Help virus récalcitrant

Bonsoir Guillaume,

Merci pour ta réponse rapide.
ci-après le lien vers le rapport :
http://www.cijoint.fr/cjlink.php?file=cj201006/cijuQJxaiu.txt

@+
Merci

Bonsoir Guillaume,

voilà le contenu de combofix.txt :

ComboFix 10-06-09.01 - pc 09/06/2010 20:07:18.4.2 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.1014.492 [GMT 2:00]
Lancé depuis: c:\documents and settings\pc\Bureau\Asedehi.exe
AV: Microsoft Forefront Client Security *On-access scanning enabled* (Updated) {926A3D4F-E4E7-4F47-9902-4EDD55FFE1AF}
FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.

((((((((((((((((((((((((((((( Fichiers créés du 2010-05-09 au 2010-06-09 ))))))))))))))))))))))))))))))))))))
.

2010-06-08 19:46 . 2010-06-08 19:54 -------- d-----w- c:\program files\ZHPDiag
2010-06-06 11:37 . 2010-06-06 11:37 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2010-06-05 23:10 . 2010-06-05 23:12 -------- d-----w- C:\!KillBox
2010-06-05 19:09 . 2009-12-04 14:34 69000 ----a-w- c:\windows\system32\zlcomm.dll
2010-06-05 19:09 . 2009-12-04 14:34 103816 ----a-w- c:\windows\system32\zlcommdb.dll
2010-06-05 19:09 . 2010-06-05 19:10 -------- d-----w- c:\windows\system32\ZoneLabs
2010-06-05 19:09 . 2009-12-04 14:34 1238408 ----a-w- c:\windows\system32\zpeng25.dll
2010-06-05 19:09 . 2010-06-05 19:09 -------- d-----w- c:\program files\Zone Labs
2010-06-05 14:43 . 2010-06-05 14:43 144 ----a-w- c:\windows\system32\lkfl.dat
2010-06-05 13:42 . 2010-04-11 14:04 2973184 ------w- c:\documents and settings\All Users\Application Data\FNET\UsbBoost\Uninstall.exe
2010-06-05 13:13 . 2010-06-05 18:17 -------- d-----w- c:\documents and settings\pc\Application Data\CheckPoint
2010-06-05 13:13 . 2010-06-05 19:10 -------- d-----w- c:\program files\CheckPoint
2010-06-05 13:13 . 2010-06-09 14:15 4212 ---ha-w- c:\windows\system32\zllictbl.dat
2010-06-05 13:12 . 2009-12-04 14:35 46472 ----a-w- c:\windows\system32\vsutil_loc040c.dll
2010-06-05 13:11 . 2010-06-09 18:02 -------- d-----w- c:\windows\Internet Logs
2010-06-05 09:18 . 2010-06-01 17:37 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-06-04 19:53 . 2010-06-04 19:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-05-31 14:09 . 2010-05-31 14:09 -------- d-----r- c:\documents and settings\LocalService\Favoris
2010-05-31 06:58 . 2010-05-31 07:04 -------- d-----r- c:\documents and settings\HelpAssistant\Menu Démarrer
2010-05-31 06:58 . 2009-10-27 02:45 -------- d--h--w- c:\documents and settings\HelpAssistant\Modèles
2010-05-31 06:58 . 2006-05-10 13:48 -------- d--h--w- c:\documents and settings\HelpAssistant\Voisinage d'impression
2010-05-31 06:58 . 2010-06-01 21:49 -------- d-----w- c:\documents and settings\HelpAssistant
2010-05-30 18:11 . 2010-06-08 18:42 -------- d-----w- c:\documents and settings\pc\Application Data\skypePM
2010-05-30 18:06 . 2010-05-30 18:06 -------- d-----w- c:\program files\Fichiers communs\Skype
2010-05-30 18:06 . 2010-05-30 18:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2010-05-28 20:56 . 2010-06-09 18:12 772096 ----a-w- c:\windows\system32\drivers\mwjbcdk.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-09 17:51 . 2010-06-05 20:59 1085767 ----a-w- c:\windows\Internet Logs\tvDebug.Zip
2010-06-08 19:13 . 2006-06-01 20:12 -------- d-----w- c:\documents and settings\pc\Application Data\Skype
2010-06-05 13:14 . 2007-01-07 22:40 -------- d-----w- c:\documents and settings\pc\Application Data\dvdcss
2010-05-28 20:55 . 2010-05-28 20:55 12 ----a-w- c:\windows\system32\config\systemprofile\Application Data\vqdlkr.dat
2010-05-22 22:51 . 2010-04-12 07:04 326984 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-04-15 18:02 . 2006-06-30 14:01 -------- d-----w- c:\program files\Google
2010-04-15 18:00 . 2006-05-10 13:19 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-13 21:06 . 2009-03-21 23:06 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-04-13 21:05 . 2010-04-13 21:05 -------- d-----w- c:\program files\Java
2010-04-13 21:05 . 2010-04-13 21:05 152576 ----a-w- c:\documents and settings\pc\Application Data\Sun\Java\jre1.6.0_15\lzma.dll
2010-04-12 16:35 . 2010-04-12 16:35 -------- d-----w- c:\documents and settings\pc\Application Data\Genie-Soft
2010-04-11 14:04 . 2010-04-11 14:04 -------- d-----w- c:\documents and settings\All Users\Application Data\FNET
2010-03-28 13:51 . 2006-06-01 10:17 85376 -c--a-w- c:\documents and settings\pc\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut600_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut60_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut6_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut5_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut4_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 49152 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\RedirectorEXE2_770DFD1204C24F4DA163D64FACCB5CBD.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut3_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut12_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\DesktopMgr.exe
2010-03-27 23:33 . 2010-03-27 23:33 49152 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\RedirectorEXE1_770DFD1204C24F4DA163D64FACCB5CBD.exe
2010-03-27 23:33 . 2010-03-27 23:33 49152 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\RedirectorEXE_770DFD1204C24F4DA163D64FACCB5CBD.exe
.

((((((((((((((((((((((((((((( SnapShot@2010-06-05_20.44.14 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-06-09 17:49 . 2010-06-09 17:49 16384 c:\windows\temp\Perflib_Perfdata_36c.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" [2008-10-24 206112]
"LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2005-06-08 196608]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-18 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2007-10-08 1101824]
"BEWINTERNET-FR-DMESessionManager"="c:\program files\OrangeBS\BEWInternet\SessionManager\SessionManager.exe" [2008-06-26 131824]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-12-13 98304]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-12-13 118784]
"SigmatelSysTrayApp"="stsystra.exe" [2005-11-16 397312]
"BlackBerryAutoUpdate"="c:\program files\Fichiers communs\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2010-03-10 648536]
"Microsoft Forefront Client Security Antimalware Service"="c:\program files\Microsoft Forefront\Client Security\Client\Antimalware\MSASCui.exe" [2010-01-19 1033600]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2005-06-08 217088]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2005-06-08 458752]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2002-12-17 684032]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-10-08 995328]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-12-13 77824]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-12-04 1037192]
"ISW"="c:\program files\CheckPoint\ZAForceField\ForceField.exe" [2009-10-27 730480]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2007-02-25 437160]

c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2006-7-3 450560]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FCSAM]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Symantec AntiVirus"=2 (0x2)
"SNDSrvc"=3 (0x3)
"SavRoam"=3 (0x3)
"DefWatch"=2 (0x2)
"ccSetMgr"=2 (0x2)
"ccPwdSvc"=3 (0x3)
"ccEvtMgr"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\OrangeBS\\BEWInternet\\Connectivity\\ConnectivityManager.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\program files\SFR\Media Center\httpd\httpd.exe"= c:\program files\SFR\Media Center\httpd\httpd.exe:172.16.255.0/255.255.255.0,192.168.1.0/255.255.255.0:Enabled:Serveur de partage Media Center (Player SFR)
"d:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe"=
"d:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:Remote Desktop
"6:TCP"= 6:TCP:NAP
"65533:TCP"= 65533:TCP:Services
"52344:TCP"= 52344:TCP:Services
"1673:TCP"= 1673:TCP:Services
"1846:TCP"= 1846:TCP:Services

