Virus détecté par AVIRA

Résolu
Bonjour,

AVIRA a détecté 2 virus sur mon PC dont TR/Sirefef.AG.35
Comment faire pour m'en défaire?

Merci
-

26 réponses

Résumé de la discussion

Une personne signale qu'AVIRA détecte deux virus sur son PC, dont TR/Sirefef.AG.35, et demande comment s'en débarrasser sous Windows XP et Firefox 13.0.1 dans ce contexte. Plusieurs éléments de la discussion proposent des liens vers des rapports à partager et des outils de désinfection, notamment des rapports Find3M ou ZHPDiag, puis des échanges sur l'utilisation de ComboFix. Des contributeurs partagent des extraits de journaux d'activité, des suppressions de fichiers et des résultats de scans, et l'un d'eux affirme avoir résolu le problème après utilisation des outils mentionnés. En cas de persistance, des analyses supplémentaires sont suggérées, notamment l'examen des rapports d'analyse et la suppression manuelle des éléments suspects, afin d'éviter des réinfections et sécuriser durablement le système.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    Salut,

    Sirefef c'est cool j'adore ^^


    /!\ ATTENTION SUIVRE A LA LETTRE CES INDICATIONS/!\

    __________________________________________________________
    >Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.<
    >>>>>>>Ne pas utiliser en dehors de ce cas de figure : dangereux!<<<<<<<<
    =====================================================


    ▶ Surtout , pense à l'enregistrement à renommer Combofix en "ton prenom.exe" avant qu'il soit enregistré sur ton disque dur

    Telecharge ici : Combofix

    _________________________________________________________
    >> referme les fenêtres de tous les programmes en cours.
    >> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix,
    >>la protection en temps réel de ton Antivirus et de tes Antispywares,
    >>qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

    °°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°


    si tu as XP => double clique
    si tu as Vista ou windows 7 => clic droit "executer en tant que...."


    sur combofix renommé

    ¤¤¤¤¤¤¤¤¤¤ LAISSE-LE INSTALLER LA CONSOLE DE RECUPERATION S'IL TE LE DEMANDE ¤¤¤¤¤¤¤¤¤¤

    ▶ !!!!!NE TOUCHE A RIEN PENDANT LE TRAVAIL DE COMBOFIX (SOURIS/CLAVIER.....)!!!!!

    ▶ n'oublie pas de reactiver la garde de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

