SOS : Sirefef.b qui mange connexion montante

Salut,

Eh oui Sirefef est bien connu de "nos services" ;D
Sur ton ZHPDiag y'a autre chose que sirefef également ! ...

Sans hésiter on sort le grand jeu pour nettoyer :


/!\ ATTENTION SUIVRE A LA LETTRE CES INDICATIONS/!\

__________________________________________________________
>Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.<
>>>>>>>Ne pas utiliser en dehors de ce cas de figure : dangereux!<<<<<<<<
=====================================================

▶ Surtout , pense à l'enregistrement à renommer Combofix en "ton prenom.exe" avant qu'il soit enregistré sur ton disque dur

Telecharge ici : Combofix

_________________________________________________________
>> referme les fenêtres de tous les programmes en cours.
>> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix,
>>la protection en temps réel de ton Antivirus et de tes Antispywares,
>>qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur combofix renommé

¤¤¤¤¤¤¤¤¤¤ LAISSE-LE INSTALLER LA CONSOLE DE RECUPERATION S'IL TE LE DEMANDE ¤¤¤¤¤¤¤¤¤¤

▶ !!!!!NE TOUCHE A RIEN PENDANT LE TRAVAIL DE COMBOFIX (SOURIS/CLAVIER.....)!!!!!

▶ n'oublie pas de reactiver la garde de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

▶▶ Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

▶▶▶ Si, après le redémarrage de votre pc par combofix, vous avez des erreurs "Clé marquée pour suppression" ou des soucis de connexion internet, redémarrez à nouveau votre ordinateur

A tout à l'heure.

salut, et merci de s'interesser à mon cas ! Bon, alors j'ai un probleme, déjà : meme si je m'en suis pas servi, ayant bien saisi que chaque probleme est different selon chaque machine en lisant les tutos, j'avais déjà téléchargé combofix, et il se trouve que je l'ai ni renommé, ni que j'arrive à le désinstaller... j'en fais quoi ? je fais avec?

J'ai essayé de le désinstaller avec toolcleaner et ca donne ca :

[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Combofix.txt: trouvé !
C:\Qoobox: trouvé !
C:\Program Files (x86)\Ad-remover: trouvé !
C:\Program Files (x86)\ZHPDiag: trouvé !
C:\Program Files (x86)\ZHPDiag\ZHPdiag.exe: trouvé !
C:\Program Files (x86)\ZHPDiag\catchme.exe: trouvé !
C:\Program Files (x86)\ZHPDiag\mbr.log: trouvé !
C:\Program Files (x86)\ZHPDiag\mbr.exe: trouvé !
C:\Qoobox\Quarantine\catchme.log: trouvé !
C:\Users\nico\Desktop\ComboFix.exe: trouvé !
C:\Windows\mbr.exe: trouvé !

---------------------------------
--> Suppression:

C:\Program Files (x86)\ZHPDiag\ZHPdiag.exe: supprimé !
C:\Program Files (x86)\ZHPDiag\catchme.exe: supprimé !
C:\Users\nico\Desktop\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Combofix.txt: supprimé !
C:\Program Files (x86)\ZHPDiag\mbr.log: supprimé !
C:\Program Files (x86)\ZHPDiag\mbr.exe: supprimé !
C:\Qoobox\Quarantine\catchme.log: supprimé !
C:\Windows\mbr.exe: supprimé !
C:\Qoobox: ERREUR DE SUPPRESSION !!
C:\Program Files (x86)\Ad-remover: supprimé !
C:\Program Files (x86)\ZHPDiag: supprimé !

EDIT : c'est bon c'est supprimé :

[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Qoobox: trouvé !

---------------------------------
--> Suppression:

C:\Qoobox: ERREUR DE SUPPRESSION !!

Il reste que ce qoobox dont je sais même pas ce que c'est ... bref !

C'est parti, je suis la procédure... ;) a toute.

PS : pourra tu m'expliquer ce que le genre de virus dont je suis infecté peut faire, et si les paiements que j'ai effectués par carte bleue cette semaine peuvent représenter un risque...?

Alors rapport de combofix.exe :

