Antimalware Doctor (icônes du bureau disparu)

redgi -  
 redgi -
Bonjour à tous,

Voilà, j'avais été infecté ( et peut être encore ) par antimalware doctor.
Via Malwarebytes, rkil, AD remover, CCleaner, usbfix, etc... , je pense l'avoir éradiqué.
Cependant, mon bureau reste désespérément vide. Il m'avait bloqué Internet et supprimé mes icônes. J'ai retrouvé Internet mais pas les icônes.
Avec Ctrl+Alt+Suppr puis en tapant C:/ via "exécuter", je remonte jusqu'au bureau et je les vois dans l'explorateur Windows.
Comment remédier à ce problème?
D'avance un grand merci à tous ceux qui m'aideront.
D'habitude, j'arrive à gérer mais là, je sèche.

9 réponses

  2.
    jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    slt

    télécharge combofix (par sUBs) ici :

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    et enregistre le sur le bureau.

    déconnecte toi d'internet et ferme toutes tes applications.

    désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

    double-clique sur combofix.exe et suis les instructions

    à la fin, il va produire un rapport C:\ComboFix.txt

    réactive ton parefeu, ton antivirus, la garde de ton antispyware

    copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

    Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

    Tu as un tutoriel complet ici :

    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
    0
  3. redgi
     
    ok, je vais tenter.
    je vous tiens au jus.
    Merci
    [...]
    Je n'arrive pas à désactiver Antivir Desktop.
    Même le gestionnaire de tâches ne veut rien savoir.
    Et C Cleaner me l'enlève mais ton soft le voit en activité. C'est qu'il a raison je pense.
    [...]
    Bon, je l'ai désinstallé. Je le remettrai après.
    [...]
    Winlogon.exe dans le system 32 infecté...

    Voilà le rapport:

    ComboFix 10-08-27.03 - Régis 28/08/2010 18:40:03.1.2 - x86
    Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2047.1702 [GMT 2:00]
    Lancé depuis: c:\documents and settings\Régis\Bureau\ComboFix.exe
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\Régis\Application Data\DC5F5B5295ED77B94C9DC3F639AB0D0F
    c:\documents and settings\Régis\Application Data\DC5F5B5295ED77B94C9DC3F639AB0D0F\enemies-names.txt
    c:\documents and settings\Régis\Application Data\DC5F5B5295ED77B94C9DC3F639AB0D0F\local.ini
    c:\windows\system32\Thumbs.db

    c:\windows\system32\winlogon.exe . . . est infecté!!

    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2010-07-28 au 2010-08-28 ))))))))))))))))))))))))))))))))))))
    .

    2010-08-27 23:26 . 2010-08-27 23:26 2185909 ----a-w- C:\UsbFix_Upload_Me_PC_GAMER.zip
    2010-08-27 23:23 . 2010-08-27 23:26 -------- d-----w- C:\UsbFix
    2010-08-27 20:31 . 2010-08-27 20:40 -------- d-----w- C:\Kill'em
    2010-08-27 20:31 . 2010-08-27 20:48 -------- d-----w- c:\program files\List_Kill'em
    2010-08-27 20:28 . 2010-08-27 20:29 -------- d---a-w- C:\Navilog1
    2010-08-27 20:28 . 2010-08-27 20:28 -------- d-----w- c:\program files\Navilog1
    2010-08-27 20:22 . 2010-08-27 20:23 -------- d-----w- c:\program files\Ad-Remover
    2010-08-25 21:16 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-08-25 21:16 . 2010-08-27 19:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-08-25 21:16 . 2010-08-25 21:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2010-08-25 21:16 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-08-07 16:07 . 2010-08-07 16:07 47364 ----a-w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment\Battle.net\Cache\Download\Scan.dll
    2010-08-01 13:58 . 2010-08-01 13:58 -------- d-----w- c:\program files\IDoser v4
    2010-07-30 18:18 . 2010-08-19 21:45 -------- d-----w- c:\program files\StarCraft II
    2010-07-30 18:18 . 2010-07-30 19:59 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment
    2010-07-30 18:18 . 2010-07-30 19:50 -------- d-----w- c:\program files\Fichiers communs\Blizzard Entertainment
    2010-07-30 18:15 . 2010-08-27 23:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2010-07-30 18:15 . 2010-07-30 18:20 -------- d-----w- c:\program files\Spybot
    2010-07-30 18:07 . 2010-08-13 01:54 -------- d-----w- c:\program files\Speccy
    2010-07-30 18:06 . 2010-07-30 18:06 -------- d-----w- c:\program files\StarCraft II.60ba5bd6.temp
    2010-07-30 18:06 . 2010-07-30 18:06 -------- d-----w- c:\program files\Fichiers communs\Blizzard Entertainment.91ccac26.temp
    2010-07-30 18:06 . 2010-07-30 18:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment.97a3acfc.temp
    2010-07-30 17:37 . 2010-07-30 17:37 -------- d-----w- c:\program files\StarCraft II.temp
    2010-07-30 17:37 . 2010-07-30 17:37 -------- d-----w- c:\program files\Fichiers communs\Blizzard Entertainment.temp
    2010-07-30 17:37 . 2010-07-30 17:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment.temp

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-08-28 16:33 . 2010-06-25 14:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
    2010-08-27 20:49 . 2002-09-06 23:00 82572 ----a-w- c:\windows\system32\perfc00C.dat
    2010-08-27 20:49 . 2002-09-06 23:00 503034 ----a-w- c:\windows\system32\perfh00C.dat
    2010-08-25 21:33 . 2009-06-11 17:35 -------- d-----w- c:\program files\CCleaner
    2010-08-21 17:57 . 2009-06-12 13:41 -------- d-----w- c:\program files\uTorrent
    2010-08-05 20:05 . 2009-06-11 17:29 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-08-05 20:03 . 2009-08-25 08:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Installations
    2010-08-05 20:03 . 2009-08-25 08:52 -------- d-----w- c:\program files\Nokia N95
    2010-08-05 19:57 . 2010-04-23 12:46 -------- d-----w- c:\program files\FLV Converter
    2010-08-05 19:56 . 2009-06-29 18:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
    2010-07-28 11:26 . 2010-07-28 11:26 -------- d-----w- c:\program files\ImASCII
    2010-07-05 09:01 . 2010-07-05 09:01 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee
    .

    ------- Sigcheck -------

    [-] 2008-04-13 . 076B1EE8D468BE5F4CA2826BE99B6680 . 512000 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe

    c:\windows\explorer.exe ... manque !!
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
    "SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2006-07-07 1052672]
    "SpybotSD TeaTimer"="c:\program files\Spybot\TeaTimer.exe" [2009-03-05 2260480]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\FlashUtil10h_Plugin.exe" [2010-07-05 231888]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "RTHDCPL"="RTHDCPL.EXE" [2008-04-10 16861184]
    "CamserviceDeluxe2"="c:\program files\Webcam\Deluxe Optical Glass\Camservice.exe" [2007-08-10 81920]
    "lxdvmon.exe"="c:\program files\Lexmark X5400 Series\lxdvmon.exe" [2007-11-02 455336]
    "lxdvamon"="c:\program files\Lexmark X5400 Series\lxdvamon.exe" [2007-11-02 25256]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-04 417792]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-11-20 110184]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-11-20 12669544]
    "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

    c:\documents and settings\R'gis\Menu D'marrer\Programmes\D'marrage\
    Stardock ObjectDock.lnk - c:\program files\ObjectDock\ObjectDock.exe [2010-2-28 3450608]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    "FirewallOverride"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "c:\\Program Files\\uTorrent\\uTorrent.exe"=
    "c:\\WINDOWS\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Lexmark X5400 Series\\lxdvmon.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

    R2 KMWDSERVICE;Keyboard And Mouse Communication Service;c:\program files\Trust\KMWDSrv.exe [09/06/2007 00:23 208896]
    R2 lxdv_device;lxdv_device;c:\windows\system32\lxdvcoms.exe -service --> c:\windows\system32\lxdvcoms.exe -service [?]
    R3 camfilt2;camfilt2;c:\windows\system32\drivers\camfilt2.sys [29/06/2009 20:12 94720]
    S2 lxdvCATSCustConnectService;lxdvCATSCustConnectService;c:\windows\system32\spool\drivers\w32x86\3\lxdvserv.exe [03/07/2009 15:58 98984]
    S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [29/05/2009 17:13 234864]
    S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [11/06/2009 19:36 721904]

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
    2009-06-17 10:11 451872 ----a-w- c:\program files\Fichiers communs\LightScribe\LSRunOnce.exe
    .
    Contenu du dossier 'Tâches planifiées'

    2010-08-20 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
    .
    .
    ------- Examen supplémentaire -------
    .
    uInternet Settings,ProxyOverride = *.local
    IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    FF - ProfilePath - c:\documents and settings\Régis\Application Data\Mozilla\Firefox\Profiles\vlt9ho31.default\
    FF - prefs.js: browser.startup.homepage - google.fr
    FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
    FF - plugin: c:\program files\VLC\npvlc.dll

    ---- PARAMETRES FIREFOX ----
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
    c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
    c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
    c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
    c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("pref.browser.homepage.disable_button.bookmark_page", false);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("pref.browser.homepage.disable_button.current_page", false);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("pref.browser.homepage.disable_button.restore_default", false);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("browser.places.importBookmarksHTML", true);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("browser.places.importDefaults", false);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("browser.search.selectedEngine", "xeoo.com");
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("keyword.URL", "http://xeoo.com/?p=url&a=firefox&k=");
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("browser.startup.homepage", "http://www.xeoo.com/?p=h&a=firefox");
    .
    - - - - ORPHELINS SUPPRIMES - - - -

    HKLM-Run-nwiz - nwiz.exe

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-08-28 18:42
    Windows 5.1.2600 Service Pack 3 NTFS

    Recherche de processus cachés ...