    ▶▶ Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

    ▶▶▶ Si, après le redémarrage de votre pc par combofix, vous avez des erreurs "Clé marquée pour suppression" ou des soucis de connexion internet, redémarrez à nouveau votre ordinateur
    1. ComboFix 12-06-21.03 - Bruno 22/06/2012 19:32:33.6.1 - x86
      Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.511.277 [GMT 2:00]
      Lancé depuis: e:\mes documents\Téléchargements\Nathalie.exe
      AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
      * Un nouveau point de restauration a été créé
      .
      .
      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      c:\documents and settings\All Users\Application Data\TEMP
      c:\documents and settings\Bruno\Application Data\OfferBox
      c:\documents and settings\Bruno\Application Data\OfferBox\config.xml
      c:\documents and settings\Bruno\Application Data\PriceGong
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\1.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\a.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\b.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\c.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\d.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\e.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\f.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\g.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\h.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\i.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\J.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\k.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\l.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\m.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\mru.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\n.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\o.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\p.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\q.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\r.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\s.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\t.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\u.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\v.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\w.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\x.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\y.xml
      c:\documents and settings\Bruno\Application Data\PriceGong\Data\z.xml
      c:\documents and settings\Bruno\Local Settings\Application Data\{2d237826-e5d3-292e-8665-e2daa16a624c}
      c:\documents and settings\Bruno\Local Settings\Application Data\{2d237826-e5d3-292e-8665-e2daa16a624c}\@
      c:\documents and settings\Bruno\Local Settings\Application Data\{2d237826-e5d3-292e-8665-e2daa16a624c}\n
      c:\documents and settings\Bruno\Local Settings\Application Data\{2d237826-e5d3-292e-8665-e2daa16a624c}\U\00000001.@
      c:\documents and settings\Bruno\Local Settings\Application Data\{2d237826-e5d3-292e-8665-e2daa16a624c}\U\80000000.@
      c:\documents and settings\Bruno\Local Settings\Application Data\{2d237826-e5d3-292e-8665-e2daa16a624c}\U\800000cb.@
      c:\program files\Installation_WLMessenger2009.exe
      c:\windows\Installer\{2d237826-e5d3-292e-8665-e2daa16a624c}
      c:\windows\Installer\{2d237826-e5d3-292e-8665-e2daa16a624c}\@
      c:\windows\Installer\{2d237826-e5d3-292e-8665-e2daa16a624c}\n
      c:\windows\Installer\{2d237826-e5d3-292e-8665-e2daa16a624c}\U\00000001.@
      c:\windows\Installer\{2d237826-e5d3-292e-8665-e2daa16a624c}\U\80000000.@
      c:\windows\Installer\{2d237826-e5d3-292e-8665-e2daa16a624c}\U\800000cb.@
      c:\windows\system32\msnphoto.scr
      .
      .
      ((((((((((((((((((((((((((((( Fichiers créés du 2012-05-22 au 2012-06-22 ))))))))))))))))))))))))))))))))))))
      .
      .
      2012-06-22 17:27 . 2012-06-22 17:28 -------- d-----w- C:\CBFix15702C
      2012-06-22 17:25 . 2012-06-22 17:25 -------- d-----w- C:\Nathalie
      2012-06-13 04:51 . 2012-05-11 14:40 521728 -c----w- c:\windows\system32\dllcache\jsdbgui.dll
      2012-06-10 08:32 . 2012-06-10 08:32 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll
      2012-06-10 08:32 . 2012-06-10 08:32 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll
      2012-06-09 08:29 . 2012-06-09 08:29 -------- d-----w- c:\documents and settings\Bruno\Local Settings\Application Data\Temp
      2012-06-09 07:50 . 2012-06-09 07:50 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee Security Scan
      2012-06-09 07:49 . 2012-06-09 07:49 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee
      2012-06-09 07:49 . 2012-06-09 07:49 -------- d-----w- c:\program files\McAfee Security Scan
      .
      .
      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2012-06-13 04:51 . 2012-04-03 04:01 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
      2012-06-13 04:51 . 2011-05-17 04:02 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
      2012-06-02 13:19 . 2007-06-19 22:07 16408 ----a-w- c:\windows\system32\wuapi.dll.mui
      2012-06-02 13:19 . 2005-01-12 09:44 329240 ----a-w- c:\windows\system32\wucltui.dll
      2012-06-02 13:19 . 2005-01-12 09:44 210968 ----a-w- c:\windows\system32\wuweb.dll
      2012-06-02 13:19 . 2005-01-12 09:44 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
      2012-06-02 13:19 . 2005-05-26 02:16 45080 ----a-w- c:\windows\system32\wups2.dll
      2012-06-02 13:19 . 2005-01-14 19:18 35864 ----a-w- c:\windows\system32\wups.dll
      2012-06-02 13:19 . 2005-01-12 09:44 53784 ----a-w- c:\windows\system32\wuauclt.exe
      2012-06-02 13:19 . 2004-08-03 22:54 97304 ----a-w- c:\windows\system32\cdm.dll
      2012-06-02 13:19 . 2007-06-19 22:07 19480 ----a-w- c:\windows\system32\wuaueng.dll.mui
      2012-06-02 13:19 . 2007-06-19 22:07 16408 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
      2012-06-02 13:19 . 2005-01-14 19:18 577048 ----a-w- c:\windows\system32\wuapi.dll
      2012-06-02 13:19 . 2007-06-19 22:07 25112 ----a-w- c:\windows\system32\wucltui.dll.mui
      2012-06-02 13:19 . 2005-01-12 09:44 1933848 ----a-w- c:\windows\system32\wuaueng.dll
      2012-06-02 13:18 . 2007-06-20 19:31 18672 ----a-w- c:\windows\system32\mucltui.dll.mui
      2012-06-02 13:18 . 2007-04-01 13:32 214256 ----a-w- c:\windows\system32\muweb.dll
      2012-06-02 13:18 . 2007-04-01 13:32 275696 ----a-w- c:\windows\system32\mucltui.dll
      2012-05-31 13:22 . 2004-08-03 22:54 606208 ----a-w- c:\windows\system32\crypt32.dll
      2012-05-16 15:06 . 2004-08-03 22:54 916992 ----a-w- c:\windows\system32\wininet.dll
      2012-05-15 13:55 . 2004-08-03 22:45 1863296 ----a-w- c:\windows\system32\win32k.sys
      2012-05-11 14:40 . 2004-08-03 22:55 1469440 ------w- c:\windows\system32\inetcpl.cpl
      2012-05-11 14:40 . 2004-08-03 22:54 43520 ----a-w- c:\windows\system32\licmgr10.dll
      2012-05-11 11:38 . 2004-08-03 22:41 385024 ----a-w- c:\windows\system32\html.iec
      2012-05-05 03:15 . 2004-08-04 00:48 2071168 ------w- c:\windows\system32\ntkrnlpa.exe
      2012-05-05 03:15 . 2004-08-03 22:49 2194688 ------w- c:\windows\system32\ntoskrnl.exe
      2012-05-02 13:47 . 2005-01-12 09:42 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
      2012-04-03 04:03 . 2012-04-03 04:03 73728 ----a-w- c:\windows\system32\javacpl.cpl
      2012-04-03 04:03 . 2010-05-03 18:46 472808 ----a-w- c:\windows\system32\deployJava1.dll
      2010-01-12 16:54 . 2010-01-12 16:54 30991480 ----a-w- c:\program files\avira_antivir_personal_fr.exe
      2010-01-12 16:45 . 2010-01-12 16:45 955904 ----a-w- c:\program files\WOT-latest-fr.msi
      2010-01-12 16:41 . 2010-01-12 16:41 8144608 ----a-w- c:\program files\Firefox Setup 3.5.7.exe
      2006-02-21 18:42 . 2006-02-21 18:42 774144 -c--a-w- c:\program files\RngInterstitial.dll
      2012-06-17 07:03 . 2011-05-03 04:22 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
      .
      .
      ((((((((((((((((((((((((((((( SnapShot@2010-02-10_16.48.39 )))))))))))))))))))))))))))))))))))))))))
      .
      + 2011-04-18 20:51 . 2011-04-18 20:51 51024 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_4ddc769f\vcomp90.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 51008 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90rus.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90kor.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90jpn.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90ita.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90fra.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esp.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90esn.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 53584 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90enu.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 63312 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90deu.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90cht.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 35664 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_730c3508\mfc90chs.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
      + 2009-07-11 23:02 . 2009-07-11 23:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90u.dll
      + 2011-04-18 20:51 . 2011-04-18 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.6161_x-ww_028bc148\mfcm90.dll
      + 2009-07-11 23:05 . 2009-07-11 23:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
      + 2009-07-11 23:05 . 2009-07-11 23:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
      + 2011-05-13 18:17 . 2011-05-13 18:17 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_452bf920\vcomp.dll
      + 2011-05-13 17:45 . 2011-05-13 17:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80KOR.dll
      + 2011-05-13 17:45 . 2011-05-13 17:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80JPN.dll
      + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ITA.dll
      + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80FRA.dll
      + 2011-05-13 17:45 . 2011-05-13 17:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ESP.dll
