TROJAN VUNDOO MALWARE INFECTE!!HELP ME - Page 3

  1. on a pas ton raccourci comme tu la mentionnai ci dessous

    Dorénavant lorsque je te demanderais un rapport Hijackthis , tu cliqueras sur l'icône de raccourci ' CD17 ' présente sur ton bureau.

    donc on a pris renhjt.bat et lancer hitjackthis
    0
    1. Re , ok oui il y a des bug dans le programme ... =/ il faut que je le modifie.

      Bon j'envoie le paté ^^

      ****************************************************************

      /!\ Outils très puissant , ne pas reproduire la manip ci-dessous sur son pc sans y avoir été autorisé par une personne comptétente /!\

      Désactive ta restauration système
      Clic sur « Démarrer »
      Clic droit sur « Poste de travail », puis sur « Propriétés »,
      Vas sur l’onglet « Restauration système »
      Tu y coches la case « Désactiver la restauration »
      Termine par [Appliquer] [OK]

      Télécharge ComboFix ici → http://download.bleepingcomputer.com/sUBs/ComboFix.exe

      Et enregistre le sur le bureau >>> /!\ IMPORTANT /!\

      Regardes ici, si tu souhaites te familiariser avec son utilisation: https://www.google.fr/?gws_rd=ssl

      AVANT d'utiliser ComboFix :
      → Déconnecte ton PC d'Internet et referme les fenêtres de tous les programmes en cours. /!\
      → Désactive provisoirement (et seulement le temps de l'utilisation de ComboFix), la protection en temps réel de ton Antivirus et de tes Antispywares et de TOUT tes logiciels de protection !!!, (activés, ils pourraient gêner fortement la procédure de recherche et de nettoyage de l'outil). /!\

      Sur ton bureau double clic sur Combofix.exe.
      Appuies sur la touche 1, pour que le programme commence à s'exécuter et suis les instructions à l'écran.

      /!\ PENDANT TOUTE la durée (ça peut être assez long si le pc est très infecté) du scan de ComboFix, n'ouvres aucun programme, ne touche pas à ta souris et ne surfe pas sur le net /!\

      Soit patient (même si tu penses que le PC est arrêté) ; les temps « d'arrêt apparent » sont parfois de plusieurs minutes (il y a ± 40 étapes d’analyse).

      En cours de nettoyage il est possible, que tu reçoives un avertissement te disant que le pc va redémarrer, laisse le faire.

      Après le redemarrage du pc, un rapport s'ouvrira dans le Bloc notes en fin d'analyse, copie et colle tout son contenu dans ton prochain message.

      (Le fichier rapport Combofix.txt , est ensuite automatiquement sauvegardé dans C:\Combofix.txt)

      Ensuite réactive ta restauration système
      Clic droit sur « Poste de travail », puis sur « Propriétés »,
      Vas sur l’onglet « Restauration système »
      Tu décoches la case « Désactiver la restauration »
      Termine par [Appliquer] [OK]

      *********************************

      A+
      0
      1. ComboFix 08-03-10.1 - GUILLAUME 2008-03-12 23:54:16.1 - NTFSx86
        Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.2843 [GMT 1:00]
        Endroit: C:\Documents and Settings\GUILLAUME\Bureau\ComboFix.exe

        [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
        .

        (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
        .

        C:\Documents and Settings\GUILLAUME\Menu Démarrer\Programmes\MalwareAlarm
        C:\Documents and Settings\GUILLAUME\Menu Démarrer\Programmes\MalwareAlarm\MalwareAlarm.lnk
        C:\Documents and Settings\GUILLAUME\Menu Démarrer\Programmes\MalwareAlarm\Uninstall.lnk
        C:\WINDOWS\BM9bba1f97.xml
        C:\WINDOWS\cookies.ini
        C:\WINDOWS\pskt.ini
        C:\WINDOWS\system32\audortky.dll
        C:\WINDOWS\system32\brtstubj.dll
        C:\WINDOWS\system32\dvmsrlwv.dll
        C:\WINDOWS\system32\ekfkblle.ini
        C:\WINDOWS\system32\ewojmwyi.dll
        C:\WINDOWS\system32\gtuvqitb.dll
        C:\WINDOWS\system32\hjkywcyh.dll
        C:\WINDOWS\system32\ijkkj.ini
        C:\WINDOWS\system32\ijkkj.ini2
        C:\WINDOWS\system32\isnoxkvo.ini
        C:\WINDOWS\system32\jbftyeks.ini
        C:\WINDOWS\system32\jisfukdu.ini
        C:\WINDOWS\system32\jumkaoqx.ini
        C:\WINDOWS\system32\mavopmfd.ini
        C:\WINDOWS\system32\mcrh.tmp
        C:\WINDOWS\system32\mdgvmwpj.ini
        C:\WINDOWS\system32\mobrpbrf.ini
        C:\WINDOWS\system32\mqrwchut.ini
        C:\WINDOWS\system32\pgwfdalj.ini
        C:\WINDOWS\system32\phlgjyye.ini
        C:\WINDOWS\system32\qhporqbs.ini
        C:\WINDOWS\system32\qlkmdoex.ini
        C:\WINDOWS\system32\rbqseuii.dll
        C:\WINDOWS\system32\rpsoeeds.dll
        C:\WINDOWS\system32\skvcdotb.dll
        C:\WINDOWS\system32\ticrpepl.dll
        C:\WINDOWS\system32\tnekekgo.dll
        C:\WINDOWS\system32\tuhcwrqm.dll

        .
        ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
        .

        -------\nm

        ((((((((((((((((((((((((((((( Fichiers créés 2008-02-12 to 2008-03-12 ))))))))))))))))))))))))))))))))))))
        .

        2008-03-12 23:37 . 2008-03-12 23:37 <REP> d-------- C:\Program Files\CCleaner
        2008-03-12 20:56 . 2008-03-12 20:56 <REP> d-------- C:\_OTMoveIt
        2008-03-11 20:10 . 2008-03-11 20:10 <REP> d-------- C:\Documents and Settings\GUILLAUME\Download
        2008-03-11 18:47 . 2008-03-11 18:47 <REP> d-------- C:\Program Files\Trend Micro
        2008-03-10 01:25 . 2008-03-11 20:10 <REP> d-------- C:\Program Files\MalwareAlarm
        2008-03-09 18:33 . 2008-03-12 22:47 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Google Updater
        2008-03-09 15:53 . 2008-03-09 16:03 <REP> d-------- C:\Program Files\RegCleaner
        2008-03-09 14:20 . 2008-03-12 19:47 <REP> d-------- C:\VundoFix Backups
        2008-03-09 14:03 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
        2008-03-09 14:03 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
        2008-03-09 14:03 . 2008-03-01 23:12 86,016 --a------ C:\WINDOWS\system32\VACFix.exe
        2008-03-09 14:03 . 2008-02-29 23:48 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
        2008-03-09 14:03 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
        2008-03-09 14:03 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
        2008-03-09 14:03 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
        2008-03-09 13:51 . 2008-03-09 13:51 <REP> dr------- C:\Documents and Settings\All Users\Application Data\erreurchasseur
        2008-03-09 13:49 . 2008-03-09 16:42 <REP> d-------- C:\Program Files\Fichiers communs\ErreurChasseur
        2008-03-09 02:25 . 2008-03-09 02:25 <REP> d-------- C:\Program Files\Fichiers communs\NettoyeurDePC
        2008-03-09 02:25 . 2008-03-09 02:25 <REP> d-------- C:\Documents and Settings\All Users\Application Data\NettoyeurDePC
        2008-03-09 01:59 . 2008-03-09 01:59 <REP> d--hs---- C:\VirusEffaceur
        2008-03-09 01:58 . 2008-03-09 02:02 <REP> d-------- C:\Documents and Settings\GUILLAUME\Application Data\VirusEffaceur
        2008-03-09 01:58 . 2008-03-09 01:58 <REP> dr------- C:\Documents and Settings\All Users\Application Data\SalesMon
        2008-03-06 06:42 . 2008-03-12 22:35 4,158 --a------ C:\WINDOWS\system32\tmp.reg
        2008-03-04 01:24 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
        2008-03-04 01:24 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
        2008-03-04 01:24 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
        2008-03-04 01:24 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
        2008-03-04 01:24 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
        2008-03-04 01:24 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
        2008-03-04 01:24 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
        2008-03-04 01:24 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
        2008-03-04 01:06 . 2008-03-03 19:21 20,260,136 --a------ C:\Program Files\setupfrepro.exe
        2008-03-03 13:41 . 2008-03-03 13:41 54,156 --ah----- C:\WINDOWS\QTFont.qfn
        2008-03-03 13:41 . 2008-03-03 13:41 1,409 --a------ C:\WINDOWS\QTFont.for
        2008-02-23 04:41 . 2008-02-23 04:41 8,192 --ahs---- C:\WINDOWS\Thumbs.db
        2008-02-13 21:11 . 2008-02-13 21:11 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ATI
        2008-02-13 21:10 . 2008-02-13 21:10 0 --a------ C:\WINDOWS\ativpsrm.bin
        2008-02-13 21:04 . 2008-01-22 14:42 593,920 --------- C:\WINDOWS\system32\ati2sgag.exe