    Recherche d'éléments en démarrage automatique cachés ...

    Recherche de fichiers cachés ...

    Scan terminé avec succès
    Fichiers cachés: 0

    **************************************************************************
    .
    Heure de fin: 2010-08-28 18:43:40
    ComboFix-quarantined-files.txt 2010-08-28 16:43

    Avant-CF: 301 363 261 440 octets libres
    Après-CF: 301 441 753 088 octets libres

    WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect /usepmtimer

    - - End Of File - - A2EE29CDB567AB0A62ACD0852AFBB87D

    Désolé pour la tartine. Et ensuite? j'en fais quoi du winlogon.exe?
    0
  4. redgi
     
    Je posterai le résultat ce week end, overbooking oblige^^.
    Désolé.
    Merci d'avance.
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    ok
    0
  7. redgi
     
    Tout d'abord merci à toi JLP.
    J'ai retrouvé mes icônes.
    Par contre je sais pas comment on active la console de récup'.
    Bon, voilà le rapport sans la console:

    ComboFix 10-08-27.03 - Régis 05/09/2010 14:17:35.2.2 - x86
    Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2047.1602 [GMT 2:00]
    Lancé depuis: c:\documents and settings\Régis\Bureau\ComboFix.exe
    .
    - Mode FONCTIONNALITES REDUITES -
    .
    Les fichiers ci-dessous ont été désactivés pendant l'exécution:
    c:\program files\SuperCopier2\SC2Hook.dll

    ((((((((((((((((((((((((((((( Fichiers créés du 2010-08-05 au 2010-09-05 ))))))))))))))))))))))))))))))))))))
    .

    2010-09-05 12:00 . 2002-09-06 23:00 10129408 -c--a-w- c:\windows\system32\dllcache\hwxkor.dll
    2010-09-05 11:59 . 2008-04-13 17:33 221184 ----a-w- c:\windows\system32\wmpns.dll
    2010-09-04 19:00 . 2002-09-06 23:00 24661 -c--a-w- c:\windows\system32\dllcache\spxcoins.dll
    2010-09-04 19:00 . 2002-09-06 23:00 24661 ----a-w- c:\windows\system32\spxcoins.dll
    2010-09-04 19:00 . 2002-09-06 23:00 13312 -c--a-w- c:\windows\system32\dllcache\irclass.dll
    2010-09-04 19:00 . 2002-09-06 23:00 13312 ----a-w- c:\windows\system32\irclass.dll
    2010-08-27 23:26 . 2010-08-27 23:26 2185909 ----a-w- C:\UsbFix_Upload_Me_PC_GAMER.zip
    2010-08-27 23:23 . 2010-08-27 23:26 -------- d-----w- C:\UsbFix
    2010-08-27 20:31 . 2010-08-27 20:40 -------- d-----w- C:\Kill'em
    2010-08-27 20:31 . 2010-08-27 20:48 -------- d-----w- c:\program files\List_Kill'em
    2010-08-27 20:28 . 2010-08-27 20:29 -------- d---a-w- C:\Navilog1
    2010-08-27 20:28 . 2010-08-27 20:28 -------- d-----w- c:\program files\Navilog1
    2010-08-27 20:22 . 2010-08-27 20:23 -------- d-----w- c:\program files\Ad-Remover
    2010-08-25 21:16 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-08-25 21:16 . 2010-08-27 19:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-08-25 21:16 . 2010-08-25 21:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2010-08-25 21:16 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-08-07 16:07 . 2010-08-07 16:07 47364 ----a-w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment\Battle.net\Cache\Download\Scan.dll

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-09-05 12:17 . 2009-06-14 10:50 -------- d-----w- c:\program files\SuperCopier2
    2010-09-05 12:06 . 2002-09-06 23:00 82572 ----a-w- c:\windows\system32\perfc00C.dat
    2010-09-05 12:06 . 2002-09-06 23:00 503034 ----a-w- c:\windows\system32\perfh00C.dat
    2010-09-05 11:57 . 2009-06-11 17:18 23032 ----a-w- c:\windows\system32\emptyregdb.dat
    2010-08-28 16:33 . 2010-06-25 14:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
    2010-08-27 23:33 . 2010-07-30 18:15 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2010-08-25 21:33 . 2009-06-11 17:35 -------- d-----w- c:\program files\CCleaner
    2010-08-21 17:57 . 2009-06-12 13:41 -------- d-----w- c:\program files\uTorrent
    2010-08-19 21:45 . 2010-07-30 18:18 -------- d-----w- c:\program files\StarCraft II
    2010-08-13 01:54 . 2010-07-30 18:07 -------- d-----w- c:\program files\Speccy
    2010-08-05 20:05 . 2009-06-11 17:29 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-08-05 20:03 . 2009-08-25 08:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Installations
    2010-08-05 20:03 . 2009-08-25 08:52 -------- d-----w- c:\program files\Nokia N95
    2010-08-05 19:57 . 2010-04-23 12:46 -------- d-----w- c:\program files\FLV Converter
    2010-08-05 19:56 . 2009-06-29 18:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
    2010-08-01 13:58 . 2010-08-01 13:58 -------- d-----w- c:\program files\IDoser v4
    2010-07-30 19:59 . 2010-07-30 18:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment
    2010-07-30 19:50 . 2010-07-30 18:18 -------- d-----w- c:\program files\Fichiers communs\Blizzard Entertainment
    2010-07-30 18:20 . 2010-07-30 18:15 -------- d-----w- c:\program files\Spybot
    2010-07-30 18:06 . 2010-07-30 18:06 -------- d-----w- c:\program files\StarCraft II.60ba5bd6.temp
    2010-07-30 18:06 . 2010-07-30 18:06 -------- d-----w- c:\program files\Fichiers communs\Blizzard Entertainment.91ccac26.temp
    2010-07-30 18:06 . 2010-07-30 18:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment.97a3acfc.temp
    2010-07-30 17:37 . 2010-07-30 17:37 -------- d-----w- c:\program files\StarCraft II.temp
    2010-07-30 17:37 . 2010-07-30 17:37 -------- d-----w- c:\program files\Fichiers communs\Blizzard Entertainment.temp
    2010-07-30 17:37 . 2010-07-30 17:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment.temp
    2010-07-28 11:26 . 2010-07-28 11:26 -------- d-----w- c:\program files\ImASCII
    .