      + 2011-05-13 17:45 . 2011-05-13 17:45 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ENU.dll
      + 2011-05-13 17:45 . 2011-05-13 17:45 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80DEU.dll
      + 2011-05-13 17:45 . 2011-05-13 17:45 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHT.dll
      + 2011-05-13 17:45 . 2011-05-13 17:45 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHS.dll
      + 2011-05-13 23:06 . 2011-05-13 23:06 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80u.dll
      + 2011-05-13 23:23 . 2011-05-13 23:23 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80.dll
      + 2011-05-13 16:37 . 2011-05-13 16:37 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll
      + 2012-06-22 16:13 . 2012-06-22 16:13 16384 c:\windows\temp\Perflib_Perfdata_58c.dat
      + 2007-04-20 20:40 . 2008-11-20 19:19 88560 c:\windows\system32\vxblock.dll
      + 2007-01-29 08:58 . 2011-11-08 13:46 46080 c:\windows\system32\tzchange.exe
      - 2007-01-29 08:58 . 2009-10-28 15:07 46080 c:\windows\system32\tzchange.exe
      + 2004-08-03 22:54 . 2010-08-27 05:58 99840 c:\windows\system32\srvsvc.dll
      + 2004-08-03 22:55 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
      + 2011-08-21 12:21 . 2010-07-05 13:17 18296 c:\windows\system32\spmsg.dll
      - 2010-01-20 22:27 . 2009-05-26 11:40 18296 c:\windows\system32\spmsg.dll
      + 2012-06-22 03:59 . 2012-06-02 13:19 45080 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.6.7600.256\wups2.dll
      + 2012-06-22 03:59 . 2012-06-02 13:19 35864 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.6.7600.256\wups.dll
      + 2007-04-20 20:40 . 2008-11-20 19:19 72176 c:\windows\system32\pxhpinst.exe
      + 2010-03-30 22:16 . 2010-03-30 22:16 99176 c:\windows\system32\PresentationHostProxy.dll
      + 2001-08-24 12:00 . 2012-06-13 17:17 92570 c:\windows\system32\perfc00C.dat
      + 2001-08-24 12:00 . 2012-06-13 17:17 77636 c:\windows\system32\perfc009.dat
      + 2004-08-03 22:55 . 2011-11-20 06:12 61952 c:\windows\system32\packager.exe
      + 2001-08-24 12:00 . 2011-09-26 09:41 22528 c:\windows\system32\oleaccrc.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 49488 c:\windows\system32\netfxperf.dll
      + 2009-11-05 20:17 . 2009-11-05 20:17 11600 c:\windows\system32\mui\0409\mscorees.dll
      + 2004-08-03 22:54 . 2012-05-11 14:40 67072 c:\windows\system32\mshtmled.dll
      - 2009-03-08 03:31 . 2009-12-21 19:06 55296 c:\windows\system32\msfeedsbs.dll
      + 2009-03-08 03:31 . 2012-05-11 14:40 55296 c:\windows\system32\msfeedsbs.dll
      - 2004-08-03 22:54 . 2008-04-14 02:33 23040 c:\windows\system32\mciseq.dll
      + 2004-08-03 22:54 . 2011-10-14 14:47 23040 c:\windows\system32\mciseq.dll
      - 2004-08-03 22:54 . 2009-12-21 19:06 25600 c:\windows\system32\jsproxy.dll
      + 2004-08-03 22:54 . 2012-05-11 14:40 25600 c:\windows\system32\jsproxy.dll
      + 2005-01-12 09:44 . 2010-11-18 18:12 86016 c:\windows\system32\isign32.dll
      - 2005-01-12 09:44 . 2008-04-14 02:33 86016 c:\windows\system32\isign32.dll
      - 2004-08-03 22:54 . 2008-04-14 02:33 80384 c:\windows\system32\iccvid.dll
      + 2004-08-03 22:54 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
      + 2010-01-12 16:56 . 2010-06-17 14:28 28520 c:\windows\system32\drivers\ssmdrv.sys
      - 2010-01-12 16:56 . 2009-05-11 08:11 28520 c:\windows\system32\drivers\ssmdrv.sys
      + 2008-04-16 12:51 . 2008-04-16 12:51 22784 c:\windows\system32\drivers\RimUsb.sys
      + 2008-11-20 19:19 . 2008-11-20 19:19 43872 c:\windows\system32\drivers\PxHelp20.sys
      + 2001-08-24 12:00 . 2010-11-02 15:17 40960 c:\windows\system32\drivers\ndproxy.sys
      + 2001-08-24 12:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys
      + 2010-07-28 22:25 . 2010-07-28 22:25 25112 c:\windows\system32\drivers\ivusb.sys
      - 2010-01-12 16:56 . 2009-02-13 10:28 22360 c:\windows\system32\drivers\avgntmgr.sys
      + 2010-01-12 16:56 . 2010-06-17 14:28 22360 c:\windows\system32\drivers\avgntmgr.sys
      + 2010-01-12 16:56 . 2011-10-05 06:16 66616 c:\windows\system32\drivers\avgntflt.sys
      + 2004-08-03 22:54 . 2009-04-20 17:18 45568 c:\windows\system32\dnsrslvr.dll
      - 2004-08-03 22:54 . 2008-04-14 02:33 45568 c:\windows\system32\dnsrslvr.dll
      + 2010-01-11 21:04 . 2012-05-11 14:40 12800 c:\windows\system32\dllcache\xpshims.dll
      - 2010-01-11 21:04 . 2009-12-21 19:07 12800 c:\windows\system32\dllcache\xpshims.dll
      + 2005-01-14 19:18 . 2012-06-02 13:19 35864 c:\windows\system32\dllcache\wups.dll
      + 2005-01-12 09:44 . 2012-06-02 13:19 53784 c:\windows\system32\dllcache\wuauclt.exe
      + 2010-12-15 05:58 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
      + 2010-08-27 05:58 . 2010-08-27 05:58 99840 c:\windows\system32\dllcache\srvsvc.dll
      + 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
      + 2011-11-20 06:12 . 2011-11-20 06:12 61952 c:\windows\system32\dllcache\packager.exe
      + 2001-08-24 12:00 . 2011-09-26 09:41 22528 c:\windows\system32\dllcache\oleaccrc.dll
      + 2010-12-15 05:59 . 2010-11-02 15:17 40960 c:\windows\system32\dllcache\ndproxy.sys
      + 2011-08-12 14:14 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys
      + 2004-08-03 22:54 . 2012-05-11 14:40 67072 c:\windows\system32\dllcache\mshtmled.dll
      + 2010-01-11 21:04 . 2012-05-11 14:40 55296 c:\windows\system32\dllcache\msfeedsbs.dll
      - 2010-01-11 21:04 . 2009-12-21 19:06 55296 c:\windows\system32\dllcache\msfeedsbs.dll
      + 2011-10-14 14:47 . 2011-10-14 14:47 23040 c:\windows\system32\dllcache\mciseq.dll
      + 2004-08-03 22:54 . 2012-05-11 14:40 43520 c:\windows\system32\dllcache\licmgr10.dll
      + 2004-08-03 22:54 . 2012-05-11 14:40 25600 c:\windows\system32\dllcache\jsproxy.dll
      - 2004-08-03 22:54 . 2009-12-21 19:06 25600 c:\windows\system32\dllcache\jsproxy.dll
      + 2010-11-18 18:12 . 2010-11-18 18:12 86016 c:\windows\system32\dllcache\isign32.dll
      + 2009-04-20 17:18 . 2009-04-20 17:18 45568 c:\windows\system32\dllcache\dnsrslvr.dll
      - 2009-12-14 07:09 . 2009-12-14 07:09 33280 c:\windows\system32\dllcache\csrsrv.dll
      + 2009-12-14 07:09 . 2011-10-28 05:31 33280 c:\windows\system32\dllcache\csrsrv.dll
      + 2009-12-22 18:39 . 2009-12-22 18:39 62592 c:\windows\system32\dllcache\cdrom.sys
      + 2004-08-03 22:54 . 2012-06-02 13:19 97304 c:\windows\system32\dllcache\cdm.dll
      + 2010-01-13 14:01 . 2010-01-13 14:01 87040 c:\windows\system32\dllcache\cabview.dll
      + 2010-03-05 14:38 . 2010-03-05 14:38 65536 c:\windows\system32\dllcache\asycfilt.dll
      - 2004-08-03 22:54 . 2009-12-14 07:09 33280 c:\windows\system32\csrsrv.dll
      + 2004-08-03 22:54 . 2011-10-28 05:31 33280 c:\windows\system32\csrsrv.dll
      + 2004-08-03 22:54 . 2010-01-13 14:01 87040 c:\windows\system32\cabview.dll
      + 2004-08-03 22:54 . 2010-03-05 14:38 65536 c:\windows\system32\asycfilt.dll
      + 2010-04-07 21:48 . 2010-04-07 21:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
      - 2008-07-29 18:16 . 2008-07-29 18:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
      + 2011-12-25 02:49 . 2011-12-25 02:49 31504 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
      + 2011-12-25 10:07 . 2011-12-25 10:07 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
      - 2008-05-27 23:49 . 2008-05-27 23:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
      + 2011-12-24 21:55 . 2011-12-24 21:55 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
      + 2011-12-24 21:55 . 2011-12-24 21:55 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
      - 2008-05-27 23:49 . 2008-05-27 23:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
      + 2011-12-24 21:55 . 2011-12-24 21:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
      - 2008-05-27 23:49 . 2008-05-27 23:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
      + 2011-12-24 22:49 . 2011-12-24 22:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
      - 2008-05-28 00:30 . 2008-05-28 00:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
      - 2003-02-20 18:19 . 2003-02-20 18:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
      + 2011-12-24 22:49 . 2011-12-24 22:49 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
      + 2009-11-06 23:07 . 2009-11-06 23:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
      + 2010-06-04 06:10 . 2012-05-09 07:14 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
      + 2011-06-06 10:55 . 2011-06-06 10:55 17304 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B744AA0100000010\10.1.0\ViewerPS.dll
      + 2011-06-06 10:55 . 2011-06-06 10:55 35736 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B744AA0100000010\10.1.0\reader_sl.exe
      + 2011-06-06 10:55 . 2011-06-06 10:55 88992 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B744AA0100000010\10.1.0\PDFPrevHndlr.dll
      + 2011-06-06 10:55 . 2011-06-06 10:55 94608 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B744AA0100000010\10.1.0\eula.exe
      + 2011-06-06 10:55 . 2011-06-06 10:55 49064 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B744AA0100000010\10.1.0\acrotextextractor.exe
      + 2011-06-06 10:55 . 2011-06-06 10:55 17824 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B744AA0100000010\10.1.0\AcroRd32Info.exe
      + 2011-06-06 10:55 . 2011-06-06 10:55 63912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B744AA0100000010\10.1.0\acroiehelpershim.dll
      + 2011-06-06 10:55 . 2011-06-06 10:55 64928 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B744AA0100000010\10.1.0\AcroIEHelper.dll
      + 2011-06-06 10:55 . 2011-06-06 10:55 63384 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA76301B744AA0100000010\10.1.0\Acrofx32.dll
      + 2010-06-11 05:45 . 2010-02-25 06:17 12800 c:\windows\ie8updates\KB982381-IE8\xpshims.dll
      + 2010-06-11 05:45 . 2010-02-25 06:17 55296 c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll
      + 2010-06-11 05:45 . 2010-02-25 06:17 25600 c:\windows\ie8updates\KB982381-IE8\jsproxy.dll
      + 2010-03-30 21:55 . 2009-12-21 19:07 12800 c:\windows\ie8updates\KB980182-IE8\xpshims.dll
      + 2010-03-30 21:55 . 2009-12-21 19:06 55296 c:\windows\ie8updates\KB980182-IE8\msfeedsbs.dll