R2 FcsSas;Microsoft Forefront Client Security State Assessment Service;c:\program files\Microsoft Forefront\Client Security\Client\SSA\FcsSas.exe [06/04/2007 05:12 73120]
R2 ISWKL;ZoneAlarm Toolbar ISWKL;c:\program files\CheckPoint\ZAForceField\ISWKL.sys [27/10/2009 17:58 25208]
R2 IswSvc;ZoneAlarm Toolbar IswSvc;c:\program files\CheckPoint\ZAForceField\ISWSVC.exe [27/10/2009 17:58 476528]
S0 cerc6;cerc6; [x]
S2 FCSAM;Service anti-programme malveillant Microsoft Forefront Client Security;c:\program files\Microsoft Forefront\Client Security\Client\Antimalware\MsMpEng.exe [19/01/2010 16:49 16880]
S3 NKXEU;NKXEU;c:\docume~1\pc\LOCALS~1\Temp\NKXEU.exe --> c:\docume~1\pc\LOCALS~1\Temp\NKXEU.exe [?]

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - mwjbcdk
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Settings,ProxyServer = proxybkp:8080
uInternet Settings,ProxyOverride = localhost
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} - hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} - hxxp://mobileapps.blackberry.com/devicesoftware/AxLoader.cab
FF - ProfilePath - c:\documents and settings\pc\Application Data\Mozilla\Firefox\Profiles\l9qbhb5j.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\CheckPoint\ZAForceField\TrustChecker\components\TrustCheckerMozillaPlugin.dll
FF - plugin: c:\program files\Fichiers communs\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
FF - plugin: d:\program files\Adobe Reader 707\Reader\browser\nppdf32.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
.

**************************************************************************
Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés:

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mwjbcdk]

.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø*€|ÿÿÿÿ*€|ù*9~*]
"C040111900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h-€|ÿÿÿÿ¤*€|ù*9~*]
"C040111900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€-€|ÿÿÿÿÀ*€|ù*9~*]
"C040111900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG08.00.00.01WORKSTATION"="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"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(972)
c:\windows\system32\IWPDGINA.DLL
c:\program files\Intel\Wireless\Bin\SsoGnFRA.dll
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

- - - - - - - > 'lsass.exe'(1028)
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

- - - - - - - > 'explorer.exe'(3740)
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll
c:\windows\system32\msls31.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Heure de fin: 2010-06-09 20:13:38
ComboFix-quarantined-files.txt 2010-06-09 18:13
ComboFix2.txt 2010-06-05 20:47
ComboFix3.txt 2010-06-04 19:12

Avant-CF: 2 171 916 288 octets libres
Après-CF: 2 173 640 704 octets libres

- - End Of File - - 7EC8279FBB2DA09762912E75A3B18E0F

Merci de ton support.
@+

voilà le dernier rapport :

ComboFix 10-06-09.01 - pc 09/06/2010 21:20:58.5.2 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.1014.538 [GMT 2:00]
Lancé depuis: c:\documents and settings\pc\Bureau\Asedehi.exe
Commutateurs utilisés :: c:\documents and settings\pc\Bureau\CFScript.txt
AV: Microsoft Forefront Client Security *On-access scanning enabled* (Updated) {926A3D4F-E4E7-4F47-9902-4EDD55FFE1AF}
FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.
- Mode FONCTIONNALITES REDUITES -
.

((((((((((((((((((((((((((((( Fichiers créés du 2010-05-09 au 2010-06-09 ))))))))))))))))))))))))))))))))))))
.

2010-06-09 18:05 . 2010-06-09 18:13 -------- d-----w- C:\Asedehi
2010-06-08 19:46 . 2010-06-08 19:54 -------- d-----w- c:\program files\ZHPDiag
2010-06-06 11:37 . 2010-06-06 11:37 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2010-06-05 23:10 . 2010-06-05 23:12 -------- d-----w- C:\!KillBox
2010-06-05 19:09 . 2009-12-04 14:34 69000 ----a-w- c:\windows\system32\zlcomm.dll
2010-06-05 19:09 . 2009-12-04 14:34 103816 ----a-w- c:\windows\system32\zlcommdb.dll
2010-06-05 19:09 . 2010-06-05 19:10 -------- d-----w- c:\windows\system32\ZoneLabs
2010-06-05 19:09 . 2009-12-04 14:34 1238408 ----a-w- c:\windows\system32\zpeng25.dll
2010-06-05 19:09 . 2010-06-05 19:09 -------- d-----w- c:\program files\Zone Labs
2010-06-05 14:43 . 2010-06-05 14:43 144 ----a-w- c:\windows\system32\lkfl.dat
2010-06-05 13:13 . 2010-06-05 18:17 -------- d-----w- c:\documents and settings\pc\Application Data\CheckPoint
2010-06-05 13:13 . 2010-06-05 19:10 -------- d-----w- c:\program files\CheckPoint
2010-06-05 13:13 . 2010-06-09 18:36 4212 ---ha-w- c:\windows\system32\zllictbl.dat
2010-06-05 13:12 . 2009-12-04 14:35 46472 ----a-w- c:\windows\system32\vsutil_loc040c.dll
2010-06-05 13:11 . 2010-06-09 19:26 -------- d-----w- c:\windows\Internet Logs
2010-06-05 09:18 . 2010-06-01 17:37 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-06-04 19:53 . 2010-06-04 19:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-05-31 14:09 . 2010-05-31 14:09 -------- d-----r- c:\documents and settings\LocalService\Favoris
2010-05-31 06:58 . 2010-05-31 07:04 -------- d-----r- c:\documents and settings\HelpAssistant\Menu Démarrer
2010-05-31 06:58 . 2009-10-27 02:45 -------- d--h--w- c:\documents and settings\HelpAssistant\Modèles
2010-05-31 06:58 . 2006-05-10 13:48 -------- d--h--w- c:\documents and settings\HelpAssistant\Voisinage d'impression
2010-05-31 06:58 . 2010-06-01 21:49 -------- d-----w- c:\documents and settings\HelpAssistant
2010-05-30 18:11 . 2010-06-08 18:42 -------- d-----w- c:\documents and settings\pc\Application Data\skypePM
2010-05-30 18:06 . 2010-05-30 18:06 -------- d-----w- c:\program files\Fichiers communs\Skype
2010-05-30 18:06 . 2010-05-30 18:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2010-05-28 20:56 . 2010-06-09 19:27 772096 ----a-w- c:\windows\system32\drivers\mwjbcdk.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-09 19:09 . 2010-06-09 19:09 4886 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2010-06-09 17:51 . 2010-06-05 20:59 1085767 ----a-w- c:\windows\Internet Logs\tvDebug.Zip
2010-06-08 19:13 . 2006-06-01 20:12 -------- d-----w- c:\documents and settings\pc\Application Data\Skype
2010-06-05 13:14 . 2007-01-07 22:40 -------- d-----w- c:\documents and settings\pc\Application Data\dvdcss
2010-05-28 20:55 . 2010-05-28 20:55 12 ----a-w- c:\windows\system32\config\systemprofile\Application Data\vqdlkr.dat
2010-05-22 22:51 . 2010-04-12 07:04 326984 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-04-15 18:02 . 2006-06-30 14:01 -------- d-----w- c:\program files\Google
2010-04-15 18:00 . 2006-05-10 13:19 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-04-13 21:06 . 2009-03-21 23:06 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-04-13 21:05 . 2010-04-13 21:05 -------- d-----w- c:\program files\Java
2010-04-13 21:05 . 2010-04-13 21:05 152576 ----a-w- c:\documents and settings\pc\Application Data\Sun\Java\jre1.6.0_15\lzma.dll
2010-04-12 16:35 . 2010-04-12 16:35 -------- d-----w- c:\documents and settings\pc\Application Data\Genie-Soft
2010-04-11 14:04 . 2010-04-11 14:04 -------- d-----w- c:\documents and settings\All Users\Application Data\FNET
2010-04-11 14:04 . 2010-06-05 13:42 2973184 ------w- c:\documents and settings\All Users\Application Data\FNET\UsbBoost\Uninstall.exe
2010-03-28 13:51 . 2006-06-01 10:17 85376 -c--a-w- c:\documents and settings\pc\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut600_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut60_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut6_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut5_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut4_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 49152 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\RedirectorEXE2_770DFD1204C24F4DA163D64FACCB5CBD.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut3_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\NewShortcut12_C6ABA3677F944B9FBB00F060701B0B5A.exe
2010-03-27 23:33 . 2010-03-27 23:33 69632 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\DesktopMgr.exe
2010-03-27 23:33 . 2010-03-27 23:33 49152 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\RedirectorEXE1_770DFD1204C24F4DA163D64FACCB5CBD.exe
2010-03-27 23:33 . 2010-03-27 23:33 49152 ----a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{CE86E2F5-850C-4207-94A3-A58D647B1733}\RedirectorEXE_770DFD1204C24F4DA163D64FACCB5CBD.exe
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" [2008-10-24 206112]
"LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2005-06-08 196608]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-18 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2007-10-08 1101824]
"BEWINTERNET-FR-DMESessionManager"="c:\program files\OrangeBS\BEWInternet\SessionManager\SessionManager.exe" [2008-06-26 131824]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-12-13 98304]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-12-13 118784]
"SigmatelSysTrayApp"="stsystra.exe" [2005-11-16 397312]
"BlackBerryAutoUpdate"="c:\program files\Fichiers communs\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2010-03-10 648536]
"Microsoft Forefront Client Security Antimalware Service"="c:\program files\Microsoft Forefront\Client Security\Client\Antimalware\MSASCui.exe" [2010-01-19 1033600]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2005-07-19 221184]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2005-06-08 217088]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2005-06-08 458752]
"AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2002-12-17 684032]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-10-08 995328]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-12-13 77824]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-12-04 1037192]
"ISW"="c:\program files\CheckPoint\ZAForceField\ForceField.exe" [2009-10-27 730480]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" [2007-02-25 437160]