        .
        (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
        .
        2008-03-12 21:56 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
        2008-03-10 19:46 --------- d-----w C:\Program Files\Common Files
        2008-03-10 19:18 --------- d-----w C:\Program Files\Electronic Arts
        2008-03-10 12:26 --------- d-----w C:\Documents and Settings\GUILLAUME\Application Data\Vso
        2008-03-10 12:20 --------- d-----w C:\Documents and Settings\GUILLAUME\Application Data\AdobeUM
        2008-03-10 11:03 --------- d-----w C:\Program Files\Shareaza
        2008-03-09 17:55 --------- d-----w C:\Program Files\Google
        2008-03-09 00:49 --------- d-----w C:\Program Files\WinISO
        2008-02-28 13:18 --------- d-----w C:\Program Files\Windows Live
        2008-02-20 17:02 --------- d-----w C:\Program Files\Fichiers communs\logishrd
        2008-02-18 00:40 --------- d-----w C:\Program Files\Wanadoo
        2008-02-13 20:11 --------- d-----w C:\Documents and Settings\GUILLAUME\Application Data\ATI
        2008-02-13 20:07 --------- d-----w C:\Program Files\ATI Technologies
        2008-02-13 20:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
        2008-02-13 20:06 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\ATI
        2008-02-04 21:45 --------- d-----w C:\Program Files\Fichiers communs\Adobe
        2008-02-01 10:17 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR
        2008-01-26 01:26 --------- d-----w C:\Documents and Settings\GUILLAUME\Application Data\Leadertech
        2008-01-22 21:38 2,845,696 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys
        2008-01-22 19:58 49,152 ----a-w C:\WINDOWS\system32\drivers\ati2erec.dll
        2008-01-17 17:32 --------- d-----w C:\Program Files\Guitar Pro 4
        2008-01-12 18:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\vsosdk
        2008-01-12 18:15 --------- d-----w C:\Program Files\Lavalys
        2008-01-12 17:33 --------- d-----w C:\Documents and Settings\GUILLAUME\Application Data\Shareaza
        2008-01-12 17:06 87,608 ----a-w C:\Documents and Settings\GUILLAUME\Application Data\inst.exe
        2008-01-12 17:06 47,360 ----a-w C:\WINDOWS\system32\drivers\pcouffin.sys
        2008-01-12 17:06 47,360 ----a-w C:\Documents and Settings\GUILLAUME\Application Data\pcouffin.sys
        2008-01-12 17:06 --------- d-----w C:\Program Files\VSO
        2008-01-12 17:03 --------- d-----w C:\Program Files\Shareaza Applications
        2007-12-16 22:55 5,243,518 ----a-w C:\Program Files\Shareaza_2.3.0.0.exe
        2007-08-08 21:56 92,064 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmmdm.sys
        2007-08-08 21:56 9,232 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmmdfl.sys
        2007-08-08 21:56 79,328 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmserd.sys
        2007-08-08 21:56 66,656 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmbus.sys
        2007-08-08 21:56 6,208 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmcmnt.sys
        2007-08-08 21:56 5,936 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmwhnt.sys
        2007-08-08 21:56 4,048 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmcr.sys
        2007-08-08 21:56 25,600 -c--a-w C:\Documents and Settings\GUILLAUME\usbsermptxp.sys
        2007-08-08 21:56 22,768 -c--a-w C:\Documents and Settings\GUILLAUME\usbsermpt.sys
        2007-06-14 16:56 278,528 -c--a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
        2006-11-25 00:25 5,291,382 -c----w C:\Program Files\(Codex) - All CODECS for Windows Media Player (dvd codes).zip
        2004-08-10 12:00 65,024 --sha-w C:\WINDOWS\system32\asycfilt.dll
        2006-08-25 15:51 617,472 --sha-w C:\WINDOWS\system32\comctl32.dll
        2004-08-10 12:00 1,028,096 --sha-w C:\WINDOWS\system32\mfc42.dll
        2004-08-10 12:00 57,344 --sha-w C:\WINDOWS\system32\mfc42loc.dll
        2004-08-10 12:00 413,696 --sha-w C:\WINDOWS\system32\msvcp60.dll
        2004-08-10 12:00 343,040 --sha-w C:\WINDOWS\system32\msvcrt.dll
        2004-08-10 12:00 253,952 -csha-w C:\WINDOWS\system32\msvcrt20.dll
        2007-12-04 18:41 550,912 --sha-w C:\WINDOWS\system32\oleaut32.dll
        2004-08-10 12:00 83,456 --sha-w C:\WINDOWS\system32\olepro32.dll
        2004-08-10 12:00 30,749 -csha-w C:\WINDOWS\system32\vbajet32.dll
        .

        ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
        .
        .
        REGEDIT4
        *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

        [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{027C7642-8667-4BB3-8896-EC3A5D07DC7D}]
        C:\WINDOWS\system32\jkkji.dll

        [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CFC4F59B-A2DA-4e12-B337-52A4F871E10C}]
        C:\Program Files\Shareaza Applications\Shareaza MediaBar\ShareazaIEHelper.dll

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
        "{196C3A46-4758-433D-A600-802C804AF39C}"= "C:\Program Files\Shareaza Applications\Shareaza MediaBar\ShareazaMediaBar.dll" [ ]

        [HKEY_CLASSES_ROOT\clsid\{196c3a46-4758-433d-a600-802c804af39c}]
        [HKEY_CLASSES_ROOT\ShareazaMediaBar.StockBar.1]
        [HKEY_CLASSES_ROOT\TypeLib\{89807A16-AC31-4449-AB91-06A753813543}]
        [HKEY_CLASSES_ROOT\ShareazaMediaBar.StockBar]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
        "{196C3A46-4758-433D-A600-802C804AF39C}"= C:\Program Files\Shareaza Applications\Shareaza MediaBar\ShareazaMediaBar.dll [ ]

        [HKEY_CLASSES_ROOT\clsid\{196c3a46-4758-433d-a600-802c804af39c}]
        [HKEY_CLASSES_ROOT\ShareazaMediaBar.StockBar.1]
        [HKEY_CLASSES_ROOT\TypeLib\{89807A16-AC31-4449-AB91-06A753813543}]
        [HKEY_CLASSES_ROOT\ShareazaMediaBar.StockBar]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VirtualExpanderFile.1]
        @={E4000AC4-5E5F-4956-807A-C5854405D64F}

        [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "WOOKIT"="C:\Program Files\Wanadoo\Shell.exe" [ ]
        "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-02 18:17 68856]
        "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 13:00 15360]
        "msnmsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
        "MalwareAlarm"="C:\Program Files\MalwareAlarm\MalwareAlarm.exe" [2008-03-10 01:25 440832]
        "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 08:59 204288]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
        "Adobe"="C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe" [2005-09-23 22:05 29696]
        "RTHDCPL"="RTHDCPL.EXE" [2006-01-11 17:23 15961088 C:\WINDOWS\RTHDCPL.exe]
        "CmUCRRun"="C:\WINDOWS\system32\CmUCReye.exe" [2005-10-12 14:44 241664]
        "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496]
        "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
        "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 20:24 32768]
        "MedionVFD"="C:\Program Files\Medion Info Display\MdionLCM.exe" [2006-04-03 17:26 172032]
        "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 01:41 49152]
        "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-07-25 15:02 563984]
        "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" [2007-07-25 15:06 2027792]
        "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-12-11 10:56 286720]
        "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 12:35 90112]
        "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
        "bm(1)"="C:\Program Files\Fichiers communs\VirusEffaceur\bm.exe" [ ]
        "RegistryMechanic"="C:\Program Files\Registry Mechanic\RegMech.exe" [2007-08-20 11:58 2483496]

        [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
        "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 13:00 15360]

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
        "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
        "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

        [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
        "NoSMBalloonTip"= 1 (0x1)

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
        "C:\\WINDOWS\\system32\\sessmgr.exe"=
        "C:\\Program Files\\Messenger\\msmsgs.exe"=
        "C:\\Program Files\\NetMeeting\\Conf.exe"=
        "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
        "C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
        "C:\\WINDOWS\\system32\\fxsclnt.exe"=
        "C:\\Program Files\\Ahead\\Nero MediaHome\\NeroMediaHome.exe"=
        "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
        "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
        "C:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"=
        "C:\\Program Files\\Shareaza\\Shareaza.exe"=
        "E:\\Dawn of War - Dark Crusade\\DarkCrusade.exe"=
        "D:\\SmitfraudFix.exe"=

        [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
        "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

        R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-12-06 11:16]
        R3 X10Hid;X10 Hid Device;C:\WINDOWS\system32\Drivers\x10hid.sys [2005-06-13 12:50]
        S3 CMISTOR;CMIUCR.SYS CM220 Card Reader Driver;C:\WINDOWS\system32\DRIVERS\cmiucr.SYS [2005-10-04 18:37]
        S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;C:\WINDOWS\system32\DRIVERS\sis163u.sys [2005-11-02 11:53]
        S3 uxddrv;Dynamically loaded UxdDrv;C:\Documents and Settings\All Users\Bureau\WinStress\uxddrv.sys []

        [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a13052b6-1401-11dc-a3b8-0016173c2ef9}]
        \Shell\AutoRun\command - J:\WinStressCopie.exe

        .
        Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
        "2008-01-30 16:20:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
        - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
        .
        **************************************************************************

        catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
        Rootkit scan 2008-03-13 00:01:32
        Windows 5.1.2600 Service Pack 2 NTFS

        Balayage processus cachés ...

        Balayage caché autostart entries ...

        Balayage des fichiers cachés ...

        Scan terminé avec succès
        Les fichiers cachés: 0

        **************************************************************************
        .
        ------------------------ Other Running Processes ------------------------
        .
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
        C:\WINDOWS\eHome\ehRecvr.exe
        C:\WINDOWS\eHome\ehSched.exe
        C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
        C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
        C:\WINDOWS\system32\HPZipm12.exe
        C:\WINDOWS\system32\PnkBstrA.exe
        C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
        C:\WINDOWS\ehome\mcrdsvc.exe
        C:\Program Files\Windows Media Player\WMPNetwk.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\WINDOWS\system32\dllhost.exe
        C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
        C:\Program Files\MalwareAlarm\pv.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Program Files\Google\Google Updater\GoogleUpdater.exe
        C:\WINDOWS\system32\msiexec.exe
        C:\WINDOWS\system32\VirtualExpander\VirtualExpander.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
        C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
        C:\WINDOWS\system32\MsiExec.exe
        .
        **************************************************************************
        .
        Temps d'accomplissement: 2008-03-13 0:03:47 - machine was rebooted
        ComboFix-quarantined-files.txt 2008-03-12 23:03:44
        .
        2008-03-11 22:44:27 --- E O F ---
        0
        1. Re ,

          Ne retélécharge PLUS des programmes tel que ' virus effaceur , Malware alarm ' ou autre /!\


          *************************************************

          Ouvre le Bloc-Notes (Démarrer\Tous les programmes\Accessoires\Bloc notes.)