      + 2010-03-30 21:55 . 2009-12-21 19:06 25600 c:\windows\ie8updates\KB980182-IE8\jsproxy.dll
      + 2012-06-13 17:09 . 2012-03-01 11:00 12800 c:\windows\ie8updates\KB2699988-IE8\xpshims.dll
      + 2012-06-13 17:09 . 2012-03-01 11:00 66560 c:\windows\ie8updates\KB2699988-IE8\mshtmled.dll
      + 2012-06-13 17:09 . 2012-03-01 11:00 55296 c:\windows\ie8updates\KB2699988-IE8\msfeedsbs.dll
      + 2012-06-13 17:09 . 2012-03-01 11:00 43520 c:\windows\ie8updates\KB2699988-IE8\licmgr10.dll
      + 2012-06-13 17:09 . 2012-03-01 11:00 25600 c:\windows\ie8updates\KB2699988-IE8\jsproxy.dll
      + 2012-04-11 12:10 . 2011-12-17 19:43 12800 c:\windows\ie8updates\KB2675157-IE8\xpshims.dll
      + 2012-04-11 12:10 . 2011-12-17 19:43 66560 c:\windows\ie8updates\KB2675157-IE8\mshtmled.dll
      + 2012-04-11 12:10 . 2011-12-17 19:43 55296 c:\windows\ie8updates\KB2675157-IE8\msfeedsbs.dll
      + 2012-04-11 12:10 . 2011-12-17 19:43 43520 c:\windows\ie8updates\KB2675157-IE8\licmgr10.dll
      + 2012-04-11 12:10 . 2011-12-17 19:43 25600 c:\windows\ie8updates\KB2675157-IE8\jsproxy.dll
      + 2012-02-15 12:57 . 2011-11-04 19:13 12800 c:\windows\ie8updates\KB2647516-IE8\xpshims.dll
      + 2012-02-15 12:57 . 2011-11-04 19:13 66560 c:\windows\ie8updates\KB2647516-IE8\mshtmled.dll
      + 2012-02-15 12:57 . 2011-11-04 19:13 55296 c:\windows\ie8updates\KB2647516-IE8\msfeedsbs.dll
      + 2012-02-15 12:57 . 2011-11-04 19:13 43520 c:\windows\ie8updates\KB2647516-IE8\licmgr10.dll
      + 2012-02-15 12:57 . 2011-11-04 19:13 25600 c:\windows\ie8updates\KB2647516-IE8\jsproxy.dll
      + 2011-12-15 07:03 . 2011-08-22 23:41 12800 c:\windows\ie8updates\KB2618444-IE8\xpshims.dll
      + 2011-12-15 07:03 . 2011-08-22 23:41 66560 c:\windows\ie8updates\KB2618444-IE8\mshtmled.dll
      + 2011-12-15 07:03 . 2011-08-22 23:41 55296 c:\windows\ie8updates\KB2618444-IE8\msfeedsbs.dll
      + 2011-12-15 07:03 . 2011-08-22 23:41 43520 c:\windows\ie8updates\KB2618444-IE8\licmgr10.dll
      + 2011-12-15 07:03 . 2011-08-22 23:41 25600 c:\windows\ie8updates\KB2618444-IE8\jsproxy.dll
      + 2011-10-12 21:53 . 2011-06-23 18:31 12800 c:\windows\ie8updates\KB2586448-IE8\xpshims.dll
      + 2011-10-12 21:53 . 2011-06-23 18:31 66560 c:\windows\ie8updates\KB2586448-IE8\mshtmled.dll
      + 2011-10-12 21:53 . 2011-06-23 18:31 55296 c:\windows\ie8updates\KB2586448-IE8\msfeedsbs.dll
      + 2011-10-12 21:53 . 2011-06-23 18:31 43520 c:\windows\ie8updates\KB2586448-IE8\licmgr10.dll
      + 2011-10-12 21:53 . 2011-06-23 18:31 25600 c:\windows\ie8updates\KB2586448-IE8\jsproxy.dll
      + 2011-08-12 21:28 . 2011-04-25 16:06 12800 c:\windows\ie8updates\KB2559049-IE8\xpshims.dll
      + 2011-08-12 21:28 . 2011-04-25 16:06 66560 c:\windows\ie8updates\KB2559049-IE8\mshtmled.dll
      + 2011-08-12 21:28 . 2011-04-25 16:06 55296 c:\windows\ie8updates\KB2559049-IE8\msfeedsbs.dll
      + 2011-08-12 21:28 . 2011-04-25 16:06 43520 c:\windows\ie8updates\KB2559049-IE8\licmgr10.dll
      + 2011-08-12 21:28 . 2011-04-25 16:06 25600 c:\windows\ie8updates\KB2559049-IE8\jsproxy.dll
      + 2011-06-17 11:29 . 2011-02-22 23:05 12800 c:\windows\ie8updates\KB2530548-IE8\xpshims.dll
      + 2011-06-17 11:29 . 2011-02-22 23:05 66560 c:\windows\ie8updates\KB2530548-IE8\mshtmled.dll
      + 2011-06-17 11:29 . 2011-02-22 23:05 55296 c:\windows\ie8updates\KB2530548-IE8\msfeedsbs.dll
      + 2011-06-17 11:29 . 2011-02-22 23:05 43520 c:\windows\ie8updates\KB2530548-IE8\licmgr10.dll
      + 2011-06-17 11:29 . 2011-02-22 23:05 25600 c:\windows\ie8updates\KB2530548-IE8\jsproxy.dll
      + 2011-04-15 20:09 . 2010-12-20 23:53 12800 c:\windows\ie8updates\KB2497640-IE8\xpshims.dll
      + 2011-04-15 20:09 . 2010-12-20 23:53 66560 c:\windows\ie8updates\KB2497640-IE8\mshtmled.dll
      + 2011-04-15 20:09 . 2010-12-20 23:53 55296 c:\windows\ie8updates\KB2497640-IE8\msfeedsbs.dll
      + 2011-04-15 20:09 . 2010-12-20 23:53 43520 c:\windows\ie8updates\KB2497640-IE8\licmgr10.dll
      + 2011-04-15 20:09 . 2010-12-20 23:53 25600 c:\windows\ie8updates\KB2497640-IE8\jsproxy.dll
      + 2011-02-09 06:05 . 2010-11-06 00:21 12800 c:\windows\ie8updates\KB2482017-IE8\xpshims.dll
      + 2011-02-09 06:05 . 2010-11-06 00:21 66560 c:\windows\ie8updates\KB2482017-IE8\mshtmled.dll
      + 2011-02-09 06:05 . 2010-11-06 00:21 55296 c:\windows\ie8updates\KB2482017-IE8\msfeedsbs.dll
      + 2011-02-09 06:05 . 2010-11-06 00:21 43520 c:\windows\ie8updates\KB2482017-IE8\licmgr10.dll
      + 2011-02-09 06:05 . 2010-11-06 00:21 25600 c:\windows\ie8updates\KB2482017-IE8\jsproxy.dll
      + 2010-12-15 09:09 . 2010-09-10 05:50 12800 c:\windows\ie8updates\KB2416400-IE8\xpshims.dll
      + 2010-12-15 09:09 . 2010-09-10 05:50 66560 c:\windows\ie8updates\KB2416400-IE8\mshtmled.dll
      + 2010-12-15 09:09 . 2010-09-10 05:50 55296 c:\windows\ie8updates\KB2416400-IE8\msfeedsbs.dll
      + 2010-12-15 09:09 . 2010-09-10 05:50 43520 c:\windows\ie8updates\KB2416400-IE8\licmgr10.dll
      + 2010-12-15 09:09 . 2010-09-10 05:50 25600 c:\windows\ie8updates\KB2416400-IE8\jsproxy.dll
      + 2010-10-14 06:04 . 2010-06-24 12:25 12800 c:\windows\ie8updates\KB2360131-IE8\xpshims.dll
      + 2010-10-14 06:04 . 2009-03-08 03:31 66560 c:\windows\ie8updates\KB2360131-IE8\mshtmled.dll
      + 2010-10-14 06:04 . 2010-06-24 12:25 55296 c:\windows\ie8updates\KB2360131-IE8\msfeedsbs.dll
      + 2010-10-14 06:04 . 2009-03-08 03:34 43008 c:\windows\ie8updates\KB2360131-IE8\licmgr10.dll
      + 2010-10-14 06:04 . 2010-06-24 12:25 25600 c:\windows\ie8updates\KB2360131-IE8\jsproxy.dll
      + 2010-08-12 04:28 . 2010-05-06 10:33 12800 c:\windows\ie8updates\KB2183461-IE8\xpshims.dll
      + 2010-08-12 04:28 . 2010-05-06 10:33 55296 c:\windows\ie8updates\KB2183461-IE8\msfeedsbs.dll
      + 2010-08-12 04:28 . 2010-05-06 10:33 25600 c:\windows\ie8updates\KB2183461-IE8\jsproxy.dll
      + 2012-04-11 12:09 . 2012-04-11 12:09 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_b9ec38ce\System.Drawing.Design.dll
      + 2012-06-13 17:07 . 2012-06-13 17:07 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_666cc865\System.Drawing.Design.dll
      + 2012-01-11 08:22 . 2012-01-11 08:22 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_04f70719\System.Drawing.Design.dll
      + 2012-01-11 08:22 . 2012-01-11 08:22 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_b105b0df\CustomMarshalers.dll
      + 2012-06-13 17:35 . 2012-06-13 17:35 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\350daddf00905b6fd86b60c9457a5517\WindowsLiveWriter.ni.exe
      + 2012-06-13 17:36 . 2012-06-13 17:36 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\151a346e9bffdd4099fb1876b2926db0\WindowsLive.Writer.Api.ni.dll
      + 2012-05-09 09:53 . 2012-05-09 09:53 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\f121ccced1aa14badb316d8d9be5154d\UIAutomationProvider.ni.dll
      + 2012-05-09 10:03 . 2012-05-09 10:03 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\316e223f2ab8c69cd6a5a06de21650ec\System.Windows.Presentation.ni.dll
      + 2012-06-13 17:37 . 2012-06-13 17:37 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3b34fc2c8c94ffe21f75168980b69dfe\System.Web.DynamicData.Design.ni.dll
      + 2012-05-09 09:59 . 2012-05-09 09:59 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\34c988dea48c291b4e648941207e83fb\System.ComponentModel.DataAnnotations.ni.dll
      + 2012-05-09 09:59 . 2012-05-09 09:59 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\7bb7e51275fa19f8b4894c772bdb1e10\System.AddIn.Contract.ni.dll
      + 2012-05-09 07:24 . 2012-05-09 07:24 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\f0c4a4528f130ef2ff1ae63dd7b39075\PresentationFontCache.ni.exe
      + 2012-05-09 07:23 . 2012-05-09 07:23 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\53931181e5a5e194da82605613cda6af\PresentationCFFRasterizer.ni.dll
      + 2012-05-09 10:01 . 2012-05-09 10:01 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f2be3ad4cda6853d7959a84cec0414c5\Microsoft.Vsa.ni.dll
      + 2012-05-09 09:58 . 2012-05-09 09:58 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\f00a18225430e7531135589688d650a1\Microsoft.VisualC.ni.dll
      + 2012-05-09 09:58 . 2012-05-09 09:58 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\8fab9cd28bbc860a34feec119512664d\Microsoft.Build.Framework.ni.dll
      + 2012-05-09 09:58 . 2012-05-09 09:58 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\0eac132c7c36f1c100ae23c956b379e7\Microsoft.Build.Framework.ni.dll
      + 2012-05-09 09:58 . 2012-05-09 09:58 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\d66bc03eb7eae89b4dde2d09eda1414f\dfsvc.ni.exe
      + 2012-05-09 09:57 . 2012-05-09 09:57 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\016444dfc5f7e3d11c776f2fbc7a4594\Accessibility.ni.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
      + 2012-06-13 17:16 . 2012-06-13 17:16 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
      + 2010-06-11 05:40 . 2010-06-11 05:40 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
      - 2009-12-31 06:15 . 2009-12-31 06:15 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
      + 2012-06-13 17:16 . 2012-06-13 17:16 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
      + 2012-06-13 17:17 . 2012-06-13 17:17 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
      + 2012-06-13 17:16 . 2012-06-13 17:16 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
      + 2012-06-13 17:17 . 2012-06-13 17:17 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
      + 2012-06-13 17:16 . 2012-06-13 17:16 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
      + 2012-06-13 17:17 . 2012-06-13 17:17 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
      + 2012-06-13 17:17 . 2012-06-13 17:17 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
      + 2012-06-13 17:16 . 2012-06-13 17:16 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
      + 2012-06-13 17:16 . 2012-06-13 17:16 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
      + 2012-06-13 17:16 . 2012-06-13 17:16 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
      + 2012-06-13 17:16 . 2012-06-13 17:16 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