c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2006-7-3 450560]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\FCSAM]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Symantec AntiVirus"=2 (0x2)
"SNDSrvc"=3 (0x3)
"SavRoam"=3 (0x3)
"DefWatch"=2 (0x2)
"ccSetMgr"=2 (0x2)
"ccPwdSvc"=3 (0x3)
"ccEvtMgr"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\OrangeBS\\BEWInternet\\Connectivity\\ConnectivityManager.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\program files\SFR\Media Center\httpd\httpd.exe"= c:\program files\SFR\Media Center\httpd\httpd.exe:172.16.255.0/255.255.255.0,192.168.1.0/255.255.255.0:Enabled:Serveur de partage Media Center (Player SFR)
"d:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe"=
"d:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:Remote Desktop
"6:TCP"= 6:TCP:NAP
"65533:TCP"= 65533:TCP:Services
"52344:TCP"= 52344:TCP:Services
"1673:TCP"= 1673:TCP:Services
"1846:TCP"= 1846:TCP:Services

R2 FCSAM;Service anti-programme malveillant Microsoft Forefront Client Security;c:\program files\Microsoft Forefront\Client Security\Client\Antimalware\MsMpEng.exe [19/01/2010 16:49 16880]
R2 FcsSas;Microsoft Forefront Client Security State Assessment Service;c:\program files\Microsoft Forefront\Client Security\Client\SSA\FcsSas.exe [06/04/2007 05:12 73120]
R2 ISWKL;ZoneAlarm Toolbar ISWKL;c:\program files\CheckPoint\ZAForceField\ISWKL.sys [27/10/2009 17:58 25208]
R2 IswSvc;ZoneAlarm Toolbar IswSvc;c:\program files\CheckPoint\ZAForceField\ISWSVC.exe [27/10/2009 17:58 476528]
S0 cerc6;cerc6; [x]
S3 NKXEU;NKXEU;c:\docume~1\pc\LOCALS~1\Temp\NKXEU.exe --> c:\docume~1\pc\LOCALS~1\Temp\NKXEU.exe [?]

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - mwjbcdk
.
Contenu du dossier 'Tâches planifiées'
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Settings,ProxyServer = proxybkp:8080
uInternet Settings,ProxyOverride = localhost
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} - hxxps://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} - hxxp://mobileapps.blackberry.com/devicesoftware/AxLoader.cab
FF - ProfilePath - c:\documents and settings\pc\Application Data\Mozilla\Firefox\Profiles\l9qbhb5j.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - component: c:\program files\CheckPoint\ZAForceField\TrustChecker\components\TrustCheckerMozillaPlugin.dll
FF - plugin: c:\program files\Fichiers communs\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
FF - plugin: d:\program files\Adobe Reader 707\Reader\browser\nppdf32.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-09 21:27
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mwjbcdk]

.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø*€|ÿÿÿÿ*€|ù*9~*]
"C040111900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h-€|ÿÿÿÿ¤*€|ù*9~*]
"C040111900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€-€|ÿÿÿÿÀ*€|ù*9~*]
"C040111900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG08.00.00.01WORKSTATION"="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"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(976)
c:\windows\system32\IWPDGINA.DLL
c:\program files\Intel\Wireless\Bin\SsoGnFRA.dll
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

- - - - - - - > 'lsass.exe'(1032)
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

- - - - - - - > 'explorer.exe'(3820)
c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll
c:\windows\system32\msls31.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\windows\System32\SCardSvr.exe
c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
c:\windows\system32\crypserv.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\progra~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\oodag.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Intel\Wireless\Bin\WLKeeper.exe
c:\windows\system32\rundll32.exe
c:\windows\stsystra.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Logitech\Video\FxSvr2.exe
.
**************************************************************************
.
Heure de fin: 2010-06-09 21:34:04 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-06-09 19:33
ComboFix2.txt 2010-06-09 18:13
ComboFix3.txt 2010-06-05 20:47
ComboFix4.txt 2010-06-04 19:12

Avant-CF: 1 858 621 440 octets libres
Après-CF: 1 838 727 168 octets libres

- - End Of File - - 013478233E4FD95FCB4B63B1AD89D4DE

Salut,

Guillaume, tu n'iras pas loin avec ton fix et ça :
SkipFix::

Plop si t'as pas vu.

Je reprends à partir d'où?

Bonsoir Guillaume,

J'ai passé le script, par contre le rapport semble trop lourd pour passer dans la fenêtre de réponse. Puis-je le mettre sur le même lien que le tout premier?

