxp://telechargement.zebulon.fr/telecharger-zhpdiag.html
Enregistre le sur ton Bureau.
Une fois le téléchargement achevé, lance ZHPDiag.exe et clique sur Unzip dans la fenêtre qui s'ouvre.
Clique sur la clé à molette puis sur Tous pour cocher toutes les cases des options.
Clique sur la loupe pour lancer l'analyse.
A la fin de l'analyse, clique sur l'appareil photo et enregistre le rapport sur ton Bureau.
Ouvre le fichier sauvegardé (ZHPDiag.txt)avec le Bloc-Notes et copie son contenu dans ta réponse.
Pour me le transmettre clique sur ce lien :
http://www.cijoint.fr/
Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\.ZHPDiag.txt
Clique sur Ouvrir.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt
est ajouté dans la page.
Copie ce lien dans ta réponse.
pour voir ce qui se pase :
Ouvre ce lien et télécharge ZHPDiag :
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
hxxp://telechargement.zebulon.fr/telecharger-zhpdiag.html
Enregistre le sur ton Bureau.
Une fois le téléchargement achevé, lance ZHPDiag.exe et clique sur Unzip dans la fenêtre qui s'ouvre.
Clique sur la clé à molette puis sur Tous pour cocher toutes les cases des options.
Clique sur la loupe pour lancer l'analyse.
A la fin de l'analyse, clique sur l'appareil photo et enregistre le rapport sur ton Bureau.
Ouvre le fichier sauvegardé (ZHPDiag.txt)avec le Bloc-Notes et copie son contenu dans ta réponse.
Pour me le transmettre clique sur ce lien :
http://www.cijoint.fr/
Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\.ZHPDiag.txt
Clique sur Ouvrir.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt
est ajouté dans la page.
Copie ce lien dans ta réponse.
Salut !
Tiens, fais ce que dit ce petit tuto puis poste le log ici http://www.commentcamarche.net/faq/sujet 266 analyser interpreter un log hijackthis et agir en consequence
(Entre CleanUp et CCleaner choisis CCleaner)
Cordialement,
Faradn
Tiens, fais ce que dit ce petit tuto puis poste le log ici http://www.commentcamarche.net/faq/sujet 266 analyser interpreter un log hijackthis et agir en consequence
(Entre CleanUp et CCleaner choisis CCleaner)
Cordialement,
Faradn
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Re,
Télécharge maintenant Navilog1 depuis-ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Fais un Clic-droit sur Navilog1.exe présent sur ton bureau et choisis "Exécuter
en tant qu'administrateur".
Au menu principal, choisis 1 et valide.
< Ne fais pas le choix 2 >
Patiente le temps du scan. Il te sera peut-être demandé de redémarrer ton PC.
Laisse l'outil le faire automatiquement, sinon redémarre ton PC normalement s'il te le demande.
Patiente jusqu'au message "Scan terminé le......"
Appuie sur une touche comme demandé ; le bloc-notes va s'ouvrir.
Copie-colle l'intégralité dans ta réponse. Referme le bloc-notes.
PS : le rapport est, aussi, sauvegardé à la racine du disque dur C:\cleannavi.txt
S:Si ton bureau ne réapparaît pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
Tape explorer et valide. Cela te fera apparaître ton bureau
Télécharge maintenant Navilog1 depuis-ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Fais un Clic-droit sur Navilog1.exe présent sur ton bureau et choisis "Exécuter
en tant qu'administrateur".
Au menu principal, choisis 1 et valide.
< Ne fais pas le choix 2 >
Patiente le temps du scan. Il te sera peut-être demandé de redémarrer ton PC.
Laisse l'outil le faire automatiquement, sinon redémarre ton PC normalement s'il te le demande.
Patiente jusqu'au message "Scan terminé le......"
Appuie sur une touche comme demandé ; le bloc-notes va s'ouvrir.
Copie-colle l'intégralité dans ta réponse. Referme le bloc-notes.
PS : le rapport est, aussi, sauvegardé à la racine du disque dur C:\cleannavi.txt
S:Si ton bureau ne réapparaît pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
Tape explorer et valide. Cela te fera apparaître ton bureau
Fix Navipromo version 4.0.1 commencé le 12/07/2009 12:42:58,50
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 11.07.2009 à 18h00 par IL-MAFIOSO
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz )
BIOS : Default System BIOS
USER : Daphné ( Administrator )
BOOT : Normal boot
Antivirus : BitDefender Antivirus 12.0 (Activated)
C:\ (Local Disk) - NTFS - Total:223 Go (Free:87 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go)
E:\ (CD or DVD) - UDF - Total:4 Go (Free:0 Go)
F:\ (Local Disk) - NTFS - Total:465 Go (Free:194 Go)
Recherche executée en mode normal
Nettoyage exécuté au redémarrage de l'ordinateur
C:\Program Files\FunkyEmoticons supprimé !
c:\progra~2\micros~1\windows\startm~1\programs\FunkyEmoticons supprimé !
C:\Users\Daphn‚\AppData\Roaming\FunkyEmoticons supprimé !
C:\Users\Daphn‚\AppData\Local\yccki.dat supprimé !
C:\Users\Daphn‚\AppData\Local\yccki_nav.dat supprimé !
C:\Users\Daphn‚\AppData\Local\yccki_navps.dat supprimé !
Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\DAPHN~1\AppData\Local\Temp effectué !
*** Sauvegarde du Registre vers dossier Safebackup ***
sauvegarde du Registre réalisée avec succès !
*** Nettoyage Registre ***
Nettoyage Registre Ok
*** Scan terminé 12/07/2009 13:17:09,03 ***
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 11.07.2009 à 18h00 par IL-MAFIOSO
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz )
BIOS : Default System BIOS
USER : Daphné ( Administrator )
BOOT : Normal boot
Antivirus : BitDefender Antivirus 12.0 (Activated)
C:\ (Local Disk) - NTFS - Total:223 Go (Free:87 Go)
D:\ (Local Disk) - NTFS - Total:9 Go (Free:1 Go)
E:\ (CD or DVD) - UDF - Total:4 Go (Free:0 Go)
F:\ (Local Disk) - NTFS - Total:465 Go (Free:194 Go)
Recherche executée en mode normal
Nettoyage exécuté au redémarrage de l'ordinateur
C:\Program Files\FunkyEmoticons supprimé !
c:\progra~2\micros~1\windows\startm~1\programs\FunkyEmoticons supprimé !
C:\Users\Daphn‚\AppData\Roaming\FunkyEmoticons supprimé !
C:\Users\Daphn‚\AppData\Local\yccki.dat supprimé !
C:\Users\Daphn‚\AppData\Local\yccki_nav.dat supprimé !
C:\Users\Daphn‚\AppData\Local\yccki_navps.dat supprimé !
Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\DAPHN~1\AppData\Local\Temp effectué !
*** Sauvegarde du Registre vers dossier Safebackup ***
sauvegarde du Registre réalisée avec succès !
*** Nettoyage Registre ***
Nettoyage Registre Ok
*** Scan terminé 12/07/2009 13:17:09,03 ***
Re,
Lis bien et exécute cette manip dans l’ordre.
#Télécharge et installe ces logiciels (si tu ne les as pas) pour les 3 premiers
mets les à jour, comme indiqué dans les démos ou tutos.
Ne les utilise pas tout de suite.
Antispywares et autres :
Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton bureau à partir de ce lien :
https://www.malwarebytes.com/
A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.
Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.
Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.
MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue.
Nettoyeurs (de fichiers inutiles) et autres :
*Ccleaner (gratuit)
Téléchargement :
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
Tuto :
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
Lors de l’installation, [décoche] l’option qui t’installerait la barre Yahoo !
========================================
=======================================
========================================
->Lance CCleaner.
Suppression des fichiers temporaires
Va dans la section "Options" situé dans la marge gauche.
Décoche "Avancé"
Retourne ensuite dans la section "Nettoyeur"
Fais bien attention de cocher toutes ces cases dans la marge gauche (Internet Explorer/Windows Explorer/Système)
• Clique sur [Analyse]
• Patiente le temps du scan, qui peut prendre un peu de temps si c'est la première fois.
• Une fois le scan terminé, clique sur [Lancer le Nettoyage]
========================================
Lance Malwarebytes AntiMalware
Dans l'onglet analyse, vérifie que "Exécuter un scan rapide" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.
MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.
A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.
Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
MBAM va ouvrir le bloc-notes et y copier le rapport d'analyse. Ferme le bloc-note. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)
Ferme MBAM en cliquant sur Quitter.
Poste le rapport dans ta réponse.
========================================
->Relance CCleaner.
Suppression des incohérences du registre
• Clique sur l'icône [Registre] situés dans la marge à gauche
• Puis clique sur [Analyser les erreurs]
• Patiente pendant que CCleaner scan ton registre.
• Une fois le scan terminé, coche toutes les entrèes qu'il t'aura trouvée.
• Tu peux cliquer ensuite sur [Corriger les erreurs].
Quand l'outil te le demandera, choisis de sauvegarder les entrées cochées pour les restaurer ultérieurement.
========================================
->Vide ta Corbeille.
========================================
- > Ouvre ce lien pour scanner ton PC avec un BitDefender en ligne (uniquement sous Internet Explorer) :
http://www.bitdefender.fr/scan_fr/scan8/ie.html
Utilisation :
Cliquer sur "J'accepte" puis accepter également l'ActiveX bloqué par la barre anti-popup du SP2 qui clignotera en haut et l'installer.
A l'ouverture de la page "Scanner Options", cliquer sur [click here] de "To change this and other settings, click here" puis cliquer sur le + devant "Second option" et cocher "Report only" puis cliquer sur [OK].
Ensuite, cliquer sur "Cliquez ici pour scanner".
Patienter jusqu'à la fin du scan qui peut durer assez longtemps...
Copier/coller le rapport entier sur le forum.
Tutoriel en images ici : http://pageperso.aol.fr/rginformatique/mapage/defender.htm (merci à Balltrap34 pour cette réalisation)
[Recoche] la case « Masquer les fichiers protégés du système d'exploitation (recommandé) »
Lis bien et exécute cette manip dans l’ordre.
#Télécharge et installe ces logiciels (si tu ne les as pas) pour les 3 premiers
mets les à jour, comme indiqué dans les démos ou tutos.
Ne les utilise pas tout de suite.
Antispywares et autres :
Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton bureau à partir de ce lien :
https://www.malwarebytes.com/
A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.
Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.
Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.
MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue.
Nettoyeurs (de fichiers inutiles) et autres :
*Ccleaner (gratuit)
Téléchargement :
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
Tuto :
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
Lors de l’installation, [décoche] l’option qui t’installerait la barre Yahoo !
========================================
=======================================
========================================
->Lance CCleaner.
Suppression des fichiers temporaires
Va dans la section "Options" situé dans la marge gauche.
Décoche "Avancé"
Retourne ensuite dans la section "Nettoyeur"
Fais bien attention de cocher toutes ces cases dans la marge gauche (Internet Explorer/Windows Explorer/Système)
• Clique sur [Analyse]
• Patiente le temps du scan, qui peut prendre un peu de temps si c'est la première fois.
• Une fois le scan terminé, clique sur [Lancer le Nettoyage]
========================================
Lance Malwarebytes AntiMalware
Dans l'onglet analyse, vérifie que "Exécuter un scan rapide" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.
MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.
A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.
Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
MBAM va ouvrir le bloc-notes et y copier le rapport d'analyse. Ferme le bloc-note. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)
Ferme MBAM en cliquant sur Quitter.
Poste le rapport dans ta réponse.
========================================
->Relance CCleaner.
Suppression des incohérences du registre
• Clique sur l'icône [Registre] situés dans la marge à gauche
• Puis clique sur [Analyser les erreurs]
• Patiente pendant que CCleaner scan ton registre.
• Une fois le scan terminé, coche toutes les entrèes qu'il t'aura trouvée.
• Tu peux cliquer ensuite sur [Corriger les erreurs].
Quand l'outil te le demandera, choisis de sauvegarder les entrées cochées pour les restaurer ultérieurement.
========================================
->Vide ta Corbeille.
========================================
- > Ouvre ce lien pour scanner ton PC avec un BitDefender en ligne (uniquement sous Internet Explorer) :
http://www.bitdefender.fr/scan_fr/scan8/ie.html
Utilisation :
Cliquer sur "J'accepte" puis accepter également l'ActiveX bloqué par la barre anti-popup du SP2 qui clignotera en haut et l'installer.
A l'ouverture de la page "Scanner Options", cliquer sur [click here] de "To change this and other settings, click here" puis cliquer sur le + devant "Second option" et cocher "Report only" puis cliquer sur [OK].
Ensuite, cliquer sur "Cliquez ici pour scanner".
Patienter jusqu'à la fin du scan qui peut durer assez longtemps...
Copier/coller le rapport entier sur le forum.
Tutoriel en images ici : http://pageperso.aol.fr/rginformatique/mapage/defender.htm (merci à Balltrap34 pour cette réalisation)
[Recoche] la case « Masquer les fichiers protégés du système d'exploitation (recommandé) »
Malwarebytes' Anti-Malware 1.38
Version de la base de données: 2412
Windows 6.0.6001 Service Pack 1
12/07/2009 20:20:03
mbam-log-2009-07-12 (20-20-03).txt
Type de recherche: Examen complet (C:\|D:\|E:\|F:\|)
Eléments examinés: 276557
Temps écoulé: 1 hour(s), 25 minute(s), 23 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
Voilà pour le rapport Malware, le scan Bit Defender n' a pas voulu s' éxecuter...
Version de la base de données: 2412
Windows 6.0.6001 Service Pack 1
12/07/2009 20:20:03
mbam-log-2009-07-12 (20-20-03).txt
Type de recherche: Examen complet (C:\|D:\|E:\|F:\|)
Eléments examinés: 276557
Temps écoulé: 1 hour(s), 25 minute(s), 23 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
Voilà pour le rapport Malware, le scan Bit Defender n' a pas voulu s' éxecuter...
Re,
oui, c'est assez normal ! C'est ton antivirus.
Via le Panneau de configuration, regarde si tu peux désinstaller Favorit.
Ensuite, fais redémarrer l'ordi et refais tourner ZHPDiag.
Poste le rapport dans un lien cijoint.
oui, c'est assez normal ! C'est ton antivirus.
Via le Panneau de configuration, regarde si tu peux désinstaller Favorit.
Ensuite, fais redémarrer l'ordi et refais tourner ZHPDiag.
Poste le rapport dans un lien cijoint.
Bonsoir,
Voici le lien: http://www.cijoint.fr/cjlink.php?file=cj200907/cijzpwu8oL.txt
Impossible de désinstaller favorit, par contre.
Voici le lien: http://www.cijoint.fr/cjlink.php?file=cj200907/cijzpwu8oL.txt
Impossible de désinstaller favorit, par contre.
Re,
Clique sur ce lien pour télécharger SystemLook de jpshortstuff sur ton Bureau
http://jpshortstuff.247fixes.com/SystemLook.exe
[*]Double-clique sur SystemLook.exe pour le lancer.
[*]Clic droit|Copier le texte ci-dessous et clic droit|Coller dans la zone texte de SystemLook :
[*]Clique sur le bouton Look pour démarrer l'examen.
[*]A la fin, le Bloc-notes s'ouvre avec le résultat de l'analyse. Copie-colle le rapport dans ta prochaine réponse.
Nota Bene : Le rapport peut aussi être trouvé sur ton Bureau sous le nom SystemLook.txt
Clique sur ce lien pour télécharger SystemLook de jpshortstuff sur ton Bureau
http://jpshortstuff.247fixes.com/SystemLook.exe
[*]Double-clique sur SystemLook.exe pour le lancer.
[*]Clic droit|Copier le texte ci-dessous et clic droit|Coller dans la zone texte de SystemLook :
:dir C:\Program Files\Favorit
[*]Clique sur le bouton Look pour démarrer l'examen.
[*]A la fin, le Bloc-notes s'ouvre avec le résultat de l'analyse. Copie-colle le rapport dans ta prochaine réponse.
Nota Bene : Le rapport peut aussi être trouvé sur ton Bureau sous le nom SystemLook.txt
Voilà ce qu' il me dit; alors qu' il apparait dans mes programmes...
SystemLook v1.0 by jpshortstuff (22.05.09)
Log created at 23:10 on 12/07/2009 by Daphné (Administrator - Elevation successful)
No Context: :dir
No Context: C:\Program Files\Favorit
-=End Of File=-
SystemLook v1.0 by jpshortstuff (22.05.09)
Log created at 23:10 on 12/07/2009 by Daphné (Administrator - Elevation successful)
No Context: :dir
No Context: C:\Program Files\Favorit
-=End Of File=-
Re,
bon, on ne va pas y passer la semaine.
On va utiliser ComboFix.exe. Rends toi sur cette page web pour obtenir les liens de téléchargement, ainsi que des instructions pour exécuter l'outil:
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
* Vérifie que tu as fermé/désactivé tous les programmes anti-virus, anti-malware ou anti-spyware afin qu'ils n'interfèrent pas avec le travail de ComboFix.
Envoie le contenu de C:\ComboFix.txt dans ta prochaine réponse afin que je l'examine.
bon, on ne va pas y passer la semaine.
On va utiliser ComboFix.exe. Rends toi sur cette page web pour obtenir les liens de téléchargement, ainsi que des instructions pour exécuter l'outil:
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
* Vérifie que tu as fermé/désactivé tous les programmes anti-virus, anti-malware ou anti-spyware afin qu'ils n'interfèrent pas avec le travail de ComboFix.
Envoie le contenu de C:\ComboFix.txt dans ta prochaine réponse afin que je l'examine.
