Malware/Win32/Virus Effaceur etc ... Fermé

Question

Bonjour à tous.

Voici depuis peu j'ai malencontreusement attrapé un virus dont le nom commence par Win32, j'ai pu voir que c'étais un Trojan en cherchant sur internet et par l'alerte de mon antivirus avast. Quand je suis sur internet un tas de publicité ou encore des faux-antivirus (rogues) s'ouvre en page internet pour que je les télécharge.

J'ai fais de multiple scannage et autres avec des logiciel tel que Avast, Ad-Aware, Smiltfraudt.fix, Clean puis tilisé Hijack this ... mais peut etre je ne m'en sers pas très bien et c'est pour celà malgrès que j'ai lu les sujets de quelques utilisateurs ayant eu le même problème que moi, je demande l'aide de quelqu'un pour m'aider à medébarasser de mon problème.

Voici mon rapport hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:16:52, on 17/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\sistray.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
G:\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\PROGRA~1\PHILIP~1\VProperty.exe
G:\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe
G:\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/offres-numericable.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = NUMERICABLE
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Executive Software\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [HP Software Update] "G:\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = G:\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = G:\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

jlpjlp · Answer

slt
colle le rapport smitfraudfix

___________

AVG antispyware
https://www.01net.com/telecharger/
http://free.grisoft.com/doc/download-free-anti-spyware/us/frt/0

Tuto : 
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html


->Relance AVG AS -> "Analyse" ->"Paramètres" 

Sous la question "Comment réagir ?" : 

-> clique sur "Actions recommandées" et choisis "Quarantaines" 
-> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système" 

Si un fichier est infecté en fin d'analyse 

->Clique sur "Appliquer toutes les actions " 

->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous". 

->Enregistre ce fichier texte sur ton bureau ensuite colle le rapport ici


_____________

Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe 
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau. 
Ensuite double clique sur navilog1.exe pour lancer l'installation. 
Une fois l'installation terminée, le fix s'exécutera automatiquement. 
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). 

Laisse-toi guider. Au menu principal, choisis 1 et valides. 
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord) 

Patiente jusqu'au message : 
*** Analyse Termine le ..... *** 
Appuie sur une touche comme demandé, le blocnote va s'ouvrir. 
Copie-colle l'intégralité dans une réponse. Referme le blocnote. 
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

Gwendal · Answer

Je vais essayé les propositions que vous avez citées

Voici pour le moment
Mon rapport Smitfraudfix (éffectué en mode sans echec) :

SmitFraudFix v2.305

Rapport fait à 19:42:07,28, 17/03/2008
Executé à partir de C:\Documents and Settings\Maintenance\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Maintenance


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Maintenance\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\MAINTE~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
 

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{5C4F0C24-5118-4860-87C2-440E793F03EE}: DhcpNameServer=82.216.111.125 82.216.111.124 82.216.111.125 82.216.111.123
HKLM\SYSTEM\CS1\Services\Tcpip\..\{5C4F0C24-5118-4860-87C2-440E793F03EE}: DhcpNameServer=82.216.111.125 82.216.111.124 82.216.111.125 82.216.111.123
HKLM\SYSTEM\CS2\Services\Tcpip\..\{5C4F0C24-5118-4860-87C2-440E793F03EE}: DhcpNameServer=82.216.111.125 82.216.111.124 82.216.111.125 82.216.111.123
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=82.216.111.125 82.216.111.124 82.216.111.125 82.216.111.123
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=82.216.111.125 82.216.111.124 82.216.111.125 82.216.111.123
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=82.216.111.125 82.216.111.124 82.216.111.125 82.216.111.123


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

jlpjlp · Answer

non rien dans smitfraudifx
tu peux faire la suite

Gwendal · Answer

J'ai fais les application avec AVG, tout a été nettoyé mais voici le rapport

Rapport AVG Anti-Spyware :

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	21:38:43 17/03/2008

 + Résultat de l'analyse:	