Merci

suite 2
((((((((((((((((((((((((((((( SnapShot_2010-06-09_20.11.31 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-06-10 18:23 . 2010-06-10 18:23 16384 c:\windows\temp\Perflib_Perfdata_330.dat
+ 2010-06-10 06:41 . 2006-04-19 04:00 34304 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\EBPBIDI.DLL
+ 2010-06-10 06:41 . 2006-02-13 02:20 60928 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FMW0BIE.DLL
+ 2010-06-10 06:41 . 2006-10-16 07:50 84480 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FHUTBIE.EXE
+ 2010-06-10 06:41 . 2006-11-08 23:03 65536 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FHSRBIE.DLL
+ 2010-06-10 06:41 . 2006-09-21 01:04 18432 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FGRCBIE.DLL
+ 2010-06-10 06:41 . 2006-09-26 03:00 65024 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FDSPBIE.DLL
+ 2010-06-10 06:41 . 2006-04-25 23:00 36864 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FBSRBIE.EXE
+ 2010-06-10 06:41 . 2006-07-25 04:01 33792 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FBL6BIE.DLL
+ 2010-06-10 06:41 . 2006-05-09 04:00 32768 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FBA6BIE.DLL
+ 2010-06-10 06:41 . 2006-09-13 23:00 20480 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FAUDBIE.DLL
+ 2010-06-10 06:41 . 2006-04-19 04:00 34304 c:\windows\system32\spool\drivers\w32x86\3\EBPBIDI.DLL
+ 2010-06-10 06:41 . 2006-02-13 02:20 60928 c:\windows\system32\spool\drivers\w32x86\3\E_FMW0BIE.DLL
+ 2010-06-10 06:41 . 2006-10-16 07:50 84480 c:\windows\system32\spool\drivers\w32x86\3\E_FHUTBIE.EXE
+ 2010-06-10 06:41 . 2006-11-08 23:03 65536 c:\windows\system32\spool\drivers\w32x86\3\E_FHSRBIE.DLL
+ 2010-06-10 06:41 . 2006-09-21 01:04 18432 c:\windows\system32\spool\drivers\w32x86\3\E_FGRCBIE.DLL
+ 2010-06-10 06:41 . 2006-09-26 03:00 65024 c:\windows\system32\spool\drivers\w32x86\3\E_FDSPBIE.DLL
+ 2010-06-10 06:41 . 2006-04-25 23:00 36864 c:\windows\system32\spool\drivers\w32x86\3\E_FBSRBIE.EXE
+ 2010-06-10 06:41 . 2006-07-25 04:01 33792 c:\windows\system32\spool\drivers\w32x86\3\E_FBL6BIE.DLL
+ 2010-06-10 06:41 . 2006-05-09 04:00 32768 c:\windows\system32\spool\drivers\w32x86\3\E_FBA6BIE.DLL
+ 2010-06-10 06:41 . 2006-09-13 23:00 20480 c:\windows\system32\spool\drivers\w32x86\3\E_FAUDBIE.DLL
+ 2009-10-30 11:39 . 2009-05-26 11:40 18296 c:\windows\system32\spmsg.dll
- 2009-10-30 11:39 . 2008-07-08 13:03 18296 c:\windows\system32\spmsg.dll
+ 2009-03-08 02:31 . 2010-05-06 10:33 55296 c:\windows\system32\msfeedsbs.dll
- 2009-03-08 02:31 . 2010-02-25 06:17 55296 c:\windows\system32\msfeedsbs.dll
+ 2008-04-14 12:00 . 2010-05-06 10:33 25600 c:\windows\system32\jsproxy.dll
- 2008-04-14 12:00 . 2010-02-25 06:17 25600 c:\windows\system32\jsproxy.dll
+ 2007-05-24 18:17 . 2006-08-10 00:02 75264 c:\windows\system32\E_FLBBIE.DLL
+ 2007-05-24 18:17 . 2006-04-19 00:00 62976 c:\windows\system32\E_FD4BBIE.DLL
- 2007-05-24 18:17 . 2005-04-11 00:01 62976 c:\windows\system32\E_FD4BBIE.DLL
- 2007-05-24 18:17 . 2004-09-10 19:12 49152 c:\windows\system32\E_DCINST.DLL
+ 2007-05-24 18:17 . 2004-09-10 18:12 49152 c:\windows\system32\E_DCINST.DLL
- 2009-10-29 13:34 . 2010-02-25 06:17 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2009-10-29 13:34 . 2010-05-06 10:33 12800 c:\windows\system32\dllcache\xpshims.dll
+ 2009-10-29 13:34 . 2010-05-06 10:33 55296 c:\windows\system32\dllcache\msfeedsbs.dll
- 2009-10-29 13:34 . 2010-02-25 06:17 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2009-03-08 03:33 . 2010-05-06 10:33 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2009-03-08 03:33 . 2010-02-25 06:17 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2010-03-05 14:38 . 2010-03-05 14:38 65536 c:\windows\system32\dllcache\asycfilt.dll
+ 2008-04-14 12:00 . 2010-03-05 14:38 65536 c:\windows\system32\asycfilt.dll
- 2008-07-29 17:16 . 2008-07-29 17:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2006-05-10 14:18 . 2010-06-10 13:33 23040 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 23040 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 61440 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2006-05-10 14:18 . 2010-06-10 13:33 61440 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2006-05-10 14:18 . 2010-06-10 13:33 27136 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 27136 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 11264 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2006-05-10 14:18 . 2010-06-10 13:33 11264 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2006-05-10 14:18 . 2010-06-10 13:33 12288 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 12288 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2008-02-19 09:55 . 2010-05-16 17:39 12288 c:\windows\Installer\{9051040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2008-02-19 09:55 . 2010-06-10 13:33 12288 c:\windows\Installer\{9051040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2010-06-10 13:30 . 2010-06-10 13:30 38240 c:\windows\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe
- 2010-06-09 19:01 . 2010-06-09 19:01 38240 c:\windows\Installer\{90120000-0020-040C-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2010-06-10 13:28 . 2010-02-25 06:17 12800 c:\windows\ie8updates\KB982381-IE8\xpshims.dll
+ 2010-06-10 13:28 . 2010-02-25 06:17 55296 c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll
+ 2010-06-10 13:28 . 2010-02-25 06:17 25600 c:\windows\ie8updates\KB982381-IE8\jsproxy.dll