Voici le rapport combofix:
ComboFix 09-07-12.01 - Daphné 13/07/2009 0:01.1.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.33.1036.18.3068.1950 [GMT 2:00]
Running from: c:\users\Daphné\Desktop\ComboFix.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Outdated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
SP: BitDefender Antispyware *disabled* (Updated) {8B2012EC-32D4-494F-BC03-832DB3BDF911}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\$recycle.bin\S-1-5-21-2029956184-1976662819-598608332-500
c:\$recycle.bin\S-1-5-21-3133015541-3081570116-3306189592-500
c:\users\Daphné\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitDefender Antivirus 2009.lnk
c:\windows\Installer\1cd00.msi
.
((((((((((((((((((((((((( Files Created from 2009-06-12 to 2009-07-12 )))))))))))))))))))))))))))))))
.
2009-07-12 18:30 . 2009-07-12 18:30 -------- d-----w- c:\windows\BDOSCAN8
2009-07-12 14:13 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\programdata\Malwarebytes
2009-07-12 14:13 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-12 10:42 . 2009-07-12 19:55 -------- d-----w- c:\program files\Navilog1
2009-06-16 20:04 . 2009-06-16 20:04 -------- d-----w- c:\programdata\WindowsSearch
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-12 19:47 . 2008-09-22 23:51 42654 ----a-w- c:\programdata\nvModes.dat
2009-07-12 19:41 . 2009-01-21 02:35 81984 ----a-w- c:\windows\system32\bdod.bin
2009-06-20 10:09 . 2008-07-02 16:10 669890 ----a-w- c:\windows\system32\perfh00C.dat
2009-06-20 10:09 . 2008-07-02 16:10 123896 ----a-w- c:\windows\system32\perfc00C.dat
2009-06-11 17:45 . 2008-07-02 07:55 -------- d-----w- c:\programdata\Microsoft Help
2009-06-11 17:42 . 2008-07-02 07:32 -------- d-----w- c:\program files\Microsoft Works
2009-06-11 17:01 . 2008-04-23 16:34 192512 ----a-w- c:\windows\system32\txmlutil.dll
2009-06-11 17:01 . 2008-08-12 16:40 242184 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys
2009-06-11 17:01 . 2008-08-12 16:40 111112 ----a-w- c:\windows\system32\drivers\bdfm.sys
2009-06-11 05:42 . 2009-06-11 05:39 -------- d-----w- c:\programdata\BitDefender
2009-06-11 05:39 . 2009-01-16 15:26 -------- d-----w- c:\program files\Common Files\BitDefender
2009-06-11 05:39 . 2009-06-11 05:39 -------- d-----w- c:\program files\BitDefender
2009-05-18 16:45 . 2008-07-02 07:59 -------- d-----w- c:\program files\Common Files\Adobe
2009-05-18 15:25 . 2008-07-02 08:18 -------- d-----w- c:\program files\Java
2009-05-14 01:00 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-05-09 05:50 . 2009-06-11 16:37 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-09 05:34 . 2009-06-11 16:37 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-05-06 11:14 . 2009-05-06 11:14 32 ----a-w- c:\programdata\ezsid.dat
2009-04-30 14:58 . 2009-04-30 14:57 339968 ----a-w- c:\windows\system32\pythoncom25.dll
2009-04-30 14:58 . 2009-04-30 14:57 2117632 ----a-w- c:\windows\system32\python25.dll
2009-04-30 14:58 . 2009-04-30 14:57 114688 ----a-w- c:\windows\system32\pywintypes25.dll
2009-04-30 12:37 . 2009-06-11 16:42 293376 ----a-w- c:\windows\system32\psisdecd.dll
2009-04-30 12:37 . 2009-06-11 16:42 428544 ----a-w- c:\windows\system32\EncDec.dll
2009-04-23 12:43 . 2009-06-11 16:37 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-23 12:42 . 2009-06-11 16:38 636928 ----a-w- c:\windows\system32\localspl.dll
2009-04-21 11:55 . 2009-06-11 16:38 2033152 ----a-w- c:\windows\system32\win32k.sys
2008-07-02 16:13 . 2008-07-02 16:13 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Google Update"="c:\users\Daphné\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-27 133104]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-23 13539872]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-23 92704]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-18 1033512]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-04-15 442433]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-04-15 178712]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-04-23 468264]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-11-01 554288]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-04-15 70912]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-11-20 488752]
"RemoteControl8"="c:\program files\CyberLink\PowerDVD8\PDVD8Serv.exe" [2008-03-20 83240]
"PDVD8LanguageShortcut"="c:\program files\CyberLink\PowerDVD8\Language\Language.exe" [2007-12-14 50472]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-06-11 778240]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-06-11 69632]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{1F1A5F2C-0E0D-49F9-BD15-679FC4717866}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
"{2356F9ED-8EC9-4BF1-AC9F-4A8570523401}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
"{7DD65D90-6AD1-41D7-BE96-FF68D20B75A2}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{6A5E0385-C467-421B-A217-E61C8EC9FBA9}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{F1F06440-4AA0-4501-BB26-8F1B189EA5DA}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
"{3E583253-6F8C-4D83-B0AF-D05803F2BACE}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{8E61B672-533C-45AA-B1C2-0650468A3BDD}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{1C363051-A392-4C31-BE7B-606506F6619F}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{EB0507BA-3C00-4E49-B978-D4B76C6716CF}"= c:\program files\CyberLink\PowerDVD8\PowerDVD8.EXE:CyberLink PowerDVD 8.0
"{6DB09146-403A-4474-BF60-A8DFCD002A3D}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync
"TCP Query User{517E2412-0A5F-4F2B-B091-BFFC84C7C9BE}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{F858AA50-A14C-4D8B-907B-D166F45320B3}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"{D9E24372-0B4F-45D8-9B62-D481FF5E1FF8}"= c:\program files\Skype\Phone\Skype.exe:Skype
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)
R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\AEstSrv.exe [23/09/2008 01:19 73728]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [21/01/2008 04:23 21504]
R2 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [27/01/2009 14:40 55264]
R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 19:08 533360]
R2 hpsrv;HP Service;c:\windows\System32\hpservice.exe [18/03/2008 16:24 19456]
R2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [02/07/2008 10:13 341328]
R3 bdfm;BDFM;c:\windows\System32\drivers\bdfm.sys [12/08/2008 18:40 111112]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [02/07/2008 09:05 193840]
R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [24/01/2008 15:23 52736]
R3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [01/04/2008 13:14 81296]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\System32\drivers\nvhda32v.sys [23/05/2008 05:29 43552]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [17/07/2008 13:06 118784]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
Contents of the 'Scheduled Tasks' folder
2009-07-12 c:\windows\Tasks\User_Feed_Synchronization-{B5E15244-7347-427B-9130-5F5369ABF81B}.job
- c:\windows\system32\msfeedssync.exe [2009-04-27 11:31]
.
.
------- Supplementary Scan -------
.
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-13 00:11
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2009-07-12 0:16
ComboFix-quarantined-files.txt 2009-07-12 22:16
Pre-Run: 90 031 964 160 octets libres
Post-Run: 90 018 291 712 octets libres
159 --- E O F --- 2009-07-12 08:27
"On ne va pas y passer la semaine", j' espère bien que non! Je t' ennuie?
ComboFix 09-07-12.01 - Daphné 13/07/2009 0:01.1.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.33.1036.18.3068.1950 [GMT 2:00]
Running from: c:\users\Daphné\Desktop\ComboFix.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Outdated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
SP: BitDefender Antispyware *disabled* (Updated) {8B2012EC-32D4-494F-BC03-832DB3BDF911}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\$recycle.bin\S-1-5-21-2029956184-1976662819-598608332-500
c:\$recycle.bin\S-1-5-21-3133015541-3081570116-3306189592-500
c:\users\Daphné\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitDefender Antivirus 2009.lnk
c:\windows\Installer\1cd00.msi
.
((((((((((((((((((((((((( Files Created from 2009-06-12 to 2009-07-12 )))))))))))))))))))))))))))))))
.
2009-07-12 18:30 . 2009-07-12 18:30 -------- d-----w- c:\windows\BDOSCAN8
2009-07-12 14:13 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\programdata\Malwarebytes
2009-07-12 14:13 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-12 10:42 . 2009-07-12 19:55 -------- d-----w- c:\program files\Navilog1
2009-06-16 20:04 . 2009-06-16 20:04 -------- d-----w- c:\programdata\WindowsSearch
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-12 19:47 . 2008-09-22 23:51 42654 ----a-w- c:\programdata\nvModes.dat
2009-07-12 19:41 . 2009-01-21 02:35 81984 ----a-w- c:\windows\system32\bdod.bin
2009-06-20 10:09 . 2008-07-02 16:10 669890 ----a-w- c:\windows\system32\perfh00C.dat
2009-06-20 10:09 . 2008-07-02 16:10 123896 ----a-w- c:\windows\system32\perfc00C.dat
2009-06-11 17:45 . 2008-07-02 07:55 -------- d-----w- c:\programdata\Microsoft Help
2009-06-11 17:42 . 2008-07-02 07:32 -------- d-----w- c:\program files\Microsoft Works
2009-06-11 17:01 . 2008-04-23 16:34 192512 ----a-w- c:\windows\system32\txmlutil.dll
2009-06-11 17:01 . 2008-08-12 16:40 242184 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys
2009-06-11 17:01 . 2008-08-12 16:40 111112 ----a-w- c:\windows\system32\drivers\bdfm.sys
2009-06-11 05:42 . 2009-06-11 05:39 -------- d-----w- c:\programdata\BitDefender
2009-06-11 05:39 . 2009-01-16 15:26 -------- d-----w- c:\program files\Common Files\BitDefender
2009-06-11 05:39 . 2009-06-11 05:39 -------- d-----w- c:\program files\BitDefender
2009-05-18 16:45 . 2008-07-02 07:59 -------- d-----w- c:\program files\Common Files\Adobe
2009-05-18 15:25 . 2008-07-02 08:18 -------- d-----w- c:\program files\Java
2009-05-14 01:00 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-05-09 05:50 . 2009-06-11 16:37 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-09 05:34 . 2009-06-11 16:37 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-05-06 11:14 . 2009-05-06 11:14 32 ----a-w- c:\programdata\ezsid.dat
2009-04-30 14:58 . 2009-04-30 14:57 339968 ----a-w- c:\windows\system32\pythoncom25.dll
2009-04-30 14:58 . 2009-04-30 14:57 2117632 ----a-w- c:\windows\system32\python25.dll
2009-04-30 14:58 . 2009-04-30 14:57 114688 ----a-w- c:\windows\system32\pywintypes25.dll
2009-04-30 12:37 . 2009-06-11 16:42 293376 ----a-w- c:\windows\system32\psisdecd.dll
2009-04-30 12:37 . 2009-06-11 16:42 428544 ----a-w- c:\windows\system32\EncDec.dll
2009-04-23 12:43 . 2009-06-11 16:37 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-23 12:42 . 2009-06-11 16:38 636928 ----a-w- c:\windows\system32\localspl.dll
2009-04-21 11:55 . 2009-06-11 16:38 2033152 ----a-w- c:\windows\system32\win32k.sys
2008-07-02 16:13 . 2008-07-02 16:13 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Google Update"="c:\users\Daphné\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-27 133104]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-23 13539872]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-23 92704]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-18 1033512]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-04-15 442433]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-04-15 178712]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-04-23 468264]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-11-01 554288]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-04-15 70912]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-11-20 488752]
"RemoteControl8"="c:\program files\CyberLink\PowerDVD8\PDVD8Serv.exe" [2008-03-20 83240]
"PDVD8LanguageShortcut"="c:\program files\CyberLink\PowerDVD8\Language\Language.exe" [2007-12-14 50472]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-06-11 778240]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-06-11 69632]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{1F1A5F2C-0E0D-49F9-BD15-679FC4717866}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
"{2356F9ED-8EC9-4BF1-AC9F-4A8570523401}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
"{7DD65D90-6AD1-41D7-BE96-FF68D20B75A2}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{6A5E0385-C467-421B-A217-E61C8EC9FBA9}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{F1F06440-4AA0-4501-BB26-8F1B189EA5DA}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
"{3E583253-6F8C-4D83-B0AF-D05803F2BACE}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{8E61B672-533C-45AA-B1C2-0650468A3BDD}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{1C363051-A392-4C31-BE7B-606506F6619F}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{EB0507BA-3C00-4E49-B978-D4B76C6716CF}"= c:\program files\CyberLink\PowerDVD8\PowerDVD8.EXE:CyberLink PowerDVD 8.0
"{6DB09146-403A-4474-BF60-A8DFCD002A3D}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync
"TCP Query User{517E2412-0A5F-4F2B-B091-BFFC84C7C9BE}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{F858AA50-A14C-4D8B-907B-D166F45320B3}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"{D9E24372-0B4F-45D8-9B62-D481FF5E1FF8}"= c:\program files\Skype\Phone\Skype.exe:Skype
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)
R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\AEstSrv.exe [23/09/2008 01:19 73728]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [21/01/2008 04:23 21504]
R2 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [27/01/2009 14:40 55264]
R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 19:08 533360]
R2 hpsrv;HP Service;c:\windows\System32\hpservice.exe [18/03/2008 16:24 19456]
R2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [02/07/2008 10:13 341328]
R3 bdfm;BDFM;c:\windows\System32\drivers\bdfm.sys [12/08/2008 18:40 111112]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [02/07/2008 09:05 193840]
R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [24/01/2008 15:23 52736]
R3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [01/04/2008 13:14 81296]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\System32\drivers\nvhda32v.sys [23/05/2008 05:29 43552]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [17/07/2008 13:06 118784]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
Contents of the 'Scheduled Tasks' folder
2009-07-12 c:\windows\Tasks\User_Feed_Synchronization-{B5E15244-7347-427B-9130-5F5369ABF81B}.job
- c:\windows\system32\msfeedssync.exe [2009-04-27 11:31]
.
.
------- Supplementary Scan -------
.
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-13 00:11
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2009-07-12 0:16
ComboFix-quarantined-files.txt 2009-07-12 22:16
Pre-Run: 90 031 964 160 octets libres
Post-Run: 90 018 291 712 octets libres
159 --- E O F --- 2009-07-12 08:27
"On ne va pas y passer la semaine", j' espère bien que non! Je t' ennuie?
Re,
Je t' ennuie?
rassure toi, tu ne m'ennuies pas. Je voulais seulement dire que je n'allais pas bloquer sur ce logiciel.
Copie ou imprime les instructions avant
Déconnecte toi d'internet et ferme toutes tes applications.
Désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)
Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :
Enregistre ce fichier sous le nom CFscript
Fait un glisser/déposer de ce fichier CFscript sur le fichier ComboFix.exe
Clique sur le fichier CFscript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFscrïpt vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.
Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
Réactive ton parefeu, ton antivirus, la garde de ton antispyware
Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
Remets aussi un rapport Hijackthis
Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt
Je t' ennuie?
rassure toi, tu ne m'ennuies pas. Je voulais seulement dire que je n'allais pas bloquer sur ce logiciel.
Copie ou imprime les instructions avant
Déconnecte toi d'internet et ferme toutes tes applications.
Désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)
Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes :
Dirlook:: C:\Program Files\Favorit
Enregistre ce fichier sous le nom CFscript
Fait un glisser/déposer de ce fichier CFscript sur le fichier ComboFix.exe
Clique sur le fichier CFscript, maintient le doigt enfoncé et glisse la souris pour que l'icône du CFscrïpt vienne recouvrir l'icône de Combofix. Relache la souris. Combofix va démarrer.
Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
Réactive ton parefeu, ton antivirus, la garde de ton antispyware
Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
Remets aussi un rapport Hijackthis
Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt
Salut!
Voici le combofix:ComboFix 09-07-12.01 - Daphné 13/07/2009 0:01.1.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.33.1036.18.3068.1950 [GMT 2:00]
Running from: c:\users\Daphné\Desktop\ComboFix.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Outdated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
SP: BitDefender Antispyware *disabled* (Updated) {8B2012EC-32D4-494F-BC03-832DB3BDF911}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\$recycle.bin\S-1-5-21-2029956184-1976662819-598608332-500
c:\$recycle.bin\S-1-5-21-3133015541-3081570116-3306189592-500
c:\users\Daphné\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitDefender Antivirus 2009.lnk
c:\windows\Installer\1cd00.msi
.
((((((((((((((((((((((((( Files Created from 2009-06-12 to 2009-07-12 )))))))))))))))))))))))))))))))
.