C:\System Volume Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010405.exe -> Downloader.Agent.dwc : Nettoyé.
C:\System Volume Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010401.exe -> Downloader.Agent.fwr : Nettoyé.
C:\System Volume Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010404.exe -> Downloader.Agent.fwr : Nettoyé.
C:\System Volume Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010398.exe -> Downloader.Agent.gzp : Nettoyé.
C:\Documents and Settings\Maintenance\Cookies\maintenance@numericable.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@numericable.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Maintenance\Cookies\maintenance@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.
C:\Documents and Settings\Maintenance\Cookies\maintenance@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Maintenance\Cookies\maintenance@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Maintenance\Cookies\maintenance@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Nettoyé.
C:\Documents and Settings\Maintenance\Cookies\maintenance@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
C:\Documents and Settings\Maintenance\Cookies\maintenance@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@questionmarket[2].txt -> TrackingCookie.Questionmarket : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Maintenance\Cookies\maintenance@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
G:\Documents and Settings\Gwendal\Cookies\gwendal@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.


Fin du rapport

jlpjlp · Answer

ok colle navilog 










rq:(il faudra desactiver la restauration en fin de desinfection)

Gwendal · Answer

Navilog :

Search Navipromo version 3.5.0 commencé le 17/03/2008 à 21:50:57,34

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 04.03.2008 à 17h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.13 
Système de fichiers : NTFS

Executé en mode sans échec

*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***




*** Recherche dossiers dans "C:\Documents and Settings\Maintenance\applic~1" *** 



*** Recherche dossiers dans "C:\Documents and Settings\Maintenance\locals~1\applic~1" *** 



*** Recherche dossiers dans "C:\Documents and Settings\Maintenance\menudm~1\progra~1" *** 


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans "C:\Documents and Settings\Maintenance\locals~1\applic~1" * 



*** Recherche fichiers *** 




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans C:\WINDOWS\system32 :


* Dans "C:\Documents and Settings\Maintenance\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat OOO-Favorit absent !

4)Recherche fichiers connus :

C:\WINDOWS\system32\accdd.ini2 trouvé ! infection Vundo possible non traitée par cet outil !


*** Analyse terminée le 17/03/2008 à 21:54:47,28 ***

jlpjlp · Answer

ok
une infection vundo!


______



scan avec vundofix (colle le rapport)

Téléchargez VundoFix -> http://www.atribune.org/ccount/click.php?id=4

Double cliquez VundoFix.exe pour l'exécuter.
Quand VundoFix s'ouvre, cliquez sur le bouton Scan for Vundo.
Une fois le scan fini, cliquez sur le bouton Remove Vundo.
Vous recevrez un avertissement vous demandant si vous voulez effacer ces
fichiers répondez en cliquant sur YES
Une fois que vous avez cliqué yes, votre bureau deviendra vide au moment où il
enlève Vundo.

Quand c'est fini, il vous sera demandé de redémarrer votre ordinateur, cliquez
OK.

________



Télécharge Combofix de sUBs : Renomme le avant toute installation, par exemple, nomme le "KillBagle". aide ici : https://forum.pcastuces.com/sujet.asp?f=25&s=37315 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 
Sauvegarde le sur ton bureau et pas ailleurs ! 

Aide à l’utilisation de combofix ici: https://bibou0007.forumpro.fr/login?redirect=%2Ft121-topic 

Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider. 
Attends que combofix ait terminé, un rapport sera créé. Poste le rapport. 
_______



recolle un rapport hijakchits en le renommant surtout!! pour contrer une éventuelle infection de Vundo. 

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste 

Ensuite avec Explorer créer un dossier c:\hijackthis 
Décompresser Hijackthis dans ce dossier. 
C'est important pour les sauvegardes."