          Copie ce texte ( en gras )d'une traite ( CTRL+C pour copier ) puis colle-le ( CTRL+V dans le bloc-note )

          File::
          C:\WINDOWS\system32\jkkji.dll

          Folder::
          C:\_OTMoveIt
          C:\Program Files\MalwareAlarm
          C:\VundoFix Backups
          C:\Documents and Settings\All Users\Application Data\erreurchasseur
          C:\Program Files\Fichiers communs\ErreurChasseur
          C:\Program Files\Fichiers communs\NettoyeurDePC
          C:\Documents and Settings\All Users\Application Data\NettoyeurDePC
          C:\VirusEffaceur
          C:\Documents and Settings\GUILLAUME\Application Data\VirusEffaceur

          Driver::
          nm

          Registry::
          [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{027C7642-8667-4BB3-8896-EC3A5D07DC7D}]
          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "MalwareAlarm"=-
          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "bm(1)"=-


          Sauvegarde ce fichier sur ton bureau sous le nom de CFScript.txt.

          Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :

          http://serveur1.archive-host.com/membres/up/1366464061/CFScript.gif

          Cela va relancer Combofix,

          Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.

          Patiente le temps du scan.Le bureau va disparaître à plusieurs reprises: c'est normal!

          Ne touche à rien tant que le scan n'est pas terminé.

          Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.

          S'il n'y a pas de rédémarrage, poste quand même les rapports.

          ++
          0
          1. ComboFix 08-03-10.1 - GUILLAUME 2008-03-14 12:37:03.2 - NTFSx86
            Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.2748 [GMT 1:00]
            Endroit: C:\Documents and Settings\GUILLAUME\Bureau\ComboFix.exe
            Command switches used :: C:\Documents and Settings\GUILLAUME\Bureau\CFScript.txt
            * Création d'un nouveau point de restauration

            [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

            FILE ::
            C:\WINDOWS\system32\jkkji.dll
            .

            (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
            .

            C:\_OTMoveIt
            C:\_OTMoveIt\MovedFiles\[u]0[/u]3122008_205624.res
            C:\_OTMoveIt\MovedFiles\[u]0[/u]3122008_205624\WINDOWS\system32\yelveuwn.dll
            C:\Documents and Settings\All Users\Application Data\erreurchasseur
            C:\Documents and Settings\All Users\Application Data\erreurchasseur\Data\em
            C:\Documents and Settings\All Users\Application Data\erreurchasseur\Data\oid
            C:\Documents and Settings\All Users\Application Data\erreurchasseur\Data\user
            C:\Documents and Settings\All Users\Application Data\NettoyeurDePC
            C:\Documents and Settings\All Users\Application Data\NettoyeurDePC\Abbr
            C:\Documents and Settings\All Users\Application Data\NettoyeurDePC\prod_code
            C:\Documents and Settings\GUILLAUME\Application Data\inst.exe
            C:\Documents and Settings\GUILLAUME\Application Data\VirusEffaceur
            C:\Documents and Settings\GUILLAUME\Application Data\VirusEffaceur\Logs\threats.log
            C:\Documents and Settings\GUILLAUME\Application Data\VirusEffaceur\Logs\update.log
            C:\Documents and Settings\GUILLAUME\Application Data\VirusEffaceur\PGE.dat
            C:\Program Files\Fichiers communs\ErreurChasseur
            C:\Program Files\Fichiers communs\NettoyeurDePC
            C:\Program Files\Fichiers communs\NettoyeurDePC\stm.exe
            C:\Program Files\MalwareAlarm
            C:\Program Files\MalwareAlarm\diagnosis.dat
            C:\Program Files\MalwareAlarm\MalwareAlarm.exe
            C:\Program Files\MalwareAlarm\MalwareAlarm.lic
            C:\Program Files\MalwareAlarm\MalwareAlarm0.ma
            C:\Program Files\MalwareAlarm\MalwareAlarm1.ma
            C:\Program Files\MalwareAlarm\mfc71.dll
            C:\Program Files\MalwareAlarm\msvcp71.dll
            C:\Program Files\MalwareAlarm\msvcr71.dll
            C:\Program Files\MalwareAlarm\pv.dat
            C:\Program Files\MalwareAlarm\pv.exe
            C:\Program Files\MalwareAlarm\Uninstall.exe
            C:\Program Files\MalwareAlarm\up.dat
            C:\VirusEffaceur
            C:\VundoFix Backups
            C:\VundoFix Backups\addmorefiles.txt
            C:\WINDOWS\Downloaded Program Files\UGDCFR_0001_N122M1912NetInstaller.exe

            .
            ((((((((((((((((((((((((((((( Fichiers créés 2008-02-14 to 2008-03-14 ))))))))))))))))))))))))))))))))))))
            .

            2008-03-13 00:54 . 2008-03-13 00:54 <REP> d-------- C:\Program Files\Electronic Arts
            2008-03-12 23:37 . 2008-03-12 23:37 <REP> d-------- C:\Program Files\CCleaner
            2008-03-11 20:10 . 2008-03-11 20:10 <REP> d-------- C:\Documents and Settings\GUILLAUME\Download
            2008-03-11 18:47 . 2008-03-11 18:47 <REP> d-------- C:\Program Files\Trend Micro
            2008-03-09 18:33 . 2008-03-14 12:37 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Google Updater
            2008-03-09 15:53 . 2008-03-09 16:03 <REP> d-------- C:\Program Files\RegCleaner
            2008-03-09 14:03 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
            2008-03-09 14:03 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
            2008-03-09 14:03 . 2008-03-01 23:12 86,016 --a------ C:\WINDOWS\system32\VACFix.exe
            2008-03-09 14:03 . 2008-02-29 23:48 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
            2008-03-09 14:03 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
            2008-03-09 14:03 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
            2008-03-09 14:03 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
            2008-03-09 01:58 . 2008-03-09 01:58 <REP> dr------- C:\Documents and Settings\All Users\Application Data\SalesMon
            2008-03-06 06:42 . 2008-03-12 22:35 4,158 --a------ C:\WINDOWS\system32\tmp.reg
            2008-03-04 01:24 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
            2008-03-04 01:24 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
            2008-03-04 01:24 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
            2008-03-04 01:24 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
            2008-03-04 01:24 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
            2008-03-04 01:24 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
            2008-03-04 01:24 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
            2008-03-04 01:24 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
            2008-03-04 01:06 . 2008-03-03 19:21 20,260,136 --a------ C:\Program Files\setupfrepro.exe
            2008-03-03 13:41 . 2008-03-03 13:41 54,156 --ah----- C:\WINDOWS\QTFont.qfn
            2008-03-03 13:41 . 2008-03-03 13:41 1,409 --a------ C:\WINDOWS\QTFont.for
            2008-02-23 04:41 . 2008-02-23 04:41 8,192 --ahs---- C:\WINDOWS\Thumbs.db

            .
            (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
            .
            2008-03-13 05:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\X10 Settings
            2008-03-13 00:59 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
            2008-03-13 00:58 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
            2008-03-10 19:46 --------- d-----w C:\Program Files\Common Files
            2008-03-10 12:26 --------- d-----w C:\Documents and Settings\GUILLAUME\Application Data\Vso
            2008-03-10 12:20 --------- d-----w C:\Documents and Settings\GUILLAUME\Application Data\AdobeUM
            2008-03-10 11:03 --------- d-----w C:\Program Files\Shareaza
            2008-03-09 17:55 --------- d-----w C:\Program Files\Google
            2008-03-09 00:49 --------- d-----w C:\Program Files\WinISO
            2008-02-28 13:18 --------- d-----w C:\Program Files\Windows Live
            2008-02-20 17:02 --------- d-----w C:\Program Files\Fichiers communs\logishrd
            2008-02-18 00:40 --------- d-----w C:\Program Files\Wanadoo
            2008-02-13 20:11 --------- d-----w C:\Documents and Settings\GUILLAUME\Application Data\ATI
            2008-02-13 20:11 --------- d-----w C:\Documents and Settings\All Users\Application Data\ATI
            2008-02-13 20:07 --------- d-----w C:\Program Files\ATI Technologies
            2008-02-13 20:06 --------- d--h--w C:\Program Files\InstallShield Installation Information
            2008-02-13 20:06 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\ATI
            2008-02-04 21:45 --------- d-----w C:\Program Files\Fichiers communs\Adobe
            2008-02-01 10:17 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR
            2008-01-26 01:26 --------- d-----w C:\Documents and Settings\GUILLAUME\Application Data\Leadertech
            2008-01-22 21:38 2,845,696 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys
            2008-01-22 20:44 368,640 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll
            2008-01-22 20:43 272,384 ----a-w C:\WINDOWS\system32\ati2dvag.dll
            2008-01-22 20:39 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll
            2008-01-22 20:36 9,949,184 ----a-w C:\WINDOWS\system32\atioglx2.dll
            2008-01-22 20:35 43,520 ----a-w C:\WINDOWS\system32\ati2edxx.dll
            2008-01-22 20:35 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe
            2008-01-22 20:35 147,456 ----a-w C:\WINDOWS\system32\atipdlxx.dll
            2008-01-22 20:35 122,880 ----a-w C:\WINDOWS\system32\Oemdspif.dll
            2008-01-22 20:35 122,880 ----a-w C:\WINDOWS\system32\ati2evxx.dll
            2008-01-22 20:34 512,000 ----a-w C:\WINDOWS\system32\ati2evxx.exe
            2008-01-22 20:33 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL
            2008-01-22 20:25 3,121,920 ----a-w C:\WINDOWS\system32\ati3duag.dll
            2008-01-22 20:14 1,664,256 ----a-w C:\WINDOWS\system32\ativvaxx.dll
            2008-01-22 20:04 46,080 ----a-w C:\WINDOWS\system32\amdpcom32.dll
            2008-01-22 20:01 385,024 ----a-w C:\WINDOWS\system32\atikvmag.dll
            2008-01-22 19:59 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll
            2008-01-22 19:58 5,435,392 ----a-w C:\WINDOWS\system32\atioglxx.dll
            2008-01-22 19:58 49,152 ----a-w C:\WINDOWS\system32\drivers\ati2erec.dll
            2008-01-22 19:57 163,840 ----a-w C:\WINDOWS\system32\atiok3x2.dll
            2008-01-22 19:53 503,808 ----a-w C:\WINDOWS\system32\ati2cqag.dll
            2008-01-22 13:42 593,920 ------w C:\WINDOWS\system32\ati2sgag.exe
            2008-01-17 17:32 --------- d-----w C:\Program Files\Guitar Pro 4
            2008-01-12 17:06 47,360 ----a-w C:\Documents and Settings\GUILLAUME\Application Data\pcouffin.sys
            2007-12-16 22:55 5,243,518 ----a-w C:\Program Files\Shareaza_2.3.0.0.exe
            2007-08-08 21:56 92,064 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmmdm.sys
            2007-08-08 21:56 9,232 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmmdfl.sys
            2007-08-08 21:56 79,328 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmserd.sys
            2007-08-08 21:56 66,656 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmbus.sys
            2007-08-08 21:56 6,208 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmcmnt.sys
            2007-08-08 21:56 5,936 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmwhnt.sys
            2007-08-08 21:56 4,048 -c--a-w C:\Documents and Settings\GUILLAUME\mqdmcr.sys
            2007-08-08 21:56 25,600 -c--a-w C:\Documents and Settings\GUILLAUME\usbsermptxp.sys
            2007-08-08 21:56 22,768 -c--a-w C:\Documents and Settings\GUILLAUME\usbsermpt.sys
            2007-06-14 16:56 278,528 -c--a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
            2006-11-25 00:25 5,291,382 -c----w C:\Program Files\(Codex) - All CODECS for Windows Media Player (dvd codes).zip
            2006-02-19 01:28 12,288 -c--a-w C:\WINDOWS\Fonts\RandFont.dll
            2004-08-10 12:00 65,024 --sha-w C:\WINDOWS\system32\asycfilt.dll
            2006-08-25 15:51 617,472 --sha-w C:\WINDOWS\system32\comctl32.dll
            2004-08-10 12:00 1,028,096 --sha-w C:\WINDOWS\system32\mfc42.dll
            2004-08-10 12:00 57,344 --sha-w C:\WINDOWS\system32\mfc42loc.dll
            2004-08-10 12:00 413,696 --sha-w C:\WINDOWS\system32\msvcp60.dll
            2004-08-10 12:00 343,040 --sha-w C:\WINDOWS\system32\msvcrt.dll
            2004-08-10 12:00 253,952 -csha-w C:\WINDOWS\system32\msvcrt20.dll
            2007-12-04 18:41 550,912 --sha-w C:\WINDOWS\system32\oleaut32.dll
            2004-08-10 12:00 83,456 --sha-w C:\WINDOWS\system32\olepro32.dll
            2004-08-10 12:00 30,749 -csha-w C:\WINDOWS\system32\vbajet32.dll
            .