2009-07-12 18:30 . 2009-07-12 18:30 -------- d-----w- c:\windows\BDOSCAN8
2009-07-12 14:13 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\programdata\Malwarebytes
2009-07-12 14:13 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-12 10:42 . 2009-07-12 19:55 -------- d-----w- c:\program files\Navilog1
2009-06-16 20:04 . 2009-06-16 20:04 -------- d-----w- c:\programdata\WindowsSearch
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-12 19:47 . 2008-09-22 23:51 42654 ----a-w- c:\programdata\nvModes.dat
2009-07-12 19:41 . 2009-01-21 02:35 81984 ----a-w- c:\windows\system32\bdod.bin
2009-06-20 10:09 . 2008-07-02 16:10 669890 ----a-w- c:\windows\system32\perfh00C.dat
2009-06-20 10:09 . 2008-07-02 16:10 123896 ----a-w- c:\windows\system32\perfc00C.dat
2009-06-11 17:45 . 2008-07-02 07:55 -------- d-----w- c:\programdata\Microsoft Help
2009-06-11 17:42 . 2008-07-02 07:32 -------- d-----w- c:\program files\Microsoft Works
2009-06-11 17:01 . 2008-04-23 16:34 192512 ----a-w- c:\windows\system32\txmlutil.dll
2009-06-11 17:01 . 2008-08-12 16:40 242184 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys
2009-06-11 17:01 . 2008-08-12 16:40 111112 ----a-w- c:\windows\system32\drivers\bdfm.sys
2009-06-11 05:42 . 2009-06-11 05:39 -------- d-----w- c:\programdata\BitDefender
2009-06-11 05:39 . 2009-01-16 15:26 -------- d-----w- c:\program files\Common Files\BitDefender
2009-06-11 05:39 . 2009-06-11 05:39 -------- d-----w- c:\program files\BitDefender
2009-05-18 16:45 . 2008-07-02 07:59 -------- d-----w- c:\program files\Common Files\Adobe
2009-05-18 15:25 . 2008-07-02 08:18 -------- d-----w- c:\program files\Java
2009-05-14 01:00 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-05-09 05:50 . 2009-06-11 16:37 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-09 05:34 . 2009-06-11 16:37 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-05-06 11:14 . 2009-05-06 11:14 32 ----a-w- c:\programdata\ezsid.dat
2009-04-30 14:58 . 2009-04-30 14:57 339968 ----a-w- c:\windows\system32\pythoncom25.dll
2009-04-30 14:58 . 2009-04-30 14:57 2117632 ----a-w- c:\windows\system32\python25.dll
2009-04-30 14:58 . 2009-04-30 14:57 114688 ----a-w- c:\windows\system32\pywintypes25.dll
2009-04-30 12:37 . 2009-06-11 16:42 293376 ----a-w- c:\windows\system32\psisdecd.dll
2009-04-30 12:37 . 2009-06-11 16:42 428544 ----a-w- c:\windows\system32\EncDec.dll
2009-04-23 12:43 . 2009-06-11 16:37 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-23 12:42 . 2009-06-11 16:38 636928 ----a-w- c:\windows\system32\localspl.dll
2009-04-21 11:55 . 2009-06-11 16:38 2033152 ----a-w- c:\windows\system32\win32k.sys
2008-07-02 16:13 . 2008-07-02 16:13 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Google Update"="c:\users\Daphné\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-27 133104]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-23 13539872]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-23 92704]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-18 1033512]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-04-15 442433]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-04-15 178712]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-04-23 468264]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-11-01 554288]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-04-15 70912]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-11-20 488752]
"RemoteControl8"="c:\program files\CyberLink\PowerDVD8\PDVD8Serv.exe" [2008-03-20 83240]
"PDVD8LanguageShortcut"="c:\program files\CyberLink\PowerDVD8\Language\Language.exe" [2007-12-14 50472]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-06-11 778240]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-06-11 69632]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{1F1A5F2C-0E0D-49F9-BD15-679FC4717866}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
"{2356F9ED-8EC9-4BF1-AC9F-4A8570523401}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
"{7DD65D90-6AD1-41D7-BE96-FF68D20B75A2}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{6A5E0385-C467-421B-A217-E61C8EC9FBA9}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{F1F06440-4AA0-4501-BB26-8F1B189EA5DA}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
"{3E583253-6F8C-4D83-B0AF-D05803F2BACE}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{8E61B672-533C-45AA-B1C2-0650468A3BDD}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{1C363051-A392-4C31-BE7B-606506F6619F}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{EB0507BA-3C00-4E49-B978-D4B76C6716CF}"= c:\program files\CyberLink\PowerDVD8\PowerDVD8.EXE:CyberLink PowerDVD 8.0
"{6DB09146-403A-4474-BF60-A8DFCD002A3D}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync
"TCP Query User{517E2412-0A5F-4F2B-B091-BFFC84C7C9BE}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{F858AA50-A14C-4D8B-907B-D166F45320B3}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"{D9E24372-0B4F-45D8-9B62-D481FF5E1FF8}"= c:\program files\Skype\Phone\Skype.exe:Skype
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)
R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\AEstSrv.exe [23/09/2008 01:19 73728]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [21/01/2008 04:23 21504]
R2 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [27/01/2009 14:40 55264]
R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 19:08 533360]
R2 hpsrv;HP Service;c:\windows\System32\hpservice.exe [18/03/2008 16:24 19456]
R2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [02/07/2008 10:13 341328]
R3 bdfm;BDFM;c:\windows\System32\drivers\bdfm.sys [12/08/2008 18:40 111112]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [02/07/2008 09:05 193840]
R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [24/01/2008 15:23 52736]
R3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [01/04/2008 13:14 81296]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\System32\drivers\nvhda32v.sys [23/05/2008 05:29 43552]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [17/07/2008 13:06 118784]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
Contents of the 'Scheduled Tasks' folder
2009-07-12 c:\windows\Tasks\User_Feed_Synchronization-{B5E15244-7347-427B-9130-5F5369ABF81B}.job
- c:\windows\system32\msfeedssync.exe [2009-04-27 11:31]
.
.
------- Supplementary Scan -------
.
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-13 00:11
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2009-07-12 0:16
ComboFix-quarantined-files.txt 2009-07-12 22:16
Pre-Run: 90 031 964 160 octets libres
Post-Run: 90 018 291 712 octets libres
159 --- E O F --- 2009-07-12 08:27
Voici le combofix:ComboFix 09-07-12.01 - Daphné 13/07/2009 0:01.1.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.33.1036.18.3068.1950 [GMT 2:00]
Running from: c:\users\Daphné\Desktop\ComboFix.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Outdated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
SP: BitDefender Antispyware *disabled* (Updated) {8B2012EC-32D4-494F-BC03-832DB3BDF911}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\$recycle.bin\S-1-5-21-2029956184-1976662819-598608332-500
c:\$recycle.bin\S-1-5-21-3133015541-3081570116-3306189592-500
c:\users\Daphné\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitDefender Antivirus 2009.lnk
c:\windows\Installer\1cd00.msi
.
((((((((((((((((((((((((( Files Created from 2009-06-12 to 2009-07-12 )))))))))))))))))))))))))))))))
.
2009-07-12 18:30 . 2009-07-12 18:30 -------- d-----w- c:\windows\BDOSCAN8
2009-07-12 14:13 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\programdata\Malwarebytes
2009-07-12 14:13 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-12 10:42 . 2009-07-12 19:55 -------- d-----w- c:\program files\Navilog1
2009-06-16 20:04 . 2009-06-16 20:04 -------- d-----w- c:\programdata\WindowsSearch
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-12 19:47 . 2008-09-22 23:51 42654 ----a-w- c:\programdata\nvModes.dat
2009-07-12 19:41 . 2009-01-21 02:35 81984 ----a-w- c:\windows\system32\bdod.bin
2009-06-20 10:09 . 2008-07-02 16:10 669890 ----a-w- c:\windows\system32\perfh00C.dat
2009-06-20 10:09 . 2008-07-02 16:10 123896 ----a-w- c:\windows\system32\perfc00C.dat
2009-06-11 17:45 . 2008-07-02 07:55 -------- d-----w- c:\programdata\Microsoft Help
2009-06-11 17:42 . 2008-07-02 07:32 -------- d-----w- c:\program files\Microsoft Works
2009-06-11 17:01 . 2008-04-23 16:34 192512 ----a-w- c:\windows\system32\txmlutil.dll
2009-06-11 17:01 . 2008-08-12 16:40 242184 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys
2009-06-11 17:01 . 2008-08-12 16:40 111112 ----a-w- c:\windows\system32\drivers\bdfm.sys
2009-06-11 05:42 . 2009-06-11 05:39 -------- d-----w- c:\programdata\BitDefender
2009-06-11 05:39 . 2009-01-16 15:26 -------- d-----w- c:\program files\Common Files\BitDefender
2009-06-11 05:39 . 2009-06-11 05:39 -------- d-----w- c:\program files\BitDefender
2009-05-18 16:45 . 2008-07-02 07:59 -------- d-----w- c:\program files\Common Files\Adobe
2009-05-18 15:25 . 2008-07-02 08:18 -------- d-----w- c:\program files\Java
2009-05-14 01:00 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-05-09 05:50 . 2009-06-11 16:37 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-09 05:34 . 2009-06-11 16:37 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-05-06 11:14 . 2009-05-06 11:14 32 ----a-w- c:\programdata\ezsid.dat
2009-04-30 14:58 . 2009-04-30 14:57 339968 ----a-w- c:\windows\system32\pythoncom25.dll
2009-04-30 14:58 . 2009-04-30 14:57 2117632 ----a-w- c:\windows\system32\python25.dll
2009-04-30 14:58 . 2009-04-30 14:57 114688 ----a-w- c:\windows\system32\pywintypes25.dll
2009-04-30 12:37 . 2009-06-11 16:42 293376 ----a-w- c:\windows\system32\psisdecd.dll
2009-04-30 12:37 . 2009-06-11 16:42 428544 ----a-w- c:\windows\system32\EncDec.dll
2009-04-23 12:43 . 2009-06-11 16:37 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-23 12:42 . 2009-06-11 16:38 636928 ----a-w- c:\windows\system32\localspl.dll
2009-04-21 11:55 . 2009-06-11 16:38 2033152 ----a-w- c:\windows\system32\win32k.sys
2008-07-02 16:13 . 2008-07-02 16:13 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Google Update"="c:\users\Daphné\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-27 133104]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-23 13539872]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-23 92704]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-18 1033512]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-04-15 442433]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-04-15 178712]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-04-23 468264]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-11-01 554288]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-04-15 70912]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-11-20 488752]
"RemoteControl8"="c:\program files\CyberLink\PowerDVD8\PDVD8Serv.exe" [2008-03-20 83240]
"PDVD8LanguageShortcut"="c:\program files\CyberLink\PowerDVD8\Language\Language.exe" [2007-12-14 50472]
"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-06-11 778240]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-06-11 69632]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{1F1A5F2C-0E0D-49F9-BD15-679FC4717866}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
"{2356F9ED-8EC9-4BF1-AC9F-4A8570523401}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
"{7DD65D90-6AD1-41D7-BE96-FF68D20B75A2}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{6A5E0385-C467-421B-A217-E61C8EC9FBA9}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{F1F06440-4AA0-4501-BB26-8F1B189EA5DA}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
"{3E583253-6F8C-4D83-B0AF-D05803F2BACE}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{8E61B672-533C-45AA-B1C2-0650468A3BDD}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{1C363051-A392-4C31-BE7B-606506F6619F}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{EB0507BA-3C00-4E49-B978-D4B76C6716CF}"= c:\program files\CyberLink\PowerDVD8\PowerDVD8.EXE:CyberLink PowerDVD 8.0
"{6DB09146-403A-4474-BF60-A8DFCD002A3D}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync
"TCP Query User{517E2412-0A5F-4F2B-B091-BFFC84C7C9BE}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{F858AA50-A14C-4D8B-907B-D166F45320B3}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"{D9E24372-0B4F-45D8-9B62-D481FF5E1FF8}"= c:\program files\Skype\Phone\Skype.exe:Skype
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)
R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\AEstSrv.exe [23/09/2008 01:19 73728]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [21/01/2008 04:23 21504]
R2 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [27/01/2009 14:40 55264]
R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 19:08 533360]
R2 hpsrv;HP Service;c:\windows\System32\hpservice.exe [18/03/2008 16:24 19456]
R2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [02/07/2008 10:13 341328]
R3 bdfm;BDFM;c:\windows\System32\drivers\bdfm.sys [12/08/2008 18:40 111112]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [02/07/2008 09:05 193840]
R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [24/01/2008 15:23 52736]
R3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [01/04/2008 13:14 81296]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\System32\drivers\nvhda32v.sys [23/05/2008 05:29 43552]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [17/07/2008 13:06 118784]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
Contents of the 'Scheduled Tasks' folder
2009-07-12 c:\windows\Tasks\User_Feed_Synchronization-{B5E15244-7347-427B-9130-5F5369ABF81B}.job
- c:\windows\system32\msfeedssync.exe [2009-04-27 11:31]
.
.
------- Supplementary Scan -------
.
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=83&bd=Pavilion&pf=cnnb
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-13 00:11
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2009-07-12 0:16
ComboFix-quarantined-files.txt 2009-07-12 22:16
Pre-Run: 90 031 964 160 octets libres
Post-Run: 90 018 291 712 octets libres
159 --- E O F --- 2009-07-12 08:27
Oups! Sorry! Le voilà:
ComboFix 09-07-12.01 - Daphné 13/07/2009 15:46.2.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3068.2036 [GMT 2:00]
Running from: c:\users\Daphné\Desktop\ComboFix.exe
Command switches used :: c:\users\Daphné\Desktop\CFscript.txt
AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
SP: BitDefender Antispyware *disabled* (Updated) {8B2012EC-32D4-494F-BC03-832DB3BDF911}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((( Files Created from 2009-06-13 to 2009-07-13 )))))))))))))))))))))))))))))))
.
2009-07-13 09:01 . 2009-07-13 09:02 -------- d-----w- c:\windows\system32\ca-ES
2009-07-13 09:01 . 2009-07-13 09:02 -------- d-----w- c:\windows\system32\eu-ES
2009-07-13 09:01 . 2009-07-13 09:02 -------- d-----w- c:\windows\system32\vi-VN
2009-07-13 01:05 . 2009-07-13 01:05 -------- d-----w- c:\windows\system32\EventProviders
2009-07-13 01:03 . 2009-04-11 06:28 2241536 ----a-w- c:\windows\system32\msi.dll
2009-07-13 01:02 . 2009-04-11 06:32 223208 ----a-w- c:\windows\system32\drivers\netio.sys
2009-07-13 01:01 . 2009-04-11 06:28 532992 ----a-w- c:\windows\system32\wpcao.dll
2009-07-13 01:00 . 2009-04-11 06:28 705536 ----a-w- c:\windows\system32\SmiEngine.dll
2009-07-13 01:00 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll
2009-07-13 01:00 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2009-07-13 01:00 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll
2009-07-12 18:30 . 2009-07-12 18:30 -------- d-----w- c:\windows\BDOSCAN8
2009-07-12 14:13 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\programdata\Malwarebytes
2009-07-12 14:13 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-12 10:42 . 2009-07-12 19:55 -------- d-----w- c:\program files\Navilog1
2009-06-16 20:04 . 2009-06-16 20:04 -------- d-----w- c:\programdata\WindowsSearch
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-13 09:21 . 2008-09-22 23:51 42654 ----a-w- c:\programdata\nvModes.dat
2009-07-13 09:15 . 2008-07-02 16:10 669890 ----a-w- c:\windows\system32\perfh00C.dat
2009-07-13 09:15 . 2008-07-02 16:10 123896 ----a-w- c:\windows\system32\perfc00C.dat
2009-07-13 09:04 . 2009-01-21 02:35 81984 ----a-w- c:\windows\system32\bdod.bin
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-07-13 09:03 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-07-13 09:01 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-07-13 08:55 . 2008-09-22 23:59 -------- d-----w- c:\programdata\NVIDIA
2009-06-11 17:45 . 2008-07-02 07:55 -------- d-----w- c:\programdata\Microsoft Help
2009-06-11 17:42 . 2008-07-02 07:32 -------- d-----w- c:\program files\Microsoft Works
2009-06-11 17:01 . 2008-04-23 16:34 192512 ----a-w- c:\windows\system32\txmlutil.dll
2009-06-11 17:01 . 2008-08-12 16:40 242184 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys
2009-06-11 17:01 . 2008-08-12 16:40 111112 ----a-w- c:\windows\system32\drivers\bdfm.sys
2009-06-11 05:42 . 2009-06-11 05:39 -------- d-----w- c:\programdata\BitDefender
2009-06-11 05:39 . 2009-01-16 15:26 -------- d-----w- c:\program files\Common Files\BitDefender
2009-06-11 05:39 . 2009-06-11 05:39 -------- d-----w- c:\program files\BitDefender
2009-05-18 16:45 . 2008-07-02 07:59 -------- d-----w- c:\program files\Common Files\Adobe
2009-05-18 15:25 . 2008-07-02 08:18 -------- d-----w- c:\program files\Java
2009-05-09 05:50 . 2009-06-11 16:37 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-09 05:34 . 2009-06-11 16:37 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-05-06 11:14 . 2009-05-06 11:14 32 ----a-w- c:\programdata\ezsid.dat
2009-04-30 14:58 . 2009-04-30 14:57 339968 ----a-w- c:\windows\system32\pythoncom25.dll
2009-04-30 14:58 . 2009-04-30 14:57 2117632 ----a-w- c:\windows\system32\python25.dll
2009-04-30 14:58 . 2009-04-30 14:57 114688 ----a-w- c:\windows\system32\pywintypes25.dll
2009-04-23 12:15 . 2009-06-11 16:37 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-23 12:14 . 2009-06-11 16:38 623616 ----a-w- c:\windows\system32\localspl.dll
2009-04-21 11:39 . 2009-06-11 16:38 2034688 ----a-w- c:\windows\system32\win32k.sys
2008-07-02 16:13 . 2008-07-02 16:13 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.