    ((((((((((((((((((((((((((((( SnapShot@2010-08-28_16.42.16 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2010-09-05 12:04 . 2010-09-05 12:04 16384 c:\windows\Temp\Perflib_Perfdata_5e4.dat
    - 2009-06-11 19:11 . 2002-09-06 23:00 15872 c:\windows\TASKMAN.EXE
    + 2002-09-06 23:00 . 2002-09-06 23:00 15872 c:\windows\taskman.exe
    + 2009-06-11 17:19 . 2008-04-13 17:33 32256 c:\windows\system32\wups.dll
    + 2008-04-13 17:33 . 2008-04-13 17:33 90112 c:\windows\system32\wshext.dll
    - 2008-04-13 17:33 . 2008-05-09 10:55 90112 c:\windows\system32\wshext.dll
    - 2008-04-13 19:34 . 2008-04-13 17:34 23552 c:\windows\system32\wdmaud.drv
    + 2008-04-13 19:34 . 2008-04-13 17:47 23552 c:\windows\system32\wdmaud.drv
    - 2009-06-11 19:13 . 2008-04-13 19:33 77312 c:\windows\system32\usbui.dll
    + 2008-04-13 19:33 . 2008-04-13 17:47 77312 c:\windows\system32\usbui.dll
    + 2008-04-13 17:34 . 2008-04-13 17:34 60416 c:\windows\system32\tzchange.exe
    + 2008-04-13 17:33 . 2008-04-13 17:33 56320 c:\windows\system32\secur32.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 31232 c:\windows\system32\sc.exe
    + 2010-09-05 11:46 . 2008-01-29 04:37 54016 c:\windows\system32\ReinstallBackups\0006\DriverFiles\nvefdxp.sys
    + 2010-09-04 19:44 . 2008-01-29 04:37 54016 c:\windows\system32\ReinstallBackups\0005\DriverFiles\nvefdxp.sys
    + 2010-09-04 19:04 . 2008-01-29 04:37 54016 c:\windows\system32\ReinstallBackups\0004\DriverFiles\nvefdxp.sys
    - 2002-09-06 23:00 . 2010-08-27 20:49 69376 c:\windows\system32\perfc009.dat
    + 2002-09-06 23:00 . 2010-09-05 12:06 69376 c:\windows\system32\perfc009.dat
    - 2009-06-11 17:17 . 2008-06-12 14:22 91648 c:\windows\system32\mtxoci.dll
    + 2009-06-11 17:17 . 2008-04-13 17:33 91648 c:\windows\system32\mtxoci.dll
    - 2008-04-13 17:33 . 2008-06-12 14:22 66560 c:\windows\system32\mtxclu.dll
    + 2008-04-13 17:33 . 2008-04-13 17:33 66560 c:\windows\system32\mtxclu.dll
    - 2008-04-13 19:33 . 2008-04-13 17:33 16896 c:\windows\system32\msyuv.dll
    + 2008-04-13 19:33 . 2008-04-13 17:47 16896 c:\windows\system32\msyuv.dll
    + 2008-04-13 17:34 . 2008-04-13 17:34 40960 c:\windows\system32\msiregmv.exe
    - 2009-06-11 17:17 . 2008-06-12 14:22 58880 c:\windows\system32\msdtclog.dll
    + 2009-06-11 17:17 . 2008-04-13 17:33 58880 c:\windows\system32\msdtclog.dll
    + 2008-04-13 17:33 . 2008-04-13 17:33 73728 c:\windows\system32\mscms.dll
    + 2008-04-13 19:33 . 2008-04-13 17:47 47616 c:\windows\system32\iyuv_32.dll
    - 2008-04-13 19:33 . 2008-04-13 17:33 47616 c:\windows\system32\iyuv_32.dll
    + 2008-04-13 17:33 . 2008-04-13 17:33 81920 c:\windows\system32\ieencode.dll
    - 2008-04-13 17:33 . 2009-04-29 04:34 81920 c:\windows\system32\ieencode.dll
    - 2009-06-11 19:14 . 2008-04-13 19:33 21504 c:\windows\system32\hidserv.dll
    + 2008-04-13 19:33 . 2008-04-13 17:47 21504 c:\windows\system32\hidserv.dll
    - 2009-06-11 17:30 . 2008-04-13 10:17 83072 c:\windows\system32\drivers\wdmaud.sys
    + 2008-04-13 12:17 . 2008-04-13 17:47 83072 c:\windows\system32\drivers\wdmaud.sys
    + 2008-04-13 11:36 . 2008-04-13 17:47 42240 c:\windows\system32\drivers\viaagp.sys
    + 2008-04-13 09:45 . 2008-04-13 09:45 20608 c:\windows\system32\drivers\usbuhci.sys
    - 2009-07-07 23:53 . 2008-04-13 09:45 20608 c:\windows\system32\drivers\usbuhci.sys
    + 2008-04-13 09:45 . 2008-04-13 09:45 26368 c:\windows\system32\drivers\usbstor.sys
    - 2009-06-11 17:32 . 2008-04-13 09:45 26368 c:\windows\system32\drivers\USBSTOR.SYS
    - 2009-08-25 09:05 . 2008-04-13 09:45 26112 c:\windows\system32\drivers\usbser.sys
    + 2008-04-13 11:45 . 2008-04-13 17:47 26112 c:\windows\system32\drivers\usbser.sys
    + 2008-04-13 11:36 . 2008-04-13 17:47 44672 c:\windows\system32\drivers\uagp35.sys
    - 2009-06-11 17:30 . 2008-04-13 10:15 60800 c:\windows\system32\drivers\sysaudio.sys
    + 2008-04-13 12:15 . 2008-04-13 17:47 60800 c:\windows\system32\drivers\sysaudio.sys
    + 2008-04-13 11:45 . 2008-04-13 17:47 56576 c:\windows\system32\drivers\swmidi.sys
    - 2009-06-11 17:30 . 2008-04-13 09:45 56576 c:\windows\system32\drivers\swmidi.sys
    + 2008-04-13 09:46 . 2008-04-13 09:46 15232 c:\windows\system32\drivers\streamip.sys
    - 2009-06-29 18:13 . 2008-04-13 09:46 15232 c:\windows\system32\drivers\StreamIP.sys
    - 2008-04-13 11:45 . 2008-04-13 09:45 49408 c:\windows\system32\drivers\stream.sys
    + 2008-04-13 11:45 . 2008-04-13 17:47 49408 c:\windows\system32\drivers\stream.sys
    - 2009-06-29 18:13 . 2008-04-13 09:46 11136 c:\windows\system32\drivers\SLIP.sys
    + 2008-04-13 09:46 . 2008-04-13 09:46 11136 c:\windows\system32\drivers\slip.sys
    + 2008-04-13 11:36 . 2008-04-13 17:47 40960 c:\windows\system32\drivers\sisagp.sys
    + 2008-04-13 11:46 . 2008-04-13 17:47 10880 c:\windows\system32\drivers\ndisip.sys
    - 2009-06-29 18:13 . 2008-04-13 09:46 10880 c:\windows\system32\drivers\NdisIP.sys
    + 2008-04-13 11:36 . 2008-04-13 17:47 46464 c:\windows\system32\drivers\gagp30kx.sys
    + 2008-04-13 11:45 . 2008-04-13 17:47 60160 c:\windows\system32\drivers\drmk.sys
    - 2009-06-11 17:30 . 2008-04-13 09:45 60160 c:\windows\system32\drivers\drmk.sys
    + 2008-04-13 11:36 . 2008-04-13 17:47 43008 c:\windows\system32\drivers\amdagp.sys
    + 2008-04-13 11:36 . 2008-04-13 17:47 42752 c:\windows\system32\drivers\alim1541.sys
    + 2008-04-13 11:36 . 2008-04-13 17:47 44928 c:\windows\system32\drivers\agpcpq.sys
    + 2008-04-13 11:36 . 2008-04-13 17:47 42368 c:\windows\system32\drivers\agp440.sys
    + 2009-06-11 17:19 . 2008-04-13 17:33 32256 c:\windows\system32\dllcache\wups.dll
    + 2008-04-13 17:33 . 2008-04-13 17:33 90112 c:\windows\system32\dllcache\wshext.dll
    - 2008-04-13 17:33 . 2008-05-09 10:55 90112 c:\windows\system32\dllcache\wshext.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 31360 c:\windows\system32\dllcache\weitekp9.sys
    + 2010-09-05 12:01 . 2002-09-06 23:00 31360 c:\windows\system32\dllcache\weitekp9.sys
    + 2010-09-05 12:01 . 2002-09-06 23:00 41600 c:\windows\system32\dllcache\weitekp9.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 41600 c:\windows\system32\dllcache\weitekp9.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 53248 c:\windows\system32\dllcache\wamreg51.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 53248 c:\windows\system32\dllcache\wamreg51.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 77824 c:\windows\system32\dllcache\wam51.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 77824 c:\windows\system32\dllcache\wam51.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 74240 c:\windows\system32\dllcache\w3ext.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 74240 c:\windows\system32\dllcache\w3ext.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 48256 c:\windows\system32\dllcache\w32.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 48256 c:\windows\system32\dllcache\w32.dll
    - 2009-06-11 17:22 . 2008-04-13 17:32 86073 c:\windows\system32\dllcache\voicesub.dll
    + 2010-09-05 12:01 . 2008-04-13 17:32 86073 c:\windows\system32\dllcache\voicesub.dll
    - 2009-06-11 17:22 . 2008-04-13 17:32 76288 c:\windows\system32\dllcache\uniime.dll
    + 2010-09-05 12:01 . 2008-04-13 17:32 76288 c:\windows\system32\dllcache\uniime.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 14336 c:\windows\system32\dllcache\tsprof.exe
    + 2010-09-05 12:01 . 2002-09-06 23:00 14336 c:\windows\system32\dllcache\tsprof.exe
    - 2009-06-11 17:22 . 2008-04-13 17:33 33792 c:\windows\system32\dllcache\tools.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 33792 c:\windows\system32\dllcache\tools.dll
    - 2009-06-11 17:22 . 2008-04-13 17:32 10240 c:\windows\system32\dllcache\tmigrate.dll
    + 2010-09-05 12:01 . 2008-04-13 17:32 10240 c:\windows\system32\dllcache\tmigrate.dll
    + 2010-09-05 12:01 . 2008-04-13 07:43 44032 c:\windows\system32\dllcache\tintlphr.exe
    - 2009-06-11 17:22 . 2008-04-13 07:43 44032 c:\windows\system32\dllcache\tintlphr.exe
    + 2010-09-05 12:01 . 2002-09-06 23:00 19464 c:\windows\system32\dllcache\tdspx.sys
    - 2009-06-11 17:22 . 2002-09-06 23:00 19464 c:\windows\system32\dllcache\tdspx.sys
    - 2009-06-11 17:22 . 2002-09-06 23:00 21896 c:\windows\system32\dllcache\tdipx.sys
    + 2010-09-05 12:01 . 2002-09-06 23:00 21896 c:\windows\system32\dllcache\tdipx.sys
    + 2010-09-05 12:01 . 2002-09-06 23:00 13192 c:\windows\system32\dllcache\tdasync.sys
    - 2009-06-11 17:22 . 2002-09-06 23:00 13192 c:\windows\system32\dllcache\tdasync.sys
    + 2010-09-05 12:00 . 2003-04-14 18:29 16384 c:\windows\system32\dllcache\tcptsat.dll
    - 2009-06-11 17:21 . 2003-04-14 18:29 16384 c:\windows\system32\dllcache\tcptsat.dll
    + 2010-09-05 12:00 . 2003-03-24 13:52 32827 c:\windows\system32\dllcache\tcptest.exe
    - 2009-06-11 17:21 . 2003-03-24 13:52 32827 c:\windows\system32\dllcache\tcptest.exe
    - 2009-06-11 19:11 . 2002-09-06 23:00 15872 c:\windows\system32\dllcache\taskman.exe
    + 2002-09-06 23:00 . 2002-09-06 23:00 15872 c:\windows\system32\dllcache\taskman.exe
    + 2010-09-05 12:01 . 2008-04-13 17:33 46592 c:\windows\system32\dllcache\svcext51.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 46592 c:\windows\system32\dllcache\svcext51.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 16896 c:\windows\system32\dllcache\status.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 16896 c:\windows\system32\dllcache\status.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 46592 c:\windows\system32\dllcache\sspifilt.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 46592 c:\windows\system32\dllcache\sspifilt.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 45568 c:\windows\system32\dllcache\ssinc51.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 45568 c:\windows\system32\dllcache\ssinc51.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 39936 c:\windows\system32\dllcache\snmpthrd.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 39936 c:\windows\system32\dllcache\snmpthrd.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 10240 c:\windows\system32\dllcache\snmpstup.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 10240 c:\windows\system32\dllcache\snmpstup.dll
    + 2010-09-05 12:01 . 2008-04-13 17:34 33280 c:\windows\system32\dllcache\snmp.exe
    - 2009-06-11 17:22 . 2008-04-13 17:34 33280 c:\windows\system32\dllcache\snmp.exe
    - 2009-06-11 17:22 . 2008-04-13 17:33 10752 c:\windows\system32\dllcache\smtpapi.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 10752 c:\windows\system32\dllcache\smtpapi.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 15872 c:\windows\system32\dllcache\smierrsm.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 15872 c:\windows\system32\dllcache\smierrsm.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 31744 c:\windows\system32\dllcache\smb6w.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 31744 c:\windows\system32\dllcache\smb6w.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 31744 c:\windows\system32\dllcache\sma3w.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 31744 c:\windows\system32\dllcache\sma3w.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 38912 c:\windows\system32\dllcache\sm9aw.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 38912 c:\windows\system32\dllcache\sm9aw.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 26624 c:\windows\system32\dllcache\sm93w.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 26624 c:\windows\system32\dllcache\sm93w.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 26624 c:\windows\system32\dllcache\sm92w.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 26624 c:\windows\system32\dllcache\sm92w.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 26112 c:\windows\system32\dllcache\sm90w.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 26112 c:\windows\system32\dllcache\sm90w.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 26112 c:\windows\system32\dllcache\sm8dw.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 26112 c:\windows\system32\dllcache\sm8dw.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 29184 c:\windows\system32\dllcache\sm8cw.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 29184 c:\windows\system32\dllcache\sm8cw.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 26112 c:\windows\system32\dllcache\sm8aw.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 26112 c:\windows\system32\dllcache\sm8aw.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 26112 c:\windows\system32\dllcache\sm89w.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 26112 c:\windows\system32\dllcache\sm89w.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 30208 c:\windows\system32\dllcache\sm87w.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 30208 c:\windows\system32\dllcache\sm87w.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 30208 c:\windows\system32\dllcache\sm81w.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 30208 c:\windows\system32\dllcache\sm81w.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 25088 c:\windows\system32\dllcache\sm59w.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 25088 c:\windows\system32\dllcache\sm59w.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 18944 c:\windows\system32\dllcache\simptcp.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 18944 c:\windows\system32\dllcache\simptcp.dll