suite 3
+ 2010-06-10 13:32 . 2010-06-10 13:32 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\1c1629f536fa9874ef08d09fb19ab0f0\System.Windows.Presentation.ni.dll
+ 2010-06-10 13:32 . 2010-06-10 13:32 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\1464c662c302ea6372a885161b983732\System.Web.DynamicData.Design.ni.dll
+ 2010-06-10 13:29 . 2010-06-10 13:29 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\5d535ecadf77ac2d9278a1661beb2855\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-06-10 13:24 . 2010-06-10 13:24 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\e67992626a30603458b0df22841c2423\PresentationFontCache.ni.exe
+ 2010-06-10 13:23 . 2010-06-10 13:23 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\6be27d744e6e2bfc4b0e25bd2998ef7c\PresentationCFFRasterizer.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\4a52287444c36c89310856b38ff52fe0\Microsoft.Vsa.ni.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2010-03-28 11:51 . 2010-03-28 11:51 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2010-06-10 13:23 . 2010-06-10 13:23 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2010-06-09 19:09 . 2010-06-09 19:09 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2010-06-09 19:08 . 2010-06-09 19:08 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2010-06-09 19:08 . 2010-06-09 19:08 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2010-06-09 19:08 . 2010-06-09 19:08 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2010-06-09 19:08 . 2010-06-09 19:08 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-06-10 06:38 . 2005-04-05 22:01 6400 c:\windows\system32\spool\drivers\w32x86\EPUPDATE.DAT
+ 2010-06-10 06:41 . 2005-04-05 22:01 6400 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\EPUPDATE.DAT
+ 2010-06-10 06:41 . 2006-09-25 03:01 2898 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FAIFBIE.DAT
+ 2010-06-10 06:41 . 2005-04-05 22:01 6400 c:\windows\system32\spool\drivers\w32x86\3\EPUPDATE.DAT
+ 2010-06-10 06:41 . 2006-09-25 03:01 2898 c:\windows\system32\spool\drivers\w32x86\3\E_FAIFBIE.DAT
+ 2006-05-10 14:18 . 2010-06-10 13:33 4096 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 4096 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2008-02-19 09:55 . 2010-06-10 13:33 4096 c:\windows\Installer\{9051040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2008-02-19 09:55 . 2010-05-16 17:39 4096 c:\windows\Installer\{9051040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2010-06-10 13:21 . 2010-06-10 13:21 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-06-09 19:09 . 2010-06-09 19:09 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-06-09 19:07 . 2010-06-09 19:07 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2010-06-09 19:08 . 2010-06-09 19:08 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2010-06-09 19:08 . 2010-06-09 19:08 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2010-06-10 06:38 . 2006-09-08 04:18 723144 c:\windows\system32\spool\drivers\w32x86\EPUPDATE.EXE

suite 4
+ 2010-06-10 06:41 . 2006-09-08 04:18 723144 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\EPUPDATE.EXE
+ 2010-06-10 06:41 . 2006-11-21 00:16 114688 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\EPSET32.DLL
+ 2010-06-10 06:41 . 2006-04-27 03:11 167936 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\EBAPI4.DLL
+ 2010-06-10 06:41 . 2006-04-18 02:00 102400 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_S30RP1.EXE
+ 2010-06-10 06:41 . 2006-11-06 02:03 223232 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FUIRBIE.DLL
+ 2010-06-10 06:41 . 2006-10-10 04:00 883200 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FUIC1BIE.DLL
+ 2010-06-10 06:41 . 2006-02-14 02:01 456192 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FUI1BIE.DLL
+ 2010-06-10 06:41 . 2006-10-12 02:00 626688 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FPRUBIE.DLL
+ 2010-06-10 06:41 . 2006-09-06 02:00 196608 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FPREBIE.EXE
+ 2010-06-10 06:41 . 2005-04-18 16:10 258114 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FOKABIE.DLL
+ 2010-06-10 06:41 . 2006-09-29 03:00 102912 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FMAI1BIE.DLL
+ 2010-06-10 06:41 . 2006-10-25 02:00 349184 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FJBCBIE.DLL
+ 2010-06-10 06:41 . 2006-10-16 07:50 174592 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FHUTBIE.DLL
+ 2010-06-10 06:41 . 2005-11-30 02:20 212992 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FHT0BIE.DLL
+ 2010-06-10 06:41 . 2006-02-10 02:20 326144 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FHM0BIE.DLL
+ 2010-06-10 06:41 . 2006-04-18 23:00 410112 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FHBRBIE.DLL
+ 2010-06-10 06:41 . 2006-09-13 02:00 450048 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FCONBIE.DLL
+ 2010-06-10 06:41 . 2006-09-13 23:01 155648 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FBCSBIE.EXE
+ 2010-06-10 06:41 . 2006-04-27 03:11 167936 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FBAPBIE.DLL
+ 2010-06-10 06:41 . 2006-09-22 02:01 139264 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FATIBIE.EXE
+ 2010-06-10 06:41 . 2006-11-14 02:03 107520 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FASRBIE.DLL
+ 2010-06-10 06:41 . 2006-09-05 01:05 126976 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FASKBIE.DLL
+ 2010-06-10 06:41 . 2006-03-20 02:02 118784 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FARNBIE.EXE
+ 2010-06-10 06:41 . 2006-11-01 02:02 585728 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FAPRBIE.DLL