            ((((((((((((((((((((((((((((( snapshot@2008-03-13_ 0.03.29.29 )))))))))))))))))))))))))))))))))))))))))
            .
            - 2008-02-06 21:39:27 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
            + 2008-03-13 00:00:26 53,248 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
            - 2008-02-06 21:39:28 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
            + 2008-03-13 00:00:26 12,800 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
            - 2008-02-06 21:39:28 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
            + 2008-03-13 00:00:26 473,600 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
            - 2008-02-06 21:39:21 2,676,224 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            + 2008-03-13 00:00:18 2,676,224 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            - 2008-02-06 21:39:22 2,846,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            + 2008-03-13 00:00:20 2,846,720 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            - 2008-02-06 21:39:23 563,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            + 2008-03-13 00:00:21 563,712 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            - 2008-02-06 21:39:23 567,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            + 2008-03-13 00:00:22 567,296 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            - 2008-02-06 21:39:24 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            + 2008-03-13 00:00:23 576,000 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            - 2008-02-06 21:39:25 577,024 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            + 2008-03-13 00:00:23 577,024 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            - 2008-02-06 21:39:25 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            + 2008-03-13 00:00:24 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            - 2008-02-06 21:39:26 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            + 2008-03-13 00:00:24 577,536 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            - 2008-02-06 21:39:29 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            + 2008-03-13 00:00:27 578,560 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
            - 2008-02-06 21:39:29 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
            + 2008-03-13 00:00:27 145,920 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
            - 2008-02-06 21:39:29 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
            + 2008-03-13 00:00:28 159,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
            - 2008-02-06 21:39:30 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
            + 2008-03-13 00:00:28 364,544 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
            - 2008-02-06 21:39:30 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
            + 2008-03-13 00:00:28 178,176 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
            - 2008-02-06 21:39:27 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
            + 2008-03-13 00:00:25 223,232 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
            - 2007-07-24 15:22:01 64,088 -c--a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
            + 2008-03-13 00:36:46 66,936 ----a-w C:\WINDOWS\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
            - 2007-07-24 15:22:01 223,800 -c--a-w C:\WINDOWS\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
            + 2008-03-13 00:36:42 226,656 ----a-w C:\WINDOWS\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
            - 2007-07-11 18:34:11 68,608 -c--a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
            + 2008-03-13 00:39:38 69,120 ----a-w C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
            - 2007-07-11 18:34:24 72,192 -c--a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
            + 2008-03-13 00:39:44 72,192 ----a-w C:\WINDOWS\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
            - 2007-07-11 18:34:24 4,308,992 -c--a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
            + 2008-03-13 00:39:19 4,444,160 ----a-w C:\WINDOWS\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
            - 2007-07-11 18:34:26 482,304 -c--a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
            + 2008-03-13 00:39:47 483,840 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
            - 2007-07-11 18:34:20 2,902,016 -c--a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
            + 2008-03-13 00:39:28 3,036,160 ----a-w C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
            - 2007-07-11 18:34:04 258,048 -c--a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
            + 2008-03-13 00:39:49 258,048 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
            - 2007-07-11 18:34:04 114,176 -c--a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
            + 2008-03-13 00:39:49 113,664 ----a-w C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
            - 2007-07-11 18:34:31 260,096 -c--a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
            + 2008-03-13 00:39:44 261,120 ----a-w C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
            - 2007-07-11 18:34:14 5,156,864 -c--a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
            + 2008-03-13 00:39:24 5,431,296 ----a-w C:\WINDOWS\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
            - 2007-07-11 18:34:10 10,752 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
            + 2008-03-13 00:39:33 10,752 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
            - 2007-07-11 18:34:03 507,904 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
            + 2008-03-13 00:39:27 507,904 ----a-w C:\WINDOWS\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
            - 2007-07-11 18:34:06 13,312 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
            + 2008-03-13 00:39:36 13,312 ----a-w C:\WINDOWS\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
            - 2007-07-11 18:34:22 8,192 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
            + 2008-03-13 00:39:40 8,192 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
            - 2007-07-11 18:34:23 36,864 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
            + 2008-03-13 00:39:41 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
            - 2007-07-11 18:34:23 5,632 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
            + 2008-03-13 00:39:42 6,656 ----a-w C:\WINDOWS\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
            - 2007-07-11 18:34:08 413,696 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
            + 2008-03-13 00:39:50 348,160 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
            - 2007-07-11 18:34:09 36,864 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
            + 2008-03-13 00:39:50 36,864 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
            - 2007-07-11 18:34:09 647,168 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
            + 2008-03-13 00:39:51 655,360 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
            - 2007-07-11 18:34:10 73,728 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
            + 2008-03-13 00:39:52 77,824 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
            - 2007-07-11 18:34:07 749,568 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
            + 2008-03-13 00:39:42 749,568 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
            - 2007-07-11 18:34:33 110,592 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
            + 2008-03-13 00:39:40 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
            - 2007-07-11 18:34:33 372,736 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
            + 2008-03-13 00:39:39 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
            - 2007-07-11 18:34:01 28,672 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
            + 2008-03-13 00:39:47 28,672 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
            - 2007-07-11 18:34:32 667,648 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
            + 2008-03-13 00:39:39 671,744 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
            - 2007-07-11 18:34:33 5,632 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
            + 2008-03-13 00:39:22 5,632 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
            - 2007-07-11 18:34:03 12,800 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
            + 2008-03-13 00:39:48 12,800 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
            - 2007-07-11 18:34:02 32,768 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
            + 2008-03-13 00:39:38 32,768 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
            - 2007-07-11 18:34:02 7,168 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
            + 2008-03-13 00:39:38 7,168 ----a-w C:\WINDOWS\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
            - 2007-07-11 18:34:28 110,592 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
            + 2008-03-13 00:39:43 110,592 ----a-w C:\WINDOWS\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
            - 2007-07-11 18:34:11 81,920 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
            + 2008-03-13 00:39:43 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
            - 2007-07-11 18:34:29 413,696 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
            + 2008-03-13 00:39:27 425,984 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
            - 2007-07-11 18:34:26 716,800 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
            + 2008-03-13 00:39:29 741,376 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
            - 2007-07-11 18:34:05 888,832 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
            + 2008-03-13 00:39:30 933,888 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
            - 2007-07-11 18:34:21 5,001,216 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
            + 2008-03-13 00:39:52 5,070,848 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
            - 2007-07-11 18:34:12 188,416 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
            + 2008-03-13 00:39:51 188,416 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
            - 2007-07-11 18:34:12 397,312 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
            + 2008-03-13 00:39:34 401,408 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
            - 2007-07-11 18:34:13 81,920 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
            + 2008-03-13 00:39:48 81,920 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
            - 2007-07-11 18:34:30 577,536 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
            + 2008-03-13 00:39:22 630,784 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
            - 2007-07-11 18:34:27 372,736 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
            + 2008-03-13 00:39:49 372,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
            - 2007-07-11 18:34:31 258,048 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
            + 2008-03-13 00:39:47 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
            - 2007-07-11 18:34:27 299,008 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
            + 2008-03-13 00:39:45 299,008 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
            - 2007-07-11 18:34:28 131,072 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
            + 2008-03-13 00:39:45 131,072 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
            - 2007-07-11 18:34:11 258,048 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
            + 2008-03-13 00:39:23 258,048 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
            - 2007-07-11 18:34:14 114,688 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
            + 2008-03-13 00:39:23 114,688 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
            - 2007-07-11 18:34:32 835,584 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
            + 2008-03-13 00:39:32 884,736 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
            - 2007-07-11 18:34:15 86,016 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
            + 2008-03-13 00:39:33 90,112 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
            - 2007-07-11 18:34:17 823,296 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
            + 2008-03-13 00:39:31 839,680 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
            - 2007-07-11 18:34:18 5,152,768 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
            + 2008-03-13 00:39:36 5,013,504 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
            - 2007-07-11 18:34:19 2,027,520 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
            + 2008-03-13 00:39:24 2,068,480 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
            - 2007-07-11 18:34:29 2,940,928 -c--a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
            + 2008-03-13 00:39:30 3,076,096 ----a-w C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
            + 2008-03-13 01:52:12 27,136 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\c6772fd12a581ad3be49e3f2a80b5622\Accessibility.ni.dll
            + 2008-03-13 01:52:22 884,736 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\a1d353edc300e3aff0784202f68a657b\AspNetMMCExt.ni.dll
            + 2008-03-13 01:52:23 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\c10ec9b4de2b366236ec83237dc31281\CustomMarshalers.ni.dll
            + 2008-03-13 01:52:23 15,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\dfsvc\837fe02bdcf637d5bf1e5ffb935ebb80\dfsvc.ni.exe
            + 2008-03-13 01:52:26 876,544 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\9710a3c0d11dd264c3a6b88977699e9b\Microsoft.Build.Engine.ni.dll
            + 2008-03-13 01:52:27 81,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e2858a45971fb30b0c0523dbb52c1d4e\Microsoft.Build.Framework.ni.dll
            + 2008-03-13 01:52:33 1,695,744 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\63d69ffdf3c640d2d104a4b74e8115f8\Microsoft.Build.Tasks.ni.dll
            + 2008-03-13 01:52:34 167,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\11cb5418c06e30100616fbf205588489\Microsoft.Build.Utilities.ni.dll
            + 2008-03-13 01:52:38 1,740,800 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\923bd55258380eae77353d36a5a1b08f\Microsoft.VisualBasic.ni.dll
            + 2008-03-13 00:41:05 11,722,752 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni.dll
            + 2008-03-13 01:52:40 1,011,712 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\eee9b48577689e92db5a7b5c5de98d9b\System.Configuration.ni.dll
            + 2008-03-13 00:41:34 7,049,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\5f669e819da7010c1dca347a25597c42\System.Data.ni.dll
            + 2008-03-13 01:52:43 1,798,144 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\c7dea4895e1fa33d65e448c03de48d26\System.Deployment.ni.dll
            + 2008-03-13 00:41:50 10,969,088 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Design\c1e16b40e30a05c39be8aee46311841c\System.Design.ni.dll
            + 2008-03-13 01:52:45 1,224,704 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\914668b240550f529e54bb772c6fc881\System.DirectoryServices.ni.dll
            + 2008-03-13 01:52:46 512,000 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f11bc82c09955cb8438d3885a99c297d\System.DirectoryServices.Protocols.ni.dll
            + 2008-03-13 00:41:54 229,376 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\b974f6c17d17a533adf6e7710c5a62fa\System.Drawing.Design.ni.dll
            + 2008-03-13 00:41:53 1,667,072 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\[u]0[/u]e83aac37b2623f1a24c70979f31dd56\System.Drawing.ni.dll
            + 2008-03-13 01:52:48 659,456 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.ni.dll
            + 2008-03-13 01:52:48 294,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\646131eda5f21f4e6216733d49c22c56\System.EnterpriseServices.Wrapper.dll
            + 2008-03-13 01:52:50 733,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\2b5994269cc5b996231c9b21afea9a91\System.Security.ni.dll
            + 2008-03-13 01:52:51 233,472 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\193ac978af569ad9ee45110b359961b9\System.ServiceProcess.ni.dll
            + 2008-03-13 01:52:52 679,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\12e0aa1030badf4524f897e3f57b037a\System.Transactions.ni.dll
            + 2008-03-13 01:53:17 2,342,912 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\37d87b3cab1c66ec4430ebb2abeaa570\System.Web.Mobile.ni.dll
            + 2008-03-13 01:53:18 237,568 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5b81faf46fc63c20d5339b36edd02fa\System.Web.RegularExpressions.ni.dll
            + 2008-03-13 01:53:21 1,986,560 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\38991368499e2109ea4099a0fe29c5a3\System.Web.Services.ni.dll
            + 2008-03-13 01:53:13 12,509,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\67cfb70213562afe2ca9b9066764af3a\System.Web.ni.dll
            + 2008-03-13 00:42:11 13,193,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3d8c79c45aa674e43f075e2e66b8caf5\System.Windows.Forms.ni.dll
            + 2008-03-13 00:42:20 5,771,264 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\c98cb65a79cfccb44ea727ebe4593ede\System.Xml.ni.dll
            + 2008-03-13 00:41:22 8,265,728 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\ba0e3a22211ba7343e0116b051f2965a\System.ni.dll
            + 2003-07-15 04:57:34 38,968 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\AUTHZAX.DLL
            + 2003-07-15 04:53:06 94,768 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\AW.DLL
            + 2003-07-15 01:14:28 350,264 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\CDLMSO.DLL
            + 2003-07-15 09:18:12 47,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\DFUICOM.EXE
            + 2003-07-15 04:56:54 14,904 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\DSITF.DLL
            + 2003-07-15 04:57:14 98,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\DSSM.EXE
            + 2003-08-13 08:34:38 10,073,144 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\EXCEL.EXE
            + 2003-08-03 16:56:16 1,146,184 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FM20.DLL
            + 2003-07-24 05:01:40 1,949,240 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPCUTL.DLL
            + 2003-07-15 05:36:14 186,424 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPDTC.DLL
            + 2003-07-15 04:40:12 179,768 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPERSON.DLL
            + 2003-07-26 01:00:16 1,157,696 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPSRVUTL.DLL
            + 2003-07-26 01:14:50 799,288 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\FPWEC.DLL
            + 2003-07-15 05:11:42 2,139,192 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\GRAPH.EXE
            + 2003-07-14 20:57:44 87,096 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\IEAWSDC.DLL
            + 2003-07-15 04:53:50 161,336 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\IETAG.DLL
            + 2003-05-28 21:42:48 514,680 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\INTLNAME.DLL
            + 2003-06-18 23:31:44 758,784 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIGRAPH.DLL
            + 2003-06-18 23:31:10 252,928 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIINK.DLL
            + 2003-06-18 23:31:48 17,920 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIMON.DLL
            + 2003-06-18 23:31:48 18,944 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIPPR.DLL
            + 2003-06-18 23:31:46 35,328 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIUI.DLL
            + 2003-06-18 23:31:34 443,904 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MDIVWCTL.DLL
            + 2003-05-28 21:42:50 342,616 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\METCONV.DLL
            + 2003-07-14 20:58:04 230,968 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSCDM.DLL
            + 2003-07-15 04:51:50 116,288 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSCONV97.DLL
            + 2002-12-18 01:08:50 359,600 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSDMENG.DLL
            + 2002-12-18 01:08:54 1,383,592 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSDMINE.DLL
            + 2003-07-15 04:51:44 87,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSENCODE.DLL
            + 2002-04-10 02:14:36 187,560 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSMDUN80.DLL
            + 2003-07-15 04:52:52 17,464 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSMH.DLL
            + 2003-08-08 06:23:16 12,172,336 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSO.DLL
            + 2003-07-14 20:57:16 120,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOAUTH.DLL
            + 2003-07-15 01:14:18 106,552 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOCF.DLL
            + 2003-07-23 20:35:26 127,032 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOCFU.DLL
            + 2003-07-15 04:52:52 27,704 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSODCW.DLL