      + 2012-06-13 17:16 . 2012-06-13 17:16 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
      - 2009-12-31 18:09 . 2009-12-31 18:09 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
      + 2012-01-11 08:22 . 2012-01-11 08:22 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
      + 2010-08-12 04:25 . 2008-04-14 02:33 80384 c:\windows\$NtUninstallKB982665$\iccvid.dll
      + 2010-05-26 21:04 . 2010-01-23 08:11 46080 c:\windows\$NtUninstallKB981793$\tzchange.exe
      + 2010-05-26 21:04 . 2010-04-22 22:23 16896 c:\windows\$NtUninstallKB981793$\spuninst\tzchange.dll
      + 2010-06-11 05:42 . 2008-04-14 02:33 65024 c:\windows\$NtUninstallKB979482$\asycfilt.dll
      + 2010-04-14 12:32 . 2008-04-14 02:33 85504 c:\windows\$NtUninstallKB979309$\cabview.dll
      + 2010-02-24 12:17 . 2009-10-28 15:07 46080 c:\windows\$NtUninstallKB979306$\tzchange.exe
      + 2010-02-24 12:17 . 2010-01-23 10:42 16896 c:\windows\$NtUninstallKB979306$\spuninst\tzchange.dll
      + 2011-12-15 07:00 . 2011-07-08 13:49 46080 c:\windows\$NtUninstallKB2633952$\tzchange.exe
      + 2011-12-15 07:00 . 2011-11-08 14:58 16896 c:\windows\$NtUninstallKB2633952$\spuninst\tzchange.dll
      + 2011-12-15 07:00 . 2011-04-26 11:07 33280 c:\windows\$NtUninstallKB2620712$\csrsrv.dll
      + 2012-01-11 08:23 . 2008-04-14 02:33 23040 c:\windows\$NtUninstallKB2598479$\mciseq.dll
      + 2012-01-11 08:17 . 2008-04-14 02:34 59904 c:\windows\$NtUninstallKB2584146$\packager.exe
      + 2011-08-25 06:22 . 2010-11-03 13:12 46080 c:\windows\$NtUninstallKB2570791$\tzchange.exe
      + 2011-08-25 06:22 . 2011-07-09 00:31 16896 c:\windows\$NtUninstallKB2570791$\spuninst\tzchange.dll
      + 2011-08-12 21:28 . 2008-04-13 18:57 10112 c:\windows\$NtUninstallKB2566454$\ndistapi.sys
      + 2011-10-12 22:00 . 2001-08-24 12:00 18944 c:\windows\$NtUninstallKB2564958$\oleaccrc.dll
      + 2011-04-15 20:02 . 2008-04-14 02:33 45568 c:\windows\$NtUninstallKB2509553$\dnsrslvr.dll
      + 2011-07-13 20:47 . 2010-12-09 14:30 33280 c:\windows\$NtUninstallKB2507938$\csrsrv.dll
      + 2011-02-09 06:04 . 2009-12-14 07:09 33280 c:\windows\$NtUninstallKB2476687$\csrsrv.dll
      + 2010-12-15 09:08 . 2010-06-21 14:46 46080 c:\windows\$NtUninstallKB2443685$\tzchange.exe
      + 2010-12-15 09:08 . 2010-11-05 05:57 16896 c:\windows\$NtUninstallKB2443685$\spuninst\tzchange.dll
      + 2010-12-15 09:09 . 2008-04-14 02:33 86016 c:\windows\$NtUninstallKB2443105$\isign32.dll
      + 2010-12-15 09:09 . 2008-04-13 18:57 40576 c:\windows\$NtUninstallKB2440591$\ndproxy.sys
      + 2010-12-15 09:06 . 2008-04-14 02:34 46080 c:\windows\$NtUninstallKB2423089$\wab.exe
      + 2010-09-15 13:54 . 2008-04-14 02:34 57856 c:\windows\$NtUninstallKB2347290$\spoolsv.exe
      + 2010-10-14 06:05 . 2008-04-14 02:33 96768 c:\windows\$NtUninstallKB2345886$\srvsvc.dll
      + 2010-09-29 08:32 . 2010-04-21 13:28 46080 c:\windows\$NtUninstallKB2158563$\tzchange.exe
      + 2010-09-29 08:32 . 2010-06-23 00:54 16896 c:\windows\$NtUninstallKB2158563$\spuninst\tzchange.dll
      + 2010-09-15 13:54 . 2010-02-22 14:25 26488 c:\windows\$hf_mig$\KB982802\update\spcustom.dll
      + 2010-09-15 13:54 . 2010-02-22 14:25 18296 c:\windows\$hf_mig$\KB982802\spmsg.dll
      + 2010-08-12 04:25 . 2010-02-22 14:25 26488 c:\windows\$hf_mig$\KB982665\update\spcustom.dll
      + 2010-08-12 04:25 . 2010-02-22 14:25 18296 c:\windows\$hf_mig$\KB982665\spmsg.dll
      + 2010-06-17 14:02 . 2010-06-17 14:02 80384 c:\windows\$hf_mig$\KB982665\SP3QFE\iccvid.dll
      + 2010-06-11 05:45 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB982381-IE8\update\spcustom.dll
      + 2010-06-11 05:45 . 2008-07-08 13:03 18296 c:\windows\$hf_mig$\KB982381-IE8\spmsg.dll
      + 2010-06-11 04:27 . 2010-05-06 10:27 12800 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\xpshims.dll
      + 2010-06-11 04:27 . 2010-05-06 10:27 55296 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\msfeedsbs.dll
      + 2010-06-11 04:27 . 2010-05-06 10:27 25600 c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\jsproxy.dll
      + 2010-08-12 04:33 . 2010-02-22 14:25 26488 c:\windows\$hf_mig$\KB982214\update\spcustom.dll
      + 2010-08-12 04:33 . 2010-02-22 14:25 18296 c:\windows\$hf_mig$\KB982214\spmsg.dll
      + 2010-10-14 06:05 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB982132\update\spcustom.dll
      + 2010-10-14 06:05 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB982132\spmsg.dll
      + 2010-08-12 04:25 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981997\update\spcustom.dll
      + 2010-08-12 04:25 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB981997\spmsg.dll
      + 2010-10-14 06:02 . 2010-02-22 14:25 26488 c:\windows\$hf_mig$\KB981957\update\spcustom.dll
      + 2010-10-14 06:02 . 2010-02-22 14:25 18296 c:\windows\$hf_mig$\KB981957\spmsg.dll
      + 2010-08-12 04:33 . 2010-02-22 14:25 26488 c:\windows\$hf_mig$\KB981852\update\spcustom.dll
      + 2010-08-12 04:23 . 2010-06-17 13:45 16896 c:\windows\$hf_mig$\KB981852\update\mpsyschk.dll
      + 2010-08-12 04:33 . 2010-02-22 14:25 18296 c:\windows\$hf_mig$\KB981852\spmsg.dll
      + 2010-04-14 12:32 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981332-IE8\update\spcustom.dll
      + 2010-04-14 12:32 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB981332-IE8\spmsg.dll
      + 2010-09-15 13:53 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll
      + 2010-09-15 13:53 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB981322\spmsg.dll
      + 2010-08-12 04:28 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980436\update\spcustom.dll
      + 2010-08-12 04:28 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB980436\spmsg.dll
      + 2010-04-14 12:35 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB980232\update\spcustom.dll
      + 2010-04-14 12:35 . 2009-05-26 09:01 18296 c:\windows\$hf_mig$\KB980232\spmsg.dll
      + 2010-06-11 05:48 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980218\update\spcustom.dll
      + 2010-06-11 05:48 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB980218\spmsg.dll
      + 2010-06-11 05:47 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB980195\update\spcustom.dll
      + 2010-06-11 05:47 . 2008-07-08 13:03 18296 c:\windows\$hf_mig$\KB980195\spmsg.dll
      + 2010-03-30 21:55 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980182-IE8\update\spcustom.dll
      + 2010-03-30 21:55 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB980182-IE8\spmsg.dll
      + 2010-03-30 18:11 . 2010-02-25 06:11 12800 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\xpshims.dll
      + 2010-03-30 18:11 . 2010-02-25 06:11 55296 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\msfeedsbs.dll
      + 2010-03-30 18:11 . 2010-02-25 06:11 25600 c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\jsproxy.dll
      + 2010-10-14 06:05 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB979687\update\spcustom.dll
      + 2010-10-14 06:05 . 2009-05-26 09:01 18296 c:\windows\$hf_mig$\KB979687\spmsg.dll
      + 2010-04-14 12:35 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979683\update\spcustom.dll
      + 2010-04-14 08:46 . 2010-03-05 14:54 16896 c:\windows\$hf_mig$\KB979683\update\mpsyschk.dll
      + 2010-04-14 12:35 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB979683\spmsg.dll
      + 2010-06-11 05:45 . 2009-05-26 09:01 26488 c:\windows\$hf_mig$\KB979559\update\spcustom.dll
      + 2010-06-11 05:45 . 2009-05-26 09:01 18296 c:\windows\$hf_mig$\KB979559\spmsg.dll
      + 2010-06-11 05:42 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979482\update\spcustom.dll
      + 2010-06-11 05:42 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB979482\spmsg.dll
      + 2010-03-05 14:53 . 2010-03-05 14:53 65536 c:\windows\$hf_mig$\KB979482\SP3QFE\asycfilt.dll
      + 2010-04-14 12:32 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB979309\update\spcustom.dll
      + 2010-04-14 12:32 . 2008-07-08 13:03 18296 c:\windows\$hf_mig$\KB979309\spmsg.dll
      + 2010-01-13 13:48 . 2010-01-13 13:48 87040 c:\windows\$hf_mig$\KB979309\SP3QFE\cabview.dll
      + 2010-04-14 12:32 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB978601\update\spcustom.dll
      + 2010-04-14 12:32 . 2008-07-08 13:03 18296 c:\windows\$hf_mig$\KB978601\spmsg.dll
      + 2010-05-12 13:33 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978542\update\spcustom.dll
      + 2010-05-12 13:33 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB978542\spmsg.dll
      + 2010-04-14 12:33 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978338\update\spcustom.dll
      + 2010-04-14 12:33 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB978338\spmsg.dll
      + 2010-04-14 12:32 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977816\update\spcustom.dll
      + 2010-04-14 12:32 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB977816\spmsg.dll
      + 2010-02-24 12:18 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB976662-IE8\update\spcustom.dll
      + 2010-02-24 12:18 . 2008-07-08 13:03 18296 c:\windows\$hf_mig$\KB976662-IE8\spmsg.dll
      + 2010-06-11 05:42 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB975562\update\spcustom.dll
      + 2010-06-11 05:42 . 2008-07-08 13:03 18296 c:\windows\$hf_mig$\KB975562\spmsg.dll
      + 2010-03-10 12:58 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB975561\update\spcustom.dll
      + 2010-03-10 12:58 . 2008-07-08 13:03 18296 c:\windows\$hf_mig$\KB975561\spmsg.dll
      + 2011-03-16 13:44 . 2008-07-08 13:03 26488 c:\windows\$hf_mig$\KB971029\update\spcustom.dll
      + 2011-03-16 13:44 . 2008-07-08 13:03 18296 c:\windows\$hf_mig$\KB971029\spmsg.dll
      + 2012-05-09 07:17 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2695962\update\spcustom.dll
      + 2012-05-09 07:17 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2695962\spmsg.dll
      + 2012-05-09 07:17 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2686509\update\spcustom.dll
      + 2012-05-09 07:17 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2686509\spmsg.dll