Gwendal · Answer

Vundofix n'a pas trouvé de virus par la suite donc je n'ai pas eu de message Mais par contre Combofix a supprimer des fichiers dont celui infecté par un Vundo : Rapport Combofix : ComboFix 08-03-17.1 - Maintenance 2008-03-18 12:31:32.2 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.458 [GMT 1:00] Endroit: C:\Documents and Settings\Maintenance\Bureau\KillBagle.exe [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\WINDOWS\BM5b332b87.xml C:\WINDOWS\pskt.ini C:\WINDOWS\system32\accdd.ini C:\WINDOWS\system32\accdd.ini2 C:\WINDOWS\system32\ddcca.dll C:\WINDOWS\system32 ngxexwm.dll C:\WINDOWS\system32\qmojcqqw.dll C:\WINDOWS\system32 mlpcagq.dll C:\WINDOWS\system32\wwrrimwp.dll . ((((((((((((((((((((((((((((( Fichiers créés 2008-02-18 to 2008-03-18 )))))))))))))))))))))))))))))))))))) . 2008-03-18 11:28 . 2008-03-18 11:28 d-------- C:\VundoFix Backups 2008-03-17 21:41 . 2008-03-17 21:55 d-------- C:\Program Files\Navilog1 2008-03-17 19:35 . 2008-03-17 19:35 d-------- C:\Documents and Settings\Maintenance\Application Data\Grisoft 2008-03-17 19:35 . 2008-03-17 19:35 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2008-03-17 19:35 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-03-17 17:56 . 2008-03-17 19:42 3,558 --a------ C:\WINDOWS\system32 mp.reg 2008-03-17 17:53 . 2008-02-15 18:06 d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau 2008-03-17 17:53 . 2008-02-15 18:06 d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression 2008-03-17 17:53 . 2008-02-15 10:09 d--h----- C:\Documents and Settings\Administrateur\Modèles 2008-03-17 17:53 . 2008-02-15 18:06 d-------- C:\Documents and Settings\Administrateur\Mes documents 2008-03-17 17:53 . 2008-02-15 18:06 dr------- C:\Documents and Settings\Administrateur\Menu Démarrer 2008-03-17 17:53 . 2008-02-15 18:06 d-------- C:\Documents and Settings\Administrateur\Favoris 2008-03-17 17:53 . 2008-02-15 18:06 d-------- C:\Documents and Settings\Administrateur\Bureau 2008-03-17 17:06 . 2008-03-17 17:12 1,354,740 ---hs---- C:\WINDOWS\system32 tqpareu.ini 2008-03-16 22:37 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2008-03-16 22:37 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2008-03-16 22:37 . 2008-03-14 09:09 86,528 --a------ C:\WINDOWS\system32\VACFix.exe 2008-03-16 22:37 . 2008-03-15 17:16 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe 2008-03-16 22:37 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2008-03-16 22:37 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2008-03-16 21:51 . 2008-03-16 21:51 d-------- C:\Documents and Settings\Maintenance\Application Data\Malwarebytes 2008-03-16 21:51 . 2008-03-16 21:51 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-03-16 14:45 . 2008-03-16 14:45 d-------- C:\Program Files\Trend Micro 2008-03-16 12:56 . 2008-03-16 23:17 1,366,983 ---hs---- C:\WINDOWS\system32\wlswersx.ini 2008-03-16 12:50 . 2008-03-16 12:50 63 --a------ C:\WINDOWS\system32\58000a95 2008-03-04 11:45 . 2008-03-04 11:45 8,192 --ahs---- C:\WINDOWS\Thumbs.db 2008-03-03 19:26 . 