            + 2003-07-15 04:44:06 25,144 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOEURO.DLL
            + 2003-07-15 04:52:56 55,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOHTMED.EXE
            + 2002-12-18 01:09:24 2,071,752 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOLAP80.DLL
            + 2003-07-11 08:15:48 1,292,872 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSONSEXT.DLL
            + 2003-07-15 09:18:52 376,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSORUN.DLL
            + 2003-07-14 20:52:54 28,224 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOSTYLE.DLL
            + 2003-07-15 04:52:52 35,896 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOSV.DLL
            + 2003-07-15 04:46:16 42,040 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOXEV.DLL
            + 2003-07-15 04:45:12 55,360 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOXMLED.EXE
            + 2003-07-15 04:45:12 39,488 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSOXMLMF.DLL
            + 2003-06-18 23:31:24 1,033,216 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPCORE.DLL
            + 2003-06-18 23:31:50 16,384 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPGIMME.DLL
            + 2003-07-28 18:24:40 5,677,112 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPUB.EXE
            + 2003-06-19 22:05:50 364,648 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSPVIEW.EXE
            + 2003-07-15 04:52:58 41,528 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSSH.DLL
            + 2003-07-15 05:02:14 627,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSTORDB.EXE
            + 2003-07-15 04:56:24 124,984 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSTORE.EXE
            + 2003-07-24 04:40:00 482,872 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSTORES.DLL
            + 2003-07-15 05:00:54 145,984 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\MSWEBCAP.DLL
            + 2003-07-15 04:57:10 56,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\NAME.DLL
            + 2003-07-15 04:56:52 13,888 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\NPOFFICE.DLL
            + 2007-07-24 15:22:01 223,800 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OFFICE.DLL
            + 2003-07-15 09:14:26 283,696 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OIS.EXE
            + 2003-07-15 09:14:26 828,472 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OISAPP.DLL
            + 2003-07-15 09:14:26 27,192 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OISCTRL.DLL
            + 2003-07-15 09:14:26 242,240 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OISGRAPH.DLL
            + 2003-07-15 05:05:24 1,054,264 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OMFC.DLL
            + 2003-08-01 21:09:04 8,086,072 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\OWC11.DLL
            + 2003-07-30 18:40:40 6,133,312 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\POWERPNT.EXE
            + 2003-07-15 09:18:54 430,136 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PP4X322.DLL
            + 2003-07-15 09:18:44 93,752 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PP7X32.DLL
            + 2003-07-31 21:21:08 1,782,840 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PPTVIEW.EXE
            + 2003-07-15 04:40:26 130,104 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PRTF9.DLL
            + 2003-07-15 04:51:12 604,728 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PTXT9.DLL
            + 2003-07-15 04:50:26 551,480 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PUBCONV.DLL
            + 2003-07-15 04:40:16 51,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\PUBTRAP.DLL
            + 2003-05-09 03:54:00 77,824 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\REFEDIT.DLL
            + 2003-07-15 04:57:08 40,512 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\REFIEBAR.DLL
            + 2003-07-14 20:57:08 58,944 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\SEQCHK10.DLL
            + 2003-07-15 04:53:14 11,848 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\SMARTTAGINSTALL.EXE
            + 2003-08-03 16:52:32 2,808,376 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\STSLIST.DLL
            + 2003-07-03 21:19:36 2,502,656 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\VBE6.DLL
            + 2007-07-24 15:22:01 64,088 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\VBIDEPIA.DLL
            + 2003-08-06 19:24:20 12,037,688 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.5614\WINWORD.EXE
            + 2007-05-31 12:41:06 10,352,472 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\EXCEL.EXE
            + 2007-04-19 13:09:30 167,256 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\IETAG.DLL
            + 2007-06-18 16:16:32 12,259,160 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\MSO.DLL
            + 2007-05-10 12:35:04 6,747,480 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\MSPUB.EXE
            + 2007-05-31 12:35:46 133,976 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\PRTF9.DLL
            + 2007-05-31 12:36:08 612,184 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\PTXT9.DLL
            + 2007-05-10 12:34:48 562,528 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\PUBCONV.DLL
            + 2007-05-09 16:19:48 2,585,936 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\VBE6.DLL
            + 2007-05-31 12:37:40 12,310,368 ----a-r C:\WINDOWS\Installer\$PatchCache$\Managed\C040110900063D11C8EF10054038389C\11.0.8173\WINWORD.EXE
            - 2008-03-11 22:44:25 593,920 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
            + 2008-03-13 19:03:12 593,920 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\accicons.exe
            - 2008-03-11 22:44:25 12,288 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
            + 2008-03-13 19:03:12 12,288 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\cagicon.exe
            - 2008-03-11 22:44:25 86,016 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe
            + 2008-03-13 19:03:12 86,016 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\inficon.exe
            - 2008-03-11 22:44:24 135,168 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe
            + 2008-03-13 19:03:12 135,168 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\misc.exe
            - 2008-03-11 22:44:25 11,264 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
            + 2008-03-13 19:03:12 11,264 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\mspicons.exe
            - 2008-03-11 22:44:25 27,136 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
            + 2008-03-13 19:03:12 27,136 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\oisicon.exe
            - 2008-03-11 22:44:25 4,096 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
            + 2008-03-13 19:03:12 4,096 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\opwicon.exe
            - 2008-03-11 22:44:25 794,624 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
            + 2008-03-13 19:03:12 794,624 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\outicon.exe
            - 2008-03-11 22:44:24 249,856 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
            + 2008-03-13 19:03:12 249,856 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
            - 2008-03-11 22:44:24 61,440 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
            + 2008-03-13 19:03:12 61,440 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pubs.exe
            - 2008-03-11 22:44:25 23,040 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
            + 2008-03-13 19:03:12 23,040 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\unbndico.exe
            - 2008-03-11 22:44:24 286,720 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
            + 2008-03-13 19:03:12 286,720 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
            - 2008-03-11 22:44:24 409,600 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
            + 2008-03-13 19:03:12 409,600 ----a-r C:\WINDOWS\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
            - 2005-09-23 06:28:52 72,704 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
            + 2007-10-24 00:47:38 82,944 ----a-w C:\WINDOWS\Microsoft.NET\Framework\NETFXSBS10.exe
            - 2005-09-23 06:28:52 7,680 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
            + 2007-10-24 00:47:38 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp10.dll
            - 2005-09-23 06:28:56 7,680 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
            + 2007-10-24 00:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
            - 2005-09-23 06:28:58 7,680 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
            + 2007-10-24 00:47:42 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
            - 2005-09-23 06:28:56 7,680 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
            + 2007-10-24 00:47:40 16,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\SharedReg12.dll
            - 2005-09-23 06:28:52 86,528 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
            + 2007-10-24 00:47:38 97,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
            - 2005-09-23 06:28:36 18,944 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
            + 2007-10-24 00:47:26 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
            - 2005-09-23 06:28:42 136,192 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
            + 2007-10-24 00:47:30 145,408 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
            - 2005-09-23 06:28:44 4,608 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
            + 2007-10-24 00:47:32 13,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
            - 2005-09-23 06:29:04 183,808 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
            + 2007-10-24 00:47:48 193,016 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
            - 2005-09-23 06:28:28 208,896 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
            + 2007-10-24 00:47:20 218,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
            - 2005-09-23 06:28:56 10,752 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
            + 2007-10-24 00:47:40 10,752 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
            - 2005-09-23 06:28:58 138,240 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
            + 2007-10-24 00:47:42 147,968 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
            - 2005-09-23 06:28:36 87,552 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
            + 2007-10-24 00:47:26 99,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\alink.dll
            - 2007-04-13 01:21:18 58,712 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
            + 2007-10-24 00:47:42 59,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
            - 2005-09-23 06:28:32 36,864 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
            + 2007-10-24 00:47:22 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
            - 2007-04-13 01:20:52 10,752 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
            + 2007-10-24 00:47:22 22,024 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
            - 2007-04-13 01:20:52 8,192 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
            + 2007-10-24 00:47:22 17,928 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
            - 2007-04-13 01:20:52 23,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
            + 2007-10-24 00:47:22 33,288 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
            - 2007-04-13 01:20:50 75,264 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
            + 2007-10-24 00:47:22 84,480 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
            - 2005-09-23 06:28:32 13,824 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
            + 2007-10-24 00:47:22 24,576 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
            - 2007-04-13 01:20:52 32,608 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
            + 2007-10-24 00:47:22 32,776 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
            - 2005-09-23 06:28:32 106,496 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
            + 2007-10-24 00:47:22 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
            - 2007-04-13 01:20:52 33,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
            + 2007-10-24 00:47:22 33,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
            - 2007-04-13 01:20:52 32,600 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
            + 2007-10-24 00:47:22 33,280 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
            - 2007-04-13 01:20:52 507,904 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
            + 2007-10-24 00:47:22 507,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
            - 2005-09-23 06:28:56 106,496 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
            + 2007-10-24 00:47:40 106,496 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
            - 2007-04-13 01:21:16 88,576 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
            + 2007-10-24 00:47:40 101,896 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
            - 2005-09-23 06:28:42 76,984 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
            + 2007-10-24 00:47:30 80,376 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\csc.exe
            - 2005-09-23 06:28:42 1,144,832 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
            + 2007-10-24 00:47:30 1,162,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
            - 2005-09-23 06:28:42 13,312 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
            + 2007-10-24 00:47:30 13,312 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
            - 2005-09-23 06:28:58 17,920 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
            + 2007-10-24 00:47:42 27,136 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll
            - 2005-09-23 06:28:56 68,608 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
            + 2007-10-24 00:47:40 69,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
            - 2005-09-23 06:28:44 31,936 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
            + 2007-10-24 00:47:30 35,320 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
            - 2005-09-23 06:28:38 52,736 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
            + 2007-10-24 00:47:28 66,552 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
            - 2007-04-13 01:20:58 5,120 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
            + 2007-10-24 00:47:28 5,120 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
            - 2005-09-23 06:29:12 547,840 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
            + 2007-10-24 00:47:54 572,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
            - 2005-09-23 06:28:56 788,992 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
            + 2007-10-24 00:47:40 798,224 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
            - 2005-09-23 06:28:50 9,216 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
            + 2007-10-24 00:47:36 18,936 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll
            - 2007-04-13 01:21:16 9,728 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
            + 2007-10-24 00:47:40 9,728 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
            - 2005-09-23 06:28:56 8,192 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
            + 2007-10-24 00:47:40 8,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
            - 2005-09-23 06:28:56 36,864 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
            + 2007-10-24 00:47:40 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
            - 2005-09-23 06:28:56 5,632 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
            + 2007-10-24 00:47:40 6,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
            - 2007-04-13 01:21:16 228,688 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
            + 2007-10-24 00:47:40 230,904 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
            - 2007-04-13 01:21:16 28,672 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
            + 2007-10-24 00:47:40 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
            - 2005-09-23 06:28:56 55,296 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
            + 2007-10-24 00:47:40 65,032 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
            - 2005-09-23 06:28:56 72,192 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
            + 2007-10-24 00:47:40 72,192 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
            - 2005-09-23 06:28:48 40,960 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
            + 2007-10-24 00:47:34 40,960 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\jsc.exe
            - 2007-04-13 01:21:10 413,696 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
            + 2007-10-24 00:47:36 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
            - 2005-09-23 06:28:48 36,864 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
            + 2007-10-24 00:47:36 36,864 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
            - 2007-04-13 01:21:10 647,168 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
            + 2007-10-24 00:47:36 655,360 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
            - 2005-09-23 06:28:48 73,728 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
            + 2007-10-24 00:47:36 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
            - 2007-04-13 01:21:08 749,568 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
            + 2007-10-24 00:47:34 749,568 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
            - 2005-09-23 06:29:10 110,592 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
            + 2007-10-24 00:47:52 110,592 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
            - 2005-09-23 06:29:10 372,736 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
            + 2007-10-24 00:47:52 372,736 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
            - 2005-09-23 06:29:08 667,648 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
            + 2007-10-24 00:47:50 671,744 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
            - 2005-09-23 06:28:30 28,672 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
            + 2007-10-24 00:47:20 28,672 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
            - 2005-09-23 06:29:10 5,632 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
            + 2007-10-24 00:47:52 5,632 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
            - 2005-09-23 06:28:30 32,768 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
            + 2007-10-24 00:47:20 32,768 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
            - 2005-09-23 06:28:30 12,800 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
            + 2007-10-24 00:47:20 12,800 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
            - 2005-09-23 06:28:30 7,168 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
            + 2007-10-24 00:47:20 7,168 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
            - 2007-04-13 01:20:52 87,040 -c--a-w C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
            + 2007-10-24 00:47:22 97,792 ----a-w C:\WINDO
            0
            1. Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 12:51:40, on 14/03/2008
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16608)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
              C:\WINDOWS\RTHDCPL.EXE
              C:\WINDOWS\system32\CmUCReye.exe
              C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
              C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
              C:\Program Files\Medion Info Display\MdionLCM.exe
              C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
              C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
              C:\Program Files\Logitech\QuickCam\Quickcam.exe
              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              C:\WINDOWS\eHome\ehRecvr.exe
              C:\WINDOWS\eHome\ehSched.exe
              C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\Windows Media Player\WMPNSCFG.exe
              C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
              C:\Program Files\Google\Google Updater\GoogleUpdater.exe
              C:\WINDOWS\system32\VirtualExpander\VirtualExpander.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              C:\WINDOWS\system32\HPZipm12.exe
              C:\WINDOWS\system32\PnkBstrA.exe
              C:\WINDOWS\system32\svchost.exe
              C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              C:\WINDOWS\system32\dllhost.exe
              C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
              C:\Program Files\Windows Live\Messenger\usnsvc.exe
              C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
              C:\WINDOWS\system32\notepad.exe
              C:\WINDOWS\explorer.exe
              C:\Program Files\internet explorer\iexplore.exe
              C:\WINDOWS\system32\cmd.exe
              C:\Program Files\Trend Micro\HijackThis\CD17.exe