      + 2012-05-09 07:15 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2676562\update\spcustom.dll
      + 2012-05-09 04:54 . 2012-04-11 13:53 16896 c:\windows\$hf_mig$\KB2676562\update\mpsyschk.dll
      + 2012-05-09 07:15 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2676562\spmsg.dll
      + 2012-04-11 12:10 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2675157-IE8\update\spcustom.dll
      + 2012-04-11 12:10 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2675157-IE8\spmsg.dll
      + 2012-04-11 04:50 . 2012-03-01 10:58 12800 c:\windows\$hf_mig$\KB2675157-IE8\SP3QFE\xpshims.dll
      + 2012-04-11 04:50 . 2012-03-01 10:58 66560 c:\windows\$hf_mig$\KB2675157-IE8\SP3QFE\mshtmled.dll
      + 2012-04-11 04:50 . 2012-03-01 10:58 55296 c:\windows\$hf_mig$\KB2675157-IE8\SP3QFE\msfeedsbs.dll
      + 2012-04-11 04:50 . 2012-03-01 10:58 43520 c:\windows\$hf_mig$\KB2675157-IE8\SP3QFE\licmgr10.dll
      + 2012-04-11 04:50 . 2012-03-01 10:58 25600 c:\windows\$hf_mig$\KB2675157-IE8\SP3QFE\jsproxy.dll
      + 2012-02-15 12:57 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2661637\update\spcustom.dll
      + 2012-02-15 12:57 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2661637\spmsg.dll
      + 2012-02-15 12:57 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2660465\update\spcustom.dll
      + 2012-02-15 12:57 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2660465\spmsg.dll
      + 2012-04-11 12:01 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2653956\update\spcustom.dll
      + 2012-04-11 12:01 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2653956\spmsg.dll
      + 2012-03-14 14:00 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2647518\update\spcustom.dll
      + 2012-03-14 14:00 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2647518\spmsg.dll
      + 2012-02-15 12:57 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2647516-IE8\update\spcustom.dll
      + 2012-02-15 12:57 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2647516-IE8\spmsg.dll
      + 2012-02-15 05:13 . 2011-12-17 19:42 12800 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\xpshims.dll
      + 2012-02-15 05:13 . 2011-12-17 19:42 66560 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\mshtmled.dll
      + 2012-02-15 05:12 . 2011-12-17 19:42 55296 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\msfeedsbs.dll
      + 2012-02-15 05:12 . 2011-12-17 19:42 43520 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\licmgr10.dll
      + 2012-02-15 05:13 . 2011-12-17 19:42 25600 c:\windows\$hf_mig$\KB2647516-IE8\SP3QFE\jsproxy.dll
      + 2012-01-11 08:27 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2646524\update\spcustom.dll
      + 2012-01-11 08:27 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2646524\spmsg.dll
      + 2011-11-12 00:25 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2641690\update\spcustom.dll
      + 2011-11-12 00:25 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2641690\spmsg.dll
      + 2012-03-14 14:04 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2641653\update\spcustom.dll
      + 2012-03-14 14:04 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2641653\spmsg.dll
      + 2011-12-15 07:03 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2639417\update\spcustom.dll
      + 2011-12-15 07:03 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2639417\spmsg.dll
      + 2011-12-15 06:59 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2633171\update\spcustom.dll
      + 2011-12-15 04:53 . 2011-10-26 10:51 16896 c:\windows\$hf_mig$\KB2633171\update\mpsyschk.dll
      + 2011-12-15 06:59 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2633171\spmsg.dll
      + 2012-01-11 08:27 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2631813\update\spcustom.dll
      + 2012-01-11 08:27 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2631813\spmsg.dll
      + 2011-12-15 07:03 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2624667\update\spcustom.dll
      + 2011-12-15 07:03 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2624667\spmsg.dll
      + 2012-03-14 14:00 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2621440\update\spcustom.dll
      + 2012-03-14 14:00 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2621440\spmsg.dll
      + 2011-12-15 07:00 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2620712\update\spcustom.dll
      + 2011-12-15 07:00 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2620712\spmsg.dll
      + 2011-10-28 05:30 . 2011-10-28 05:30 33280 c:\windows\$hf_mig$\KB2620712\SP3QFE\csrsrv.dll
      + 2011-12-15 07:00 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2619339\update\spcustom.dll
      + 2011-12-15 07:00 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2619339\spmsg.dll
      + 2011-12-15 07:00 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2618451\update\spcustom.dll
      + 2011-12-15 07:00 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2618451\spmsg.dll
      + 2011-12-15 07:03 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2618444-IE8\update\spcustom.dll
      + 2011-12-15 07:03 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2618444-IE8\spmsg.dll
      + 2011-12-15 04:53 . 2011-11-04 19:12 12800 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\xpshims.dll
      + 2011-12-15 04:53 . 2011-11-04 19:12 66560 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\mshtmled.dll
      + 2011-12-15 04:53 . 2011-11-04 19:12 55296 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\msfeedsbs.dll
      + 2011-12-15 04:53 . 2011-11-04 19:12 43520 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\licmgr10.dll
      + 2011-12-15 04:53 . 2011-11-04 19:12 25600 c:\windows\$hf_mig$\KB2618444-IE8\SP3QFE\jsproxy.dll
      + 2011-09-15 20:10 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2616676\update\spcustom.dll
      + 2011-09-15 20:10 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2616676\spmsg.dll
      + 2011-09-07 04:56 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2607712\update\spcustom.dll
      + 2011-09-07 04:56 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2607712\spmsg.dll
      + 2012-01-11 08:17 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2603381\update\spcustom.dll
      + 2012-01-11 08:17 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2603381\spmsg.dll
      + 2012-01-11 08:23 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2598479\update\spcustom.dll
      + 2012-01-11 08:23 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2598479\spmsg.dll
      + 2011-10-14 14:46 . 2011-10-14 14:46 23040 c:\windows\$hf_mig$\KB2598479\SP3QFE\mciseq.dll
      + 2011-10-12 21:53 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2592799\update\spcustom.dll
      + 2011-10-12 21:53 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2592799\spmsg.dll
      + 2011-10-12 21:53 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2586448-IE8\update\spcustom.dll
      + 2011-10-12 21:53 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2586448-IE8\spmsg.dll
      + 2011-10-12 21:08 . 2011-08-22 23:40 12800 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\xpshims.dll
      + 2011-10-12 21:08 . 2011-08-22 23:40 66560 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtmled.dll
      + 2011-10-12 21:08 . 2011-08-22 23:40 55296 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeedsbs.dll
      + 2011-10-12 21:08 . 2011-08-22 23:40 43520 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\licmgr10.dll
      + 2011-10-12 21:08 . 2011-08-22 23:40 25600 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\jsproxy.dll
      + 2012-01-25 21:47 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2585542\update\spcustom.dll
      + 2012-01-25 21:47 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2585542\spmsg.dll
      + 2012-01-11 08:17 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2584146\update\spcustom.dll
      + 2012-01-11 08:17 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2584146\spmsg.dll
      + 2011-11-20 06:11 . 2011-11-20 06:11 61952 c:\windows\$hf_mig$\KB2584146\SP3QFE\packager.exe
      + 2011-09-15 20:07 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2570947\update\spcustom.dll
      + 2011-09-15 20:07 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2570947\spmsg.dll
      + 2011-08-12 21:31 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2570222\update\spcustom.dll
      + 2011-08-12 21:31 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2570222\spmsg.dll
      + 2011-08-12 21:31 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2567680\update\spcustom.dll
      + 2011-08-12 21:31 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2567680\spmsg.dll
      + 2011-10-12 21:54 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2567053\update\spcustom.dll
      + 2011-10-12 21:54 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2567053\spmsg.dll
      + 2011-08-12 21:28 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2566454\update\spcustom.dll
      + 2011-08-12 21:28 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2566454\spmsg.dll
      + 2011-08-12 14:14 . 2011-07-08 13:51 10496 c:\windows\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys
      + 2011-08-12 21:28 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2562937\update\spcustom.dll
      + 2011-08-12 21:28 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2562937\spmsg.dll
      + 2011-08-12 21:28 . 2010-07-05 13:17 26488 c:\windows\$hf_mig$\KB2559049-IE8\update\spcustom.dll
      + 2011-08-12 21:28 . 2010-07-05 13:17 18296 c:\windows\$hf_mig$\KB2559049-IE8\spmsg.dll
      + 2011-08-12 14:14 . 2011-06-23 18:29 12800 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\xpshims.dll
      + 2011-08-12 14:14 . 2011-06-23 18:29 66560 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtmled.dll
      + 2011-08-12 14:14 . 2011-06-23 18:29 55296 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeedsbs.dll
      + 2011-08-12 14:14 . 2011-06-23 18:29 43
      1. Contributeur sécurité
        nul il a même pas patché services.exe ^^