ComboFix 12-03-16.05 - nico 17/03/2012 2:11.2.4 - x64
Microsoft Windows 7 Édition Intégrale 6.1.7601.1.1252.33.1036.18.8109.6301 [GMT 1:00]
Lancé depuis: c:\users\nico\Desktop\nico.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Un nouveau point de restauration a été créé
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-02-17 au 2012-03-17 ))))))))))))))))))))))))))))))))))))
.
.
2012-03-16 03:29 . 2012-03-16 03:29 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-03-16 03:29 . 2011-12-10 14:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-03-16 01:59 . 2012-03-16 02:01 -------- d-----w- c:\program files (x86)\Fraps
2012-03-16 00:29 . 2012-03-16 00:29 927800 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{16F4D297-AC68-42A0-BE68-CFD3BEEFB23D}\gapaengine.dll
2012-03-16 00:29 . 2012-02-07 22:14 8643640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{14A5D8F6-4CA5-444D-8231-D24E9C82535B}\mpengine.dll
2012-03-16 00:27 . 2012-03-16 00:27 -------- d-----w- c:\users\nico\AppData\Local\Realmware
2012-03-16 00:27 . 2012-03-16 00:27 -------- d-----w- c:\program files\Realmware
2012-03-16 00:24 . 2012-03-16 00:24 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2012-03-16 00:24 . 2012-03-16 00:24 -------- d-----w- c:\program files\Microsoft Security Client
2012-03-15 20:51 . 2012-03-15 20:51 -------- d-----w- c:\users\nico\AppData\Roaming\SoftPlug
2012-03-15 20:51 . 2012-03-15 20:51 -------- d-----w- c:\users\nico\AppData\Roaming\LEA
2012-03-15 20:51 . 2012-03-15 20:51 -------- d-----w- c:\program files (x86)\LEA
2012-03-15 20:51 . 2012-03-15 20:51 -------- d-----w- c:\program files (x86)\WinPcap
2012-03-15 02:01 . 2011-11-19 15:20 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-03-15 02:01 . 2011-11-19 14:50 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-03-15 02:01 . 2011-11-19 14:50 3913584 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-03-14 20:29 . 2012-03-16 11:36 -------- d-----r- c:\users\nico\Dropbox
2012-03-14 20:03 . 2012-03-16 11:36 -------- d-----w- c:\users\nico\AppData\Roaming\Dropbox
2012-03-14 04:17 . 2012-02-03 04:34 3145728 ----a-w- c:\windows\system32\win32k.sys
2012-03-14 04:17 . 2012-02-10 06:36 1544192 ----a-w- c:\windows\system32\DWrite.dll
2012-03-14 04:17 . 2012-02-10 05:38 1077248 ----a-w- c:\windows\SysWow64\DWrite.dll
2012-03-14 04:15 . 2012-03-01 13:21 8643640 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{67572D4F-4302-4C6C-96E4-36B26BF8FE7E}\mpengine.dll
2012-03-14 04:11 . 2012-02-17 06:38 1112064 ----a-w- c:\windows\system32\rdpcorets.dll
2012-03-14 04:11 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2012-03-14 04:11 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2012-03-14 04:11 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-03-14 04:11 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-03-14 04:11 . 2012-01-25 06:38 77312 ----a-w- c:\windows\system32\rdpwsx.dll
2012-03-14 04:11 . 2012-01-25 06:38 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-03-14 04:11 . 2012-01-25 06:33 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-03-14 01:32 . 2012-03-14 01:32 -------- d-----w- c:\users\nico\AppData\Roaming\EPSON
2012-03-13 20:07 . 2009-04-30 23:00 17408 ----a-w- c:\windows\system32\esxcdev.dll
2012-03-13 20:07 . 2009-04-30 23:00 128392 ----a-w- c:\windows\system32\esdevapp.exe
2012-03-13 20:07 . 2008-11-16 23:00 459776 ----a-w- c:\windows\system32\esxwiaud.dll
2012-03-13 20:07 . 2012-03-13 20:07 -------- d-----w- c:\program files (x86)\epson
2012-03-13 16:47 . 2012-03-13 15:07 282864 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-03-13 16:47 . 2012-03-13 16:46 189248 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-03-13 16:46 . 2012-03-13 16:46 -------- d-----w- c:\programdata\ATI
2012-03-13 16:45 . 2012-03-13 15:39 76888 ----a-r- c:\windows\system32\PnkBstrA.exe
2012-03-13 16:45 . 2012-03-13 16:44 189248 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-03-13 16:40 . 2012-03-13 16:40 -------- d-----w- c:\programdata\AMD
2012-03-13 16:40 . 2012-03-13 16:40 -------- d-----w- c:\program files (x86)\AMD AVT
2012-03-13 16:40 . 2012-03-13 16:40 -------- d-----w- c:\program files (x86)\AMD APP
2012-03-13 16:40 . 2012-03-13 16:40 -------- d-----w- c:\program files\Common Files\ATI Technologies
2012-03-13 16:40 . 2012-03-13 16:40 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
2012-03-13 16:39 . 2012-03-13 16:40 -------- d-----w- c:\program files\ATI Technologies
2012-03-13 16:32 . 2012-03-13 16:32 -------- d-----w- C:\Driver_allOS
2012-03-13 16:32 . 2011-11-10 00:04 60184 ----a-w- c:\windows\system32\drivers\HECIx64.sys
2012-03-13 16:18 . 2011-12-21 16:35 74344 ----a-w- c:\windows\system32\RtNicProp64.dll
2012-03-13 16:18 . 2011-11-23 22:02 648808 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2012-03-13 16:16 . 2012-03-13 16:16 53248 ----a-r- c:\users\nico\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2012-03-13 16:16 . 2012-03-13 16:16 -------- d-----w- c:\users\nico\AppData\Local\Logishrd
2012-03-13 16:16 . 2012-03-16 06:44 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2012-03-13 16:15 . 2012-03-13 16:16 -------- d-----w- c:\programdata\Logishrd
2012-03-13 16:15 . 2012-03-13 16:15 -------- d-----w- c:\program files\Logitech
2012-03-13 16:15 . 2012-03-13 16:16 -------- d-----w- c:\program files\Common Files\Logishrd
2012-03-13 16:12 . 2012-03-13 16:13 -------- d-----w- c:\users\nico\AppData\Roaming\Logishrd
2012-03-13 16:06 . 2012-03-13 16:06 -------- d-----w- c:\program files (x86)\ma-config.com
2012-03-13 16:06 . 2012-03-13 16:06 -------- d-----w- c:\programdata\ma-config.com
2012-03-13 15:39 . 2012-03-16 12:29 282864 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2012-03-13 15:39 . 2012-03-13 15:39 76888 ----a-r- c:\windows\SysWow64\PnkBstrA.exe
2012-03-13 15:39 . 2012-01-18 12:15 2580552 ----a-w- c:\windows\SysWow64\pbsvc.exe
2012-03-13 15:35 . 2012-03-15 17:12 -------- d-----w- c:\users\nico\AppData\Local\PunkBuster
2012-03-13 13:25 . 2012-03-07 00:15 258520 ----a-w- c:\windows\system32\aswBoot.exe
2012-03-13 13:25 . 2012-03-15 17:40 -------- d-----w- c:\programdata\AVAST Software
2012-03-13 13:25 . 2012-03-13 13:25 -------- d-----w- c:\program files\AVAST Software
2012-03-13 09:41 . 2012-03-13 09:44 -------- d-----w- c:\program files\Unlocker
2012-03-13 08:50 . 2012-03-13 08:50 -------- d-----w- c:\users\nico\AppData\Roaming\Malwarebytes
2012-03-13 08:50 . 2012-03-13 08:50 -------- d-----w- c:\programdata\Malwarebytes
2012-03-13 05:38 . 2012-03-13 05:38 -------- d-----w- c:\users\nico\AppData\Roaming\RotMG.Production