((((((((((((((((((((((((((((( SnapShot@2009-07-12_22.12.03 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-13 01:03 . 2009-04-11 06:28 52224 c:\windows\winsxs\x86_wudfusbcciddriver.inf_31bf3856ad364e35_6.0.6002.18005_none_646528b4fed68d6e\WUDFUsbccidDriver.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 54272 c:\windows\winsxs\x86_wsdscdrv.inf_31bf3856ad364e35_6.0.6002.18005_none_d229bfffc6a32553\WSDScPrx.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 56320 c:\windows\winsxs\x86_wsdprint.inf_31bf3856ad364e35_6.0.6002.18005_none_173ab75eae68bace\WSDPrPxy.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 16896 c:\windows\winsxs\x86_wsdprint.inf_31bf3856ad364e35_6.0.6002.18005_none_173ab75eae68bace\WSDPrint.sys
+ 2009-07-13 01:02 . 2009-02-18 18:39 23408 c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6002.18005_none_57f9c58d7a0eaddb\XamlViewer_v0300.exe
+ 2009-07-13 01:02 . 2009-02-18 18:39 94208 c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6002.18005_none_fc07886f78f1dcd7\WindowsFormsIntegration.dll
+ 2009-07-13 01:02 . 2009-02-18 18:39 98304 c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6002.18005_none_5efd9a79981257bd\UIAutomationTypes.dll
+ 2009-07-13 01:02 . 2009-02-18 18:39 40960 c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6002.18005_none_06884a618813ae63\UIAutomationProvider.dll
+ 2009-07-13 01:02 . 2009-02-18 18:39 35680 c:\windows\winsxs\x86_wpf-terminalserverwpfwrapperexe_31bf3856ad364e35_6.0.6002.18005_none_264ab896c8c14f1a\TsWpfWrp.exe
+ 2009-07-13 01:03 . 2009-02-18 18:39 41344 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6002.18005_none_2c768fb876f0e8b7\PresentationHostProxy.dll
+ 2009-07-13 01:02 . 2009-02-18 18:39 43904 c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6002.18005_none_07850fdb0f4fdd06\PresentationFontCache.exe
+ 2009-07-13 01:03 . 2009-02-18 18:39 68960 c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6002.18005_none_ad9c8bf401cf9f35\PenIMC.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 39936 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdUsb.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 60928 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdMtpUS.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 66560 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdMtpIP.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 33280 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdConns.dll
+ 2009-07-13 01:01 . 2009-04-11 04:42 31616 c:\windows\winsxs\x86_winusb.inf_31bf3856ad364e35_6.0.6002.18005_none_f9e05d9212c3259d\winusb.sys
+ 2009-07-13 01:03 . 2009-04-11 06:27 87552 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\SearchFilterHost.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 71680 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\propdefs.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 43008 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\msstrc.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 33280 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\mssprxy.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 87040 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\mssitlb.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 11776 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\msshooks.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 60416 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\msscntrs.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 35328 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\msscb.dll
+ 2009-01-21 02:10 . 2008-05-27 04:59 18904 c:\windows\winsxs\x86_windowssearchengine..uredqueryschema.bin_31bf3856ad364e35_7.0.6002.18005_none_8ae0ca49e0ec3b69\StructuredQuerySchemaTrivial.bin
+ 2009-07-13 01:02 . 2009-04-11 06:28 13312 c:\windows\winsxs\x86_windowssearch-wtrservicingsupport_31bf3856ad364e35_7.0.6002.18005_none_1828286a1e96a1f4\WSWTRSvc.exe
+ 2009-07-13 01:01 . 2009-04-11 04:42 73216 c:\windows\winsxs\x86_wdma_usb.inf_31bf3856ad364e35_6.0.6002.18005_none_6f0354adb3fcb0ad\USBAUDIO.sys
+ 2009-07-13 01:02 . 2009-02-18 18:38 18288 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6002.18005_none_a7c97e5948c03629\ServiceMonikerSupport.dll
+ 2009-07-13 01:03 . 2009-02-18 18:38 99680 c:\windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6002.18005_none_a5d273d4acc201ce\infocardapi.dll
+ 2009-07-13 01:01 . 2009-04-11 04:42 31616 c:\windows\winsxs\x86_wceusbsh.inf_31bf3856ad364e35_6.0.6002.18005_none_20c50bf85340ec11\winusb.sys
+ 2009-07-13 01:02 . 2009-04-11 04:42 65536 c:\windows\winsxs\x86_usbstor.inf_31bf3856ad364e35_6.0.6002.18005_none_4a71c7c294f4e68f\USBSTOR.SYS
+ 2008-01-21 02:23 . 2008-01-21 02:23 23552 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbuhci.sys
+ 2009-07-13 01:01 . 2009-04-11 04:42 19456 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbohci.sys
+ 2009-07-13 01:02 . 2009-04-11 04:42 39936 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbehci.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 15872 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\hcrstco.dll
+ 2009-07-13 01:01 . 2009-04-11 04:38 30208 c:\windows\winsxs\x86_usbccid.inf_31bf3856ad364e35_6.0.6002.18005_none_39242ea8a946a368\usbccid.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 73216 c:\windows\winsxs\x86_usb.inf_31bf3856ad364e35_6.0.6002.18005_none_cce3e0020b941ebb\usbccgp.sys
+ 2009-07-13 01:01 . 2009-04-11 04:42 31616 c:\windows\winsxs\x86_transfercable.inf_31bf3856ad364e35_6.0.6002.18005_none_628b1c3d8ef9a255\x86\winusb.sys
+ 2009-07-13 01:01 . 2009-04-11 05:06 19968 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\WSDScan.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 89088 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\wiafbdrv.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 35328 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\usbscan.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 14848 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\scsiscan.sys
+ 2009-07-13 01:01 . 2009-04-11 04:39 11776 c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6002.18005_none_a627020ee70bbf15\sffp_sd.sys
+ 2009-07-13 01:01 . 2009-04-11 04:39 12288 c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6002.18005_none_a627020ee70bbf15\sffp_mmc.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 13312 c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6002.18005_none_a627020ee70bbf15\sffdisk.sys
+ 2006-11-02 12:34 . 2006-11-02 12:34 11368 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MsMpLics.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 58936 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpRtPlug.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 90680 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpOAV.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 16488 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpAsDesc.dll
+ 2009-07-13 01:02 . 2009-04-11 04:19 89088 c:\windows\winsxs\x86_sdbus.inf_31bf3856ad364e35_6.0.6002.18005_none_73ce35cfc778dd26\sdbus.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 82408 c:\windows\winsxs\x86_sbp2.inf_31bf3856ad364e35_6.0.6002.18005_none_47241df8f34504ba\sbp2port.sys
+ 2009-07-13 01:01 . 2009-03-30 04:42 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6002.18005_none_ea0ad48568496bd5\RegSvcs.exe
+ 2009-07-13 01:01 . 2009-03-30 04:42 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6002.18005_none_16efa9df15d67325\RegAsm.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 69632 c:\windows\winsxs\x86_pnpxassoc_31bf3856ad364e35_6.0.6002.18005_none_346f5d3f6c9701f6\PNPXAssoc.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 17408 c:\windows\winsxs\x86_ntprint.inf_31bf3856ad364e35_6.0.6002.18005_none_3cec160db7d4ac84\I386\PJLMON.DLL
+ 2008-01-21 02:24 . 2008-01-21 02:24 17920 c:\windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5\wfapigp.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 64000 c:\windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5\mpsdrv.sys
+ 2008-01-21 02:24 . 2008-01-21 02:24 87552 c:\windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5\icfupgd.dll
+ 2009-07-13 01:01 . 2009-04-11 04:46 15872 c:\windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.0.6002.18005_none_c9ae083642ee6e54\usb8023x.sys
+ 2009-07-13 01:01 . 2009-04-11 04:46 33280 c:\windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.0.6002.18005_none_c9ae083642ee6e54\rndismpx.sys
+ 2008-01-21 02:24 . 2008-01-21 02:24 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6002.18005_none_6862e2e7643773d9\SharedReg12.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6002.18005_none_8199f0814373a5b3\sbscmp20_mscorwks.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6002.18005_none_54ad0b7a61344e8c\sbscmp20_mscorlib.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6002.18005_none_76f179ae021db881\sbscmp10.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 85320 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_29b27e22fffa4776\PerfCounter.dll
+ 2009-07-13 01:03 . 2009-03-30 04:42 97592 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_779867b84af56065\ngen.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 79696 c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6002.18005_none_3d7a6880ab163624\NETFXSBS10.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 66368 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_1fd1ab49e8ca6ebb\mscorsvw.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 74048 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_118cda1df5183636\mscorsec.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 93504 c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6002.18005_none_a96e1e1ec6870b85\mscormmc.dll
+ 2009-07-13 01:03 . 2009-03-30 04:42 90960 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_c2ba992d4a006fcd\mscorld.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 80720 c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6002.18005_none_c00e966deeec7579\mscories.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 43344 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_ea720753707d6a51\mscorie.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 80208 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_6ccb593bc60a1852\mscordbc.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 15688 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_02ace91f0aebe7d3\fusion.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 33080 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6002.18005_none_cd77f4151b8ac157\dw20.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 93512 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6002.18005_none_7a6b6f7c5a1bb639\dfshim.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 59720 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_882bc28c54dfc639\dfdll.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 32064 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6002.18005_none_e59ba05e346044a2\cvtres.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 77112 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6002.18005_none_fe5428b22d6c0e79\csc.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 86360 c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_b2c317a7c345a801\CORPerfMonExt.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 30528 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_c4c45c1c8c9acff0\aspnet_wp.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 31048 c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_80f871a1c32de056\aspnet_state.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 30024 c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_120341a3224c03b8\aspnet_regiis.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 30552 c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_dd85cceefd0a877e\Aspnet_perf.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 94544 c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_909e22e3d3759899\MmcAspExt.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 14168 c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_dd58f4996955bca7\aspnet_isapi.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 18760 c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_d52bb06f58344ba9\aspnet_filter.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 55616 c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_c512442c6b4566d7\AppLaunch.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 95544 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_38d775cdebe1fba0\alink.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 20024 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\viaide.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 43496 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\pciidex.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 14312 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\pciide.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 27112 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\msahci.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 17976 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\intelide.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 19000 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\cmdide.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 19944 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 17976 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\amdide.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 17464 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\aliide.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 93160 c:\windows\winsxs\x86_msdsm.inf_31bf3856ad364e35_6.0.6002.18005_none_cc32bbc0d8ad5cc9\msdsm.sys
+ 2009-07-13 01:01 . 2009-03-30 04:42 69632 c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6002.18005_none_810e9dd9b189c19e\MSBuild.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 40960 c:\windows\winsxs\x86_microsoft.windows.h..uetooth-driverclass_31bf3856ad364e35_6.1.6002.18005_none_4eff3095feca167f\bthserv.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 45568 c:\windows\winsxs\x86_microsoft.windows.h..uetooth-driverclass_31bf3856ad364e35_6.1.6002.18005_none_4eff3095feca167f\bthci.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 20992 c:\windows\winsxs\x86_microsoft-windows-wsd-challengecomponent_31bf3856ad364e35_6.0.6002.18005_none_2663224fa076d2c5\wsdchngr.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 90112 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\WindowsBase.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 10240 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\UIAutomationTypes.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 12288 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\UIAutomationClientsideProviders.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 61440 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\System.Speech.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 28672 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\System.Printing.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 40960 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\ReachFramework.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 53248 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\PresentationBuildTasks.resources.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 94720 c:\windows\winsxs\x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6002.18005_none_4cec3f51e92bbb79\PortableDeviceClassExtension.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 47104 c:\windows\winsxs\x86_microsoft-windows-wmiperf_31bf3856ad364e35_6.0.6002.18005_none_a1858d34af79a11c\WmiPerfInst.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 91136 c:\windows\winsxs\x86_microsoft-windows-wmiperf_31bf3856ad364e35_6.0.6002.18005_none_a1858d34af79a11c\WmiPerfClass.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 61952 c:\windows\winsxs\x86_microsoft-windows-wmi-text-encoding_31bf3856ad364e35_6.0.6002.18005_none_bb6ce01939326381\wmi2xml.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 36864 c:\windows\winsxs\x86_microsoft-windows-wmi-snmp-provider_31bf3856ad364e35_6.0.6002.18005_none_aca6f795c3e189c2\snmpthrd.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 35840 c:\windows\winsxs\x86_microsoft-windows-wmi-krnlprov-provider_31bf3856ad364e35_6.0.6002.18005_none_e59c3d0bf238b906\KrnlProv.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 83968 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\wmiutils.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 74752 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\WMICOOKR.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 49152 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\wbemsvc.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 30208 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\wbemprox.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 37888 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\unsecapp.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 57856 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\NCProv.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 19968 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\mofcomp.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 90112 c:\windows\winsxs\x86_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.0.6002.18005_none_a29e34dbf412e9da\WmiApRpl.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 77824 c:\windows\winsxs\x86_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.0.6002.18005_none_a29e34dbf412e9da\WinMgmt.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 68096 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84\wlanhlp.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 64512 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84\wlanapi.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 15181 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84\gatherWirelessInfo.vbs
+ 2009-07-13 01:01 . 2009-04-11 06:28 83456 c:\windows\winsxs\x86_microsoft-windows-wlangpclient_31bf3856ad364e35_6.0.6002.18005_none_ba90c039cdbb04a6\wlgpclnt.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 31232 c:\windows\winsxs\x86_microsoft-windows-whea-troubleshooter_31bf3856ad364e35_6.0.6002.18005_none_b84486b94895774d\whealogr.dll
+ 2009-07-13 01:03 . 2009-04-11 06:28 61440 c:\windows\winsxs\x86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6002.18005_none_95b8e24b4f6105d0\davclnt.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 69120 c:\windows\winsxs\x86_microsoft-windows-wcn-config-registrar_31bf3856ad364e35_6.0.6002.18005_none_2f082cdcbf0b91f1\fdWCN.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 38760 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\WsatConfig.resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 36864 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\System.ServiceModel.Install.Resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 12288 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\System.IO.Log.Resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 57344 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\System.IdentityModel.Selectors.Resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 65536 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\System.IdentityModel.Resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 17256 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\SMSvcHost.resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 34672 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\ServiceModelReg.resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 19456 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\Microsoft.Transactions.Bridge.Resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 42856 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\ComSvcConfig.resources.dll
+ 2009-07-13 01:01 . 2009-04-11 04:22 33280 c:\windows\winsxs\x86_microsoft-windows-watchdog_31bf3856ad364e35_6.0.6002.18005_none_62546148a69ddcfd\watchdog.sys
+ 2006-11-02 08:48 . 2006-11-02 09:46 41984 c:\windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6002.18005_none_570ee68146eaef3c\wabimp.dll
+ 2006-11-02 08:48 . 2006-11-02 09:45 66048 c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469ae\wabmig.exe
+ 2006-11-02 08:48 . 2006-11-02 09:46 33280 c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469ae\wabfind.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 32768 c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.0.6002.18005_none_a23e523a31a1ed4c\wups2.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 43008 c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.0.6002.18005_none_a23e523a31a1ed4c\wuauclt.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34 12800 c:\windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753\wiatrace.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 32768 c:\windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753\wiarpc.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 23040 c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.0.6002.18005_none_884f8c864562464f\wups.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 80384 c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.0.6002.18005_none_884f8c864562464f\wudriver.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 13312 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WsmRes.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 54784 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WsmProv.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 30720 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WSManHTTPConfig.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 69120 c:\windows\winsxs\x86_microsoft-windows-vssapi_31bf3856ad364e35_6.0.6002.18005_none_d6d2575c7ee3769a\vsstrace.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 19968 c:\windows\winsxs\x86_microsoft-windows-vssapi_31bf3856ad364e35_6.0.6002.18005_none_d6d2575c7ee3769a\eventcls.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 19968 c:\windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.0.6002.18005_none_6cd64babf7d06785\vdsldr.exe
+ 2008-01-21 02:25 . 2008-01-21 02:25 37888 c:\windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.0.6002.18005_none_6cd64babf7d06785\vds_ps.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 20480 c:\windows\winsxs\x86_microsoft-windows-version_31bf3856ad364e35_6.0.6002.18005_none_16e9c83b4e078740\version.dll
+ 2009-07-13 01:03 . 2009-04-11 06:27 57856 c:\windows\winsxs\x86_microsoft-windows-v..ck-uninstallremoval_31bf3856ad364e35_6.0.6002.18005_none_825070d3d8da2dcc\compcln.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 98816 c:\windows\winsxs\x86_microsoft-windows-userpowermanagement_31bf3856ad364e35_6.0.6002.18005_none_a505176cf9fa2abd\powrprof.dll
+ 2009-07-13 01:01 . 2009-04-11 04:42 25856 c:\windows\winsxs\x86_microsoft-windows-usbcamd_31bf3856ad364e35_6.0.6002.18005_none_a173da9c755cd9a9\USBCAMD2.sys
+ 2009-07-13 01:01 . 2009-04-11 04:42 25856 c:\windows\winsxs\x86_microsoft-windows-usbcamd_31bf3856ad364e35_6.0.6002.18005_none_a173da9c755cd9a9\USBCAMD.sys
+ 2006-11-02 08:58 . 2006-11-02 09:46 34816 c:\windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805\uicom.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 15360 c:\windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805\serialui.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 39424 c:\windows\winsxs\x86_microsoft-windows-trustedinstaller_31bf3856ad364e35_6.0.6002.18005_none_92f8ac904a488147\TrustedInstaller.exe