        ===========================================

        ▶ Télécharge sur cette page : AdwCleaner (de Xplode)

        ▶ Une fois téléchargé, clique sur Suppression et patiente le temps du nettoyage.

        ▶ Poste le contenu du rapport que tu trouveras dans ton disque dur c:\ADwcleaner[Sx].txt ou son contenu s'il s'ouvre.
        1. # AdwCleaner v1.609 - Rapport créé le 22/06/2012 à 21:08:01
          # Mis à jour le 10/06/2012 par Xplode
          # Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
          # Nom d'utilisateur : Bruno - UNICORNI-695AD7
          # Exécuté depuis : C:\Documents and Settings\Bruno\Local Settings\Temporary Internet Files\Content.IE5\5F9VNVA0\adwcleaner[1].exe
          # Option [Suppression]

          ***** [Services] *****

          ***** [Fichiers / Dossiers] *****

          Dossier Supprimé : C:\Documents and Settings\Bruno\Local Settings\Application Data\Conduit
          Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\Ask

          ***** [Registre] *****

          [*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2567681
          Clé Supprimée : HKCU\Software\Conduit
          Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom

          ***** [Registre - GUID] *****

          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E2E2DD38-D088-4134-82B7-F2BA38496583}
          Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E2E2DD38-D088-4134-82B7-F2BA38496583}

          ***** [Navigateurs] *****

          -\\ Internet Explorer v8.0.6001.18702

          [OK] Le registre ne contient aucune entrée illégitime.

          -\\ Mozilla Firefox v13.0.1 (fr)

          Nom du profil : default
          Fichier : C:\Documents and Settings\Bruno\Application Data\Mozilla\Firefox\Profiles\rzpzmzux.default\prefs.js

          C:\Documents and Settings\Bruno\Application Data\Mozilla\Firefox\Profiles\rzpzmzux.default\user.js ... Supprimé !

          [OK] Le fichier ne contient aucune entrée illégitime.

          *************************

          AdwCleaner[S1].txt - [1707 octets] - [22/06/2012 21:08:01]

          ########## EOF - C:\AdwCleaner[S1].txt - [1835 octets] ##########
          1. Contributeur sécurité
            okok :D

            ▶ Télécharge ZHPDiag (de Nicolas Coolman)

            ou :ZHPDiag

            ▶ Enregistre le sur ton Bureau.

            Une fois le téléchargement achevé,

            ▶ Installe et lance ZHPDiag.exe

            ▶ Clique sur le tournevis puis sur Tous pour cocher toutes les cases des options.

            ▶ Clique sur la loupe pour lancer l'analyse.

            A la fin de l'analyse,

            ▶ Pour me transmettre ton rapport utilise le site http://pjjoint.malekal.com

            ▶ Clique sur Parcourir et cherche le fichier C:\ZHP\ZHPDiag.txt

            ▶ Clique sur Ouvrir.

            ▶ Clique sur "Envoyer le fichier".

            Un lien de cette forme :

            https://pjjoint.malekal.com/files.php?id=ZHPDiag_20120312_q15b11x7g11u5

            est ajouté dans la page.