2012-03-13 04:54 . 2012-03-16 03:05 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2012-03-13 04:40 . 2012-03-13 04:40 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-03-13 04:40 . 2012-03-13 04:40 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
2012-03-13 04:36 . 2012-03-13 04:36 -------- d-----w- c:\program files (x86)\FileHippo.com
2012-03-13 04:02 . 2012-03-16 03:05 -------- d-----w- C:\ZHP
2012-03-12 02:29 . 2012-03-16 02:15 -------- d-----w- c:\program files (x86)\Battlelog Web Plugins
2012-03-12 02:24 . 2012-03-12 02:44 -------- d-----w- c:\programdata\EA Logs
2012-03-11 22:36 . 2012-03-15 22:41 -------- d-----w- c:\users\nico\AppData\Local\Origin
2012-03-11 22:36 . 2012-03-11 23:59 -------- d-----w- c:\program files (x86)\Origin Games
2012-03-11 19:38 . 2012-03-16 11:36 -------- d-----w- c:\program files (x86)\PunkBuster
2012-03-11 19:14 . 2012-03-16 14:11 282864 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2012-03-11 18:09 . 2012-03-11 18:59 2434856 ----a-w- c:\windows\SysWow64\pbsvc_bc2.exe
2012-03-11 18:07 . 2012-03-11 18:07 -------- d-----w- c:\programdata\Nexon
2012-03-10 23:47 . 2012-03-10 23:47 50037 ----a-w- c:\program files (x86)\Uninstall Brekel Kinect MoBu Device.exe
2012-03-10 21:49 . 2012-03-10 21:49 -------- d-----w- c:\program files (x86)\PrimeSense
2012-03-10 21:49 . 2012-03-10 21:49 -------- d-----w- c:\program files (x86)\OpenNI
2012-03-10 21:25 . 2012-03-10 21:25 -------- d-----w- c:\program files (x86)\Brekel Kinect
2012-03-10 17:52 . 2001-09-05 04:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2012-03-10 17:52 . 2001-09-05 04:18 225280 ------w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll
2012-03-10 17:52 . 2001-09-05 04:14 176128 ------w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2012-03-10 17:52 . 2001-09-05 04:13 32768 ------w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2012-03-10 17:52 . 2002-07-25 08:07 614532 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe
2012-03-10 17:47 . 2012-03-10 17:47 -------- d-----w- c:\program files (x86)\viewsonic
2012-03-10 15:49 . 2012-03-13 06:43 -------- d-----w- c:\programdata\boost_interprocess
2012-03-10 15:47 . 2012-03-10 15:47 -------- d-----w- c:\programdata\FLEXnet
2012-03-10 15:47 . 2012-03-10 15:49 -------- d-----w- c:\users\nico\AppData\Local\Autodesk
2012-03-10 14:41 . 2012-03-10 14:41 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2012-03-10 14:40 . 2012-03-10 16:08 -------- d-----w- c:\program files\Autodesk
2012-03-10 14:40 . 2012-03-10 14:41 -------- d-----w- c:\program files\Common Files\Autodesk Shared
2012-03-10 14:40 . 2012-03-10 14:40 -------- d-----w- c:\program files (x86)\Autodesk
2012-03-10 14:39 . 2012-03-10 14:40 -------- d-----w- c:\program files (x86)\Common Files\Autodesk Shared
2012-03-10 14:36 . 2012-03-10 16:13 -------- d-----w- c:\users\nico\AppData\Roaming\Autodesk
2012-03-10 14:36 . 2012-03-10 16:13 -------- d-----w- c:\programdata\Autodesk
2012-03-10 14:14 . 2012-03-11 21:43 -------- d-----w- c:\users\nico\AppData\Local\Deployment
2012-03-10 14:14 . 2012-03-10 14:14 -------- d-----w- c:\program files (x86)\iPiSoft
2012-03-10 13:48 . 2012-03-10 13:48 -------- d-----w- c:\program files\DIFX
2012-03-10 08:58 . 2012-03-10 08:59 -------- d--h--w- c:\windows\Icons
2012-03-09 22:11 . 2012-03-09 22:11 -------- d-----w- c:\program files (x86)\HJSplit
2012-03-03 05:11 . 2012-03-12 02:24 -------- d-----w- c:\programdata\Electronic Arts
2012-03-03 05:11 . 2012-03-03 05:11 -------- d-----w- c:\programdata\EA Core
2012-03-02 19:26 . 2012-03-02 19:26 639312 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2012-02-29 13:03 . 2012-02-29 13:04 -------- d-----w- c:\users\nico\AppData\Local\Vidalia
2012-02-29 12:45 . 2012-02-29 13:02 -------- d-----w- c:\users\nico\AppData\Roaming\tor
2012-02-26 18:13 . 2011-05-05 23:00 709632 ----a-w- c:\windows\system32\Notepad2.exe
2012-02-23 13:12 . 2012-02-23 13:12 -------- d-----w- c:\windows\C5C1C0F0D62F4DBF81D4D7EF397C228B.TMP
2012-02-22 12:48 . 2012-02-22 12:48 -------- d-----w- c:\users\nico\AppData\Local\Bouygues Telecom
2012-02-22 12:46 . 2010-06-24 13:28 119680 ----a-w- c:\windows\system32\drivers\ZTEusbser6k.sys
2012-02-22 12:46 . 2010-06-24 13:28 119680 ----a-w- c:\windows\system32\drivers\ZTEusbnmea.sys
2012-02-22 12:46 . 2010-06-24 13:28 119680 ----a-w- c:\windows\system32\drivers\ZTEusbmdm6k.sys
2012-02-22 12:46 . 2010-06-24 13:28 11776 ----a-w- c:\windows\system32\drivers\massfilter.sys
2012-02-22 12:46 . 2010-06-24 13:28 29696 ----a-w- c:\windows\system32\drivers\ewdcsc.sys
2012-02-22 12:46 . 2010-06-24 13:28 132608 ----a-w- c:\windows\system32\drivers\ewusbnet.sys
2012-02-22 12:46 . 2010-06-24 13:28 116992 ----a-w- c:\windows\system32\drivers\ewusbmdm.sys
2012-02-22 12:46 . 2010-06-24 13:28 113792 ----a-w- c:\windows\system32\drivers\ewusbdev.sys
2012-02-22 12:46 . 2010-04-07 10:46 119680 ----a-w- c:\windows\system32\drivers\jrdusbser.sys
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-17 01:14 . 2011-12-08 16:40 25640 ----a-w- c:\windows\gdrv.sys
2012-03-16 14:11 . 2012-02-02 04:04 282864 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2012-03-13 13:17 . 2011-12-08 16:41 30528 ----a-w- c:\windows\GVTDrv64.sys
2012-03-08 21:35 . 2011-12-08 22:41 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-08 19:12 . 2012-01-25 18:45 2306328 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2012-03-08 19:01 . 2012-01-25 18:45 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2012-03-08 19:01 . 2012-01-15 18:55 639312 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2012-03-07 19:42 . 2012-01-15 18:55 2306328 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2012-03-07 19:42 . 2012-01-15 18:55 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2012-02-23 09:18 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-15 03:48 . 2012-02-15 03:48 10856960 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2012-02-15 03:21 . 2012-02-15 03:21 25839104 ----a-w- c:\windows\system32\atio6axx.dll
2012-02-15 03:18 . 2012-02-15 03:18 159744 ----a-w- c:\windows\system32\atiapfxx.exe
2012-02-15 03:18 . 2011-11-10 03:16 791040 ----a-w- c:\windows\SysWow64\aticfx32.dll
2012-02-15 03:17 . 2011-10-26 02:04 957952 ----a-w- c:\windows\system32\aticfx64.dll
2012-02-15 03:13 . 2012-02-15 03:13 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2012-02-15 03:13 . 2012-02-15 03:13 496128 ----a-w- c:\windows\system32\atieclxx.exe
2012-02-15 03:13 . 2012-02-15 03:13 235520 ----a-w- c:\windows\system32\atiesrxx.exe
2012-02-15 03:11 . 2012-02-15 03:11 120320 ----a-w- c:\windows\system32\atitmm64.dll
2012-02-15 03:10 . 2012-02-15 03:10 21504 ----a-w- c:\windows\system32\atimuixx.dll