              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
              O3 - Toolbar: (no name) - {196C3A46-4758-433D-A600-802C804AF39C} - (no file)
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
              O4 - HKLM\..\Run: [Adobe] "C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe"
              O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
              O4 - HKLM\..\Run: [CmUCRRun] C:\WINDOWS\system32\CmUCReye.exe
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
              O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
              O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
              O4 - HKLM\..\Run: [MedionVFD] "C:\Program Files\Medion Info Display\MdionLCM.exe"
              O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
              O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
              O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              O4 - HKLM\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /QS
              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
              O4 - Startup: VirtualExpander.lnk = C:\WINDOWS\system32\VirtualExpander\VirtualExpander.exe
              O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
              O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
              O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
              O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
              O16 - DPF: {1A26F07F-0D60-4835-91CF-1E1766A0EC56} (WebInstall Class) - http://scanner2.malware-scan.com/setup/webinst_fr.cab
              O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
              O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
              O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://charack24.spaces.live.com/PhotoUpload/MsnPUpld.cab
              O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
              O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
              O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
              O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
              O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
              O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
              O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
              O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
              O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
              0
          2. Re ,

            Relance hijackthis , Choisis ' Do a system scan ' Et fixe ces lignes : ( coche la case à leurs gauches > ' fixchecked ')