+ 2009-07-13 01:01 . 2009-04-11 06:27 44032 c:\windows\winsxs\x86_microsoft-windows-trustedinstaller_31bf3856ad364e35_6.0.6002.18005_none_92f8ac904a488147\cbsra.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 38400 c:\windows\winsxs\x86_microsoft-windows-terminalservices-theme_31bf3856ad364e35_6.0.6002.18005_none_d7d188e877f12210\TSTheme.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 71168 c:\windows\winsxs\x86_microsoft-windows-telnet-server-tlntsvr_31bf3856ad364e35_6.0.6002.18005_none_c0b01f5fedf47482\tlntsvr.exe
+ 2009-07-13 01:03 . 2009-04-11 06:28 70656 c:\windows\winsxs\x86_microsoft-windows-telnet-client_31bf3856ad364e35_6.0.6002.18005_none_ba1d0a71222c35d2\telnet.exe
+ 2009-07-13 01:01 . 2009-04-11 04:45 72192 c:\windows\winsxs\x86_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.0.6002.18005_none_ec294157d9377403\tdx.sys
+ 2008-01-21 02:24 . 2008-01-21 02:24 22528 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6002.18005_none_63710ee88c7b7604\netiougc.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 49664 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6002.18005_none_63710ee88c7b7604\netiomig.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 17920 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\ROUTE.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 27136 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\NETSTAT.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 11264 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\MRINFO.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 10240 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\finger.exe
+ 2006-11-02 08:58 . 2006-11-02 09:44 19968 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\ARP.EXE
+ 2009-07-13 01:01 . 2009-04-11 06:28 47104 c:\windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.0.6002.18005_none_199d015da1ba0131\NBMapTIP.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18005_none_31d980c8c2ca01c9\tsgqec.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 67584 c:\windows\winsxs\x86_microsoft-windows-t..rvices-registryapis_31bf3856ad364e35_6.0.6002.18005_none_a63da0de1f1d789f\regapi.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 68096 c:\windows\winsxs\x86_microsoft-windows-t..platform-input-core_31bf3856ad364e35_6.0.6002.18005_none_d2fbc584d9efb14a\TabSvc.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 19456 c:\windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6002.18005_none_41978c01c3760094\TabIpsps.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 69120 c:\windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6002.18005_none_41978c01c3760094\IpsPlugin.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 42496 c:\windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6002.18005_none_41978c01c3760094\IpsMigrationPlugin.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 66048 c:\windows\winsxs\x86_microsoft-windows-t..nalservices-sysprep_31bf3856ad364e35_6.0.6002.18005_none_33850f5d456366c5\tssysprep.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 63488 c:\windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6002.18005_none_4fc7c6a11e395b4a\tscupgrd.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 19456 c:\windows\winsxs\x86_microsoft-windows-t..mework-msctfmonitor_31bf3856ad364e35_6.0.6002.18005_none_87278fc545db0c65\MsCtfMonitor.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 85504 c:\windows\winsxs\x86_microsoft-windows-t..esframework-msctfui_31bf3856ad364e35_6.0.6002.18005_none_92f60bbcd34865d1\msctfui.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 10752 c:\windows\winsxs\x86_microsoft-windows-t..chxreadingstringime_31bf3856ad364e35_6.0.6002.18005_none_11a0c8d6ee137a2f\CHxReadingStringIME.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 31232 c:\windows\winsxs\x86_microsoft-windows-t..cesframework-msimtf_31bf3856ad364e35_6.0.6002.18005_none_d370fd68e7be1c7e\msimtf.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 84992 c:\windows\winsxs\x86_microsoft-windows-t..cesframework-msctfp_31bf3856ad364e35_6.0.6002.18005_none_ccc8d878ec130fe3\msctfp.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 84992 c:\windows\winsxs\x86_microsoft-windows-t..ces-serverlicensing_31bf3856ad364e35_6.0.6002.18005_none_f3b4efea329a398a\mstlsapi.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 91648 c:\windows\winsxs\x86_microsoft-windows-t..-platform-libraries_31bf3856ad364e35_6.0.6002.18005_none_ec5c63f1986ff65e\IPHLPAPI.DLL
+ 2008-01-21 02:25 . 2008-01-21 02:25 14848 c:\windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6002.18005_none_48cb48f3b060c975\srdelayed.exe
+ 2008-01-21 02:25 . 2008-01-21 02:25 40960 c:\windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6002.18005_none_48cb48f3b060c975\srclient.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 11776 c:\windows\winsxs\x86_microsoft-windows-sysprep-spwinsat_31bf3856ad364e35_6.0.6002.18005_none_551ffa0d7aa481b0\spwinsat.dll
+ 2009-07-13 01:03 . 2009-04-11 06:28 26112 c:\windows\winsxs\x86_microsoft-windows-syshiper_31bf3856ad364e35_6.0.6002.18005_none_77fb27ec5025e18b\syshiper.exe
+ 2009-07-13 01:01 . 2009-04-11 04:42 52992 c:\windows\winsxs\x86_microsoft-windows-streamclass_31bf3856ad364e35_6.0.6002.18005_none_60500ebd34c47ac8\stream.sys
+ 2009-07-13 01:01 . 2009-04-11 06:28 55808 c:\windows\winsxs\x86_microsoft-windows-storprop_31bf3856ad364e35_6.0.6002.18005_none_283e2d832e0b80a9\Storprop.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 28160 c:\windows\winsxs\x86_microsoft-windows-spp-main_31bf3856ad364e35_6.0.6002.18005_none_e6326fcda9fe9b59\sxproxy.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 99328 c:\windows\winsxs\x86_microsoft-windows-speechengine_31bf3856ad364e35_6.0.6002.18005_none_f0a9964297040c1c\spsrx.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 43520 c:\windows\winsxs\x86_microsoft-windows-speechcommon_31bf3856ad364e35_6.0.6002.18005_none_d7edc1a2cfccb087\SCGMigPlugin.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 16384 c:\windows\winsxs\x86_microsoft-windows-speech-userexperience_31bf3856ad364e35_6.0.6002.18005_none_1df5691748ee6b08\SpeechUXPS.DLL
+ 2009-07-13 01:02 . 2009-04-11 06:28 50688 c:\windows\winsxs\x86_microsoft-windows-snmp-winsnmp-api_31bf3856ad364e35_6.0.6002.18005_none_e238f61dbfc43dba\wsnmp32.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 47616 c:\windows\winsxs\x86_microsoft-windows-snmp-agent-service_31bf3856ad364e35_6.0.6002.18005_none_f9205a735564a418\snmp.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 64000 c:\windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.18005_none_ae26210916536b06\smss.exe
+ 2009-07-13 01:02 . 2009-04-11 04:15 98816 c:\windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6002.18005_none_05c1a7400d48e203\srvnet.sys
+ 2009-07-13 01:01 . 2009-04-11 06:28 83456 c:\windows\winsxs\x86_microsoft-windows-smbhelperclasses_31bf3856ad364e35_6.0.6002.18005_none_ec289e8bd3444ca6\SMBHelperClass.dll
+ 2009-07-13 01:02 . 2009-04-11 04:14 79360 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6002.18005_none_8cc66ea786e7ac42\mrxsmb20.sys
+ 2009-07-13 01:01 . 2009-04-11 06:28 95232 c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005_none_19e8b8b06714b3ae\SCardSvr.dll
+ 2006-11-02 08:43 . 2006-11-02 09:46 66560 c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005_none_19e8b8b06714b3ae\SCardDlg.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 40448 c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005_none_19e8b8b06714b3ae\certprop.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 11776 c:\windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6002.18005_none_d0c824c923c9e622\sbunattend.exe
+ 2006-11-02 12:35 . 2006-11-02 12:35 66048 c:\windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6002.18005_none_d0c824c923c9e622\sbdrop.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 79872 c:\windows\winsxs\x86_microsoft-windows-shmig_31bf3856ad364e35_6.0.6002.18005_none_6189f2a77440c81c\shmig.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 62976 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\windeploy.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 47616 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\wdsutil.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 94720 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\sysprep.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 54272 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\spprgrss.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 42496 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\oobeldr.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 31232 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\diagER.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 52736 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\audit.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 13312 c:\windows\winsxs\x86_microsoft-windows-servicepackcoordinator_31bf3856ad364e35_6.0.6002.18005_none_36ac9b2124b2bf26\spcmsg.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 69632 c:\windows\winsxs\x86_microsoft-windows-sendmail_31bf3856ad364e35_6.0.6002.18005_none_5cd4f36d1924f929\sendmail.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 61440 c:\windows\winsxs\x86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6beaf3aa18d\wscsvc.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 17920 c:\windows\winsxs\x86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6beaf3aa18d\wscisvif.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 33280 c:\windows\winsxs\x86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6beaf3aa18d\wscapi.dll
+ 2009-07-13 01:03 . 2009-04-11 06:28 67584 c:\windows\winsxs\x86_microsoft-windows-security-licensing-wmi_31bf3856ad364e35_6.0.6002.18005_none_50382e6ff6c7e8f5\slwmi.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 12288 c:\windows\winsxs\x86_microsoft-windows-security-licensing-wga_31bf3856ad364e35_6.0.6002.18005_none_5032e2f3f6cc83e3\slwga.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 42496 c:\windows\winsxs\x86_microsoft-windows-security-licensing-slc_31bf3856ad364e35_6.0.6002.18005_none_5062f685f6a7c614\slcinst.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 29184 c:\windows\winsxs\x86_microsoft-windows-search-profilenotify_31bf3856ad364e35_7.0.6002.18005_none_da55184c8a60e444\wsepno.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 36864 c:\windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6002.18005_none_4a53cc21fd7bbcc7\wshcon.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 32768 c:\windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6002.18005_none_4a53cc21fd7bbcc7\dispex.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 88064 c:\windows\winsxs\x86_microsoft-windows-scanprofiles_31bf3856ad364e35_6.0.6002.18005_none_4952ad655043b399\wiascanprofiles.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 98816 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.18005_none_26f5355863ea5f18\sdshext.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 60928 c:\windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6002.18005_none_8c636822b2598b6a\SLUINotify.dll
+ 2009-07-13 01:02 . 2009-02-18 18:39 92918 c:\windows\winsxs\x86_microsoft-windows-s..ity-licensing-tools_31bf3856ad364e35_6.0.6002.18005_none_c7357f7a65060ad7\slmgr.vbs
+ 2009-07-13 01:02 . 2009-04-11 06:28 90112 c:\windows\winsxs\x86_microsoft-windows-s..ing-shell-extension_31bf3856ad364e35_6.0.6002.18005_none_0c6d503021655122\wshext.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 79872 c:\windows\winsxs\x86_microsoft-windows-s..entication-usermode_31bf3856ad364e35_6.0.6002.18005_none_3c0d3c3f7176376a\authz.dll
+ 2009-07-13 01:01 . 2009-04-11 04:46 15872 c:\windows\winsxs\x86_microsoft-windows-rndis-usb-microport_31bf3856ad364e35_6.0.6002.18005_none_c6d83e044fcd06f5\usb8023.sys
+ 2009-07-13 01:01 . 2009-04-11 04:46 33280 c:\windows\winsxs\x86_microsoft-windows-rndis-miniport_31bf3856ad364e35_6.0.6002.18005_none_e31a28b989072805\RNDISMP.sys
+ 2006-11-02 08:57 . 2006-11-02 09:46 14848 c:\windows\winsxs\x86_microsoft-windows-rmcast_31bf3856ad364e35_6.0.6002.18005_none_5669453d850ccabc\wshrm.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 69632 c:\windows\winsxs\x86_microsoft-windows-rastapi_31bf3856ad364e35_6.0.6002.18005_none_10cfa36576fecc90\rastapi.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 36352 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6002.18005_none_0f010d1ce79c5ae9\rtutils.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 29696 c:\windows\winsxs\x86_microsoft-windows-rasifmon_31bf3856ad364e35_6.0.6002.18005_none_ccbb42deea504b23\ifmon.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 47616 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmutil.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 14336 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmstplua.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 84992 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmstp.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 26112 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmpbk32.dll
+ 2009-07-13 01:01 . 2009-04-11 06:27 49152 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmmon32.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 56320 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmmigr.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 32768 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmlua.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 72704 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmdl32.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 31232 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmcfg32.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 39424 c:\windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.0.6002.18005_none_713248d4a5d30dec\rasphone.exe
+ 2009-07-13 01:01 . 2009-04-11 06:27 16896 c:\windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.0.6002.18005_none_713248d4a5d30dec\rasdial.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 62464 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\wanarp.sys
+ 2006-11-02 08:58 . 2006-11-02 09:46 22016 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rasser.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46 32768 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rasmxs.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 52736 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rasdiag.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 81408 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rascfg.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 49664 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\ndproxy.sys
+ 2008-01-21 02:24 . 2008-01-21 02:24 20992 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\ndistapi.sys
+ 2009-07-13 01:01 . 2009-04-11 04:46 69120 c:\windows\winsxs\x86_microsoft-windows-rasbase-rassstp_31bf3856ad364e35_6.0.6002.18005_none_9bbd28fee50e4840\rassstp.sys
+ 2009-07-13 01:01 . 2009-04-11 04:46 41472 c:\windows\winsxs\x86_microsoft-windows-rasbase-raspppoe_31bf3856ad364e35_6.0.6002.18005_none_581efd2c97b9a460\raspppoe.sys
+ 2009-07-13 01:02 . 2009-04-11 06:27 61952 c:\windows\winsxs\x86_microsoft-windows-r..-commandline-editor_31bf3856ad364e35_6.0.6002.18005_none_337fad0927d14431\reg.exe
+ 2006-11-02 08:57 . 2006-11-02 09:46 13824 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\wshqos.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46 33280 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\traffic.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46 15360 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\pacerprf.dll
+ 2009-07-13 01:01 . 2009-04-11 04:45 72192 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\pacer.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 50664 c:\windows\winsxs\x86_microsoft-windows-pshed_31bf3856ad364e35_6.0.6002.18005_none_5dde5c5c2a365a60\PSHED.DLL
+ 2008-01-21 02:24 . 2008-01-21 02:24 29184 c:\windows\winsxs\x86_microsoft-windows-profsvc_31bf3856ad364e35_6.0.6002.18005_none_fd9cd0792fced6f5\profprov.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 24064 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\wbhstipm.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 22528 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\wbhst_pm.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 47616 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\w3wphost.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 15872 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\w3tp.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 19968 c:\windows\winsxs\x86_microsoft-windows-processmodel_31bf3856ad364e35_6.0.6002.18005_none_b8ad073aa1e5201e\w3wp.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 52224 c:\windows\winsxs\x86_microsoft-windows-processmodel_31bf3856ad364e35_6.0.6002.18005_none_b8ad073aa1e5201e\apphostsvc.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 97792 c:\windows\winsxs\x86_microsoft-windows-printing-oleprn_31bf3856ad364e35_6.0.6002.18005_none_7d1255665c646ab2\oleprn.dll
+ 2009-07-13 01:01 . 2009-04-11 06:27 33280 c:\windows\winsxs\x86_microsoft-windows-pnputil_31bf3856ad364e35_6.0.6002.18005_none_ff4f3b9db9a951ba\PnPutil.exe
+ 2006-11-02 08:33 . 2006-11-02 09:46 53248 c:\windows\winsxs\x86_microsoft-windows-pnphotplugui_31bf3856ad364e35_6.0.6002.18005_none_eaccaa9547e03a1f\hotplug.dll
+ 2009-07-13 01:01 . 2009-04-11 06:27 26112 c:\windows\winsxs\x86_microsoft-windows-pnphotplugui_31bf3856ad364e35_6.0.6002.18005_none_eaccaa9547e03a1f\DeviceEject.exe
+ 2008-01-21 02:23 . 2008-01-21 02:23 42496 c:\windows\winsxs\x86_microsoft-windows-pnpdevicemanager_31bf3856ad364e35_6.0.6002.18005_none_15c2137e1ca283f9\dmocx.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 46592 c:\windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.0.6002.18005_none_9df537379e15bb5c\pdhui.dll
+ 2009-07-13 01:02 . 2009-04-11 06:32 54248 c:\windows\winsxs\x86_microsoft-windows-partitionmanager_31bf3856ad364e35_6.0.6002.18005_none_e3878c97b7915bdf\partmgr.sys
+ 2008-01-21 02:25 . 2008-01-21 02:25 66048 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabElev.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 20480 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabDecorator.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 56320 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabContacts.dll
+ 2009-07-13 01:01 . 2009-04-11 06:27 58368 c:\windows\winsxs\x86_microsoft-windows-p..tomizationsnonwinpe_31bf3856ad364e35_6.0.6002.18005_none_cdba626f8c588d30\PnPUnattend.exe
+ 2008-01-21 02:25 . 2008-01-21 02:25 39424 c:\windows\winsxs\x86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.0.6002.18005_none_8cbddeb9c585058e\wpnpinst.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 15360 c:\windows\winsxs\x86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.0.6002.18005_none_8cbddeb9c585058e\inetppui.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 96256 c:\windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6002.18005_none_b5c807ab2d93d829\PlaMig.dll
+ 2006-11-02 09:15 . 2006-11-02 09:45 61440 c:\windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.0.6002.18005_none_f1eef3487a8e01f0\ntprint.exe
+ 2006-11-02 08:35 . 2006-11-02 09:46 35840 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfproc.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 28672 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfos.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 19968 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfnet.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 31744 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfdisk.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 39424 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfctrs.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 37888 c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6002.18005_none_3b5eb3c56e0bcf3e\printcom.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 26112 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.18005_none_2d991295d888a8b3\printfilterpipelineprxy.dll
+ 2006-11-02 08:35 . 2006-11-02 09:45 39936 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\typeperf.exe
+ 2006-11-02 08:35 . 2006-11-02 09:45 37376 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\relog.exe
+ 2009-07-13 01:02 . 2009-04-11 06:27 57344 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\logman.exe
+ 2006-11-02 08:35 . 2006-11-02 09:45 17408 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\diskperf.exe
+ 2006-11-02 09:15 . 2006-11-02 09:45 60416 c:\windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6002.18005_none_d83fb8abf30e1638\printui.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 64512 c:\windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6002.18005_none_d83fb8abf30e1638\findnetprinters.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 88576 c:\windows\winsxs\x86_microsoft-windows-ole-automation-legacy_31bf3856ad364e35_6.0.6002.18005_none_3bff339efed611ca\olepro32.dll
+ 2009-07-13 01:01 . 2009-04-11 06:27 35840 c:\windows\winsxs\x86_microsoft-windows-ocsetup_31bf3856ad364e35_6.0.6002.18005_none_e568ab025c6992bf\ocsetup.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 22016 c:\windows\winsxs\x86_microsoft-windows-o..inefiles-win32-apis_31bf3856ad364e35_6.0.6002.18005_none_ad5672dcf647053c\cscdll.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 31744 c:\windows\winsxs\x86_microsoft-windows-o..inefiles-win32-apis_31bf3856ad364e35_6.0.6002.18005_none_ad5672dcf647053c\cscapi.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 17408 c:\windows\winsxs\x86_microsoft-windows-ntvdm-vdmdbg_31bf3856ad364e35_6.0.6002.18005_none_50b897cb80d4ae0e\vdmdbg.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 13312 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\win87em.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 12704 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\WFWNET.DRV
+ 2008-01-21 02:24 . 2008-01-21 02:24 41984 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\vdmredir.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 47840 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\USER.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 13888 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\TOOLHELP.DLL
+ 2006-11-02 06:25 . 2006-09-18 21:43 18896 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\sysedit.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 11753 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\setver.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 46592 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\pmspl.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 24064 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\OLESVR.DLL
+ 2006-11-02 06:25 . 2006-09-18 21:43 82944 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\olecli.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 14848 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\ntvdmd.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:\windows\winsxs\x86_microsoft-windows-ntvdm-syste
ComboFix 09-07-12.01 - Daphné 13/07/2009 15:46.2.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3068.2036 [GMT 2:00]
Running from: c:\users\Daphné\Desktop\ComboFix.exe
Command switches used :: c:\users\Daphné\Desktop\CFscript.txt
AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
SP: BitDefender Antispyware *disabled* (Updated) {8B2012EC-32D4-494F-BC03-832DB3BDF911}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((( Files Created from 2009-06-13 to 2009-07-13 )))))))))))))))))))))))))))))))
.