2012-02-15 03:10 . 2012-02-15 03:10 59392 ----a-w- c:\windows\system32\atiedu64.dll
2012-02-15 03:10 . 2012-02-15 03:10 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
2012-02-15 03:07 . 2011-11-10 03:06 6200320 ----a-w- c:\windows\SysWow64\atidxx32.dll
2012-02-15 02:58 . 2012-02-15 02:58 19392000 ----a-w- c:\windows\SysWow64\atioglxx.dll
2012-02-15 02:52 . 2011-10-26 01:46 7646208 ----a-w- c:\windows\system32\atidxx64.dll
2012-02-15 02:41 . 2012-02-15 02:41 1113088 ----a-w- c:\windows\system32\atiumd6v.dll
2012-02-15 02:40 . 2012-02-15 02:40 1828864 ----a-w- c:\windows\SysWow64\atiumdmv.dll
2012-02-15 02:40 . 2012-02-15 02:40 4958208 ----a-w- c:\windows\system32\atiumd6a.dll
2012-02-15 02:34 . 2012-02-15 02:34 51200 ----a-w- c:\windows\system32\aticalrt64.dll
2012-02-15 02:34 . 2012-02-15 02:34 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
2012-02-15 02:34 . 2012-02-15 02:34 44544 ----a-w- c:\windows\system32\aticalcl64.dll
2012-02-15 02:34 . 2012-02-15 02:34 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
2012-02-15 02:34 . 2012-02-15 02:34 5954048 ----a-w- c:\windows\SysWow64\atiumdag.dll
2012-02-15 02:34 . 2012-02-15 02:34 13859840 ----a-w- c:\windows\system32\aticaldd64.dll
2012-02-15 02:29 . 2012-02-15 02:29 5062656 ----a-w- c:\windows\SysWow64\atiumdva.dll
2012-02-15 02:29 . 2012-02-15 02:29 11561984 ----a-w- c:\windows\SysWow64\aticaldd.dll
2012-02-15 02:25 . 2012-02-15 02:25 7551488 ----a-w- c:\windows\system32\atiumd64.dll
2012-02-15 02:16 . 2011-10-26 01:29 58880 ----a-w- c:\windows\system32\coinst.dll
2012-02-15 02:14 . 2012-02-15 02:14 512000 ----a-w- c:\windows\system32\atiadlxx.dll
2012-02-15 02:13 . 2012-02-15 02:13 356352 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2012-02-15 02:13 . 2012-02-15 02:13 17408 ----a-w- c:\windows\system32\atig6pxx.dll
2012-02-15 02:13 . 2012-02-15 02:13 14336 ----a-w- c:\windows\SysWow64\atiglpxx.dll
2012-02-15 02:13 . 2012-02-15 02:13 14336 ----a-w- c:\windows\system32\atiglpxx.dll
2012-02-15 02:13 . 2012-02-15 02:13 39936 ----a-w- c:\windows\system32\atig6txx.dll
2012-02-15 02:13 . 2012-02-15 02:13 33280 ----a-w- c:\windows\SysWow64\atigktxx.dll
2012-02-15 02:13 . 2012-02-15 02:13 327680 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2012-02-15 02:12 . 2011-10-26 01:21 43008 ----a-w- c:\windows\system32\atiuxp64.dll
2012-02-15 02:12 . 2011-11-10 02:11 33280 ----a-w- c:\windows\SysWow64\atiuxpag.dll
2012-02-15 02:12 . 2012-02-15 02:12 39936 ----a-w- c:\windows\system32\atiu9p64.dll
2012-02-15 02:12 . 2012-02-15 02:12 30208 ----a-w- c:\windows\SysWow64\atiu9pag.dll
2012-02-15 02:11 . 2012-02-15 02:11 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2012-02-15 02:11 . 2012-02-15 02:11 54784 ----a-w- c:\windows\system32\atimpc64.dll
2012-02-15 02:11 . 2012-02-15 02:11 54784 ----a-w- c:\windows\system32\amdpcom64.dll
2012-02-15 02:11 . 2012-02-15 02:11 53760 ----a-w- c:\windows\SysWow64\atimpc32.dll
2012-02-15 02:11 . 2012-02-15 02:11 53760 ----a-w- c:\windows\SysWow64\amdpcom32.dll
2012-02-14 21:05 . 2012-02-14 21:05 69632 ----a-w- c:\windows\system32\OpenVideo64.dll
2012-02-14 21:05 . 2012-02-14 21:05 59904 ----a-w- c:\windows\SysWow64\OpenVideo.dll
2012-02-14 21:05 . 2012-02-14 21:05 61952 ----a-w- c:\windows\system32\OVDecode64.dll
2012-02-14 21:05 . 2012-02-14 21:05 54784 ----a-w- c:\windows\SysWow64\OVDecode.dll
2012-02-14 21:05 . 2012-02-14 21:05 16507904 ----a-w- c:\windows\system32\amdocl64.dll
2012-02-14 21:04 . 2012-02-14 21:04 13238272 ----a-w- c:\windows\SysWow64\amdocl.dll
2012-02-14 21:03 . 2012-02-14 21:03 54272 ----a-w- c:\windows\system32\OpenCL.dll
2012-02-14 21:03 . 2012-02-14 21:03 48128 ----a-w- c:\windows\SysWow64\OpenCL.dll
2012-02-14 17:55 . 2012-02-14 17:55 276248 ----a-w- c:\windows\SysWow64\IntelCpHeciSvc.exe
2012-02-14 17:55 . 2012-02-14 17:55 5886232 ----a-w- c:\windows\system32\GfxUI.exe
2012-02-14 17:55 . 2012-02-14 17:55 511768 ----a-w- c:\windows\system32\igfxsrvc.exe
2012-02-14 17:55 . 2012-02-14 17:55 440600 ----a-w- c:\windows\system32\igfxpers.exe
2012-02-14 17:55 . 2012-02-14 17:55 398616 ----a-w- c:\windows\system32\hkcmd.exe
2012-02-14 17:55 . 2012-02-14 17:55 250136 ----a-w- c:\windows\system32\igfxext.exe
2012-02-14 17:55 . 2012-02-14 17:55 184600 ----a-w- c:\windows\system32\difx64.exe
2012-02-14 17:55 . 2012-02-14 17:55 170264 ----a-w- c:\windows\system32\igfxtray.exe
2012-02-14 17:53 . 2012-02-14 17:53 90112 ----a-w- c:\windows\system32\igfxCoIn_v2653.dll
2012-02-14 17:47 . 2012-02-14 17:47 8086528 ----a-w- c:\windows\system32\igdumd64.dll
2012-02-14 17:47 . 2012-02-14 17:47 14692224 ----a-w- c:\windows\system32\drivers\igdkmd64.sys
2012-02-14 17:47 . 2012-02-14 17:47 963912 ----a-w- c:\windows\system32\igkrng600.bin
2012-02-14 17:47 . 2012-02-14 17:47 79360 ----a-w- c:\windows\system32\igdde64.dll
2012-02-14 17:47 . 2012-02-14 17:47 261208 ----a-w- c:\windows\system32\igfcg600m.bin
2012-02-14 17:44 . 2012-02-14 17:44 6120960 ----a-w- c:\windows\SysWow64\igdumd32.dll
2012-02-14 17:44 . 2012-02-14 17:44 58880 ----a-w- c:\windows\SysWow64\igdde32.dll
2012-02-14 17:42 . 2012-02-14 17:42 9605632 ----a-w- c:\windows\system32\igd10umd64.dll
2012-02-14 17:35 . 2012-02-14 17:35 7794688 ----a-w- c:\windows\SysWow64\igd10umd32.dll
2012-02-14 17:07 . 2012-02-14 17:07 18125312 ----a-w- c:\windows\system32\ig4icd64.dll
2012-02-14 16:59 . 2012-02-14 16:59 13209600 ----a-w- c:\windows\SysWow64\ig4icd32.dll
2012-02-14 16:57 . 2012-02-14 16:57 439808 ----a-w- c:\windows\system32\igfxresn.lrc
2012-02-14 16:57 . 2012-02-14 16:57 439296 ----a-w- c:\windows\system32\igfxrrom.lrc
2012-02-14 16:57 . 2012-02-14 16:57 438784 ----a-w- c:\windows\system32\igfxrhrv.lrc
2012-02-14 16:57 . 2012-02-14 16:57 438272 ----a-w- c:\windows\system32\igfxrsky.lrc
2012-02-14 16:57 . 2012-02-14 16:57 437760 ----a-w- c:\windows\system32\igfxrtrk.lrc
2012-02-14 16:57 . 2012-02-14 16:57 437760 ----a-w- c:\windows\system32\igfxrsve.lrc
2012-02-14 16:57 . 2012-02-14 16:57 437760 ----a-w- c:\windows\system32\igfxrslv.lrc
2012-02-14 16:57 . 2012-02-14 16:57 437248 ----a-w- c:\windows\system32\igfxrtha.lrc
2012-02-14 16:57 . 2012-02-14 16:57 439296 ----a-w- c:\windows\system32\igfxrrus.lrc
2012-02-14 16:57 . 2012-02-14 16:57 438784 ----a-w- c:\windows\system32\igfxrptg.lrc
2012-02-14 16:57 . 2012-02-14 16:57 438784 ----a-w- c:\windows\system32\igfxrplk.lrc
2012-02-14 16:57 . 2012-02-14 16:57 438784 ----a-w- c:\windows\system32\igfxrita.lrc
2012-02-14 16:57 . 2012-02-14 16:57 437760 ----a-w- c:\windows\system32\igfxrptb.lrc
2012-02-14 16:57 . 2012-02-14 16:57 437760 ----a-w- c:\windows\system32\igfxrnor.lrc
2012-02-14 16:57 . 2012-02-14 16:57 432128 ----a-w- c:\windows\system32\igfxrjpn.lrc