    - 2009-06-11 17:21 . 2003-03-24 13:52 16437 c:\windows\system32\dllcache\shtml.exe
    + 2010-09-05 12:00 . 2003-03-24 13:52 16437 c:\windows\system32\dllcache\shtml.exe
    - 2009-06-11 17:21 . 2003-03-24 13:52 20536 c:\windows\system32\dllcache\shtml.dll
    + 2010-09-05 12:00 . 2003-03-24 13:52 20536 c:\windows\system32\dllcache\shtml.dll
    + 2008-04-13 17:33 . 2008-04-13 17:33 56320 c:\windows\system32\dllcache\secur32.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 31232 c:\windows\system32\dllcache\sc.exe
    - 2009-06-11 17:22 . 2002-09-06 23:00 81408 c:\windows\system32\dllcache\rwia330.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 81408 c:\windows\system32\dllcache\rwia330.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 81408 c:\windows\system32\dllcache\rwia001.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 81408 c:\windows\system32\dllcache\rwia001.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 29184 c:\windows\system32\dllcache\rw330ext.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 29184 c:\windows\system32\dllcache\rw330ext.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 28160 c:\windows\system32\dllcache\rw001ext.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 28160 c:\windows\system32\dllcache\rw001ext.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 15360 c:\windows\system32\dllcache\register.exe
    + 2010-09-05 12:01 . 2002-09-06 23:00 15360 c:\windows\system32\dllcache\register.exe
    + 2010-09-05 12:01 . 2008-04-13 09:41 20736 c:\windows\system32\dllcache\ramdisk.sys
    - 2009-06-11 17:21 . 2008-04-13 09:41 20736 c:\windows\system32\dllcache\ramdisk.sys
    + 2010-09-05 12:01 . 2002-09-06 23:00 16896 c:\windows\system32\dllcache\quser.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 16896 c:\windows\system32\dllcache\quser.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 10240 c:\windows\system32\dllcache\query.exe
    + 2010-09-05 12:01 . 2002-09-06 23:00 10240 c:\windows\system32\dllcache\query.exe
    + 2010-09-05 12:01 . 2002-09-06 23:00 11264 c:\windows\system32\dllcache\pmxmcro.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 11264 c:\windows\system32\dllcache\pmxmcro.dll
    + 2010-09-05 12:01 . 2008-04-13 17:32 67584 c:\windows\system32\dllcache\pmigrate.dll
    - 2009-06-11 17:21 . 2008-04-13 17:32 67584 c:\windows\system32\dllcache\pmigrate.dll
    - 2009-06-11 17:21 . 2008-04-13 07:43 70144 c:\windows\system32\dllcache\pintlphr.exe
    + 2010-09-05 12:01 . 2008-04-13 07:43 70144 c:\windows\system32\dllcache\pintlphr.exe
    - 2009-06-11 17:21 . 2008-04-13 17:32 53760 c:\windows\system32\dllcache\pintlcsd.dll
    + 2010-09-05 12:01 . 2008-04-13 17:32 53760 c:\windows\system32\dllcache\pintlcsd.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 20992 c:\windows\system32\dllcache\permchk.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 20992 c:\windows\system32\dllcache\permchk.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 31744 c:\windows\system32\dllcache\pagecnt.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 31744 c:\windows\system32\dllcache\pagecnt.dll
    - 2009-06-11 17:21 . 2008-04-13 17:32 15360 c:\windows\system32\dllcache\padrs804.dll
    + 2010-09-05 12:01 . 2008-04-13 17:32 15360 c:\windows\system32\dllcache\padrs804.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 14336 c:\windows\system32\dllcache\padrs412.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 14336 c:\windows\system32\dllcache\padrs412.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 36927 c:\windows\system32\dllcache\padrs411.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 36927 c:\windows\system32\dllcache\padrs411.dll
    + 2010-09-05 12:01 . 2008-04-13 17:32 15872 c:\windows\system32\dllcache\padrs404.dll
    - 2009-06-11 17:21 . 2008-04-13 17:32 15872 c:\windows\system32\dllcache\padrs404.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 45056 c:\windows\system32\dllcache\nsepm.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 45056 c:\windows\system32\dllcache\nsepm.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 53248 c:\windows\system32\dllcache\nextlink.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 53248 c:\windows\system32\dllcache\nextlink.dll
    + 2009-06-11 17:17 . 2008-04-13 17:33 91648 c:\windows\system32\dllcache\mtxoci.dll
    - 2009-06-11 17:17 . 2008-06-12 14:22 91648 c:\windows\system32\dllcache\mtxoci.dll
    - 2008-04-13 17:33 . 2008-06-12 14:22 66560 c:\windows\system32\dllcache\mtxclu.dll
    + 2008-04-13 17:33 . 2008-04-13 17:33 66560 c:\windows\system32\dllcache\mtxclu.dll
    - 2009-06-11 17:21 . 2008-04-13 17:34 40960 c:\windows\system32\dllcache\msiregmv.exe
    + 2008-04-13 17:34 . 2008-04-13 17:34 40960 c:\windows\system32\dllcache\msiregmv.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 98304 c:\windows\system32\dllcache\msir3jp.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 98304 c:\windows\system32\dllcache\msir3jp.dll
    + 2009-06-11 17:17 . 2008-04-13 17:33 58880 c:\windows\system32\dllcache\msdtclog.dll
    - 2009-06-11 17:17 . 2008-06-12 14:22 58880 c:\windows\system32\dllcache\msdtclog.dll
    + 2008-04-13 17:33 . 2008-04-13 17:33 73728 c:\windows\system32\dllcache\mscms.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 92416 c:\windows\system32\dllcache\mga.sys
    - 2009-06-11 17:21 . 2002-09-06 23:00 92416 c:\windows\system32\dllcache\mga.sys
    - 2009-06-11 17:21 . 2002-09-06 23:00 92032 c:\windows\system32\dllcache\mga.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 92032 c:\windows\system32\dllcache\mga.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 86016 c:\windows\system32\dllcache\metada51.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 86016 c:\windows\system32\dllcache\metada51.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 26624 c:\windows\system32\dllcache\mdsync.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 26624 c:\windows\system32\dllcache\mdsync.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 37888 c:\windows\system32\dllcache\md5filt.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 37888 c:\windows\system32\dllcache\md5filt.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 19456 c:\windows\system32\dllcache\lprmon.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 19456 c:\windows\system32\dllcache\lprmon.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 23040 c:\windows\system32\dllcache\lpdsvc.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 23040 c:\windows\system32\dllcache\lpdsvc.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 13312 c:\windows\system32\dllcache\lonsint.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 13312 c:\windows\system32\dllcache\lonsint.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 22016 c:\windows\system32\dllcache\logscrpt.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 22016 c:\windows\system32\dllcache\logscrpt.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 33792 c:\windows\system32\dllcache\lmmib2.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 33792 c:\windows\system32\dllcache\lmmib2.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 70656 c:\windows\system32\dllcache\korwbrkr.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 70656 c:\windows\system32\dllcache\korwbrkr.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 18432 c:\windows\system32\dllcache\jupiw.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 18432 c:\windows\system32\dllcache\jupiw.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 27648 c:\windows\system32\dllcache\iscomlog.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 27648 c:\windows\system32\dllcache\iscomlog.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 68608 c:\windows\system32\dllcache\isatq.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 68608 c:\windows\system32\dllcache\isatq.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 36864 c:\windows\system32\dllcache\iprip.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 36864 c:\windows\system32\dllcache\iprip.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 13312 c:\windows\system32\dllcache\infoadmn.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 13312 c:\windows\system32\dllcache\infoadmn.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 19968 c:\windows\system32\dllcache\inetsloc.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 19968 c:\windows\system32\dllcache\inetsloc.dll
    + 2010-09-05 12:01 . 2008-04-13 17:34 15872 c:\windows\system32\dllcache\inetin51.exe
    - 2009-06-11 17:21 . 2008-04-13 17:34 15872 c:\windows\system32\dllcache\inetin51.exe
    - 2009-06-11 17:21 . 2008-04-13 07:43 59392 c:\windows\system32\dllcache\imscinst.exe
    + 2010-09-05 12:01 . 2008-04-13 07:43 59392 c:\windows\system32\dllcache\imscinst.exe
    + 2010-09-05 12:01 . 2002-09-06 23:00 59904 c:\windows\system32\dllcache\imkrinst.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 59904 c:\windows\system32\dllcache\imkrinst.exe
    + 2010-09-05 12:01 . 2002-09-06 23:00 45109 c:\windows\system32\dllcache\imjpuex.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 45109 c:\windows\system32\dllcache\imjpuex.exe
    + 2010-09-05 12:01 . 2008-04-13 17:31 81976 c:\windows\system32\dllcache\imjpdct.dll
    - 2009-06-11 17:21 . 2008-04-13 17:31 81976 c:\windows\system32\dllcache\imjpdct.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 57398 c:\windows\system32\dllcache\imjpdadm.exe
    + 2010-09-05 12:01 . 2002-09-06 23:00 57398 c:\windows\system32\dllcache\imjpdadm.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 44032 c:\windows\system32\dllcache\imekrmig.exe
    + 2010-09-05 12:01 . 2002-09-06 23:00 44032 c:\windows\system32\dllcache\imekrmig.exe
    - 2009-06-11 17:21 . 2008-04-13 17:31 86016 c:\windows\system32\dllcache\imekrmbx.dll
    + 2010-09-05 12:01 . 2008-04-13 17:31 86016 c:\windows\system32\dllcache\imekrmbx.dll
    - 2009-06-11 17:21 . 2008-04-13 17:34 31232 c:\windows\system32\dllcache\iisrstas.exe
    + 2010-09-05 12:00 . 2008-04-13 17:34 31232 c:\windows\system32\dllcache\iisrstas.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 14848 c:\windows\system32\dllcache\iisreset.exe
    + 2010-09-05 12:00 . 2002-09-06 23:00 14848 c:\windows\system32\dllcache\iisreset.exe
    + 2010-09-05 12:00 . 2008-04-13 17:33 64512 c:\windows\system32\dllcache\iismap.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 64512 c:\windows\system32\dllcache\iismap.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 79872 c:\windows\system32\dllcache\iislog51.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 79872 c:\windows\system32\dllcache\iislog51.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 68608 c:\windows\system32\dllcache\iisext51.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 68608 c:\windows\system32\dllcache\iisext51.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 19456 c:\windows\system32\dllcache\iiscrmap.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 19456 c:\windows\system32\dllcache\iiscrmap.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 60928 c:\windows\system32\dllcache\iisclex4.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 60928 c:\windows\system32\dllcache\iisclex4.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 25088 c:\windows\system32\dllcache\iisadmin.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 25088 c:\windows\system32\dllcache\iisadmin.dll
    - 2008-04-13 17:33 . 2009-04-29 04:34 81920 c:\windows\system32\dllcache\ieencode.dll