+ 2010-06-10 06:41 . 2006-03-20 02:01 151552 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FAMTBIE.EXE
+ 2010-06-10 06:41 . 2006-09-25 02:06 253952 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FAMDBIE.EXE
+ 2010-06-10 06:41 . 2006-09-21 23:10 120320 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FAIRBIE.DLL
+ 2010-06-10 06:41 . 2006-09-22 02:01 585728 c:\windows\system32\spool\drivers\w32x86\epsonstylus_dx60003b3f\E_FABRBIE.DLL
+ 2010-06-10 06:41 . 2006-09-08 04:18 723144 c:\windows\system32\spool\drivers\w32x86\3\EPUPDATE.EXE
+ 2010-06-10 06:41 . 2006-11-21 00:16 114688 c:\windows\system32\spool\drivers\w32x86\3\EPSET32.DLL
+ 2010-06-10 06:41 . 2006-04-27 03:11 167936 c:\windows\system32\spool\drivers\w32x86\3\EBAPI4.DLL
+ 2010-06-10 06:41 . 2006-04-18 02:00 102400 c:\windows\system32\spool\drivers\w32x86\3\E_S30RP1.EXE
+ 2010-06-10 06:41 . 2006-11-06 02:03 223232 c:\windows\system32\spool\drivers\w32x86\3\E_FUIRBIE.DLL
+ 2010-06-10 06:41 . 2006-10-10 04:00 883200 c:\windows\system32\spool\drivers\w32x86\3\E_FUIC1BIE.DLL
+ 2010-06-10 06:41 . 2006-02-14 02:01 456192 c:\windows\system32\spool\drivers\w32x86\3\E_FUI1BIE.DLL
+ 2010-06-10 06:41 . 2006-10-12 02:00 626688 c:\windows\system32\spool\drivers\w32x86\3\E_FPRUBIE.DLL
+ 2010-06-10 06:41 . 2006-09-06 02:00 196608 c:\windows\system32\spool\drivers\w32x86\3\E_FPREBIE.EXE
+ 2010-06-10 06:41 . 2005-04-18 16:10 258114 c:\windows\system32\spool\drivers\w32x86\3\E_FOKABIE.DLL
+ 2010-06-10 06:41 . 2006-09-29 03:00 102912 c:\windows\system32\spool\drivers\w32x86\3\E_FMAI1BIE.DLL
+ 2010-06-10 06:41 . 2006-10-25 02:00 349184 c:\windows\system32\spool\drivers\w32x86\3\E_FJBCBIE.DLL
+ 2010-06-10 06:41 . 2006-10-16 07:50 174592 c:\windows\system32\spool\drivers\w32x86\3\E_FHUTBIE.DLL
+ 2010-06-10 06:41 . 2005-11-30 02:20 212992 c:\windows\system32\spool\drivers\w32x86\3\E_FHT0BIE.DLL
+ 2010-06-10 06:41 . 2006-02-10 02:20 326144 c:\windows\system32\spool\drivers\w32x86\3\E_FHM0BIE.DLL
+ 2010-06-10 06:41 . 2006-04-18 23:00 410112 c:\windows\system32\spool\drivers\w32x86\3\E_FHBRBIE.DLL
+ 2010-06-10 06:41 . 2006-09-13 02:00 450048 c:\windows\system32\spool\drivers\w32x86\3\E_FCONBIE.DLL
+ 2010-06-10 06:41 . 2006-09-13 23:01 155648 c:\windows\system32\spool\drivers\w32x86\3\E_FBCSBIE.EXE
+ 2010-06-10 06:41 . 2006-04-27 03:11 167936 c:\windows\system32\spool\drivers\w32x86\3\E_FBAPBIE.DLL
+ 2010-06-10 06:41 . 2006-09-22 02:01 139264 c:\windows\system32\spool\drivers\w32x86\3\E_FATIBIE.EXE
+ 2010-06-10 06:41 . 2006-11-14 02:03 107520 c:\windows\system32\spool\drivers\w32x86\3\E_FASRBIE.DLL
+ 2010-06-10 06:41 . 2006-09-05 01:05 126976 c:\windows\system32\spool\drivers\w32x86\3\E_FASKBIE.DLL
+ 2010-06-10 06:41 . 2006-03-20 02:02 118784 c:\windows\system32\spool\drivers\w32x86\3\E_FARNBIE.EXE
+ 2010-06-10 06:41 . 2006-11-01 02:02 585728 c:\windows\system32\spool\drivers\w32x86\3\E_FAPRBIE.DLL
+ 2010-06-10 06:41 . 2006-03-20 02:01 151552 c:\windows\system32\spool\drivers\w32x86\3\E_FAMTBIE.EXE
+ 2010-06-10 06:41 . 2006-09-25 02:06 253952 c:\windows\system32\spool\drivers\w32x86\3\E_FAMDBIE.EXE
+ 2010-06-10 06:41 . 2006-09-21 23:10 120320 c:\windows\system32\spool\drivers\w32x86\3\E_FAIRBIE.DLL
+ 2010-06-10 06:41 . 2006-09-22 02:01 585728 c:\windows\system32\spool\drivers\w32x86\3\E_FABRBIE.DLL
- 2008-04-14 12:00 . 2010-02-25 06:17 206848 c:\windows\system32\occache.dll
+ 2008-04-14 12:00 . 2010-05-06 10:33 206848 c:\windows\system32\occache.dll
+ 2008-04-14 12:00 . 2010-05-06 10:33 611840 c:\windows\system32\mstime.dll
- 2008-04-14 12:00 . 2010-02-25 06:17 611840 c:\windows\system32\mstime.dll
+ 2009-03-08 02:32 . 2010-05-06 10:33 599040 c:\windows\system32\msfeeds.dll
+ 2008-04-14 12:00 . 2010-05-06 10:33 184320 c:\windows\system32\iepeers.dll
- 2008-04-14 12:00 . 2010-02-25 06:17 184320 c:\windows\system32\iepeers.dll
- 2008-04-14 12:00 . 2010-02-25 06:17 387584 c:\windows\system32\iedkcs32.dll
+ 2008-04-14 12:00 . 2010-05-06 10:33 387584 c:\windows\system32\iedkcs32.dll
- 2008-04-14 12:00 . 2010-02-24 09:55 173056 c:\windows\system32\ie4uinit.exe
+ 2008-04-14 12:00 . 2010-05-05 13:30 173056 c:\windows\system32\ie4uinit.exe
- 2010-06-05 09:12 . 2010-06-05 09:12 318744 c:\windows\system32\FNTCACHE.DAT
+ 2010-06-05 09:12 . 2010-06-10 17:04 318744 c:\windows\system32\FNTCACHE.DAT
+ 2006-09-07 04:18 . 2006-09-07 04:18 909312 c:\windows\system32\EPSTP32U.EXE
- 2009-03-08 03:34 . 2010-02-25 06:17 916480 c:\windows\system32\dllcache\wininet.dll
+ 2009-03-08 03:34 . 2010-05-06 10:33 916480 c:\windows\system32\dllcache\wininet.dll
- 2009-03-08 03:34 . 2010-02-25 06:17 206848 c:\windows\system32\dllcache\occache.dll
+ 2009-03-08 03:34 . 2010-05-06 10:33 206848 c:\windows\system32\dllcache\occache.dll
+ 2009-03-08 03:32 . 2010-05-06 10:33 611840 c:\windows\system32\dllcache\mstime.dll
- 2009-03-08 03:32 . 2010-02-25 06:17 611840 c:\windows\system32\dllcache\mstime.dll
+ 2009-10-29 13:34 . 2010-05-06 10:33 599040 c:\windows\system32\dllcache\msfeeds.dll
+ 2009-10-29 13:34 . 2010-05-06 10:33 247808 c:\windows\system32\dllcache\ieproxy.dll
- 2009-10-29 13:34 . 2010-02-25 06:17 247808 c:\windows\system32\dllcache\ieproxy.dll
+ 2009-03-08 03:31 . 2010-05-06 10:33 184320 c:\windows\system32\dllcache\iepeers.dll
- 2009-03-08 03:31 . 2010-02-25 06:17 184320 c:\windows\system32\dllcache\iepeers.dll
- 2009-03-08 13:09 . 2010-02-25 06:17 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2009-03-08 13:09 . 2010-05-06 10:33 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2009-03-08 03:32 . 2010-05-05 13:30 173056 c:\windows\system32\dllcache\ie4uinit.exe
- 2009-03-08 03:32 . 2010-02-24 09:55 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2010-04-20 05:30 . 2010-04-20 05:30 285696 c:\windows\system32\dllcache\atmfd.dll