2012-02-14 16:57 . 2012-02-14 16:57 430592 ----a-w- c:\windows\system32\igfxrkor.lrc
2012-02-14 16:57 . 2012-02-14 16:57 440320 ----a-w- c:\windows\system32\igfxrell.lrc
.
.
((((((((((((((((((((((((((((( SnapShot@2012-03-13_11.11.54 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\local\0C0A\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\local\0816\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\local\0809\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\local\0422\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\local\0419\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\local\0413\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\local\0410\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\local\040C\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\local\0409\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\local\0407\escndvrs.dll
+ 2012-03-13 20:07 . 2008-12-16 23:00 36864 c:\windows\twain_32\escndv\estwm.exe
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\twain_32\escndv\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\local\0C0A\esmpsres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\local\0816\esmpsres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\local\0809\esmpsres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\local\0422\esmpsres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\local\0419\esmpsres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\local\0413\esmpsres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\local\0410\esmpsres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\local\040C\esmpsres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\local\0409\esmpsres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\local\0407\esmpsres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eppijres.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 40960 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0C0A\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eppijres.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0816\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eppijres.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0809\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eppijres.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0422\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\eppijres.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0419\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\eppijres.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0413\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\eppijres.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 40960 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0410\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\eppijres.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 40960 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\040C\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\eppijres.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0409\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\eppijres.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 40960 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\local\0407\epbmpres.dll
+ 2012-03-13 20:07 . 2005-08-28 23:00 98304 c:\windows\twain_32\escndv\es0099\ffmt\espimtif.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 94208 c:\windows\twain_32\escndv\es0099\ffmt\eptif.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 90112 c:\windows\twain_32\escndv\es0099\ffmt\eppit.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\eppijres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 94208 c:\windows\twain_32\escndv\es0099\ffmt\eppij.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 36864 c:\windows\twain_32\escndv\es0099\ffmt\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 94208 c:\windows\twain_32\escndv\es0099\ffmt\epmtf.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\twain_32\escndv\es0099\ffmt\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 77824 c:\windows\twain_32\escndv\es0099\ffmt\epbmp.dll
+ 2012-03-13 20:07 . 2008-12-16 23:00 36864 c:\windows\twain_32\escndv\es0099\estwm.exe
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\twain_32\escndv\es0099\esmpsres.dll
+ 2012-03-13 20:07 . 2008-04-10 23:00 53248 c:\windows\twain_32\escndv\es0099\esicm.dll
+ 2012-03-13 20:07 . 2008-12-16 23:00 36864 c:\windows\twain_32\escndv\es0099\esdscl.dll
+ 2012-03-13 20:07 . 2008-07-15 23:00 94208 c:\windows\twain_32\escndv\es0099\esdde.dll
+ 2012-03-13 20:07 . 2006-11-01 23:00 90112 c:\windows\twain_32\escndv\es0099\esddc.dll
+ 2010-06-25 17:03 . 2010-06-25 17:03 53299 c:\windows\SysWOW64\pthreadVC.dll
+ 2010-06-25 17:07 . 2010-06-25 17:07 96784 c:\windows\SysWOW64\Packet.dll
+ 2012-01-31 05:00 . 2012-01-31 05:00 16896 c:\windows\SysWOW64\kdbsdk32.dll
+ 2011-10-22 11:21 . 2011-10-22 11:21 65536 c:\windows\SysWOW64\frapsvid.dll
- 2011-12-08 16:19 . 2010-12-23 03:09 53248 c:\windows\SysWOW64\CSVer.dll
+ 2011-12-08 16:19 . 2012-01-16 10:06 53248 c:\windows\SysWOW64\CSVer.dll
+ 2009-07-14 04:54 . 2012-03-15 18:59 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2012-03-12 18:48 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2012-03-15 18:59 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-03-12 18:48 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2012-03-12 18:48 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2012-03-15 18:59 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-11-21 03:09 . 2012-03-16 11:37 35660 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2012-03-16 11:37 33142 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2011-09-02 06:30 . 2011-09-02 06:30 55064 c:\windows\system32\LMouFiltCoInst.dll
+ 2012-01-31 05:02 . 2012-01-31 05:02 21504 c:\windows\system32\kdbsdk64.dll
+ 2011-10-22 11:21 . 2011-10-22 11:21 71680 c:\windows\system32\frapsv64.dll
- 2009-07-14 05:30 . 2012-03-13 10:48 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2009-07-14 05:30 . 2012-03-14 01:08 86016 c:\windows\system32\DriverStore\infpub.dat
+ 2012-03-13 16:18 . 2011-12-21 16:35 74344 c:\windows\system32\DriverStore\FileRepository\rt64win7.inf_amd64_neutral_1aece7ab12244d52\RtNicProp64.dll
+ 2011-09-02 06:30 . 2011-09-02 06:30 91416 c:\windows\system32\DriverStore\FileRepository\lmoups2k.inf_amd64_neutral_2339f9563493e4df\L8042mou.Sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 32536 c:\windows\system32\DriverStore\FileRepository\lkbdps2k.inf_amd64_neutral_9ea57de889ce3173\L8042Kbd.sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 55064 c:\windows\system32\DriverStore\FileRepository\lfmouhid.inf_amd64_neutral_12000fce12220350\LMouFiltCoInst.dll