2008-03-03 19:26 3,580 --a------ C:\WINDOWS\system32\d3d9caps.dat 2008-03-03 19:23 . 2008-03-03 19:23 24 --a------ C:\WINDOWS\cdplayer.ini 2008-03-02 01:55 . 2008-03-02 01:55 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2 2008-03-01 15:55 . 2008-03-01 15:55 d-------- C:\Program Files\Microsoft SQL Server Compact Edition 2008-03-01 15:54 . 2008-03-01 15:54 d-------- C:\Program Files\Windows Live Toolbar 2008-03-01 15:54 . 2008-03-01 15:54 d-------- C:\Program Files\Windows Live Favorites 2008-03-01 15:48 . 2008-03-02 22:48 d-------- C:\Program Files\Windows Live 2008-03-01 15:48 . 2008-03-01 15:52 d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-03-01 15:48 . 2008-03-01 15:48 d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-03-01 13:42 . 2008-03-01 13:42 d--h----- C:\WINDOWS\PIF 2008-03-01 02:10 . 2008-03-02 16:51 d-------- C:\Documents and Settings\Maintenance\Application Data\DivX 2008-03-01 02:06 . 2008-03-01 02:07 d-------- C:\Program Files\DivX 2008-02-29 22:32 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll 2008-02-29 22:32 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll 2008-02-29 22:32 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui 2008-02-29 22:30 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2008-02-29 22:30 . 2004-08-03 23:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys 2008-02-29 22:30 . 2004-08-03 22:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys 2008-02-29 22:30 . 2004-08-03 22:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys 2008-02-29 20:48 . 2008-02-29 20:48 d-------- C:\Program Files\MSBuild 2008-02-29 20:48 . 2008-02-29 20:48 d-------- C:\Program Files\Microsoft Works 2008-02-29 20:47 . 2008-02-29 20:47 d-------- C:\Program Files\Microsoft.NET 2008-02-29 20:42 . 2008-03-12 23:09 d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-02-29 20:41 . 2008-02-29 20:41 dr-h----- C:\MSOCache 2008-02-29 20:33 . 2008-02-29 20:56 d-------- C:\WINDOWS\ShellNew 2008-02-29 18:27 . 2008-02-29 18:27 d-------- C:\Documents and Settings\Maintenance\Application Data\Arcsoft 2008-02-29 18:14 . 2001-08-23 17:47 244,224 --a--c--- C:\WINDOWS\system32\dllcache\camext20.ax 2008-02-29 18:13 . 2001-05-07 01:13 729,088 --a------ C:\WINDOWS\system32\_Source21.Dll 2008-02-29 18:13 . 1996-11-07 22:51 308,736 --a------ C:\WINDOWS\system32\fpxlib.dll 2008-02-29 18:13 . 2001-11-28 22:40 212,992 --a------ C:\WINDOWS\system32\DSCam.Dll 2008-02-29 18:13 . 1999-05-26 09:46 212,480 --a------ C:\WINDOWS\pcdlib32.dll 2008-02-29 18:13 . 2000-07-21 23:42 200,704 --a------ C:\WINDOWS\system32\vortm.dll 2008-02-29 18:13 . 2000-05-18 23:09 120,320 --a------ C:\WINDOWS\system32\winvocon.dll 2008-02-29 18:13 . 1996-11-07 22:51 91,136 --a------ C:\WINDOWS\system32\jpeglib.dll 2008-02-29 18:13 . 2000-01-03 01:03 56,832 --a------ C:\WINDOWS\system32\vidsink.ax 2008-02-29 18:13 . 2001-06-19 19:38 21 --a------ C:\WINDOWS\PB_setup.ini 2008-02-29 18:12 . 2008-02-29 18:13 d-------- C:\Program Files\Philips ToUcam Camera 2008-02-29 18:07 . 