2009-07-13 09:01 . 2009-07-13 09:02 -------- d-----w- c:\windows\system32\ca-ES
2009-07-13 09:01 . 2009-07-13 09:02 -------- d-----w- c:\windows\system32\eu-ES
2009-07-13 09:01 . 2009-07-13 09:02 -------- d-----w- c:\windows\system32\vi-VN
2009-07-13 01:05 . 2009-07-13 01:05 -------- d-----w- c:\windows\system32\EventProviders
2009-07-13 01:03 . 2009-04-11 06:28 2241536 ----a-w- c:\windows\system32\msi.dll
2009-07-13 01:02 . 2009-04-11 06:32 223208 ----a-w- c:\windows\system32\drivers\netio.sys
2009-07-13 01:01 . 2009-04-11 06:28 532992 ----a-w- c:\windows\system32\wpcao.dll
2009-07-13 01:00 . 2009-04-11 06:28 705536 ----a-w- c:\windows\system32\SmiEngine.dll
2009-07-13 01:00 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll
2009-07-13 01:00 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2009-07-13 01:00 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll
2009-07-12 18:30 . 2009-07-12 18:30 -------- d-----w- c:\windows\BDOSCAN8
2009-07-12 14:13 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-12 14:13 . 2009-07-12 14:13 -------- d-----w- c:\programdata\Malwarebytes
2009-07-12 14:13 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-12 10:42 . 2009-07-12 19:55 -------- d-----w- c:\program files\Navilog1
2009-06-16 20:04 . 2009-06-16 20:04 -------- d-----w- c:\programdata\WindowsSearch
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-13 09:21 . 2008-09-22 23:51 42654 ----a-w- c:\programdata\nvModes.dat
2009-07-13 09:15 . 2008-07-02 16:10 669890 ----a-w- c:\windows\system32\perfh00C.dat
2009-07-13 09:15 . 2008-07-02 16:10 123896 ----a-w- c:\windows\system32\perfc00C.dat
2009-07-13 09:04 . 2009-01-21 02:35 81984 ----a-w- c:\windows\system32\bdod.bin
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-07-13 09:03 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-07-13 09:03 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-07-13 09:01 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-07-13 08:55 . 2008-09-22 23:59 -------- d-----w- c:\programdata\NVIDIA
2009-06-11 17:45 . 2008-07-02 07:55 -------- d-----w- c:\programdata\Microsoft Help
2009-06-11 17:42 . 2008-07-02 07:32 -------- d-----w- c:\program files\Microsoft Works
2009-06-11 17:01 . 2008-04-23 16:34 192512 ----a-w- c:\windows\system32\txmlutil.dll
2009-06-11 17:01 . 2008-08-12 16:40 242184 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys
2009-06-11 17:01 . 2008-08-12 16:40 111112 ----a-w- c:\windows\system32\drivers\bdfm.sys
2009-06-11 05:42 . 2009-06-11 05:39 -------- d-----w- c:\programdata\BitDefender
2009-06-11 05:39 . 2009-01-16 15:26 -------- d-----w- c:\program files\Common Files\BitDefender
2009-06-11 05:39 . 2009-06-11 05:39 -------- d-----w- c:\program files\BitDefender
2009-05-18 16:45 . 2008-07-02 07:59 -------- d-----w- c:\program files\Common Files\Adobe
2009-05-18 15:25 . 2008-07-02 08:18 -------- d-----w- c:\program files\Java
2009-05-09 05:50 . 2009-06-11 16:37 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-09 05:34 . 2009-06-11 16:37 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-05-06 11:14 . 2009-05-06 11:14 32 ----a-w- c:\programdata\ezsid.dat
2009-04-30 14:58 . 2009-04-30 14:57 339968 ----a-w- c:\windows\system32\pythoncom25.dll
2009-04-30 14:58 . 2009-04-30 14:57 2117632 ----a-w- c:\windows\system32\python25.dll
2009-04-30 14:58 . 2009-04-30 14:57 114688 ----a-w- c:\windows\system32\pywintypes25.dll
2009-04-23 12:15 . 2009-06-11 16:37 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-23 12:14 . 2009-06-11 16:38 623616 ----a-w- c:\windows\system32\localspl.dll
2009-04-21 11:39 . 2009-06-11 16:38 2034688 ----a-w- c:\windows\system32\win32k.sys
2008-07-02 16:13 . 2008-07-02 16:13 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.
((((((((((((((((((((((((((((( SnapShot@2009-07-12_22.12.03 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-13 01:03 . 2009-04-11 06:28 52224 c:\windows\winsxs\x86_wudfusbcciddriver.inf_31bf3856ad364e35_6.0.6002.18005_none_646528b4fed68d6e\WUDFUsbccidDriver.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 54272 c:\windows\winsxs\x86_wsdscdrv.inf_31bf3856ad364e35_6.0.6002.18005_none_d229bfffc6a32553\WSDScPrx.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 56320 c:\windows\winsxs\x86_wsdprint.inf_31bf3856ad364e35_6.0.6002.18005_none_173ab75eae68bace\WSDPrPxy.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 16896 c:\windows\winsxs\x86_wsdprint.inf_31bf3856ad364e35_6.0.6002.18005_none_173ab75eae68bace\WSDPrint.sys
+ 2009-07-13 01:02 . 2009-02-18 18:39 23408 c:\windows\winsxs\x86_wpf-xamlviewer_31bf3856ad364e35_6.0.6002.18005_none_57f9c58d7a0eaddb\XamlViewer_v0300.exe
+ 2009-07-13 01:02 . 2009-02-18 18:39 94208 c:\windows\winsxs\x86_wpf-windowsformsintegration_31bf3856ad364e35_6.0.6002.18005_none_fc07886f78f1dcd7\WindowsFormsIntegration.dll
+ 2009-07-13 01:02 . 2009-02-18 18:39 98304 c:\windows\winsxs\x86_wpf-uiautomationtypes_31bf3856ad364e35_6.0.6002.18005_none_5efd9a79981257bd\UIAutomationTypes.dll
+ 2009-07-13 01:02 . 2009-02-18 18:39 40960 c:\windows\winsxs\x86_wpf-uiautomationprovider_31bf3856ad364e35_6.0.6002.18005_none_06884a618813ae63\UIAutomationProvider.dll
+ 2009-07-13 01:02 . 2009-02-18 18:39 35680 c:\windows\winsxs\x86_wpf-terminalserverwpfwrapperexe_31bf3856ad364e35_6.0.6002.18005_none_264ab896c8c14f1a\TsWpfWrp.exe
+ 2009-07-13 01:03 . 2009-02-18 18:39 41344 c:\windows\winsxs\x86_wpf-presentationhostproxy_31bf3856ad364e35_6.0.6002.18005_none_2c768fb876f0e8b7\PresentationHostProxy.dll
+ 2009-07-13 01:02 . 2009-02-18 18:39 43904 c:\windows\winsxs\x86_wpf-presentationfontcache_31bf3856ad364e35_6.0.6002.18005_none_07850fdb0f4fdd06\PresentationFontCache.exe
+ 2009-07-13 01:03 . 2009-02-18 18:39 68960 c:\windows\winsxs\x86_wpf-penimc_31bf3856ad364e35_6.0.6002.18005_none_ad9c8bf401cf9f35\PenIMC.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 39936 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdUsb.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 60928 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdMtpUS.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 66560 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdMtpIP.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 33280 c:\windows\winsxs\x86_wpdmtp.inf_31bf3856ad364e35_6.0.6002.18005_none_2185beaf83d2688d\WpdConns.dll
+ 2009-07-13 01:01 . 2009-04-11 04:42 31616 c:\windows\winsxs\x86_winusb.inf_31bf3856ad364e35_6.0.6002.18005_none_f9e05d9212c3259d\winusb.sys
+ 2009-07-13 01:03 . 2009-04-11 06:27 87552 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\SearchFilterHost.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 71680 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\propdefs.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 43008 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\msstrc.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 33280 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\mssprxy.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 87040 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\mssitlb.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 11776 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\msshooks.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 60416 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\msscntrs.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 35328 c:\windows\winsxs\x86_windowssearchengine_31bf3856ad364e35_7.0.6002.18005_none_3d746908b76294a3\msscb.dll
+ 2009-01-21 02:10 . 2008-05-27 04:59 18904 c:\windows\winsxs\x86_windowssearchengine..uredqueryschema.bin_31bf3856ad364e35_7.0.6002.18005_none_8ae0ca49e0ec3b69\StructuredQuerySchemaTrivial.bin
+ 2009-07-13 01:02 . 2009-04-11 06:28 13312 c:\windows\winsxs\x86_windowssearch-wtrservicingsupport_31bf3856ad364e35_7.0.6002.18005_none_1828286a1e96a1f4\WSWTRSvc.exe
+ 2009-07-13 01:01 . 2009-04-11 04:42 73216 c:\windows\winsxs\x86_wdma_usb.inf_31bf3856ad364e35_6.0.6002.18005_none_6f0354adb3fcb0ad\USBAUDIO.sys
+ 2009-07-13 01:02 . 2009-02-18 18:38 18288 c:\windows\winsxs\x86_wcf-m_svc_mon_sup_dll_31bf3856ad364e35_6.0.6002.18005_none_a7c97e5948c03629\ServiceMonikerSupport.dll
+ 2009-07-13 01:03 . 2009-02-18 18:38 99680 c:\windows\winsxs\x86_wcf-infocard_api_dll_31bf3856ad364e35_6.0.6002.18005_none_a5d273d4acc201ce\infocardapi.dll
+ 2009-07-13 01:01 . 2009-04-11 04:42 31616 c:\windows\winsxs\x86_wceusbsh.inf_31bf3856ad364e35_6.0.6002.18005_none_20c50bf85340ec11\winusb.sys
+ 2009-07-13 01:02 . 2009-04-11 04:42 65536 c:\windows\winsxs\x86_usbstor.inf_31bf3856ad364e35_6.0.6002.18005_none_4a71c7c294f4e68f\USBSTOR.SYS
+ 2008-01-21 02:23 . 2008-01-21 02:23 23552 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbuhci.sys
+ 2009-07-13 01:01 . 2009-04-11 04:42 19456 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbohci.sys
+ 2009-07-13 01:02 . 2009-04-11 04:42 39936 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\usbehci.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 15872 c:\windows\winsxs\x86_usbport.inf_31bf3856ad364e35_6.0.6002.18005_none_bfadd87f00af6ca2\hcrstco.dll
+ 2009-07-13 01:01 . 2009-04-11 04:38 30208 c:\windows\winsxs\x86_usbccid.inf_31bf3856ad364e35_6.0.6002.18005_none_39242ea8a946a368\usbccid.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 73216 c:\windows\winsxs\x86_usb.inf_31bf3856ad364e35_6.0.6002.18005_none_cce3e0020b941ebb\usbccgp.sys
+ 2009-07-13 01:01 . 2009-04-11 04:42 31616 c:\windows\winsxs\x86_transfercable.inf_31bf3856ad364e35_6.0.6002.18005_none_628b1c3d8ef9a255\x86\winusb.sys
+ 2009-07-13 01:01 . 2009-04-11 05:06 19968 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\WSDScan.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 89088 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\wiafbdrv.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 35328 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\usbscan.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 14848 c:\windows\winsxs\x86_sti.inf_31bf3856ad364e35_6.0.6002.18005_none_5bca4a74dde86c1f\scsiscan.sys
+ 2009-07-13 01:01 . 2009-04-11 04:39 11776 c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6002.18005_none_a627020ee70bbf15\sffp_sd.sys
+ 2009-07-13 01:01 . 2009-04-11 04:39 12288 c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6002.18005_none_a627020ee70bbf15\sffp_mmc.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 13312 c:\windows\winsxs\x86_sffdisk.inf_31bf3856ad364e35_6.0.6002.18005_none_a627020ee70bbf15\sffdisk.sys
+ 2006-11-02 12:34 . 2006-11-02 12:34 11368 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MsMpLics.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 58936 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpRtPlug.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 90680 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpOAV.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 16488 c:\windows\winsxs\x86_security-malware-windows-defender_31bf3856ad364e35_6.0.6002.18005_none_59a829d65550e411\MpAsDesc.dll
+ 2009-07-13 01:02 . 2009-04-11 04:19 89088 c:\windows\winsxs\x86_sdbus.inf_31bf3856ad364e35_6.0.6002.18005_none_73ce35cfc778dd26\sdbus.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 82408 c:\windows\winsxs\x86_sbp2.inf_31bf3856ad364e35_6.0.6002.18005_none_47241df8f34504ba\sbp2port.sys
+ 2009-07-13 01:01 . 2009-03-30 04:42 32768 c:\windows\winsxs\x86_regsvcs_b03f5f7f11d50a3a_6.0.6002.18005_none_ea0ad48568496bd5\RegSvcs.exe
+ 2009-07-13 01:01 . 2009-03-30 04:42 53248 c:\windows\winsxs\x86_regasm_b03f5f7f11d50a3a_6.0.6002.18005_none_16efa9df15d67325\RegAsm.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 69632 c:\windows\winsxs\x86_pnpxassoc_31bf3856ad364e35_6.0.6002.18005_none_346f5d3f6c9701f6\PNPXAssoc.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 17408 c:\windows\winsxs\x86_ntprint.inf_31bf3856ad364e35_6.0.6002.18005_none_3cec160db7d4ac84\I386\PJLMON.DLL
+ 2008-01-21 02:24 . 2008-01-21 02:24 17920 c:\windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5\wfapigp.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 64000 c:\windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5\mpsdrv.sys
+ 2008-01-21 02:24 . 2008-01-21 02:24 87552 c:\windows\winsxs\x86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6002.18005_none_9bffb484c4fe88e5\icfupgd.dll
+ 2009-07-13 01:01 . 2009-04-11 04:46 15872 c:\windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.0.6002.18005_none_c9ae083642ee6e54\usb8023x.sys
+ 2009-07-13 01:01 . 2009-04-11 04:46 33280 c:\windows\winsxs\x86_netrndis.inf_31bf3856ad364e35_6.0.6002.18005_none_c9ae083642ee6e54\rndismpx.sys
+ 2008-01-21 02:24 . 2008-01-21 02:24 16896 c:\windows\winsxs\x86_netfx-shared_registry_whidbey_31bf3856ad364e35_6.0.6002.18005_none_6862e2e7643773d9\SharedReg12.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorwks_31bf3856ad364e35_6.0.6002.18005_none_8199f0814373a5b3\sbscmp20_mscorwks.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 16896 c:\windows\winsxs\x86_netfx-shared_netfx_20_mscorlib_b03f5f7f11d50a3a_6.0.6002.18005_none_54ad0b7a61344e8c\sbscmp20_mscorlib.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 16896 c:\windows\winsxs\x86_netfx-sbscmp10_dll_31bf3856ad364e35_6.0.6002.18005_none_76f179ae021db881\sbscmp10.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 85320 c:\windows\winsxs\x86_netfx-perfcounter_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_29b27e22fffa4776\PerfCounter.dll
+ 2009-07-13 01:03 . 2009-03-30 04:42 97592 c:\windows\winsxs\x86_netfx-ngen_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_779867b84af56065\ngen.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 79696 c:\windows\winsxs\x86_netfx-netfxsbs10_exe_31bf3856ad364e35_6.0.6002.18005_none_3d7a6880ab163624\NETFXSBS10.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 66368 c:\windows\winsxs\x86_netfx-mscorsvw_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_1fd1ab49e8ca6ebb\mscorsvw.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 74048 c:\windows\winsxs\x86_netfx-mscorsec_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_118cda1df5183636\mscorsec.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 93504 c:\windows\winsxs\x86_netfx-mscormmc_dll_rtm_31bf3856ad364e35_6.0.6002.18005_none_a96e1e1ec6870b85\mscormmc.dll
+ 2009-07-13 01:03 . 2009-03-30 04:42 90960 c:\windows\winsxs\x86_netfx-mscorld_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_c2ba992d4a006fcd\mscorld.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 80720 c:\windows\winsxs\x86_netfx-mscories_dll_31bf3856ad364e35_6.0.6002.18005_none_c00e966deeec7579\mscories.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 43344 c:\windows\winsxs\x86_netfx-mscorie_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_ea720753707d6a51\mscorie.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 80208 c:\windows\winsxs\x86_netfx-mscordbc_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_6ccb593bc60a1852\mscordbc.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 15688 c:\windows\winsxs\x86_netfx-fusion_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_02ace91f0aebe7d3\fusion.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 33080 c:\windows\winsxs\x86_netfx-dw_b03f5f7f11d50a3a_6.0.6002.18005_none_cd77f4151b8ac157\dw20.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 93512 c:\windows\winsxs\x86_netfx-dfshim_dll_31bf3856ad364e35_6.0.6002.18005_none_7a6b6f7c5a1bb639\dfshim.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 59720 c:\windows\winsxs\x86_netfx-dfdll_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_882bc28c54dfc639\dfdll.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 32064 c:\windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6002.18005_none_e59ba05e346044a2\cvtres.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 77112 c:\windows\winsxs\x86_netfx-csharp_compiler_csc_b03f5f7f11d50a3a_6.0.6002.18005_none_fe5428b22d6c0e79\csc.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 86360 c:\windows\winsxs\x86_netfx-corperfmonext_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_b2c317a7c345a801\CORPerfMonExt.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 30528 c:\windows\winsxs\x86_netfx-aspnet_wp_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_c4c45c1c8c9acff0\aspnet_wp.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 31048 c:\windows\winsxs\x86_netfx-aspnet_state_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_80f871a1c32de056\aspnet_state.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 30024 c:\windows\winsxs\x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_120341a3224c03b8\aspnet_regiis.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 30552 c:\windows\winsxs\x86_netfx-aspnet_perf_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_dd85cceefd0a877e\Aspnet_perf.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 94544 c:\windows\winsxs\x86_netfx-aspnet_mmc_asp_ext_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_909e22e3d3759899\MmcAspExt.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 14168 c:\windows\winsxs\x86_netfx-aspnet_isapi_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_dd58f4996955bca7\aspnet_isapi.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 18760 c:\windows\winsxs\x86_netfx-aspnet_filter_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_d52bb06f58344ba9\aspnet_filter.dll
+ 2009-07-13 01:02 . 2009-03-30 04:42 55616 c:\windows\winsxs\x86_netfx-applaunch_exe_b03f5f7f11d50a3a_6.0.6002.18005_none_c512442c6b4566d7\AppLaunch.exe