            O3 - Toolbar: (no name) - {196C3A46-4758-433D-A600-802C804AF39C} - (no file)
            O16 - DPF: {1A26F07F-0D60-4835-91CF-1E1766A0EC56} (WebInstall Class) - http://scanner2.malware-scan.com/setup/webinst_fr.cab

            ***********************************

            Ta version d'Adobe n'est pas à jour , désinstalle ta version actuelle en passant par ' ajout et supréssion de programmes '

            Puis télécharge la dernière , via ce site --> https://get2.adobe.com/reader/otherversions/

            Bulletin de sécurité sur les versions Adobe 7.0.8 et antérieures :

            https://www.adobe.com/support/security/bulletins/apsb07-01.html

            *********************************

            Délaisse Avast au profit d'Antivir , contrairement à ce que tout le monde pense , Avast n'est pas aussi bien que l'on pourrais le croire regarde le classement des AV
            et constate par toi même → Avast vs Antivir

            Vire Avast → Désinstalle Avast 'proprement' ( merci espion3004)

            Et télécharge Antivir ( PersonnalEdition Classic) → ici

            Tuto Installation + configuration Antivir → https://www.malekal.com/avira-free-security-antivirus-gratuit/

            Tuto Installation : → https://www.astucesinternet.com/modules/news/article.php?storyid=253

            Pour le rendre encore plus discret....

            ****************************

            Télécharge Cleanup
            Lance-le et choisi l'option ' cleanup! '

            Tuto: http://pageperso.aol.fr/balltrap34/democleanup.htm ( merci à balltrap34 )

            ***********************

            Télécharge clean : http://www.malekal.com/download/clean.zip

            Une fois téléchargé et dézippé ( clique droit , extraire tout) , lance clean.cmd ( ou clean ), Choisi l'option 1 et poste moi le rapport.(- Où est le rapport clean ? : « Poste de travail » / double clic sur disque « C / » double-clic sur « rapport_clean.txt » et « copier/coller le contenu » sur le forum. )

            a+
            0
            1. avast moyen meme avec la licence pro??? :-(
              0
              1. Ah ok tu l'as payé ?

                Dans ce cas tu attendras la fin de ta license pour télécharger Antivir ;)

                A+
                0
              2. @Utilisateur anonyme15/03/2008 a 11:12:01,60

                *** Recherche des fichiers dans C:

                *** Recherche des fichiers dans C:\WINDOWS\

                *** Recherche des fichiers dans C:\WINDOWS\system32

                *** Recherche des fichiers dans C:\Program Files

                il n'y a que ca comme contenu du rapport, normal?
                0
            2. Re , oui c'est même mieux ;)

              Vire Cleanup
              Vire clean

              ***************
              Ferme toutes les applications en cours, puis télécharge ToolsCleaner2 sur ton Bureau.

              # Double clique sur ToolsCleaner2.exe >
              # Clique sur .Recherche
              # puis sur Suppression quand la liste est trouvée.
              # Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
              # Note : ton bureau RISQUE de disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :

              CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches.
              Puis rends toi à l'onglet "Processus". Clique en haut à gauche sur Fichiers et choisis "Exécuter"

              Tape explorer.exe et valide. Cela fera re-apparaître le Bureau

              Tuto : http://www.commentcamarche.net/faq/sujet 8341 toolscleaner suppression des fix de force brute ( merci espion3004 )

              ************

              Maintenant que ton PC n'est plus infecté, désactive ta "Restauration du système" puis réactive la, ce qui créer un point de restauration sain...

              Désactivation :
              Clique droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > coche la case "Désactiver la Restauration du système sur tous les lecteurs"
              > Applique patiente jusqu’à ce que cela soit marqué "désactivé" puis Ok.

              Activation :
              Suivre le même chemin ; décoche la case "Désactiver la Restauration du système sur tous les lecteurs"
              > Applique attends que cela soit à nouveau sur "surveillance" puis Ok. Redémarre l'ordinateur.

              *********

              A+
              0
              1. -->- Recherche:

                C:\Qoobox: trouvé !
                C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
                C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
                C:\Documents and Settings\GUILLAUME\Bureau\HijackThis.lnk: trouvé !
                C:\Documents and Settings\GUILLAUME\Bureau\VirtumundoBeGone.exe: trouvé !
                C:\Documents and Settings\GUILLAUME\Bureau\OtMoveIt2.exe: trouvé !
                C:\Documents and Settings\GUILLAUME\Bureau\ComboFix.exe: trouvé !
                C:\Documents and Settings\GUILLAUME\Bureau\vundoFix.exe: trouvé !
                C:\Program Files\Trend Micro\HijackThis: trouvé !
                C:\QooBox\Quarantine\C\Combofix: trouvé !
                C:\QooBox\Quarantine\C\Vundofix backups: trouvé !
                C:\QooBox\Quarantine\C\_OtMoveIt: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\tar.exe: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\remove.reg: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\pskill.exe: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\LFiles.exe: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\gzip.exe: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\delsiri.cmd: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\delr.cmd: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\del3.cmd: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\del2.cmd: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\clean.cmd: trouvé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\cherche.cmd: trouvé !

                ---------------------------------
                -->- Suppression:

                C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
                C:\Documents and Settings\GUILLAUME\Bureau\HijackThis.lnk: supprimé !
                C:\Documents and Settings\GUILLAUME\Bureau\VirtumundoBeGone.exe: supprimé !
                C:\Documents and Settings\GUILLAUME\Bureau\OtMoveIt2.exe: supprimé !
                C:\Documents and Settings\GUILLAUME\Bureau\ComboFix.exe: supprimé !
                C:\Documents and Settings\GUILLAUME\Bureau\vundoFix.exe: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\tar.exe: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\remove.reg: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\pskill.exe: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\LFiles.exe: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\gzip.exe: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\delsiri.cmd: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\delr.cmd: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\del3.cmd: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\del2.cmd: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\clean.cmd: supprimé !
                C:\RECYCLER\S-1-5-21-1826256495-3456781307-3605919969-1005\Dc8\clean\cherche.cmd: supprimé !
                C:\Qoobox: supprimé !
                C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
                C:\Program Files\Trend Micro\HijackThis: supprimé !

                Corbeille vidée!
                0
            3. Re ,

              Pour finir vire Toolcleaner.

              ********************

              Ton pc est désinfecté
              .

              Pour sécuriser plus ,

              télécharge un pare-feu :

              ZoneAlarm Lit bien tout l'article pour éviter les surprises.

              Des soucis avec ?

              *****************

              Télécharge Spybot (-> Scan passif + Résident )
              +
              Télécharge SpywareGuard ( ce logiciel complete très bien Spybot)

              ***************

              Voici 2 liens pour booster ton pc ;)

              http://www.commentcamarche.net/faq/sujet 3446 windows xp mon pc rame que faire

              http://www.commentcamarche.net/faq/sujet 2794 pc ou ordinateur lent windows tres lent au demarrage

              ************

              -------------Infos-------------

              Ce lien explique ce que sont les pirates , leurs méthodes , comment les contrer , et la prévention ( merci espion3004 )

              *****************

              Pourquoi sécuriser mon pc ?

              Trojan ? Comment ça marche ?

              *************

              A + ;)
              0
              1. plusieurs messages d'erreur s'ouvrent au démarrage nottament

                message ati : impossible de charger le fichier ou l'assembly 'MOM.Implementation' ou une de ses dépendances. le fichier spécifié est introuvable.

                message microsoft.net framework : une exception non gérée s'est produite dans un composant de votre application. si vous cliquez sur continuer, votre application ignore cette erreur et essaie de continuer. la référence d'objet n'est pas définie à une instance d'un objet.

                VOICI LES DETAILS:Consultez la fin de ce message pour plus de détails sur l'appel du débogage
                juste-à-temps (JIT) à la place de cette boîte de dialogue.