    + 2008-04-13 17:33 . 2008-04-13 17:33 81920 c:\windows\system32\dllcache\ieencode.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 62464 c:\windows\system32\dllcache\httpod51.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 62464 c:\windows\system32\dllcache\httpod51.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 39936 c:\windows\system32\dllcache\hostmib.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 39936 c:\windows\system32\dllcache\hostmib.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 36864 c:\windows\system32\dllcache\hanjadic.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 36864 c:\windows\system32\dllcache\hanjadic.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 32256 c:\windows\system32\dllcache\gzip.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 32256 c:\windows\system32\dllcache\gzip.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 11776 c:\windows\system32\dllcache\fxssend.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 11776 c:\windows\system32\dllcache\fxssend.exe
    + 2010-09-05 12:00 . 2002-09-06 23:00 31744 c:\windows\system32\dllcache\fxsroute.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 31744 c:\windows\system32\dllcache\fxsroute.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 24064 c:\windows\system32\dllcache\fxsmon.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 24064 c:\windows\system32\dllcache\fxsmon.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 23552 c:\windows\system32\dllcache\fxsext32.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 23552 c:\windows\system32\dllcache\fxsext32.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 66048 c:\windows\system32\dllcache\fxsevent.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 66048 c:\windows\system32\dllcache\fxsevent.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 26624 c:\windows\system32\dllcache\fxsdrv.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 26624 c:\windows\system32\dllcache\fxsdrv.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 72192 c:\windows\system32\dllcache\fxscom.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 72192 c:\windows\system32\dllcache\fxscom.dll
    - 2009-06-11 17:21 . 2003-03-24 13:52 20538 c:\windows\system32\dllcache\fpremadm.exe
    + 2010-09-05 12:00 . 2003-03-24 13:52 20538 c:\windows\system32\dllcache\fpremadm.exe
    - 2009-06-11 17:21 . 2003-03-24 13:52 20541 c:\windows\system32\dllcache\fpexedll.dll
    + 2010-09-05 12:00 . 2003-03-24 13:52 20541 c:\windows\system32\dllcache\fpexedll.dll
    + 2010-09-05 12:00 . 2002-05-14 11:08 94208 c:\windows\system32\dllcache\fpencode.dll
    - 2009-06-11 17:21 . 2002-05-14 11:08 94208 c:\windows\system32\dllcache\fpencode.dll
    - 2009-06-11 17:21 . 2003-03-24 13:52 20541 c:\windows\system32\dllcache\fpadmdll.dll
    + 2010-09-05 12:00 . 2003-03-24 13:52 20541 c:\windows\system32\dllcache\fpadmdll.dll
    - 2009-06-11 17:21 . 2003-03-24 13:52 24632 c:\windows\system32\dllcache\fpadmcgi.exe
    + 2010-09-05 12:00 . 2003-03-24 13:52 24632 c:\windows\system32\dllcache\fpadmcgi.exe
    - 2009-06-11 17:21 . 2002-05-14 11:08 14608 c:\windows\system32\dllcache\fp98sadm.exe
    + 2010-09-05 12:00 . 2002-05-14 11:08 14608 c:\windows\system32\dllcache\fp98sadm.exe
    - 2009-06-11 17:21 . 2003-03-24 13:52 49212 c:\windows\system32\dllcache\fp4awebs.dll
    + 2010-09-05 12:00 . 2003-03-24 13:52 49212 c:\windows\system32\dllcache\fp4awebs.dll
    - 2009-06-11 17:21 . 2003-03-24 13:52 32826 c:\windows\system32\dllcache\fp4avss.dll
    + 2010-09-05 12:00 . 2003-03-24 13:52 32826 c:\windows\system32\dllcache\fp4avss.dll
    + 2010-09-05 12:00 . 2003-03-24 13:52 41020 c:\windows\system32\dllcache\fp4avnb.dll
    - 2009-06-11 17:21 . 2003-03-24 13:52 41020 c:\windows\system32\dllcache\fp4avnb.dll
    - 2009-06-11 17:21 . 2003-03-24 13:52 49210 c:\windows\system32\dllcache\fp4areg.dll
    + 2010-09-05 12:00 . 2003-03-24 13:52 49210 c:\windows\system32\dllcache\fp4areg.dll
    - 2009-06-11 17:21 . 2003-03-24 13:52 82035 c:\windows\system32\dllcache\fp4anscp.dll
    + 2010-09-05 12:00 . 2003-03-24 13:52 82035 c:\windows\system32\dllcache\fp4anscp.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 15360 c:\windows\system32\dllcache\flattemp.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 15360 c:\windows\system32\dllcache\flattemp.exe
    - 2009-06-11 17:21 . 2008-04-13 17:33 14336 c:\windows\system32\dllcache\exstrace.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 14336 c:\windows\system32\dllcache\exstrace.dll
    - 2009-06-11 17:22 . 2001-08-23 15:47 12800 c:\windows\system32\dllcache\EXCH_smtpctrs.dll
    + 2010-09-05 12:01 . 2001-08-23 15:47 12800 c:\windows\system32\dllcache\EXCH_smtpctrs.dll
    + 2010-09-05 12:01 . 2001-08-23 15:47 26112 c:\windows\system32\dllcache\EXCH_seos.dll
    - 2009-06-11 17:22 . 2001-08-23 15:47 26112 c:\windows\system32\dllcache\EXCH_seos.dll
    + 2010-09-05 12:01 . 2001-08-23 15:47 57856 c:\windows\system32\dllcache\EXCH_scripto.dll
    - 2009-06-11 17:22 . 2001-08-23 15:47 57856 c:\windows\system32\dllcache\EXCH_scripto.dll
    - 2009-06-11 17:21 . 2001-08-23 15:47 23040 c:\windows\system32\dllcache\EXCH_regtrace.exe
    + 2010-09-05 12:01 . 2001-08-23 15:47 23040 c:\windows\system32\dllcache\EXCH_regtrace.exe
    - 2009-06-11 17:21 . 2001-08-23 15:47 38912 c:\windows\system32\dllcache\EXCH_ntfsdrv.dll
    + 2010-09-05 12:01 . 2001-08-23 15:47 38912 c:\windows\system32\dllcache\EXCH_ntfsdrv.dll
    + 2010-09-05 12:01 . 2001-08-23 15:47 65536 c:\windows\system32\dllcache\EXCH_mailmsg.dll
    - 2009-06-11 17:21 . 2001-08-23 15:47 65536 c:\windows\system32\dllcache\EXCH_mailmsg.dll
    + 2010-09-05 12:00 . 2001-08-23 15:47 43520 c:\windows\system32\dllcache\EXCH_fcachdll.dll
    - 2009-06-11 17:21 . 2001-08-23 15:47 43520 c:\windows\system32\dllcache\EXCH_fcachdll.dll
    + 2010-09-05 12:00 . 2001-08-23 15:46 45056 c:\windows\system32\dllcache\EXCH_aqadmin.dll
    - 2009-06-11 17:21 . 2001-08-23 15:46 45056 c:\windows\system32\dllcache\EXCH_aqadmin.dll
    + 2010-09-05 12:00 . 2008-04-13 17:34 94720 c:\windows\system32\dllcache\evntwin.exe
    - 2009-06-11 17:21 . 2008-04-13 17:34 94720 c:\windows\system32\dllcache\evntwin.exe
    - 2009-06-11 17:21 . 2008-04-13 17:34 26112 c:\windows\system32\dllcache\evntcmd.exe
    + 2010-09-05 12:00 . 2008-04-13 17:34 26112 c:\windows\system32\dllcache\evntcmd.exe
    + 2010-09-05 12:00 . 2002-09-06 23:00 25856 c:\windows\system32\dllcache\et4000.sys
    - 2009-06-11 17:21 . 2002-09-06 23:00 25856 c:\windows\system32\dllcache\et4000.sys
    - 2009-06-11 17:21 . 2002-09-06 23:00 45568 c:\windows\system32\dllcache\esunid.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 45568 c:\windows\system32\dllcache\esunid.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 57856 c:\windows\system32\dllcache\esuimgd.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 57856 c:\windows\system32\dllcache\esuimgd.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 31744 c:\windows\system32\dllcache\esucmd.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 31744 c:\windows\system32\dllcache\esucmd.dll
    - 2009-06-11 19:11 . 2002-09-06 23:00 86044 c:\windows\system32\dllcache\dgsetup.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 86044 c:\windows\system32\dllcache\dgsetup.dll
    - 2009-06-11 17:21 . 2008-04-13 17:34 42496 c:\windows\system32\dllcache\davcdata.exe
    + 2010-09-05 12:00 . 2008-04-13 17:34 42496 c:\windows\system32\dllcache\davcdata.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 19456 c:\windows\system32\dllcache\cprofile.exe
    + 2010-09-05 12:00 . 2002-09-06 23:00 19456 c:\windows\system32\dllcache\cprofile.exe
    - 2009-06-11 17:21 . 2008-04-13 07:43 57399 c:\windows\system32\dllcache\cplexe.exe
    + 2010-09-05 12:00 . 2008-04-13 07:43 57399 c:\windows\system32\dllcache\cplexe.exe
    + 2010-09-05 12:00 . 2002-09-06 23:00 20480 c:\windows\system32\dllcache\counters.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 20480 c:\windows\system32\dllcache\counters.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 56832 c:\windows\system32\dllcache\convlog.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 56832 c:\windows\system32\dllcache\convlog.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 33792 c:\windows\system32\dllcache\controt.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 33792 c:\windows\system32\dllcache\controt.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 24064 c:\windows\system32\dllcache\compfilt.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 24064 c:\windows\system32\dllcache\compfilt.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 47104 c:\windows\system32\dllcache\coadmin.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 47104 c:\windows\system32\dllcache\coadmin.dll
    - 2009-06-11 17:21 . 2008-04-13 17:31 56320 c:\windows\system32\dllcache\chtskdic.dll
    + 2010-09-05 12:00 . 2008-04-13 17:31 56320 c:\windows\system32\dllcache\chtskdic.dll
    - 2009-06-11 17:21 . 2008-04-13 17:31 97792 c:\windows\system32\dllcache\chtmbx.dll
    + 2010-09-05 12:00 . 2008-04-13 17:31 97792 c:\windows\system32\dllcache\chtmbx.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 14848 c:\windows\system32\dllcache\chgusr.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 14848 c:\windows\system32\dllcache\chgusr.exe
    + 2010-09-05 12:00 . 2002-09-06 23:00 15872 c:\windows\system32\dllcache\chgport.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 15872 c:\windows\system32\dllcache\chgport.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 13824 c:\windows\system32\dllcache\chglogon.exe
    + 2010-09-05 12:00 . 2002-09-06 23:00 13824 c:\windows\system32\dllcache\chglogon.exe
    - 2009-06-11 17:21 . 2002-09-06 23:00 10240 c:\windows\system32\dllcache\change.exe
    + 2010-09-05 12:00 . 2002-09-06 23:00 10240 c:\windows\system32\dllcache\change.exe
    + 2008-04-13 17:33 . 2008-04-13 17:33 66560 c:\windows\system32\dllcache\cdm.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 54528 c:\windows\system32\dllcache\cap7146.sys
    - 2009-06-11 17:21 . 2002-09-06 23:00 54528 c:\windows\system32\dllcache\cap7146.sys
    - 2009-06-11 17:21 . 2002-09-06 23:00 10752 c:\windows\system32\dllcache\c_iscii.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 10752 c:\windows\system32\dllcache\c_iscii.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 45568 c:\windows\system32\dllcache\browscap.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 45568 c:\windows\system32\dllcache\browscap.dll
    - 2009-06-11 17:21 . 2003-03-24 13:52 16439 c:\windows\system32\dllcache\author.exe
    + 2010-09-05 12:00 . 2003-03-24 13:52 16439 c:\windows\system32\dllcache\author.exe
    + 2010-09-05 12:00 . 2003-03-24 13:52 20540 c:\windows\system32\dllcache\author.dll
    - 2009-06-11 17:21 . 2003-03-24 13:52 20540 c:\windows\system32\dllcache\author.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 29184 c:\windows\system32\dllcache\asptxn.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 29184 c:\windows\system32\dllcache\asptxn.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 10240 c:\windows\system32\dllcache\aspperf.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 10240 c:\windows\system32\dllcache\aspperf.dll
    + 2010-09-05 12:00 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt0804.dll
    - 2009-06-11 17:21 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt0804.dll
    + 2010-09-05 12:00 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt0412.dll
    - 2009-06-11 17:21 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt0412.dll
    - 2009-06-11 17:21 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt0411.dll
    + 2010-09-05 12:00 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt0411.dll
    - 2009-06-11 17:21 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt040d.dll
    + 2010-09-05 12:00 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt040d.dll
    - 2009-06-11 17:21 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt0404.dll
    + 2010-09-05 12:00 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt0404.dll
    - 2009-06-11 17:21 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt0401.dll
    + 2010-09-05 12:00 . 2007-04-02 09:26 19456 c:\windows\system32\dllcache\agt0401.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 50176 c:\windows\system32\dllcache\adrot.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 50176 c:\windows\system32\dllcache\adrot.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 43520 c:\windows\system32\dllcache\admwprox.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 43520 c:\windows\system32\dllcache\admwprox.dll
    + 2010-09-05 12:00 . 2003-03-24 13:52 16439 c:\windows\system32\dllcache\admin.exe
    - 2009-06-11 17:21 . 2003-03-24 13:52 16439 c:\windows\system32\dllcache\admin.exe
    + 2010-09-05 12:00 . 2003-03-24 13:52 20540 c:\windows\system32\dllcache\admin.dll