+ 2009-07-13 01:02 . 2009-03-30 04:42 95544 c:\windows\winsxs\x86_netfx-_vc_assembly_linker_dll_b03f5f7f11d50a3a_6.0.6002.18005_none_38d775cdebe1fba0\alink.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 20024 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\viaide.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 43496 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\pciidex.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 14312 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\pciide.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 27112 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\msahci.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 17976 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\intelide.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 19000 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\cmdide.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 19944 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 17976 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\amdide.sys
+ 2008-01-21 02:23 . 2008-01-21 02:23 17464 c:\windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\aliide.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 93160 c:\windows\winsxs\x86_msdsm.inf_31bf3856ad364e35_6.0.6002.18005_none_cc32bbc0d8ad5cc9\msdsm.sys
+ 2009-07-13 01:01 . 2009-03-30 04:42 69632 c:\windows\winsxs\x86_msbuild_b03f5f7f11d50a3a_6.0.6002.18005_none_810e9dd9b189c19e\MSBuild.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 40960 c:\windows\winsxs\x86_microsoft.windows.h..uetooth-driverclass_31bf3856ad364e35_6.1.6002.18005_none_4eff3095feca167f\bthserv.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 45568 c:\windows\winsxs\x86_microsoft.windows.h..uetooth-driverclass_31bf3856ad364e35_6.1.6002.18005_none_4eff3095feca167f\bthci.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 20992 c:\windows\winsxs\x86_microsoft-windows-wsd-challengecomponent_31bf3856ad364e35_6.0.6002.18005_none_2663224fa076d2c5\wsdchngr.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 90112 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\WindowsBase.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 10240 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\UIAutomationTypes.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 12288 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\UIAutomationClientsideProviders.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 61440 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\System.Speech.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 28672 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\System.Printing.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 40960 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\ReachFramework.resources.dll
+ 2009-07-13 01:01 . 2009-02-25 01:16 53248 c:\windows\winsxs\x86_microsoft-windows-wpfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_568243ff806b0777\PresentationBuildTasks.resources.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 94720 c:\windows\winsxs\x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.0.6002.18005_none_4cec3f51e92bbb79\PortableDeviceClassExtension.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 47104 c:\windows\winsxs\x86_microsoft-windows-wmiperf_31bf3856ad364e35_6.0.6002.18005_none_a1858d34af79a11c\WmiPerfInst.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 91136 c:\windows\winsxs\x86_microsoft-windows-wmiperf_31bf3856ad364e35_6.0.6002.18005_none_a1858d34af79a11c\WmiPerfClass.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 61952 c:\windows\winsxs\x86_microsoft-windows-wmi-text-encoding_31bf3856ad364e35_6.0.6002.18005_none_bb6ce01939326381\wmi2xml.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 36864 c:\windows\winsxs\x86_microsoft-windows-wmi-snmp-provider_31bf3856ad364e35_6.0.6002.18005_none_aca6f795c3e189c2\snmpthrd.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 35840 c:\windows\winsxs\x86_microsoft-windows-wmi-krnlprov-provider_31bf3856ad364e35_6.0.6002.18005_none_e59c3d0bf238b906\KrnlProv.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 83968 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\wmiutils.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 74752 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\WMICOOKR.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 49152 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\wbemsvc.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 30208 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\wbemprox.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 37888 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\unsecapp.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 57856 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\NCProv.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 19968 c:\windows\winsxs\x86_microsoft-windows-wmi-core_31bf3856ad364e35_6.0.6002.18005_none_bb3f7c211cba6b3f\mofcomp.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 90112 c:\windows\winsxs\x86_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.0.6002.18005_none_a29e34dbf412e9da\WmiApRpl.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 77824 c:\windows\winsxs\x86_microsoft-windows-wmi-core-svc_31bf3856ad364e35_6.0.6002.18005_none_a29e34dbf412e9da\WinMgmt.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 68096 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84\wlanhlp.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 64512 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84\wlanapi.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 15181 c:\windows\winsxs\x86_microsoft-windows-wlansvc_31bf3856ad364e35_6.0.6002.18005_none_9e2fbb5f0207ec84\gatherWirelessInfo.vbs
+ 2009-07-13 01:01 . 2009-04-11 06:28 83456 c:\windows\winsxs\x86_microsoft-windows-wlangpclient_31bf3856ad364e35_6.0.6002.18005_none_ba90c039cdbb04a6\wlgpclnt.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 31232 c:\windows\winsxs\x86_microsoft-windows-whea-troubleshooter_31bf3856ad364e35_6.0.6002.18005_none_b84486b94895774d\whealogr.dll
+ 2009-07-13 01:03 . 2009-04-11 06:28 61440 c:\windows\winsxs\x86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6002.18005_none_95b8e24b4f6105d0\davclnt.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 69120 c:\windows\winsxs\x86_microsoft-windows-wcn-config-registrar_31bf3856ad364e35_6.0.6002.18005_none_2f082cdcbf0b91f1\fdWCN.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 38760 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\WsatConfig.resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 36864 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\System.ServiceModel.Install.Resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 12288 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\System.IO.Log.Resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 57344 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\System.IdentityModel.Selectors.Resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 65536 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\System.IdentityModel.Resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 17256 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\SMSvcHost.resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 34672 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\ServiceModelReg.resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 19456 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\Microsoft.Transactions.Bridge.Resources.dll
+ 2009-07-13 01:01 . 2009-02-18 18:41 42856 c:\windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.0.6002.18005_fr-fr_4538a9dc2994090c\ComSvcConfig.resources.dll
+ 2009-07-13 01:01 . 2009-04-11 04:22 33280 c:\windows\winsxs\x86_microsoft-windows-watchdog_31bf3856ad364e35_6.0.6002.18005_none_62546148a69ddcfd\watchdog.sys
+ 2006-11-02 08:48 . 2006-11-02 09:46 41984 c:\windows\winsxs\x86_microsoft-windows-wab-core_31bf3856ad364e35_6.0.6002.18005_none_570ee68146eaef3c\wabimp.dll
+ 2006-11-02 08:48 . 2006-11-02 09:45 66048 c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469ae\wabmig.exe
+ 2006-11-02 08:48 . 2006-11-02 09:46 33280 c:\windows\winsxs\x86_microsoft-windows-wab-app_31bf3856ad364e35_6.0.6002.18005_none_4494d68cd4b469ae\wabfind.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 32768 c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.0.6002.18005_none_a23e523a31a1ed4c\wups2.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 43008 c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.0.6002.18005_none_a23e523a31a1ed4c\wuauclt.exe
+ 2006-11-02 12:34 . 2006-11-02 12:34 12800 c:\windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753\wiatrace.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 32768 c:\windows\winsxs\x86_microsoft-windows-w..sition-coreservices_31bf3856ad364e35_6.0.6002.18005_none_347fb41db0752753\wiarpc.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 23040 c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.0.6002.18005_none_884f8c864562464f\wups.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 80384 c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.0.6002.18005_none_884f8c864562464f\wudriver.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 13312 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WsmRes.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 54784 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WsmProv.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 30720 c:\windows\winsxs\x86_microsoft-windows-w..for-management-core_31bf3856ad364e35_6.0.6002.18005_none_cc50ee6baa2997a1\WSManHTTPConfig.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 69120 c:\windows\winsxs\x86_microsoft-windows-vssapi_31bf3856ad364e35_6.0.6002.18005_none_d6d2575c7ee3769a\vsstrace.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 19968 c:\windows\winsxs\x86_microsoft-windows-vssapi_31bf3856ad364e35_6.0.6002.18005_none_d6d2575c7ee3769a\eventcls.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 19968 c:\windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.0.6002.18005_none_6cd64babf7d06785\vdsldr.exe
+ 2008-01-21 02:25 . 2008-01-21 02:25 37888 c:\windows\winsxs\x86_microsoft-windows-virtualdiskservice_31bf3856ad364e35_6.0.6002.18005_none_6cd64babf7d06785\vds_ps.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 20480 c:\windows\winsxs\x86_microsoft-windows-version_31bf3856ad364e35_6.0.6002.18005_none_16e9c83b4e078740\version.dll
+ 2009-07-13 01:03 . 2009-04-11 06:27 57856 c:\windows\winsxs\x86_microsoft-windows-v..ck-uninstallremoval_31bf3856ad364e35_6.0.6002.18005_none_825070d3d8da2dcc\compcln.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 98816 c:\windows\winsxs\x86_microsoft-windows-userpowermanagement_31bf3856ad364e35_6.0.6002.18005_none_a505176cf9fa2abd\powrprof.dll
+ 2009-07-13 01:01 . 2009-04-11 04:42 25856 c:\windows\winsxs\x86_microsoft-windows-usbcamd_31bf3856ad364e35_6.0.6002.18005_none_a173da9c755cd9a9\USBCAMD2.sys
+ 2009-07-13 01:01 . 2009-04-11 04:42 25856 c:\windows\winsxs\x86_microsoft-windows-usbcamd_31bf3856ad364e35_6.0.6002.18005_none_a173da9c755cd9a9\USBCAMD.sys
+ 2006-11-02 08:58 . 2006-11-02 09:46 34816 c:\windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805\uicom.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 15360 c:\windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.0.6002.18005_none_f6ed1a9a1bcc8805\serialui.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 39424 c:\windows\winsxs\x86_microsoft-windows-trustedinstaller_31bf3856ad364e35_6.0.6002.18005_none_92f8ac904a488147\TrustedInstaller.exe
+ 2009-07-13 01:01 . 2009-04-11 06:27 44032 c:\windows\winsxs\x86_microsoft-windows-trustedinstaller_31bf3856ad364e35_6.0.6002.18005_none_92f8ac904a488147\cbsra.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 38400 c:\windows\winsxs\x86_microsoft-windows-terminalservices-theme_31bf3856ad364e35_6.0.6002.18005_none_d7d188e877f12210\TSTheme.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 71168 c:\windows\winsxs\x86_microsoft-windows-telnet-server-tlntsvr_31bf3856ad364e35_6.0.6002.18005_none_c0b01f5fedf47482\tlntsvr.exe
+ 2009-07-13 01:03 . 2009-04-11 06:28 70656 c:\windows\winsxs\x86_microsoft-windows-telnet-client_31bf3856ad364e35_6.0.6002.18005_none_ba1d0a71222c35d2\telnet.exe
+ 2009-07-13 01:01 . 2009-04-11 04:45 72192 c:\windows\winsxs\x86_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.0.6002.18005_none_ec294157d9377403\tdx.sys
+ 2008-01-21 02:24 . 2008-01-21 02:24 22528 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6002.18005_none_63710ee88c7b7604\netiougc.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 49664 c:\windows\winsxs\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6002.18005_none_63710ee88c7b7604\netiomig.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 17920 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\ROUTE.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 27136 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\NETSTAT.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 11264 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\MRINFO.EXE
+ 2006-11-02 08:58 . 2006-11-02 09:45 10240 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\finger.exe
+ 2006-11-02 08:58 . 2006-11-02 09:44 19968 c:\windows\winsxs\x86_microsoft-windows-tcpip-utility_31bf3856ad364e35_6.0.6002.18005_none_34b26cb64bffedff\ARP.EXE
+ 2009-07-13 01:01 . 2009-04-11 06:28 47104 c:\windows\winsxs\x86_microsoft-windows-tabletpc-journal_31bf3856ad364e35_6.0.6002.18005_none_199d015da1ba0131\NBMapTIP.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 53248 c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18005_none_31d980c8c2ca01c9\tsgqec.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 67584 c:\windows\winsxs\x86_microsoft-windows-t..rvices-registryapis_31bf3856ad364e35_6.0.6002.18005_none_a63da0de1f1d789f\regapi.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 68096 c:\windows\winsxs\x86_microsoft-windows-t..platform-input-core_31bf3856ad364e35_6.0.6002.18005_none_d2fbc584d9efb14a\TabSvc.dll
+ 2006-11-02 12:35 . 2006-11-02 12:35 19456 c:\windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6002.18005_none_41978c01c3760094\TabIpsps.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 69120 c:\windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6002.18005_none_41978c01c3760094\IpsPlugin.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 42496 c:\windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.0.6002.18005_none_41978c01c3760094\IpsMigrationPlugin.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 66048 c:\windows\winsxs\x86_microsoft-windows-t..nalservices-sysprep_31bf3856ad364e35_6.0.6002.18005_none_33850f5d456366c5\tssysprep.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 63488 c:\windows\winsxs\x86_microsoft-windows-t..minalservicesclient_31bf3856ad364e35_6.0.6002.18005_none_4fc7c6a11e395b4a\tscupgrd.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 19456 c:\windows\winsxs\x86_microsoft-windows-t..mework-msctfmonitor_31bf3856ad364e35_6.0.6002.18005_none_87278fc545db0c65\MsCtfMonitor.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 85504 c:\windows\winsxs\x86_microsoft-windows-t..esframework-msctfui_31bf3856ad364e35_6.0.6002.18005_none_92f60bbcd34865d1\msctfui.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 10752 c:\windows\winsxs\x86_microsoft-windows-t..chxreadingstringime_31bf3856ad364e35_6.0.6002.18005_none_11a0c8d6ee137a2f\CHxReadingStringIME.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 31232 c:\windows\winsxs\x86_microsoft-windows-t..cesframework-msimtf_31bf3856ad364e35_6.0.6002.18005_none_d370fd68e7be1c7e\msimtf.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 84992 c:\windows\winsxs\x86_microsoft-windows-t..cesframework-msctfp_31bf3856ad364e35_6.0.6002.18005_none_ccc8d878ec130fe3\msctfp.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 84992 c:\windows\winsxs\x86_microsoft-windows-t..ces-serverlicensing_31bf3856ad364e35_6.0.6002.18005_none_f3b4efea329a398a\mstlsapi.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 91648 c:\windows\winsxs\x86_microsoft-windows-t..-platform-libraries_31bf3856ad364e35_6.0.6002.18005_none_ec5c63f1986ff65e\IPHLPAPI.DLL
+ 2008-01-21 02:25 . 2008-01-21 02:25 14848 c:\windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6002.18005_none_48cb48f3b060c975\srdelayed.exe
+ 2008-01-21 02:25 . 2008-01-21 02:25 40960 c:\windows\winsxs\x86_microsoft-windows-systemrestore-main_31bf3856ad364e35_6.0.6002.18005_none_48cb48f3b060c975\srclient.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 11776 c:\windows\winsxs\x86_microsoft-windows-sysprep-spwinsat_31bf3856ad364e35_6.0.6002.18005_none_551ffa0d7aa481b0\spwinsat.dll
+ 2009-07-13 01:03 . 2009-04-11 06:28 26112 c:\windows\winsxs\x86_microsoft-windows-syshiper_31bf3856ad364e35_6.0.6002.18005_none_77fb27ec5025e18b\syshiper.exe
+ 2009-07-13 01:01 . 2009-04-11 04:42 52992 c:\windows\winsxs\x86_microsoft-windows-streamclass_31bf3856ad364e35_6.0.6002.18005_none_60500ebd34c47ac8\stream.sys
+ 2009-07-13 01:01 . 2009-04-11 06:28 55808 c:\windows\winsxs\x86_microsoft-windows-storprop_31bf3856ad364e35_6.0.6002.18005_none_283e2d832e0b80a9\Storprop.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 28160 c:\windows\winsxs\x86_microsoft-windows-spp-main_31bf3856ad364e35_6.0.6002.18005_none_e6326fcda9fe9b59\sxproxy.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 99328 c:\windows\winsxs\x86_microsoft-windows-speechengine_31bf3856ad364e35_6.0.6002.18005_none_f0a9964297040c1c\spsrx.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 43520 c:\windows\winsxs\x86_microsoft-windows-speechcommon_31bf3856ad364e35_6.0.6002.18005_none_d7edc1a2cfccb087\SCGMigPlugin.dll
+ 2006-11-02 12:34 . 2006-11-02 12:34 16384 c:\windows\winsxs\x86_microsoft-windows-speech-userexperience_31bf3856ad364e35_6.0.6002.18005_none_1df5691748ee6b08\SpeechUXPS.DLL