                ************** Texte de l'exception **************
                System.NullReferenceException: La référence d'objet n'est pas définie à une instance d'un objet.
                at HP.CUE.Video.PlaybackControl.UpdateProgressBar()
                at HP.CUE.Video.PlaybackControl._ProgressTimer_Tick(Object sender, EventArgs e)
                at System.Windows.Forms.Timer.OnTick(EventArgs e)
                at System.Windows.Forms.Timer.Callback(IntPtr hWnd, Int32 msg, IntPtr idEvent, IntPtr dwTime)

                ************** Assemblys chargés **************
                mscorlib
                Version de l'assembly : 1.0.5000.0
                Version Win32 : 1.1.4322.2407
                CodeBase : file:///c:/windows/microsoft.net/framework/v1.1.4322/mscorlib.dll
                ----------------------------------------
                hpqimzone
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///C:/Program%20Files/HP/Digital%20Imaging/bin/hpqimzone.exe
                ----------------------------------------
                hpqiface
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqiface/4.0.0.0__a53cf5803f4c3827/hpqiface.dll
                ----------------------------------------
                System.Windows.Forms
                Version de l'assembly : 1.0.5000.0
                Version Win32 : 1.1.4322.2032
                CodeBase : file:///c:/windows/assembly/gac/system.windows.forms/1.0.5000.0__b77a5c561934e089/system.windows.forms.dll
                ----------------------------------------
                System.Drawing
                Version de l'assembly : 1.0.5000.0
                Version Win32 : 1.1.4322.2032
                CodeBase : file:///c:/windows/assembly/gac/system.drawing/1.0.5000.0__b03f5f7f11d50a3a/system.drawing.dll
                ----------------------------------------
                System
                Version de l'assembly : 1.0.5000.0
                Version Win32 : 1.1.4322.2407
                CodeBase : file:///c:/windows/assembly/gac/system/1.0.5000.0__b77a5c561934e089/system.dll
                ----------------------------------------
                hpqcc2
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqcc2/3.0.0.0__a53cf5803f4c3827/hpqcc2.dll
                ----------------------------------------
                hpqutils
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqutils/4.0.0.0__a53cf5803f4c3827/hpqutils.dll
                ----------------------------------------
                hpqfmrsc
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqfmrsc/4.0.0.0__a53cf5803f4c3827/hpqfmrsc.dll
                ----------------------------------------
                hpqtray
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqtray/4.0.0.0__a53cf5803f4c3827/hpqtray.dll
                ----------------------------------------
                hpqovskn
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqovskn/3.0.0.0__a53cf5803f4c3827/hpqovskn.dll
                ----------------------------------------
                hpqthumb
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqthumb/3.0.0.0__a53cf5803f4c3827/hpqthumb.dll
                ----------------------------------------
                hpqimvlt
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqimvlt/3.0.0.0__a53cf5803f4c3827/hpqimvlt.dll
                ----------------------------------------
                hpqimgrc
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqimgrc/4.0.0.0__a53cf5803f4c3827/hpqimgrc.dll
                ----------------------------------------
                hpqimzone.resources
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.099.000
                CodeBase : file:///C:/Program%20Files/HP/Digital%20Imaging/bin/fr/hpqimzone.resources.DLL
                ----------------------------------------
                hpqntrop
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqntrop/4.0.0.0__a53cf5803f4c3827/hpqntrop.dll
                ----------------------------------------
                Interop.hpqcxm08
                Version de l'assembly : 3.0.0.0
                Version Win32 : 70.0.170.000
                CodeBase : file:///c:/windows/assembly/gac/interop.hpqcxm08/3.0.0.0__a53cf5803f4c3827/interop.hpqcxm08.dll
                ----------------------------------------
                System.Xml
                Version de l'assembly : 1.0.5000.0
                Version Win32 : 1.1.4322.2032
                CodeBase : file:///c:/windows/assembly/gac/system.xml/1.0.5000.0__b77a5c561934e089/system.xml.dll
                ----------------------------------------
                LEAD
                Version de l'assembly : 13.0.0.113
                Version Win32 : 13.0.0.113
                CodeBase : file:///c:/windows/assembly/gac/lead/13.0.0.113__9cf889f53ea9b907/lead.dll
                ----------------------------------------
                LEAD.Wrapper
                Version de l'assembly : 13.0.0.113
                Version Win32 : 13.0.0.113
                CodeBase : file:///c:/windows/assembly/gac/lead.wrapper/13.0.0.113__9cf889f53ea9b907/lead.wrapper.dll
                ----------------------------------------
                hpqtray.resources
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.099.000
                CodeBase : file:///c:/windows/assembly/gac/hpqtray.resources/4.0.0.0_fr_a53cf5803f4c3827/hpqtray.resources.dll
                ----------------------------------------
                mscorlib.resources
                Version de l'assembly : 1.0.5000.0
                Version Win32 : 1.1.4322.573
                CodeBase : file:///c:/windows/assembly/gac/mscorlib.resources/1.0.5000.0_fr_b77a5c561934e089/mscorlib.resources.dll
                ----------------------------------------
                System.Drawing.resources
                Version de l'assembly : 1.0.5000.0
                Version Win32 : 1.1.4322.573
                CodeBase : file:///c:/windows/assembly/gac/system.drawing.resources/1.0.5000.0_fr_b03f5f7f11d50a3a/system.drawing.resources.dll
                ----------------------------------------
                hpqfmrsc.resources
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.099.000
                CodeBase : file:///c:/windows/assembly/gac/hpqfmrsc.resources/4.0.0.0_fr_a53cf5803f4c3827/hpqfmrsc.resources.dll
                ----------------------------------------
                LEAD.Windows.Forms
                Version de l'assembly : 13.0.0.113
                Version Win32 : 13.0.0.113
                CodeBase : file:///c:/windows/assembly/gac/lead.windows.forms/13.0.0.113__9cf889f53ea9b907/lead.windows.forms.dll
                ----------------------------------------
                LEAD.Drawing
                Version de l'assembly : 13.0.0.113
                Version Win32 : 13.0.0.113
                CodeBase : file:///c:/windows/assembly/gac/lead.drawing/13.0.0.113__9cf889f53ea9b907/lead.drawing.dll
                ----------------------------------------
                interop.hpqimgr
                Version de l'assembly : 4.0.0.0
                Version Win32 : 4.0.0.0
                CodeBase : file:///c:/windows/assembly/gac/interop.hpqimgr/4.0.0.0__a53cf5803f4c3827/interop.hpqimgr.dll
                ----------------------------------------
                hpqasset
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqasset/4.0.0.0__a53cf5803f4c3827/hpqasset.dll
                ----------------------------------------
                System.resources
                Version de l'assembly : 1.0.5000.0
                Version Win32 : 1.1.4322.573
                CodeBase : file:///c:/windows/assembly/gac/system.resources/1.0.5000.0_fr_b77a5c561934e089/system.resources.dll
                ----------------------------------------
                hpqmirsc
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///C:/Program%20Files/HP/Digital%20Imaging/bin/hpqmirsc.DLL
                ----------------------------------------
                hpqmirsc.resources
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.099.000
                CodeBase : file:///C:/Program%20Files/HP/Digital%20Imaging/bin/fr/hpqmirsc.resources.DLL
                ----------------------------------------
                hpqedit
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqedit/3.0.0.0__a53cf5803f4c3827/hpqedit.dll
                ----------------------------------------
                hpqvideo
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqvideo/3.0.0.0__a53cf5803f4c3827/hpqvideo.dll
                ----------------------------------------
                LEAD.Windows.Forms.DrawingContainer
                Version de l'assembly : 13.0.0.113
                Version Win32 : 13.0.0.113
                CodeBase : file:///c:/windows/assembly/gac/lead.windows.forms.drawingcontainer/13.0.0.113__9cf889f53ea9b907/lead.windows.forms.drawingcontainer.dll
                ----------------------------------------
                hpqmdmr
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqmdmr/4.0.0.0__a53cf5803f4c3827/hpqmdmr.dll
                ----------------------------------------
                LEAD.Drawing.Imaging.ImageProcessing
                Version de l'assembly : 13.0.0.113
                Version Win32 : 13.0.0.113
                CodeBase : file:///c:/windows/assembly/gac/lead.drawing.imaging.imageprocessing/13.0.0.113__9cf889f53ea9b907/lead.drawing.imaging.imageprocessing.dll
                ----------------------------------------
                hpqimlib
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqimlib/3.0.0.0__a53cf5803f4c3827/hpqimlib.dll
                ----------------------------------------
                hpqedit.resources
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.099.000
                CodeBase : file:///c:/windows/assembly/gac/hpqedit.resources/3.0.0.0_fr_a53cf5803f4c3827/hpqedit.resources.dll
                ----------------------------------------
                hpqglutl
                Version de l'assembly : 4.0.0.0
                Version Win32 : 065.000.117.000
                CodeBase : file:///c:/windows/assembly/gac/hpqglutl/4.0.0.0__a53cf5803f4c3827/hpqglutl.dll
                ----------------------------------------
                hpqcc2.resources
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.099.000
                CodeBase : file:///c:/windows/assembly/gac/hpqcc2.resources/3.0.0.0_fr_a53cf5803f4c3827/hpqcc2.resources.dll
                ----------------------------------------
                hpqvideo.resources
                Version de l'assembly : 3.0.0.0
                Version Win32 : 065.000.099.000
                CodeBase : file:///C:/Program%20Files/HP/Digital%20Imaging/bin/fr/hpqvideo.resources.DLL
                ----------------------------------------
                interop.hpqvideo
                Version de l'assembly : 4.0.0.0
                Version Win32 : 4.0.0.0
                CodeBase : file:///c:/windows/assembly/gac/interop.hpqvideo/4.0.0.0__a53cf5803f4c3827/interop.hpqvideo.dll
                ----------------------------------------
                SYSTEM.WINDOWS.FORMS.resources
                Version de l'assembly : 1.0.5000.0
                Version Win32 : 1.1.4322.573
                CodeBase : file:///c:/windows/assembly/gac/system.windows.forms.resources/1.0.5000.0_fr_b77a5c561934e089/system.windows.forms.resources.dll
                ----------------------------------------

                ************** Débogage JIT **************
                Pour activer le débogage juste-à-temps (JIT), le fichier de configuration pour cette
                application ou cet ordinateur (machine.config) doit avoir la valeur
                jitDebugging définie dans la section system.windows.forms.
                L'application doit également être compilée avec le débogage
                activé.

                Par exemple :

                <configuration>
                <system.windows.forms jitDebugging="true" />
                </configuration>

                Lorsque le débogage juste-à-temps est activé, les exceptions non gérées
                seront envoyées au débogueur JIT inscrit sur l'ordinateur
                plutôt que d'être gérées par cette boîte de dialogue.
                0
                1. Re , résintalle le Net framework qui doit se trouver dans la liste des programmes installés.

                  A+
                  0
                  Précédent
                  • 1
                  • 2
                  • 3