    - 2009-06-11 17:20 . 2003-03-24 13:52 20540 c:\windows\system32\dllcache\admin.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 29696 c:\windows\system32\dllcache\admexs.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 29696 c:\windows\system32\dllcache\admexs.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 86044 c:\windows\system32\dgsetup.dll
    - 2009-06-11 19:11 . 2002-09-06 23:00 86044 c:\windows\system32\dgsetup.dll
    + 2009-06-11 17:23 . 2010-09-05 12:04 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2009-06-11 17:23 . 2009-06-11 17:24 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2010-09-05 12:04 . 2010-09-05 12:04 32768 c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012010090520100906\index.dat
    - 2009-06-11 17:23 . 2009-06-11 17:24 32768 c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
    + 2009-06-11 17:23 . 2010-09-05 12:04 32768 c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
    - 2009-06-11 17:23 . 2009-06-11 17:24 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2010-09-05 12:04 . 2010-09-05 12:04 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2008-04-13 17:33 . 2008-04-13 17:33 66560 c:\windows\system32\cdm.dll
    - 2009-06-11 19:11 . 2002-09-06 23:00 19200 c:\windows\system\TAPI.DLL
    + 2002-09-06 23:00 . 2002-09-06 23:00 19200 c:\windows\system\TAPI.DLL
    + 2002-09-06 23:00 . 2002-09-06 23:00 24064 c:\windows\system\OLESVR.DLL
    - 2009-06-11 19:11 . 2002-09-06 23:00 24064 c:\windows\system\OLESVR.DLL
    - 2009-06-11 19:11 . 2002-09-06 23:00 83456 c:\windows\system\OLECLI.DLL
    + 2002-09-06 23:00 . 2002-09-06 23:00 83456 c:\windows\system\OLECLI.DLL
    + 2008-04-13 16:53 . 2008-04-13 16:53 70688 c:\windows\system\MMSYSTEM.DLL
    - 2009-06-11 19:11 . 2008-04-13 16:53 70688 c:\windows\system\MMSYSTEM.DLL
    - 2009-06-11 19:11 . 2002-09-06 23:00 28160 c:\windows\system\MCIWAVE.DRV
    + 2002-09-06 23:00 . 2002-09-06 23:00 28160 c:\windows\system\MCIWAVE.DRV
    + 2002-09-06 23:00 . 2002-09-06 23:00 25280 c:\windows\system\MCISEQ.DRV
    - 2009-06-11 19:11 . 2002-09-06 23:00 25280 c:\windows\system\MCISEQ.DRV
    + 2002-09-06 23:00 . 2002-09-06 23:00 73680 c:\windows\system\MCIAVI.DRV
    - 2009-06-11 19:11 . 2002-09-06 23:00 73680 c:\windows\system\MCIAVI.DRV
    - 2009-06-11 19:11 . 2002-09-06 23:00 33904 c:\windows\system\COMMDLG.DLL
    + 2002-09-06 23:00 . 2002-09-06 23:00 33904 c:\windows\system\COMMDLG.DLL
    - 2009-06-11 19:11 . 2008-04-13 17:34 70656 c:\windows\NOTEPAD.EXE
    + 2008-04-13 17:34 . 2008-04-13 17:34 70656 c:\windows\notepad.exe
    + 2010-09-05 11:56 . 2007-10-30 01:06 13801 c:\windows\Installer\TSClientMsiTrans\tscuinst.vbs
    + 2010-09-05 11:56 . 2007-12-12 01:33 18917 c:\windows\Installer\TSClientMsiTrans\tscinst.vbs
    + 2001-08-23 17:47 . 2002-09-06 23:00 8192 c:\windows\system32\tsbyuv.dll
    - 2001-08-23 17:47 . 2001-08-23 15:47 8192 c:\windows\system32\tsbyuv.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\kbdycl.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\kbdycl.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdycc.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdycc.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbduzb.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbduzb.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdur.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdur.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6144 c:\windows\system32\kbdtuq.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6144 c:\windows\system32\kbdtuq.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6144 c:\windows\system32\kbdtuf.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6144 c:\windows\system32\kbdtuf.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdtat.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdtat.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\kbdsl1.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\kbdsl1.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\kbdsl.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\kbdsl.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdru1.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdru1.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdru.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdru.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdro.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdro.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdpl1.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdpl1.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\kbdpl.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\kbdpl.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdmon.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdmon.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6144 c:\windows\system32\kbdlv1.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6144 c:\windows\system32\kbdlv1.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6144 c:\windows\system32\kbdlv.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6144 c:\windows\system32\kbdlv.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdlt1.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdlt1.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdlt.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdlt.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdkyr.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdkyr.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdkaz.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdkaz.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdhu1.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdhu1.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\kbdhu.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\kbdhu.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 8192 c:\windows\system32\kbdhept.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 8192 c:\windows\system32\kbdhept.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\kbdhela3.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\kbdhela3.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6144 c:\windows\system32\kbdhela2.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6144 c:\windows\system32\kbdhela2.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdhe319.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdhe319.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdhe220.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdhe220.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdhe.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdhe.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6144 c:\windows\system32\kbdgkl.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6144 c:\windows\system32\kbdgkl.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6144 c:\windows\system32\kbdest.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6144 c:\windows\system32\kbdest.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\kbdcz2.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\kbdcz2.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\kbdcz1.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\kbdcz1.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 7168 c:\windows\system32\kbdcz.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 7168 c:\windows\system32\kbdcz.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\kbdcr.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\kbdcr.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdbu.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdbu.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdblr.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdblr.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdazel.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdazel.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\kbdaze.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\kbdaze.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\KBDAL.DLL
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\kbdal.dll
    - 2009-06-11 17:30 . 2008-04-13 09:39 4992 c:\windows\system32\drivers\MSPQM.sys
    + 2008-04-13 11:39 . 2008-04-13 17:47 4992 c:\windows\system32\drivers\mspqm.sys
    - 2009-06-11 17:30 . 2008-04-13 09:39 5376 c:\windows\system32\drivers\MSPCLOCK.sys
    + 2008-04-13 11:39 . 2008-04-13 17:47 5376 c:\windows\system32\drivers\mspclock.sys
    - 2009-06-11 17:30 . 2008-04-13 09:39 7552 c:\windows\system32\drivers\MSKSSRV.sys
    + 2008-04-13 11:39 . 2008-04-13 17:47 7552 c:\windows\system32\drivers\mskssrv.sys
    - 2009-06-11 17:30 . 2008-04-13 09:45 2944 c:\windows\system32\drivers\drmkaud.sys
    + 2008-04-13 11:45 . 2008-04-13 17:47 2944 c:\windows\system32\drivers\drmkaud.sys
    - 2009-06-11 17:21 . 2002-09-06 23:00 7168 c:\windows\system32\dllcache\wamregps.dll
    + 2010-09-05 12:00 . 2002-09-06 23:00 7168 c:\windows\system32\dllcache\wamregps.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 9216 c:\windows\system32\dllcache\wamps51.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 9216 c:\windows\system32\dllcache\wamps51.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\w3svapi.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\w3svapi.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 4608 c:\windows\system32\dllcache\w3ctrs51.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 4608 c:\windows\system32\dllcache\w3ctrs51.dll
    + 2010-09-05 12:00 . 2008-04-13 17:33 8192 c:\windows\system32\dllcache\staxmem.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 8192 c:\windows\system32\dllcache\staxmem.dll
    + 2010-09-05 12:01 . 2008-04-13 17:34 8704 c:\windows\system32\dllcache\snmptrap.exe
    - 2009-06-11 17:22 . 2008-04-13 17:34 8704 c:\windows\system32\dllcache\snmptrap.exe
    + 2010-09-05 12:01 . 2008-04-13 17:33 6144 c:\windows\system32\dllcache\snmpmib.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 6144 c:\windows\system32\dllcache\snmpmib.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\smimsgif.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\smimsgif.dll
    - 2009-06-11 17:22 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\smierrsy.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\smierrsy.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 9728 c:\windows\system32\dllcache\rwnh.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 9728 c:\windows\system32\dllcache\rwnh.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 4096 c:\windows\system32\dllcache\rpcref.dll
    - 2009-06-11 17:22 . 2008-04-13 17:33 4096 c:\windows\system32\dllcache\rpcref.dll
    + 2010-09-05 12:01 . 2008-04-13 17:33 7680 c:\windows\system32\dllcache\pwsdata.dll
    - 2009-06-11 17:21 . 2008-04-13 17:33 7680 c:\windows\system32\dllcache\pwsdata.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 6144 c:\windows\system32\dllcache\pmxgl.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 6144 c:\windows\system32\dllcache\pmxgl.dll
    - 2009-06-11 17:21 . 2008-04-13 17:34 7680 c:\windows\system32\dllcache\migregdb.exe
    + 2010-09-05 12:01 . 2008-04-13 17:34 7680 c:\windows\system32\dllcache\migregdb.exe
    + 2002-09-06 23:00 . 2002-09-06 23:00 6656 c:\windows\system32\dllcache\kbdycl.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6656 c:\windows\system32\dllcache\kbdycl.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbdycc.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbdycc.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbdvntc.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbdvntc.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbduzb.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbduzb.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbdusa.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbdusa.dll
    - 2009-06-11 17:21 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbdurdu.dll
    + 2010-09-05 12:01 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbdurdu.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbdur.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 5632 c:\windows\system32\dllcache\kbdur.dll
    + 2002-09-06 23:00 . 2002-09-06 23:00 6144 c:\windows\system32\dllcache\kbdtuq.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6144 c:\windows\system32\dllcache\kbdtuq.dll
    - 2009-06-11 19:12 . 2002-09-06 23:00 6144 c:\windows\system32\dllcache\kbdtuf.dll
    + 2002-09-06 23:00 . 2002-09-06 2
    0
  8. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    il mlanque la fin du rapport combofix