+ 2009-07-13 01:02 . 2009-04-11 06:28 50688 c:\windows\winsxs\x86_microsoft-windows-snmp-winsnmp-api_31bf3856ad364e35_6.0.6002.18005_none_e238f61dbfc43dba\wsnmp32.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 47616 c:\windows\winsxs\x86_microsoft-windows-snmp-agent-service_31bf3856ad364e35_6.0.6002.18005_none_f9205a735564a418\snmp.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 64000 c:\windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.0.6002.18005_none_ae26210916536b06\smss.exe
+ 2009-07-13 01:02 . 2009-04-11 04:15 98816 c:\windows\winsxs\x86_microsoft-windows-smbserver-common_31bf3856ad364e35_6.0.6002.18005_none_05c1a7400d48e203\srvnet.sys
+ 2009-07-13 01:01 . 2009-04-11 06:28 83456 c:\windows\winsxs\x86_microsoft-windows-smbhelperclasses_31bf3856ad364e35_6.0.6002.18005_none_ec289e8bd3444ca6\SMBHelperClass.dll
+ 2009-07-13 01:02 . 2009-04-11 04:14 79360 c:\windows\winsxs\x86_microsoft-windows-smb20-minirdr_31bf3856ad364e35_6.0.6002.18005_none_8cc66ea786e7ac42\mrxsmb20.sys
+ 2009-07-13 01:01 . 2009-04-11 06:28 95232 c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005_none_19e8b8b06714b3ae\SCardSvr.dll
+ 2006-11-02 08:43 . 2006-11-02 09:46 66560 c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005_none_19e8b8b06714b3ae\SCardDlg.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 40448 c:\windows\winsxs\x86_microsoft-windows-smartcardsubsystem_31bf3856ad364e35_6.0.6002.18005_none_19e8b8b06714b3ae\certprop.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 11776 c:\windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6002.18005_none_d0c824c923c9e622\sbunattend.exe
+ 2006-11-02 12:35 . 2006-11-02 12:35 66048 c:\windows\winsxs\x86_microsoft-windows-sidebar_31bf3856ad364e35_6.0.6002.18005_none_d0c824c923c9e622\sbdrop.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 79872 c:\windows\winsxs\x86_microsoft-windows-shmig_31bf3856ad364e35_6.0.6002.18005_none_6189f2a77440c81c\shmig.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 62976 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\windeploy.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 47616 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\wdsutil.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 94720 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\sysprep.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 54272 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\spprgrss.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 42496 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\oobeldr.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 31232 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\diagER.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 52736 c:\windows\winsxs\x86_microsoft-windows-setup-component_31bf3856ad364e35_6.0.6002.18005_none_3417f75aaa6413e3\audit.exe
+ 2009-07-13 01:02 . 2009-04-11 06:28 13312 c:\windows\winsxs\x86_microsoft-windows-servicepackcoordinator_31bf3856ad364e35_6.0.6002.18005_none_36ac9b2124b2bf26\spcmsg.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 69632 c:\windows\winsxs\x86_microsoft-windows-sendmail_31bf3856ad364e35_6.0.6002.18005_none_5cd4f36d1924f929\sendmail.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 61440 c:\windows\winsxs\x86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6beaf3aa18d\wscsvc.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 17920 c:\windows\winsxs\x86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6beaf3aa18d\wscisvif.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 33280 c:\windows\winsxs\x86_microsoft-windows-securitycenter-core_31bf3856ad364e35_6.0.6002.18005_none_1c2bd6beaf3aa18d\wscapi.dll
+ 2009-07-13 01:03 . 2009-04-11 06:28 67584 c:\windows\winsxs\x86_microsoft-windows-security-licensing-wmi_31bf3856ad364e35_6.0.6002.18005_none_50382e6ff6c7e8f5\slwmi.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 12288 c:\windows\winsxs\x86_microsoft-windows-security-licensing-wga_31bf3856ad364e35_6.0.6002.18005_none_5032e2f3f6cc83e3\slwga.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 42496 c:\windows\winsxs\x86_microsoft-windows-security-licensing-slc_31bf3856ad364e35_6.0.6002.18005_none_5062f685f6a7c614\slcinst.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 29184 c:\windows\winsxs\x86_microsoft-windows-search-profilenotify_31bf3856ad364e35_7.0.6002.18005_none_da55184c8a60e444\wsepno.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 36864 c:\windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6002.18005_none_4a53cc21fd7bbcc7\wshcon.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 32768 c:\windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6002.18005_none_4a53cc21fd7bbcc7\dispex.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 88064 c:\windows\winsxs\x86_microsoft-windows-scanprofiles_31bf3856ad364e35_6.0.6002.18005_none_4952ad655043b399\wiascanprofiles.dll
+ 2008-01-21 02:23 . 2008-01-21 02:23 98816 c:\windows\winsxs\x86_microsoft-windows-safedocs-main_31bf3856ad364e35_6.0.6002.18005_none_26f5355863ea5f18\sdshext.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 60928 c:\windows\winsxs\x86_microsoft-windows-s..ty-licensing-slc-ux_31bf3856ad364e35_6.0.6002.18005_none_8c636822b2598b6a\SLUINotify.dll
+ 2009-07-13 01:02 . 2009-02-18 18:39 92918 c:\windows\winsxs\x86_microsoft-windows-s..ity-licensing-tools_31bf3856ad364e35_6.0.6002.18005_none_c7357f7a65060ad7\slmgr.vbs
+ 2009-07-13 01:02 . 2009-04-11 06:28 90112 c:\windows\winsxs\x86_microsoft-windows-s..ing-shell-extension_31bf3856ad364e35_6.0.6002.18005_none_0c6d503021655122\wshext.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 79872 c:\windows\winsxs\x86_microsoft-windows-s..entication-usermode_31bf3856ad364e35_6.0.6002.18005_none_3c0d3c3f7176376a\authz.dll
+ 2009-07-13 01:01 . 2009-04-11 04:46 15872 c:\windows\winsxs\x86_microsoft-windows-rndis-usb-microport_31bf3856ad364e35_6.0.6002.18005_none_c6d83e044fcd06f5\usb8023.sys
+ 2009-07-13 01:01 . 2009-04-11 04:46 33280 c:\windows\winsxs\x86_microsoft-windows-rndis-miniport_31bf3856ad364e35_6.0.6002.18005_none_e31a28b989072805\RNDISMP.sys
+ 2006-11-02 08:57 . 2006-11-02 09:46 14848 c:\windows\winsxs\x86_microsoft-windows-rmcast_31bf3856ad364e35_6.0.6002.18005_none_5669453d850ccabc\wshrm.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 69632 c:\windows\winsxs\x86_microsoft-windows-rastapi_31bf3856ad364e35_6.0.6002.18005_none_10cfa36576fecc90\rastapi.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 36352 c:\windows\winsxs\x86_microsoft-windows-rasrtutils_31bf3856ad364e35_6.0.6002.18005_none_0f010d1ce79c5ae9\rtutils.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 29696 c:\windows\winsxs\x86_microsoft-windows-rasifmon_31bf3856ad364e35_6.0.6002.18005_none_ccbb42deea504b23\ifmon.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 47616 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmutil.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 14336 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmstplua.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 84992 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmstp.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 26112 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmpbk32.dll
+ 2009-07-13 01:01 . 2009-04-11 06:27 49152 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmmon32.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 56320 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmmigr.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 32768 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmlua.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 72704 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmdl32.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 31232 c:\windows\winsxs\x86_microsoft-windows-rasconnectionmanager_31bf3856ad364e35_6.0.6002.18005_none_610bb87d5da7583b\cmcfg32.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 39424 c:\windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.0.6002.18005_none_713248d4a5d30dec\rasphone.exe
+ 2009-07-13 01:01 . 2009-04-11 06:27 16896 c:\windows\winsxs\x86_microsoft-windows-rasclienttools_31bf3856ad364e35_6.0.6002.18005_none_713248d4a5d30dec\rasdial.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 62464 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\wanarp.sys
+ 2006-11-02 08:58 . 2006-11-02 09:46 22016 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rasser.dll
+ 2006-11-02 08:58 . 2006-11-02 09:46 32768 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rasmxs.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 52736 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rasdiag.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 81408 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\rascfg.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 49664 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\ndproxy.sys
+ 2008-01-21 02:24 . 2008-01-21 02:24 20992 c:\windows\winsxs\x86_microsoft-windows-rasbase_31bf3856ad364e35_6.0.6002.18005_none_0fcbe0ed77911065\ndistapi.sys
+ 2009-07-13 01:01 . 2009-04-11 04:46 69120 c:\windows\winsxs\x86_microsoft-windows-rasbase-rassstp_31bf3856ad364e35_6.0.6002.18005_none_9bbd28fee50e4840\rassstp.sys
+ 2009-07-13 01:01 . 2009-04-11 04:46 41472 c:\windows\winsxs\x86_microsoft-windows-rasbase-raspppoe_31bf3856ad364e35_6.0.6002.18005_none_581efd2c97b9a460\raspppoe.sys
+ 2009-07-13 01:02 . 2009-04-11 06:27 61952 c:\windows\winsxs\x86_microsoft-windows-r..-commandline-editor_31bf3856ad364e35_6.0.6002.18005_none_337fad0927d14431\reg.exe
+ 2006-11-02 08:57 . 2006-11-02 09:46 13824 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\wshqos.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46 33280 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\traffic.dll
+ 2006-11-02 08:57 . 2006-11-02 09:46 15360 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\pacerprf.dll
+ 2009-07-13 01:01 . 2009-04-11 04:45 72192 c:\windows\winsxs\x86_microsoft-windows-qos_31bf3856ad364e35_6.0.6002.18005_none_b036e19c54c66d2f\pacer.sys
+ 2009-07-13 01:02 . 2009-04-11 06:32 50664 c:\windows\winsxs\x86_microsoft-windows-pshed_31bf3856ad364e35_6.0.6002.18005_none_5dde5c5c2a365a60\PSHED.DLL
+ 2008-01-21 02:24 . 2008-01-21 02:24 29184 c:\windows\winsxs\x86_microsoft-windows-profsvc_31bf3856ad364e35_6.0.6002.18005_none_fd9cd0792fced6f5\profprov.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 24064 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\wbhstipm.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 22528 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\wbhst_pm.dll
+ 2009-07-13 01:02 . 2009-04-11 06:28 47616 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\w3wphost.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 15872 c:\windows\winsxs\x86_microsoft-windows-processmodellibraries_31bf3856ad364e35_6.0.6002.18005_none_dc87d5dda8042659\w3tp.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 19968 c:\windows\winsxs\x86_microsoft-windows-processmodel_31bf3856ad364e35_6.0.6002.18005_none_b8ad073aa1e5201e\w3wp.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 52224 c:\windows\winsxs\x86_microsoft-windows-processmodel_31bf3856ad364e35_6.0.6002.18005_none_b8ad073aa1e5201e\apphostsvc.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 97792 c:\windows\winsxs\x86_microsoft-windows-printing-oleprn_31bf3856ad364e35_6.0.6002.18005_none_7d1255665c646ab2\oleprn.dll
+ 2009-07-13 01:01 . 2009-04-11 06:27 33280 c:\windows\winsxs\x86_microsoft-windows-pnputil_31bf3856ad364e35_6.0.6002.18005_none_ff4f3b9db9a951ba\PnPutil.exe
+ 2006-11-02 08:33 . 2006-11-02 09:46 53248 c:\windows\winsxs\x86_microsoft-windows-pnphotplugui_31bf3856ad364e35_6.0.6002.18005_none_eaccaa9547e03a1f\hotplug.dll
+ 2009-07-13 01:01 . 2009-04-11 06:27 26112 c:\windows\winsxs\x86_microsoft-windows-pnphotplugui_31bf3856ad364e35_6.0.6002.18005_none_eaccaa9547e03a1f\DeviceEject.exe
+ 2008-01-21 02:23 . 2008-01-21 02:23 42496 c:\windows\winsxs\x86_microsoft-windows-pnpdevicemanager_31bf3856ad364e35_6.0.6002.18005_none_15c2137e1ca283f9\dmocx.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 46592 c:\windows\winsxs\x86_microsoft-windows-performancetoolsgui_31bf3856ad364e35_6.0.6002.18005_none_9df537379e15bb5c\pdhui.dll
+ 2009-07-13 01:02 . 2009-04-11 06:32 54248 c:\windows\winsxs\x86_microsoft-windows-partitionmanager_31bf3856ad364e35_6.0.6002.18005_none_e3878c97b7915bdf\partmgr.sys
+ 2008-01-21 02:25 . 2008-01-21 02:25 66048 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabElev.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 20480 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabDecorator.dll
+ 2008-01-21 02:25 . 2008-01-21 02:25 56320 c:\windows\winsxs\x86_microsoft-windows-p..topeeradhocmeetings_31bf3856ad364e35_6.0.6002.18005_none_ac334ecffd43e504\WinCollabContacts.dll
+ 2009-07-13 01:01 . 2009-04-11 06:27 58368 c:\windows\winsxs\x86_microsoft-windows-p..tomizationsnonwinpe_31bf3856ad364e35_6.0.6002.18005_none_cdba626f8c588d30\PnPUnattend.exe
+ 2008-01-21 02:25 . 2008-01-21 02:25 39424 c:\windows\winsxs\x86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.0.6002.18005_none_8cbddeb9c585058e\wpnpinst.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 15360 c:\windows\winsxs\x86_microsoft-windows-p..rnetprinting-client_31bf3856ad364e35_6.0.6002.18005_none_8cbddeb9c585058e\inetppui.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 96256 c:\windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6002.18005_none_b5c807ab2d93d829\PlaMig.dll
+ 2006-11-02 09:15 . 2006-11-02 09:45 61440 c:\windows\winsxs\x86_microsoft-windows-p..randprintui-ntprint_31bf3856ad364e35_6.0.6002.18005_none_f1eef3487a8e01f0\ntprint.exe
+ 2006-11-02 08:35 . 2006-11-02 09:46 35840 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfproc.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 28672 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfos.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 19968 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfnet.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 31744 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfdisk.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 39424 c:\windows\winsxs\x86_microsoft-windows-p..ormancebasecounters_31bf3856ad364e35_6.0.6002.18005_none_335eb6cf5a3b9de4\perfctrs.dll
+ 2008-01-21 02:24 . 2008-01-21 02:24 37888 c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6002.18005_none_3b5eb3c56e0bcf3e\printcom.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 26112 c:\windows\winsxs\x86_microsoft-windows-p..oler-filterpipeline_31bf3856ad364e35_6.0.6002.18005_none_2d991295d888a8b3\printfilterpipelineprxy.dll
+ 2006-11-02 08:35 . 2006-11-02 09:45 39936 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\typeperf.exe
+ 2006-11-02 08:35 . 2006-11-02 09:45 37376 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\relog.exe
+ 2009-07-13 01:02 . 2009-04-11 06:27 57344 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\logman.exe
+ 2006-11-02 08:35 . 2006-11-02 09:45 17408 c:\windows\winsxs\x86_microsoft-windows-p..ncetoolscommandline_31bf3856ad364e35_6.0.6002.18005_none_630ef3dcfbf6e9a4\diskperf.exe
+ 2006-11-02 09:15 . 2006-11-02 09:45 60416 c:\windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6002.18005_none_d83fb8abf30e1638\printui.exe
+ 2008-01-21 02:24 . 2008-01-21 02:24 64512 c:\windows\winsxs\x86_microsoft-windows-p..installerandprintui_31bf3856ad364e35_6.0.6002.18005_none_d83fb8abf30e1638\findnetprinters.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 88576 c:\windows\winsxs\x86_microsoft-windows-ole-automation-legacy_31bf3856ad364e35_6.0.6002.18005_none_3bff339efed611ca\olepro32.dll
+ 2009-07-13 01:01 . 2009-04-11 06:27 35840 c:\windows\winsxs\x86_microsoft-windows-ocsetup_31bf3856ad364e35_6.0.6002.18005_none_e568ab025c6992bf\ocsetup.exe
+ 2009-07-13 01:01 . 2009-04-11 06:28 22016 c:\windows\winsxs\x86_microsoft-windows-o..inefiles-win32-apis_31bf3856ad364e35_6.0.6002.18005_none_ad5672dcf647053c\cscdll.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 31744 c:\windows\winsxs\x86_microsoft-windows-o..inefiles-win32-apis_31bf3856ad364e35_6.0.6002.18005_none_ad5672dcf647053c\cscapi.dll
+ 2009-07-13 01:01 . 2009-04-11 06:28 17408 c:\windows\winsxs\x86_microsoft-windows-ntvdm-vdmdbg_31bf3856ad364e35_6.0.6002.18005_none_50b897cb80d4ae0e\vdmdbg.dll
+ 2006-11-02 06:25 . 2006-09-18 21:43 13312 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\win87em.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 12704 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\WFWNET.DRV
+ 2008-01-21 02:24 . 2008-01-21 02:24 41984 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\vdmredir.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 47840 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\USER.EXE
+ 2006-11-02 07:10 . 2006-11-02 07:10 13888 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\TOOLHELP.DLL
+ 2006-11-02 06:25 . 2006-09-18 21:43 18896 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\sysedit.exe
+ 2006-11-02 07:09 . 2006-11-02 07:09 11753 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\setver.exe
+ 2006-11-02 06:25 . 2006-09-18 21:43 46592 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\pmspl.dll
+ 2006-11-02 07:10 . 2006-11-02 07:10 24064 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\OLESVR.DLL
+ 2006-11-02 06:25 . 2006-09-18 21:43 82944 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\olecli.dll
+ 2006-11-02 08:35 . 2006-11-02 09:46 14848 c:\windows\winsxs\x86_microsoft-windows-ntvdm-system32_31bf3856ad364e35_6.0.6002.18005_none_fff8f2266fafa2e8\ntvdmd.dll
+ 2006-11-02 07:09 . 2006-11-02 07:09 34672 c:\windows\winsxs\x86_microsoft-windows-ntvdm-syste
Deux méthodes, deux :P