+ 2011-09-02 06:30 . 2011-09-02 06:30 60696 c:\windows\system32\DriverStore\FileRepository\lfmouhid.inf_amd64_neutral_12000fce12220350\LMouFilt.Sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 66840 c:\windows\system32\DriverStore\FileRepository\lfmouhid.inf_amd64_neutral_12000fce12220350\LHidFilt.Sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 66840 c:\windows\system32\DriverStore\FileRepository\lfkbdhid.inf_amd64_neutral_99503c6390c9346a\LHidFilt.Sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 42776 c:\windows\system32\DriverStore\FileRepository\lfhidusb.inf_amd64_neutral_6d6ec350722ee849\LUsbFilt.sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 66840 c:\windows\system32\DriverStore\FileRepository\lfhidhid.inf_amd64_neutral_67db93f52e33f460\LHidFilt.Sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 15128 c:\windows\system32\DriverStore\FileRepository\lfhideqd.inf_amd64_neutral_f82f5301e4a99eb5\LHidEqd.sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 76056 c:\windows\system32\DriverStore\FileRepository\lfeqdusb.inf_amd64_neutral_c33b2f7768fc3d46\LEqdUsb.sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 52504 c:\windows\system32\DriverStore\FileRepository\lbtcoins.inf_amd64_neutral_cbd347b8acf5ddfe\LBTCoIns.DLL
+ 2012-03-13 16:32 . 2011-11-10 00:04 60184 c:\windows\system32\DriverStore\FileRepository\heci.inf_amd64_neutral_8602aa5e34a4a901\HECIx64.sys
+ 2012-03-13 20:07 . 2009-04-30 23:00 17408 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\esxcdev.dll
+ 2012-03-13 20:07 . 2008-12-16 23:00 36864 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\estwm.exe
+ 2012-03-13 20:07 . 2005-08-28 23:00 98304 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\espimtif.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 73728 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\esmpsres.dll
+ 2012-03-13 20:07 . 2008-04-10 23:00 53248 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\esicm.dll
+ 2012-03-13 20:07 . 2008-12-16 23:00 36864 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\esdscl.dll
+ 2012-03-13 20:07 . 2008-07-15 23:00 94208 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\esdde.dll
+ 2012-03-13 20:07 . 2006-11-01 23:00 90112 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\esddc.dll
+ 2012-03-13 20:07 . 2008-11-29 23:00 32768 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\escndvrs.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\eptifres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 94208 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\eptif.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\eppitres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 90112 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\eppit.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\eppijres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 94208 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\eppij.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 36864 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\eppdfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\epmtfres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 94208 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\epmtf.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\epjpgres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 32768 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\epbmpres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 77824 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\epbmp.dll
+ 2012-02-15 02:16 . 2012-02-15 02:16 58880 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\coinst.dll
+ 2012-02-15 02:12 . 2012-02-15 02:12 33280 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atiuxpag.dll
+ 2012-02-15 02:12 . 2012-02-15 02:12 43008 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atiuxp64.dll
+ 2012-02-15 02:12 . 2012-02-15 02:12 30208 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atiu9pag.dll
+ 2012-02-15 02:12 . 2012-02-15 02:12 39936 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atiu9p64.dll
+ 2012-02-15 02:21 . 2012-02-15 02:21 70656 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atisamu64.dll
+ 2009-06-22 15:34 . 2009-06-22 15:34 51200 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\ATIODCLI.exe
+ 2012-02-15 03:10 . 2012-02-15 03:10 21504 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atimuixx.dll
+ 2012-02-15 02:11 . 2012-02-15 02:11 54784 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atimpc64.dll
+ 2012-02-15 02:11 . 2012-02-15 02:11 53760 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atimpc32.dll
+ 2012-02-15 02:13 . 2012-02-15 02:13 14336 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atiglpxx.dll
+ 2012-02-15 02:13 . 2012-02-15 02:13 33280 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atigktxx.dll
+ 2012-02-15 02:13 . 2012-02-15 02:13 39936 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atig6txx.dll
+ 2012-02-15 02:13 . 2012-02-15 02:13 17408 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atig6pxx.dll
+ 2012-02-15 03:10 . 2012-02-15 03:10 59392 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atiedu64.dll
+ 2012-02-15 02:34 . 2012-02-15 02:34 51200 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\aticalrt64.dll
+ 2012-02-15 02:34 . 2012-02-15 02:34 46080 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\aticalrt.dll
+ 2012-02-15 02:34 . 2012-02-15 02:34 44544 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\aticalcl64.dll
+ 2012-02-15 02:34 . 2012-02-15 02:34 44032 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\aticalcl.dll
+ 2012-02-15 02:11 . 2012-02-15 02:11 53248 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\ati2erec.dll
+ 2012-02-15 03:10 . 2012-02-15 03:10 43520 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\ati2edxx.dll
+ 2012-02-15 02:22 . 2012-02-15 02:22 70144 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\amdave64.dll
+ 2012-02-15 02:22 . 2012-02-15 02:22 71680 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\amdave32.dll
+ 2011-12-05 19:47 . 2011-12-05 19:47 95248 c:\windows\system32\DriverStore\FileRepository\atihdw76.inf_amd64_neutral_929c0592bbc732d6\AtihdW76.sys
+ 2009-07-14 00:35 . 2009-07-14 00:35 41984 c:\windows\system32\drivers\usbscan.sys
+ 2010-06-25 17:07 . 2010-06-25 17:07 35344 c:\windows\system32\drivers\npf.sys
+ 2011-04-27 14:25 . 2011-04-27 14:25 84864 c:\windows\system32\drivers\NisDrvWFP.sys