    puis

    pour vérifier colle le rapport d'un antivirus en ligne
    0
  9. redgi
     
    Salut jlp.
    Je me suis rentré un peu tard...
    Je te renvois ça sous peu.
    C'est juste qu'avec la rentrée, c'est un peu le Bronx.
    Je te tiens au jus.
    Merci encore.
    0
  10. redgi
     
    Re Jlp
    Désolé de revenir au bout de trois semaines.
    Mon imprimante n'est plus détectée par mon pc fixe alors que mon pc portable la détecte toujours. Mes clés usb font des siennes aussi.
    Je pense que c'est peu être des résidus du malware doctor. Je sais pas.
    Voici mon rapport combo fix:

    ComboFix 10-09-20.03 - Régis 21/09/2010 14:23:47.3.2 - x86
    Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2047.1545 [GMT 2:00]
    Lancé depuis: c:\documents and settings\Régis\Bureau\ComboFix.exe
    AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
    .
    Les fichiers ci-dessous ont été désactivés pendant l'exécution:
    c:\program files\SuperCopier2\SC2Hook.dll

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\Régis\Menu Démarrer\Programmes\Antimalware Doctor
    c:\documents and settings\Régis\Menu Démarrer\Programmes\Antimalware Doctor\Antimalware Doctor.lnk
    c:\documents and settings\Régis\Menu Démarrer\Programmes\Antimalware Doctor\Uninstall.lnk

    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2010-08-21 au 2010-09-21 ))))))))))))))))))))))))))))))))))))
    .