suite 5
+ 2010-04-07 21:48 . 2010-04-07 21:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
- 2008-07-29 17:16 . 2008-07-29 17:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2006-05-10 14:18 . 2010-06-10 13:33 409600 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 409600 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2006-05-10 14:18 . 2010-06-10 13:33 286720 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 286720 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 249856 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2006-05-10 14:18 . 2010-06-10 13:33 249856 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 794624 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2006-05-10 14:18 . 2010-06-10 13:33 794624 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2006-05-10 14:18 . 2010-06-10 13:33 135168 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 135168 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2006-05-10 14:18 . 2010-06-10 13:33 593920 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2006-05-10 14:18 . 2010-06-09 19:14 593920 c:\windows\Installer\{9111040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2008-02-19 09:55 . 2010-05-16 17:39 176128 c:\windows\Installer\{9051040C-6000-11D3-8CFE-0150048383C9}\visicon.exe
+ 2008-02-19 09:55 . 2010-06-10 13:33 176128 c:\windows\Installer\{9051040C-6000-11D3-8CFE-0150048383C9}\visicon.exe
- 2008-02-19 09:55 . 2010-05-16 17:39 135168 c:\windows\Installer\{9051040C-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2008-02-19 09:55 . 2010-06-10 13:33 135168 c:\windows\Installer\{9051040C-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2010-06-10 13:28 . 2010-02-25 06:17 916480 c:\windows\ie8updates\KB982381-IE8\wininet.dll
+ 2010-06-10 13:28 . 2010-02-22 14:25 406392 c:\windows\ie8updates\KB982381-IE8\spuninst\updspapi.dll
+ 2010-06-10 13:28 . 2008-07-08 13:03 234872 c:\windows\ie8updates\KB982381-IE8\spuninst\spuninst.exe
+ 2010-06-10 13:28 . 2010-02-25 06:17 206848 c:\windows\ie8updates\KB982381-IE8\occache.dll
+ 2010-06-10 13:28 . 2010-02-25 06:17 611840 c:\windows\ie8updates\KB982381-IE8\mstime.dll
+ 2010-06-10 13:28 . 2010-02-25 06:17 594432 c:\windows\ie8updates\KB982381-IE8\msfeeds.dll
+ 2010-06-10 13:28 . 2010-02-25 06:17 247808 c:\windows\ie8updates\KB982381-IE8\ieproxy.dll
+ 2010-06-10 13:28 . 2010-02-25 06:17 184320 c:\windows\ie8updates\KB982381-IE8\iepeers.dll
+ 2010-06-10 13:28 . 2009-03-08 02:35 742912 c:\windows\ie8updates\KB982381-IE8\iedvtool.dll
+ 2010-06-10 13:28 . 2010-02-25 06:17 387584 c:\windows\ie8updates\KB982381-IE8\iedkcs32.dll
+ 2010-06-10 13:28 . 2010-02-24 09:55 173056 c:\windows\ie8updates\KB982381-IE8\ie4uinit.exe
+ 2010-06-10 13:28 . 2010-06-10 13:28 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\4d07b1ccecca66f320c1a0971dd614d1\WsatConfig.ni.exe
+ 2010-06-10 13:26 . 2010-06-10 13:26 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a7c702f75d47bf841b9587e582c2d0b2\WindowsFormsIntegration.ni.dll
+ 2010-06-10 13:26 . 2010-06-10 13:26 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\3a78043c85333d5af49a0d958912ae4a\UIAutomationClient.ni.dll
+ 2010-06-10 13:32 . 2010-06-10 13:32 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\747e84d81d1de2041661f0f71b04734a\System.Xml.Linq.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\d51dfbd8d5431eb89181baaa24863e15\System.Web.Routing.ni.dll
+ 2010-06-10 13:32 . 2010-06-10 13:32 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\436dde9611932489da3dc8a1be170843\System.Web.RegularExpressions.ni.dll
+ 2010-06-10 13:32 . 2010-06-10 13:32 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\e8ef769b3e899e62b26daadee50b97ed\System.Web.Extensions.Design.ni.dll
+ 2010-06-10 13:32 . 2010-06-10 13:32 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\ce3b446b7bee5c47949c994ec89b1649\System.Web.Entity.ni.dll
+ 2010-06-10 13:32 . 2010-06-10 13:32 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\ad04fe1182e55e7c01066b62a4bee6b5\System.Web.Entity.Design.ni.dll
+ 2010-06-10 13:32 . 2010-06-10 13:32 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\20ba0d4d182a1a9c1f54c00d3bc29a68\System.Web.DynamicData.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\c97ecf9250c2f0794262534f27f98b72\System.Web.Abstractions.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\9c56656c88979cf18de6cbcb6587ba8f\System.Transactions.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\5adb0f89d469632511aed9d88cfe05c4\System.ServiceProcess.ni.dll
+ 2010-06-10 13:29 . 2010-06-10 13:29 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\42b2ffb594dbd5652a576a0dce28722c\System.Security.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\3231473e2ec4451c8f218930fda80d19\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\f90965b9d9a6a6604c9a66f57c37c026\System.Net.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\16670b6870746e5a8dc4a73a76a90bed\System.Management.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\e6bd59fec415e273c173170c6508180a\System.Management.Instrumentation.ni.dll
+ 2010-06-10 13:27 . 2010-06-10 13:27 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\e3eb86170cba4c80e6e22ca33c63c218\System.IO.Log.ni.dll
+ 2010-06-10 13:28 . 2010-06-10 13:28 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\cfa48936affc9a5fb89f0bf66cc52a47\System.IdentityModel.Selectors.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\e9edc5cd12ebb513b4a3c53cb4640771\System.EnterpriseServices.Wrapper.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\e9edc5cd12ebb513b4a3c53cb4640771\System.EnterpriseServices.ni.dll
+ 2010-06-10 13:25 . 2010-06-10 13:25 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\aeba6820f20655dec7fe0fe05aaeb818\System.Drawing.Design.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\9ef70079beca3a9982a3aa76ebc0ddd8\System.DirectoryServices.Protocols.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\277619716d9136216065bea970365c65\System.DirectoryServices.AccountManagement.ni.dll
+ 2010-06-10 13:30 . 2010-06-10 13:30 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\90b67e13866b176ae6cbdb23144f724d\System.Data.Services.Client.ni.dll
+ 2010-06-10 13:30 . 2010-06-10 13:30 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\131a477d41a8669b15696128b94c2636\System.Data.Services.Design.ni.dll
+ 2010-06-10 13:30 . 2010-06-10 13:30 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\d4990681ce373d81a52b231ee4c4afea\System.Data.Entity.Design.ni.dll
+ 2010-06-10 13:29 . 2010-06-10 13:29 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\9e9d66a3a0e16fceead505c25af569eb\System.Data.DataSetExtensions.ni.dll
+ 2010-06-10 13:29 . 2010-06-10 13:29 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\631b3eba1ba5bd3c3f027f34011cadeb\System.Configuration.ni.dll
+ 2010-06-10 13:31 . 2010-06-10 13:31 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\39e4f9a276fb12125d8a1444d8b65a84\System.Configuration.Install.ni.dll
+ 2010-06-10 13:29 . 2010-06-10 13:29 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\849916c5cb3ff7763d15a3976766c2f6\System.AddIn.ni.dll
+ 2010-06-10 13:28 . 2010-06-10 13:28 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\f38a426b90e6c526dcb2c435c7380450\SMSvcHost.ni.exe
+ 2010-06-10 13:28 . 2010-06-10 13:28 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\6cabc7d1700c224e8b41ff2f96a3087c\SMDiagnostics.ni.dll
+ 2010-06-10 13:28 . 2010-06-10 13:28 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\5c8f5ca36498f43980d64820d8186c8a\ServiceModelReg.ni.exe
+ 2010-06-10 13:24 . 2010-06-10 13:24 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ae733e4062edba3a33bb0a632bef66bf\PresentationFramework.Royale.ni.dll
+ 2010-06-10 13:24 . 2010-06-10 13:24 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3ffad524016f0aba7b11a8aa33301a65\PresentationFramework.Aero.ni.dll
+ 2010-06-10 13:24 . 2010-06-10 13:24 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\201968d038a23a4688310fed1eeaddaa\PresentationFramework.Classic.ni.dll
+ 2010-06-10 13:24 . 2010-06-10 13:24 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1ead87ca8eb84c595c77c70e3b2df88d\PresentationFramework.Luna.ni.dll
+ 2010-06-10 13:28 . 2010-06-10 13:28 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\7700963610c1af364aa934c3c824b7b4\MSBuild.ni.exe
+ 2010-06-10 13:28 . 2010-06-10 13:28 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\c74d4c69c49992dfb23ba512081dc3de\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-06-10 13:29 . 2010-06-10 13:29 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\a6a9f24b1a8984eaafbabb1ee968e359\Microsoft.Build.Utilities.ni.dll
+ 2010-06-10 13:29 . 2010-06-10 13:29 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\2fa81d363cb1496be2427d848a867409\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2010-06-10 13:29 . 2010-06-10 13:29 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\c4c360df9c1024ebc3f0de77f5cf8b1c\Microsoft.Build.Engine.ni.dll
+ 2010-06-10 13:29 . 2010-06-10 13:29 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\c9386dcd89c2518a74115f3bfd861830\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2010-06-10 13:28 . 2010-06-10 13:28 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\abb62e3ed74c974f0282bc7ea5d3f1c1\ComSvcConfig.ni.exe
+ 2010-06-10 13:28 . 2010-06-10 13:28 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\6d34f00b6a782d15bec70d6cdb00b5e8\AspNetMMCExt.ni.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2010-06-09 19:07 . 2010-06-09 19:07 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2010-06-09 19:08 . 2010-06-09 19:08 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-06-10 13:21 . 2010-06-10 13:21 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll

Merci, voilà le lien :

http://www.cijoint.fr/cjlink.php?file=cj201006/cijHW3hQZb.txt

Bonsoir guillaume,

j'ai suivi tes conseils, et voici le rapport. Par contre ce matin mon ( Microsoft forefrontClient) à trouvé un nouveau virus : BHO.CO.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4189

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

11/06/2010 20:08:16
mbam-log-2010-06-11 (20-08-16).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 200800
Temps écoulé: 37 minute(s), 42 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

C'est fait, voilà le rapport de Ad-R.exe :

======= RAPPORT D'AD-REMOVER 2.0.0.1,B | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par C_XX le 11/06/10 à 19:00
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 21:20:42 le 11/06/2010, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86)
pc, ALT-4099 ( )

============== RECHERCHE ==============



1,Clé trouvée: HKLM\Software\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}



============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.3 (fr)] **

-- C:\Documents and Settings\pc\Application Data\Mozilla\FireFox\Profiles\l9qbhb5j.default\Prefs.js --
browser.download.dir, D:\\Alain\\Outils
browser.download.lastDir, C:\\Documents and Settings\\pc\\Mes documents\\Mes vidéos\\DivX Movies
browser.startup.homepage, hxxp://www.google.fr/
browser.startup.homepage_override.mstone, rv:1.9.2.3

-- C:\Documents and Settings\HelpAssistant\Application Data\Mozilla\FireFox\Profiles\l9qbhb5j.default\Prefs.js --
browser.download.lastDir, C:\\Documents and Settings\\pc\\Mes documents\\Mes vidéos\\DivX Movies
browser.startup.homepage, hxxp://www.google.fr/
browser.startup.homepage_override.mstone, rv:1.8.1.20

========================================

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Show_ToolBar: yes
Start Page: hxxp://www.google.fr/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 2 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 2 Fichier(s)

C:\Ad-Report-SCAN[1].txt - 533 Octet(s)

Fin à: 21:26:06, 11/06/2010

============== E.O.F ==============

C'était un peu long, mais voici le rapport du "nettoyer" :
Merci de ta patience avec moi....

======= RAPPORT D'AD-REMOVER 2.0.0.1,B | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par C_XX le 11/06/10 à 19:00
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 22:30:24 le 11/06/2010, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86)
pc, ALT-4099 ( )

============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.


1,Clé supprimée: HKLM\Software\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}



============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.3 (fr)] **

-- C:\Documents and Settings\pc\Application Data\Mozilla\FireFox\Profiles\l9qbhb5j.default\Prefs.js --
browser.download.dir, D:\\Alain\\Outils
browser.download.lastDir, C:\\Documents and Settings\\pc\\Mes documents\\Mes vidéos\\DivX Movies
browser.startup.homepage, hxxp://www.google.fr/
browser.startup.homepage_override.mstone, rv:1.9.2.3

-- C:\Documents and Settings\HelpAssistant\Application Data\Mozilla\FireFox\Profiles\l9qbhb5j.default\Prefs.js --
browser.download.lastDir, C:\\Documents and Settings\\pc\\Mes documents\\Mes vidéos\\DivX Movies
browser.startup.homepage, hxxp://www.google.fr/
browser.startup.homepage_override.mstone, rv:1.8.1.20

========================================

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main]
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main]
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 2 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 443 Octet(s)
C:\Ad-Report-CLEAN[2].txt - 678 Octet(s)
C:\Ad-Report-SCAN[1].txt - 2486 Octet(s)

Fin à: 22:34:09, 11/06/2010

============== E.O.F ==============

Merci, je vais appliquer cette procédure de suite.
Par contre j'ai remarquer les fichiers suivants que je n'arrive pas à supprimer, as-tu une idée :

dans C:\Documents and Settings\pc\Local Settings\temp\IswTmp\Logs

ISWDMP.swl
ISWDMP.swl.old
ISWFWMON.swl
ISWFWMON.swl.old
ISWGUI.swl
ISWGUI.swl.old
......
Il y a 28 fichiers de ce type dans ce répertoire avec pour date de dernière modif, la date d'aujourd'hui

Merci de ton aide.

voilà les 2 outils sont passés. Ci-après les rapports :

JavaRa 1.15 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sat Jun 12 18:41:52 2010

Found and removed: C:\Documents and Settings\pc\Application Data\Sun\Java\jre1.6.0_13

Found and removed: C:\Documents and Settings\pc\Application Data\Sun\Java\jre1.6.0_15

Found and removed: C:\Documents and Settings\pc\Application Data\Sun\Java\jre1.6.0_16

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

------------------------------------

Finished reporting.

pour TCleaner :
[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Combofix.txt: trouvé !
C:\!Killbox: trouvé !
C:\Qoobox: trouvé !
C:\Program Files\Ad-remover: trouvé !
C:\Program Files\ZHPDiag: trouvé !
C:\Program Files\Ad-Remover\Backup\Ad-R.exe: trouvé !
C:\Program Files\ZHPDiag\ZHPdiag.exe: trouvé !
C:\Program Files\ZHPDiag\catchme.exe: trouvé !
C:\Program Files\ZHPDiag\mbr.log: trouvé !
C:\Program Files\ZHPDiag\mbr.exe: trouvé !
C:\Qoobox\Quarantine\catchme.log: trouvé !
C:\WINDOWS\mbr.exe: trouvé !

---------------------------------
--> Suppression:

C:\Program Files\Ad-Remover\Backup\Ad-R.exe: supprimé !
C:\Program Files\ZHPDiag\ZHPdiag.exe: supprimé !
C:\Program Files\ZHPDiag\catchme.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\Program Files\ZHPDiag\mbr.log: supprimé !
C:\Program Files\ZHPDiag\mbr.exe: supprimé !
C:\Qoobox\Quarantine\catchme.log: supprimé !
C:\WINDOWS\mbr.exe: supprimé !
C:\!Killbox: supprimé !
C:\Qoobox: supprimé !
C:\Program Files\Ad-remover: supprimé !
C:\Program Files\ZHPDiag: supprimé !

Fichiers temporaires nettoyés !
Corbeille vidée!

j'ai aussi l'alerte suivante de Microsoft Forefront client security qui m'inquiète, qu'en penses-tu? :

Résumé :
Inscription de l'application modifications ont été apportées.

Cet agent analyse les diverses façons dont un programme, un script ou un exécutable peut démarrer indépendamment d'une application.

Modifications détectées :
file:
C:\WINDOWS\tasks\MP Scheduled Scan.job

taskscheduler:
C:\WINDOWS\tasks\MP Scheduled Scan.job

Conseil :
N'autorisez cet élément détecté que si vous faites confiance au programme ou à l'éditeur du logiciel.

Des programmes susceptibles de compromettre votre confidentialité ou d'endommager votre ordinateur ont été détectés. Vous pouvez accéder au fichier sans supprimer la menace, mais cela n'est pas recommandé. Pour ce faire, sélectionnez l'action "Toujours autoriser" et cliquez sur le bouton "Appliquer les actions". Si cette option n'est pas disponible, connectez-vous en tant qu'administrateur ou demandez l'assistance d'un administrateur.

Détecté par :
Fichier de définition

Point de contrôle :
Planificateur de tâches

Catégorie :
Non encore classifié

Mission accomplie...
Quelle est la suite?

Merci

Bonjour Guillaume,

oui je crois que l'on peut clore ce post.

Je te remercie infiniment pour ta patience, ton temps et ton aide qui m'a été précieuse.

@+