+ 2011-04-18 12:18 . 2011-04-18 12:18 40832 c:\windows\system32\drivers\MpNWMon.sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 42776 c:\windows\system32\drivers\LUsbFilt.sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 60696 c:\windows\system32\drivers\LMouFilt.Sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 66840 c:\windows\system32\drivers\LHidFilt.Sys
+ 2011-12-05 19:47 . 2011-12-05 19:47 95248 c:\windows\system32\drivers\AtihdW76.sys
- 2011-12-08 16:19 . 2012-02-21 10:23 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-12-08 16:19 . 2012-03-15 06:06 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2011-12-08 16:19 . 2012-03-15 06:06 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2011-12-08 16:19 . 2012-02-21 10:23 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2012-03-15 06:06 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-07-14 04:54 . 2012-02-21 10:23 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2011-05-19 16:23 . 2011-05-19 16:23 75776 c:\windows\Installer\3f15ac.msi
+ 2011-06-15 13:56 . 2011-06-15 13:56 32256 c:\windows\Installer\3f159f.msi
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{ED15763E-A6ED-56D2-B0B5-C7D22D4CE248}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{E6FA341F-8840-6B18-5BCE-C7CCEBDFE516}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{E1D0A4DC-97BD-CE37-3E89-87D3337E55CA}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{E0C6F271-FE15-B2D5-FF42-BCA40700DC51}\ARPPRODUCTICON.exe
- 2011-12-08 16:22 . 2011-12-08 16:22 53248 c:\windows\Installer\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}\ARPPRODUCTICON.exe
+ 2012-03-13 16:19 . 2012-03-13 16:19 53248 c:\windows\Installer\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}\ARPPRODUCTICON.exe
+ 2012-03-13 16:39 . 2012-03-13 16:39 88102 c:\windows\Installer\{DAF650C8-AFE5-3460-E1C4-B9716D2DA5D2}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{D6DDB606-CD15-98C7-AA65-6B617EE8CDA5}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{D4C4485B-16EB-31A8-C2DE-D778E8E4628B}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{CA3A3F20-566B-ABB1-A541-3D93C0D09EE5}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{C37B1C57-DD9B-D1E0-B933-8EA8D56E2222}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{C0E69600-E8D1-784D-829C-788D91D65051}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{B5AD9952-F716-9862-7ED7-734E0328CF7C}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{B3C8C8EF-77E0-1C0D-1CFA-A39E2E898311}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{9A295F81-04C8-FB18-2D1C-A33AA8A442CA}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{9526B61A-1C35-96D1-531B-C8DB1D36C336}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{92BE4E1B-AEFD-DA72-B805-948290A4BB13}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{8972B1C8-B899-0AA0-8596-BFC9AE3311F1}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{79CFDE3C-4602-85B2-ACF6-83D897B8B33A}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{6D1AFFC2-AC60-BC3B-2DC9-0D80A1E9CB16}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{685ACA56-004C-4F80-2BC0-951BF278C03F}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{5FC116F2-4508-A6FC-15FB-C64F05AB0F26}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{5AF7EA0B-F009-CC00-E446-C2286AF80471}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{586F0E27-0BC5-34DE-AA0B-96D14397910E}\ARPPRODUCTICON.exe
+ 2012-03-16 00:27 . 2012-03-16 00:27 90022 c:\windows\Installer\{5866DD36-8055-475B-A5C3-82C04091D14E}\favicon.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{54FFD5AC-7350-52B9-FB8F-1A8A6CF1FB5B}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{5236FA8C-4B70-E30E-93EF-F7D3A5E468C7}\ARPPRODUCTICON.exe
- 2012-02-19 23:08 . 2012-02-19 23:08 10134 c:\windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 10134 c:\windows\Installer\{503F672D-6C84-448A-8F8F-4BC35AC83441}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{3C9A3282-9DAE-F492-13F4-6D4D664AC15F}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{39445575-7D3A-52AA-152B-7F9423D1AE69}\ARPPRODUCTICON.exe
+ 2012-03-13 16:39 . 2012-03-13 16:39 88102 c:\windows\Installer\{353D1262-B2D2-AD87-EB5E-6B1395AF9FAE}\NewShortcut5_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-03-13 16:39 . 2012-03-13 16:39 88102 c:\windows\Installer\{353D1262-B2D2-AD87-EB5E-6B1395AF9FAE}\NewShortcut4_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-03-13 16:39 . 2012-03-13 16:39 88102 c:\windows\Installer\{353D1262-B2D2-AD87-EB5E-6B1395AF9FAE}\NewShortcut3_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-03-13 16:39 . 2012-03-13 16:39 88102 c:\windows\Installer\{353D1262-B2D2-AD87-EB5E-6B1395AF9FAE}\NewShortcut2_3B1A0823966A48909E77539C330FBF6E.exe
+ 2012-03-13 16:39 . 2012-03-13 16:39 88102 c:\windows\Installer\{353D1262-B2D2-AD87-EB5E-6B1395AF9FAE}\ARPPRODUCTICON.exe
- 2012-02-19 23:07 . 2012-02-19 23:07 10134 c:\windows\Installer\{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 10134 c:\windows\Installer\{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{283153BB-CEE6-EE9C-81E8-4350D73354BA}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{251481E4-723F-492F-F5C1-3424FB2EF44E}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{0C818871-6337-17AC-CA8C-A3942F15D92A}\ARPPRODUCTICON.exe
+ 2012-03-13 16:40 . 2012-03-13 16:40 88102 c:\windows\Installer\{030C0401-52A9-BE86-D8A7-52C0DA203275}\ARPPRODUCTICON.exe
+ 2012-03-17 00:34 . 2012-03-17 00:34 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2012-03-12 02:23 . 2012-03-12 02:23 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2012-03-17 00:34 . 2012-03-17 00:34 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2012-03-12 02:23 . 2012-03-12 02:23 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2011-12-10 02:19 . 2012-03-13 04:26 3212 c:\windows\system32\wdi\ERCQueuedResolutions.dat
+ 2011-12-10 02:19 . 2012-03-17 01:13 3212 c:\windows\system32\wdi\ERCQueuedResolutions.dat
+ 2011-12-08 16:42 . 2012-03-16 11:37 5712 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3700245695-2053058075-3791395088-1000_UserData.bin
+ 2011-09-12 22:06 . 2011-09-12 22:06 3917 c:\windows\system32\DriverStore\FileRepository\c7134393.inf_amd64_neutral_795ca19e79e4898b\B133359\atipblag.dat
+ 2012-03-17 01:13 . 2012-03-17 01:13 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2012-03-17 01:13 . 2012-03-17 01:13 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2012-03-13 11:11 . 2012-03-13 11:11 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2012-03-16 00:27 . 2012-03-16 00:27 4608 c:\windows\Installer\3f15b1.msi