    2010-09-15 08:06 . 2010-09-15 08:07 -------- d-----w- c:\program files\DAEMON Tools Lite
    2010-09-05 15:30 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
    2010-09-05 15:30 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
    2010-09-05 15:30 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
    2010-09-05 15:30 . 2010-09-05 15:30 -------- d-----w- c:\program files\Avira
    2010-09-05 12:00 . 2002-09-06 23:00 10129408 -c--a-w- c:\windows\system32\dllcache\hwxkor.dll
    2010-09-05 11:59 . 2008-04-13 17:33 221184 ----a-w- c:\windows\system32\wmpns.dll
    2010-09-05 11:31 . 2010-09-05 11:31 -------- d-----w- c:\documents and settings\Default User\Local Settings\Application Data\Mozilla
    2010-09-04 19:00 . 2002-09-06 23:00 24661 -c--a-w- c:\windows\system32\dllcache\spxcoins.dll
    2010-09-04 19:00 . 2002-09-06 23:00 24661 ----a-w- c:\windows\system32\spxcoins.dll
    2010-09-04 19:00 . 2002-09-06 23:00 13312 -c--a-w- c:\windows\system32\dllcache\irclass.dll
    2010-09-04 19:00 . 2002-09-06 23:00 13312 ----a-w- c:\windows\system32\irclass.dll
    2010-08-27 23:26 . 2010-08-27 23:26 2185909 ----a-w- C:\UsbFix_Upload_Me_PC_GAMER.zip
    2010-08-27 23:23 . 2010-08-27 23:26 -------- d-----w- C:\UsbFix
    2010-08-27 20:31 . 2010-08-27 20:40 -------- d-----w- C:\Kill'em
    2010-08-27 20:31 . 2010-08-27 20:48 -------- d-----w- c:\program files\List_Kill'em
    2010-08-27 20:28 . 2010-08-27 20:29 -------- d---a-w- C:\Navilog1
    2010-08-27 20:28 . 2010-08-27 20:28 -------- d-----w- c:\program files\Navilog1
    2010-08-27 20:22 . 2010-08-27 20:23 -------- d-----w- c:\program files\Ad-Remover
    2010-08-25 21:16 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-08-25 21:16 . 2010-08-27 19:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-08-25 21:16 . 2010-08-25 21:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2010-08-25 21:16 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-09-21 12:21 . 2009-06-14 10:50 -------- d-----w- c:\program files\SuperCopier2
    2010-09-21 12:16 . 2010-03-22 20:56 -------- d-----w- c:\program files\epson
    2010-09-21 12:05 . 2010-02-26 16:04 -------- d-----w- c:\documents and settings\All Users\Application Data\EPSON
    2010-09-15 08:01 . 2009-06-11 17:36 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
    2010-09-07 07:12 . 2009-06-12 13:41 -------- d-----w- c:\program files\uTorrent
    2010-09-05 15:30 . 2010-06-25 14:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
    2010-09-05 12:06 . 2002-09-06 23:00 82572 ----a-w- c:\windows\system32\perfc00C.dat
    2010-09-05 12:06 . 2002-09-06 23:00 503034 ----a-w- c:\windows\system32\perfh00C.dat
    2010-09-05 11:57 . 2009-06-11 17:18 23032 ----a-w- c:\windows\system32\emptyregdb.dat
    2010-08-27 23:33 . 2010-07-30 18:15 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
    2010-08-25 21:33 . 2009-06-11 17:35 -------- d-----w- c:\program files\CCleaner
    2010-08-19 21:45 . 2010-07-30 18:18 -------- d-----w- c:\program files\StarCraft II
    2010-08-13 01:54 . 2010-07-30 18:07 -------- d-----w- c:\program files\Speccy
    2010-08-07 16:07 . 2010-08-07 16:07 47364 ----a-w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment\Battle.net\Cache\Download\Scan.dll
    2010-08-05 20:05 . 2009-06-11 17:29 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-08-05 20:03 . 2009-08-25 08:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Installations
    2010-08-05 20:03 . 2009-08-25 08:52 -------- d-----w- c:\program files\Nokia N95
    2010-08-05 19:57 . 2010-04-23 12:46 -------- d-----w- c:\program files\FLV Converter
    2010-08-05 19:56 . 2009-06-29 18:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
    2010-08-01 13:58 . 2010-08-01 13:58 -------- d-----w- c:\program files\IDoser v4
    2010-07-30 19:59 . 2010-07-30 18:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment
    2010-07-30 19:50 . 2010-07-30 18:18 -------- d-----w- c:\program files\Fichiers communs\Blizzard Entertainment
    2010-07-30 18:20 . 2010-07-30 18:15 -------- d-----w- c:\program files\Spybot
    2010-07-30 18:06 . 2010-07-30 18:06 -------- d-----w- c:\program files\StarCraft II.60ba5bd6.temp
    2010-07-30 18:06 . 2010-07-30 18:06 -------- d-----w- c:\program files\Fichiers communs\Blizzard Entertainment.91ccac26.temp
    2010-07-30 18:06 . 2010-07-30 18:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment.97a3acfc.temp
    2010-07-30 17:37 . 2010-07-30 17:37 -------- d-----w- c:\program files\StarCraft II.temp
    2010-07-30 17:37 . 2010-07-30 17:37 -------- d-----w- c:\program files\Fichiers communs\Blizzard Entertainment.temp
    2010-07-30 17:37 . 2010-07-30 17:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Blizzard Entertainment.temp
    2010-07-28 11:26 . 2010-07-28 11:26 -------- d-----w- c:\program files\ImASCII
    .

    ((((((((((((((((((((((((((((( SnapShot_2010-09-05_12.18.37 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2010-09-21 12:19 . 2010-09-21 12:19 16384 c:\windows\Temp\Perflib_Perfdata_788.dat
    + 2010-09-07 07:32 . 2006-10-19 22:10 80024 c:\windows\system32\PICSDK.dll
    + 2010-09-07 07:32 . 2004-03-03 04:10 21390 c:\windows\system32\EPPICPattern5.dat
    + 2010-09-07 07:32 . 2004-03-03 04:10 11811 c:\windows\system32\EPPICPattern4.dat
    + 2010-09-07 07:32 . 2004-03-03 04:10 24903 c:\windows\system32\EPPICPattern3.dat
    + 2010-09-07 07:32 . 2004-03-03 04:10 20148 c:\windows\system32\EPPICPattern2.dat
    + 2010-09-07 07:32 . 2004-03-03 04:10 31053 c:\windows\system32\EPPICPattern131.dat
    + 2010-09-07 07:32 . 2004-03-03 04:10 27417 c:\windows\system32\EPPICPattern121.dat
    + 2010-09-07 07:32 . 2004-03-03 04:10 26154 c:\windows\system32\EPPICPattern1.dat
    + 2010-09-07 07:32 . 2006-10-30 22:10 71840 c:\windows\system32\EPPicMgr.dll
    + 2010-09-05 15:30 . 2009-05-11 08:11 28520 c:\windows\system32\drivers\ssmdrv.sys
    + 2010-09-07 07:32 . 2004-03-03 04:10 4943 c:\windows\system32\EPPICPattern6.dat
    + 2010-09-07 07:32 . 2007-06-21 22:10 501912 c:\windows\system32\PICSDK2.dll
    + 2010-09-07 07:32 . 2006-10-19 22:10 108704 c:\windows\system32\PICEntry.dll
    + 2010-09-07 07:13 . 2010-09-07 07:13 232912 c:\windows\system32\Macromed\Flash\FlashUtil10i_Plugin.exe
    + 2010-09-07 07:32 . 2006-10-30 22:10 120992 c:\windows\system32\EpPicPrt.dll
    + 2010-09-07 07:32 . 2005-05-31 22:20 111932 c:\windows\system32\EPPICPrinterDB.dat
    + 2009-02-03 02:15 . 2010-09-07 07:13 5969360 c:\windows\system32\Macromed\Flash\NPSWF32.dll
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
    "SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2006-07-07 1052672]
    "SpybotSD TeaTimer"="c:\program files\Spybot\TeaTimer.exe" [2009-03-05 2260480]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "RTHDCPL"="RTHDCPL.EXE" [2008-04-10 16861184]
    "CamserviceDeluxe2"="c:\program files\Webcam\Deluxe Optical Glass\Camservice.exe" [2007-08-10 81920]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-04 417792]
    "nwiz"="nwiz.exe" [BU]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-11-20 110184]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-11-20 12669544]
    "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

    c:\documents and settings\R'gis\Menu D'marrer\Programmes\D'marrage\
    Stardock ObjectDock.lnk - c:\program files\ObjectDock\ObjectDock.exe [2010-2-28 3450608]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    "FirewallOverride"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "c:\\Program Files\\uTorrent\\uTorrent.exe"=
    "c:\\WINDOWS\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "%windir%\\system32\\sessmgr.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

    R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [05/09/2010 17:30 108289]
    R2 KMWDSERVICE;Keyboard And Mouse Communication Service;c:\program files\Trust\KMWDSrv.exe [09/06/2007 00:23 208896]
    S3 camfilt2;camfilt2;c:\windows\system32\drivers\camfilt2.sys [29/06/2009 20:12 94720]
    S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [29/05/2009 17:13 234864]
    S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [11/06/2009 19:36 721904]

    --- Autres Services/Pilotes en mémoire ---

    *Deregistered* - mchInjDrv

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
    2009-06-17 10:11 451872 ----a-w- c:\program files\Fichiers communs\LightScribe\LSRunOnce.exe
    .
    Contenu du dossier 'Tâches planifiées'

    2010-09-17 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
    .
    .
    ------- Examen supplémentaire -------
    .
    uInternet Settings,ProxyOverride = *.local
    IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    FF - ProfilePath - c:\documents and settings\Régis\Application Data\Mozilla\Firefox\Profiles\vlt9ho31.default\
    FF - prefs.js: browser.startup.homepage - google.fr
    FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
    FF - plugin: c:\program files\VLC\npvlc.dll

    ---- PARAMETRES FIREFOX ----
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("pref.browser.homepage.disable_button.bookmark_page", false);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("pref.browser.homepage.disable_button.current_page", false);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("pref.browser.homepage.disable_button.restore_default", false);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("browser.places.importBookmarksHTML", true);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("browser.places.importDefaults", false);
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("browser.search.selectedEngine", "xeoo.com");
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("keyword.URL", "http://xeoo.com/?p=url&a=firefox&k=");
    c:\program files\Mozilla Firefox\defaults\profile\prefs.js - user_pref("browser.startup.homepage", "http://www.xeoo.com/?p=h&a=firefox");
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-09-21 14:26
    Windows 5.1.2600 Service Pack 3 NTFS

    Recherche de processus cachés ...

    Recherche d'éléments en démarrage automatique cachés ...

    Recherche de fichiers cachés ...

    Scan terminé avec succès
    Fichiers cachés: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv]
    "ImagePath"="\??\c:\docume~1\RGIS~1\LOCALS~1\Temp\mc24.tmp"
    .
    Heure de fin: 2010-09-21 14:28:14
    ComboFix-quarantined-files.txt 2010-09-21 12:28
    ComboFix2.txt 2010-09-05 12:21
    ComboFix3.txt 2010-08-28 16:43

    Avant-CF: 287 062 593 536 octets libres
    Après-CF: 287 069 798 400 octets libres

    - - End Of File - - 6351F9C9CE10C34133E74D97CE9418F0
    0

Discussions similaires

Antimalware service Executable consomme 45% de RAM.
KalenShiv -
KalenShiv -

8 réponses
Facebook rencontres a disparu.
Dav3601 -
Seve704 -

12 réponses
Icône Messenger disparue écran accueil
rumba75 -
rumba75 -

6 réponses