            ▶ Copie ce lien dans ta réponse.
            1. http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120622_x11z14k15g5p12
              1. Contributeur sécurité
                copie ces lignes :

                [HKCU\Software\sponsoradulto] => Infection Diverse
                [MD5.17391EB2F6DF4795FDAA62B0FC67256A] [SPRF][25/06/2007] (.Pas de propriétaire - MusicManager UnInstaller Application.) -- C:\WINDOWS\Downloaded Program Files\MusicManagerUnInstaller.exe [95560] => Infection Diverse (AGENT.Troj)
                M2 - MFEP: prefs.js [Bruno - jfdvcmm3.Utilisateur par défaut\{59994074-c06d-4a75-9768-49e5a8c21264}] [] Messenger Plus Live France Toolbar v2.6.0.15 (.Conduit Ltd..) => Toolbar.Conduit
                [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\Ask Search Assistant]
                C:\Documents and Settings\Bruno\Application Data\Mozilla\Firefox\Profiles\jfdvcmm3.Utilisateur par défaut\prefs.js (.not file.) => Fichier absent
                EmPTYTEMP
                EMPTYFLASH


                Ouvre ZHPFIX
                Clique sur H puis sur GO
                Poste le rapport.
                1. Contributeur sécurité
                  copie ces lignes en gras:

                  [HKCU\Software\sponsoradulto] => Infection Diverse
                  [MD5.17391EB2F6DF4795FDAA62B0FC67256A] [SPRF][25/06/2007] (.Pas de propriétaire - MusicManager UnInstaller Application.) -- C:\WINDOWS\Downloaded Program Files\MusicManagerUnInstaller.exe [95560] => Infection Diverse (AGENT.Troj)
                  M2 - MFEP: prefs.js [Bruno - jfdvcmm3.Utilisateur par défaut\{59994074-c06d-4a75-9768-49e5a8c21264}] [] Messenger Plus Live France Toolbar v2.6.0.15 (.Conduit Ltd..) => Toolbar.Conduit
                  [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\Ask Search Assistant]
                  C:\Documents and Settings\Bruno\Application Data\Mozilla\Firefox\Profiles\jfdvcmm3.Utilisateur par défaut\prefs.js (.not file.) => Fichier absent
                  EmPTYTEMP
                  EMPTYFLASH


                  Ouvre ZHPFIX
                  Clique sur H puis sur GO
                  Poste le rapport.
                  1. Rapport de ZHPFix 1.2.06 par Nicolas Coolman, Update du 17/05/2012
                    Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-22-06-2012-23-01-16.txt
                    Run by Bruno at 22/06/2012 23:01:16
                    Windows XP Professional Service Pack 3 (Build 2600)
                    Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
                    Web site : http://nicolascoolman.skyrock.com/

                    ========== Processus mémoire ==========
                    SUPPRIME Memory Process: C:\WINDOWS\Downloaded Program Files\MusicManagerUnInstaller.exe

                    ========== Clé(s) du Registre ==========
                    SUPPRIME Key*: HKCU\Software\sponsoradulto
                    SUPPRIME Key*: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\Ask Search Assistant

                    ========== Préférences navigateur ==========
                    ABSENT C:\Documents and Settings\Bruno\Application Data\Mozilla\Firefox\Profiles\jfdvcmm3.Utilisateur par défaut\prefs.js

                    ========== Dossier(s) ==========
                    SUPPRIME Temporaires Windows:
                    SUPPRIME Flash Cookies:

                    ========== Fichier(s) ==========
                    SUPPRIME File***: c:\windows\downloaded program files\musicmanageruninstaller.exe
                    ABSENT Folder/File: c:\documents and settings\bruno\application data\mozilla\firefox\profiles\jfdvcmm3.utilisateur par défaut\prefs.js (.not file.)
                    SUPPRIME Temporaires Windows:
                    SUPPRIME Flash Cookies:

                    ========== Récapitulatif ==========
                    1 : Processus mémoire
                    2 : Clé(s) du Registre
                    2 : Dossier(s)
                    4 : Fichier(s)
                    1 : Préférences navigateur

                    End of clean in 00mn 03s

                    ========== Chemin de fichier rapport ==========
                    C:\ZHP\ZHPFix[R1].txt - 22/06/2012 23:01:16 [1467]
                    1. WhyIGotInfected v1.5.4(by Tigzy)
                      ********************************

                      Run : 23/06/2012 10:01 [Normal Mode]
                      Machine : UNICORNI-695AD7 (1 CPUs) [Bruno : ADMIN]
                      OS: Microsoft Windows XP Professionnel Service Pack 3 (x86)

                      ~~ Plugins check: ~~

                      UPTODATE [Microsoft Windows XP Professionnel] Current : Service Pack 3 -- Latest : Service Pack 3
                      UPTODATE [Firefox] Current : 13.0.1 -- Latest : 13.0.1
                      UPTODATE [Internet Explorer] Current : 8.0.6001.18702 -- Latest : 8.0.6001.18702
                      UPTODATE [Java 7] Current : 1.7.0_05 -- Latest : 1.7.0_05
                      UPTODATE [Adobe Reader] Current : 10 -- Latest : 10
                      UPTODATE [Adobe Flash] Current : 11.3.300.257 -- Latest : 11.3.300.257
                      UPTODATE [Adobe Flash ActiveX] Current : 11.3.300.257 -- Latest : 11.3.300.257
                      OUTDATED [Adobe Flash FF Plugin] Current : 11.3.300.262 -- Latest : 11.3.300.257

                      Finished
                      <C:\Documents and Settings\Bruno\Bureau\WIGIReport[1].txt>
                      WIGIReport[0].txt ; WIGIReport[1].txt
                      1. Bonjour,
                        Voici le 1er rapport :
                        WhyIGotInfected v1.5.4(by Tigzy)
                        ********************************

                        Run : 23/06/2012 09:33 [Normal Mode]
                        Machine : UNICORNI-695AD7 (1 CPUs) [Bruno : ADMIN]
                        OS: Microsoft Windows XP Professionnel Service Pack 3 (x86)

                        ~~ Plugins check: ~~

                        UPTODATE [Microsoft Windows XP Professionnel] Current : Service Pack 3 -- Latest : Service Pack 3
                        UPTODATE [Firefox] Current : 13.0.1 -- Latest : 13.0.1
                        UPTODATE [Internet Explorer] Current : 8.0.6001.18702 -- Latest : 8.0.6001.18702
                        OUTDATED [Java] Current : 1.6.0_31 -- Latest : 1.7.0_05
                        UPTODATE [Adobe Reader] Current : 10 -- Latest : 10
                        OUTDATED [Adobe Flash] Current : 11.2.202.235 -- Latest : 11.3.300.257
                        OUTDATED [Adobe Flash ActiveX] Current : 11.2.202.235 -- Latest : 11.3.300.257
                        UPTODATE [Adobe Flash FF Plugin] Current : 11.3.300.257 -- Latest : 11.3.300.257

                        Finished
                        <C:\Documents and Settings\Bruno\Bureau\WIGIReport[0].txt>
                        WIGIReport[0].txt
                        1. # DelFix v8.8 - Rapport créé le 23/06/2012 à 10:09:29
                          # Mis à jour le 12/02/12 par Xplode
                          # Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
                          # Nom d'utilisateur : Bruno - UNICORNI-695AD7 (Administrateur)
                          # Exécuté depuis : C:\Documents and Settings\Bruno\Local Settings\Temporary Internet Files\Content.IE5\5F9VNVA0\delfix[1].exe
                          # Option [Suppression]

                          ~~~~~~ Dossiers(s) ~~~~~~

                          Supprimé : C:\Qoobox
                          Supprimé : C:\ZHP
                          Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP
                          Supprimé : C:\Program Files\ZHPDiag

                          ~~~~~~ Fichier(s) ~~~~~~

                          Supprimé : E:\Mes Documents\Téléchargements\Nathalie.exe <-- Combofix
                          Supprimé : C:\AdwCleaner[S1].txt
                          Supprimé : C:\ComboFix.txt
                          Supprimé : C:\JavaRa.log
                          Supprimé : C:\PhysicalDisk0_MBR.bin
                          Supprimé : C:\TCleaner.txt
                          Supprimé : C:\Documents and Settings\Bruno\Bureau\WhyIGotInfected.exe
                          Supprimé : C:\WINDOWS\grep.exe
                          Supprimé : C:\WINDOWS\PEV.exe
                          Supprimé : C:\WINDOWS\NIRCMD.exe
                          Supprimé : C:\WINDOWS\MBR.exe
                          Supprimé : C:\WINDOWS\SED.exe
                          Supprimé : C:\WINDOWS\SWREG.exe
                          Supprimé : C:\WINDOWS\SWSC.exe
                          Supprimé : C:\WINDOWS\SWXCACLS.exe
                          Supprimé : C:\WINDOWS\Zip.exe

                          ~~~~~~ Registre ~~~~~~

                          Clé Supprimée : HKLM\SOFTWARE\OldTimer Tools
                          Clé Supprimée : HKLM\SOFTWARE\AdwCleaner
                          Clé Supprimée : HKLM\SOFTWARE\Swearware
                          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
                          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe
                          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

                          ~~~~~~ Autres ~~~~~~

                          -> Prefetch Vidé

                          *************************

                          DelFix[S1].txt - [1679 octets] - [23/06/2012 10:09:29]

                          ########## EOF - C:\DelFix[S1].txt - [1803 octets] ##########
                          1. Pas le dernier, la mise à jour se fait bien mais il ressort toujours en rouge...
                            • 1
                            • 2