+ 2012-03-13 16:40 . 2012-03-13 16:40 4846 c:\windows\Installer\{0C818871-6337-17AC-CA8C-A3942F15D92A}\NewShortcut1_2B635B8328AD44FA9F2DED7A5F1E298E.exe
+ 2012-03-13 20:07 . 2008-11-29 23:00 143360 c:\windows\twain_32\escndv\escndv.exe
+ 2012-03-13 20:07 . 2008-12-26 23:00 135168 c:\windows\twain_32\escndv\es0099\local\0C0A\esres.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 139264 c:\windows\twain_32\escndv\es0099\local\0816\esres.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 131072 c:\windows\twain_32\escndv\es0099\local\0809\esres.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 135168 c:\windows\twain_32\escndv\es0099\local\0422\esres.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 135168 c:\windows\twain_32\escndv\es0099\local\0419\esres.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 135168 c:\windows\twain_32\escndv\es0099\local\0413\esres.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 139264 c:\windows\twain_32\escndv\es0099\local\0410\esres.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 139264 c:\windows\twain_32\escndv\es0099\local\040C\esres.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 131072 c:\windows\twain_32\escndv\es0099\local\0409\esres.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 143360 c:\windows\twain_32\escndv\es0099\local\0407\esres.dll
+ 2012-03-13 20:07 . 2008-06-19 23:00 622592 c:\windows\twain_32\escndv\es0099\ffmt\pdflib.dll
+ 2012-03-13 20:07 . 2008-07-06 23:00 180224 c:\windows\twain_32\escndv\es0099\ffmt\pdffile.dll
+ 2012-03-13 20:07 . 2005-08-28 23:00 143360 c:\windows\twain_32\escndv\es0099\ffmt\esexf.dll
+ 2012-03-13 20:07 . 2008-12-17 23:00 126976 c:\windows\twain_32\escndv\es0099\ffmt\eppdf.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 143360 c:\windows\twain_32\escndv\es0099\ffmt\epjpg.dll
+ 2012-03-13 20:07 . 2008-12-16 23:00 122880 c:\windows\twain_32\escndv\es0099\esutwb.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 262144 c:\windows\twain_32\escndv\es0099\estwpmg.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 462848 c:\windows\twain_32\escndv\es0099\esscncl.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 131072 c:\windows\twain_32\escndv\es0099\esres.dll
+ 2012-03-13 20:07 . 2008-11-26 23:00 356461 c:\windows\twain_32\escndv\es0099\esmps.dll
+ 2012-03-13 20:07 . 2008-12-16 23:00 217088 c:\windows\twain_32\escndv\es0099\esimgctl.dll
+ 2012-03-13 20:07 . 2008-11-13 23:00 626688 c:\windows\twain_32\escndv\es0099\esimfl.dll
+ 2012-03-13 20:07 . 2008-02-03 23:00 188416 c:\windows\twain_32\escndv\es0099\esfit.dll
+ 2012-03-13 20:07 . 2008-10-09 23:00 454656 c:\windows\twain_32\escndv\es0099\esdtr2.dll
+ 2012-03-13 20:07 . 2007-11-27 23:00 425984 c:\windows\twain_32\escndv\es0099\esdtr.dll
+ 2012-03-13 20:07 . 2008-12-16 23:00 122880 c:\windows\twain_32\escndv\es0099\esdevif.dll
+ 2012-03-13 20:07 . 2008-12-24 23:00 192512 c:\windows\twain_32\escndv\es0099\esdevcl.dll
+ 2010-06-25 17:07 . 2010-06-25 17:07 281104 c:\windows\SysWOW64\wpcap.dll
+ 2011-11-10 03:09 . 2011-11-10 03:09 278528 c:\windows\SysWOW64\Oemdspif.dll
- 2011-12-06 03:10 . 2011-12-06 03:10 278528 c:\windows\SysWOW64\Oemdspif.dll
+ 2012-02-15 02:36 . 2012-02-15 02:36 204952 c:\windows\SysWOW64\ativvsvl.dat
+ 2012-02-15 02:36 . 2012-02-15 02:36 157144 c:\windows\SysWOW64\ativvsva.dat
+ 2011-11-10 03:09 . 2011-11-10 03:09 360448 c:\windows\SysWOW64\atipdlxx.dll
- 2011-12-06 03:10 . 2011-12-06 03:10 360448 c:\windows\SysWOW64\atipdlxx.dll
+ 2010-06-25 17:07 . 2010-06-25 17:07 369168 c:\windows\system32\wpcap.dll
- 2011-12-08 16:20 . 2011-01-13 11:58 107552 c:\windows\system32\RTNUninst64.dll
+ 2011-12-08 16:20 . 2011-11-23 22:02 107552 c:\windows\system32\RTNUninst64.dll
+ 2010-11-21 06:19 . 2012-03-16 11:40 747396 c:\windows\system32\perfh00C.dat
+ 2009-07-14 02:36 . 2012-03-16 11:40 654278 c:\windows\system32\perfh009.dat
+ 2010-11-21 06:19 . 2012-03-16 11:40 149814 c:\windows\system32\perfc00C.dat
+ 2009-07-14 02:36 . 2012-03-16 11:40 122110 c:\windows\system32\perfc009.dat
+ 2010-06-25 17:07 . 2010-06-25 17:07 106000 c:\windows\system32\Packet.dll
+ 2009-07-14 05:30 . 2012-03-14 01:08 143360 c:\windows\system32\DriverStore\infstrng.dat
- 2009-07-14 05:30 . 2012-03-13 10:48 143360 c:\windows\system32\DriverStore\infstrng.dat
+ 2009-07-14 05:30 . 2012-03-13 20:07 143360 c:\windows\system32\DriverStore\infstor.dat
- 2009-07-14 05:30 . 2012-03-13 10:48 143360 c:\windows\system32\DriverStore\infstor.dat
+ 2012-03-13 16:18 . 2011-11-23 22:02 107552 c:\windows\system32\DriverStore\FileRepository\rt64win7.inf_amd64_neutral_1aece7ab12244d52\RTNUninst64.dll
+ 2012-03-13 16:18 . 2011-11-23 22:02 648808 c:\windows\system32\DriverStore\FileRepository\rt64win7.inf_amd64_neutral_1aece7ab12244d52\Rt64win7.sys
+ 2011-09-02 06:30 . 2011-09-02 06:30 113944 c:\windows\system32\DriverStore\FileRepository\lmoups2k.inf_amd64_neutral_2339f9563493e4df\LMouKE.Sys
+ 2012-03-13 20:07 . 2008-06-19 23:00 622592 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\pdflib.dll
+ 2012-03-13 20:07 . 2008-07-06 23:00 180224 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\pdffile.dll
+ 2012-03-13 20:07 . 2008-11-16 23:00 459776 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\esxwiaud.dll
+ 2012-03-13 20:07 . 2008-12-16 23:00 122880 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\esutwb.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 262144 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\estwpmg.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 462848 c:\windows\system32\DriverStore\FileRepository\es99.inf_amd64_neutral_7a242de69f2341c0\esscncl.dll
+ 2012-03-13 20:07 . 2008-12-26 23:00 13

J'ai refais un test de débit après combofix, juste pour voir.... pour rappel mon test

avant :
Débit descendant : 2959 kbps (369.9 Ko/s) - Débit montant : 93 kbps (11.6 Ko/s) - Ping : 45 ms

et maintenant !!
Débit descendant : 12431 kbps (1553.9 Ko/s) - Débit montant : 864 kbps (108 Ko/s) - Ping : 47 ms

Ca me troue le fondement...

Salut :)

Tu peux héberger le rapport de combofix sur pjjoint.malekal.com et donner le lien ?
Car ton rapport est incomplet :(

désolé
http://pjjoint.malekal.com/files.php?id=20120317_h10z13z6l6i11

Pas de problème :)

Y'a encore du KK sur ton pc !!!

Peux-tu envoyer le fichier suivant sur Virus Total ?

c:\windows\system32\rdrmemptylst.exe      

Clique sur Reanalyse si demandé.
Poste ensuite le lien, menant au résultat de l'analyse, et colle le dans ta prochaine réponse.

Re,

Non, ça n'est pas fini !
Y'a autre chose de suspect (question que je vais te poser plus bas) et encore un truc pas beau d'actif.

===============

c:\windows\system32\Notepad2.exe

C'est toi qui a renommé ton bloc note ?