2008-02-29 18:07 d-------- C:\Program Files\Fichiers communs\HP 2008-02-29 18:05 . 2008-02-29 18:05 d-------- C:\Program Files\Hewlett-Packard 2008-02-29 18:05 . 2008-02-29 18:05 d-------- C:\Documents and Settings\All Users\Application Data\Hewlett-Packard 2008-02-29 18:05 . 2004-05-11 10:53 626,960 -ra------ C:\WINDOWS\system32\hpvaut32.dll 2008-02-29 18:05 . 2004-05-11 10:53 487,424 -ra------ C:\WINDOWS\system32\hpvcp70.dll 2008-02-29 18:05 . 2004-05-11 10:53 344,064 -ra------ C:\WINDOWS\system32\hpvcr70.dll 2008-02-29 18:05 . 2004-05-11 10:53 44,544 -ra------ C:\WINDOWS\system32\MSXML4a.dll 2008-02-29 18:03 . 2008-02-29 18:03 d-------- C:\Program Files\Fichiers communs\Hewlett-Packard 2008-02-29 18:01 . 2008-02-29 18:02 d-------- C:\WINDOWS\system32\URTTemp 2008-02-29 17:59 . 1998-10-29 16:45 306,688 --a------ C:\WINDOWS\IsUninst.exe 2008-02-29 17:59 . 2004-03-18 16:53 278,584 --a------ C:\WINDOWS\system32\HPZidr12.dll 2008-02-29 17:59 . 2004-03-18 16:56 204,800 --a------ C:\WINDOWS\system32\HPZipr12.dll 2008-02-29 17:59 . 2004-03-18 16:39 94,208 --a------ C:\WINDOWS\system32\HPZipt12.dll 2008-02-29 17:59 . 2004-03-18 16:55 65,536 --a------ C:\WINDOWS\system32\HPZipm12.exe 2008-02-29 17:59 . 2004-03-18 16:38 61,440 --a------ C:\WINDOWS\system32\HPZinw12.exe 2008-02-29 17:59 . 2004-03-18 16:39 57,344 --a------ C:\WINDOWS\system32\HPZisn12.dll 2008-02-29 17:58 . 2008-02-29 18:04 d-------- C:\Program Files\HP 2008-02-29 17:56 . 2008-02-29 22:33 104,258 --a------ C:\WINDOWS\hpoins04.dat 2008-02-29 17:56 . 2004-06-21 19:50 17,176 --------- C:\WINDOWS\hpomdl04.dat 2008-02-29 17:50 . 2008-02-29 17:50 d-------- C:\Documents and Settings\All Users\Application Data\Samsung 2008-02-29 17:33 . 2008-03-10 20:44 69 --a------ C:\WINDOWS\NeroDigital.ini 2008-02-29 17:21 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2008-02-29 17:09 . 2008-02-29 17:09 d-------- C:\Program Files\Real 2008-02-29 17:09 . 2008-02-29 17:09 d-------- C:\Program Files\Google 2008-02-29 17:09 . 2008-02-29 17:09 d-------- C:\Program Files\Fichiers communs\xing shared 2008-02-29 17:09 . 2008-02-29 17:09 d-------- C:\Program Files\Fichiers communs\Real 2008-02-29 16:58 . 2008-02-29 16:58 d-------- C:\Program Files\iTunes 2008-02-29 16:58 . 2008-02-29 16:58 d-------- C:\Program Files\iPod 2008-02-29 16:58 . 2008-03-18 12:25 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-02-29 16:58 . 2008-02-29 16:58 1,409 --a------ C:\WINDOWS\QTFont.for 2008-02-29 16:57 . 2008-02-29 16:57 d-------- C:\Program Files\QuickTime 2008-02-29 16:57 . 2008-02-29 16:57 d-------- C:\Program Files\Bonjour 2008-02-29 16:55 . 2008-02-29 16:55 d-------- C:\Program Files\Fichiers communs\Apple 2008-02-29 16:55 . 2008-02-29 16:55 d-------- C:\Program Files\Apple Software Update 2008-02-29 16:55 . 2008-02-29 16:55 d-------- C:\Documents and Settings\All Users\Application Data\Apple 2008-02-29 16:55 . 2008-02-18 11:16 30,464 --a------ C:\WINDOWS\system32\drivers\usbaapl.sys 2008-02-29 16:47 . 2008-02-29 16:47 d-------- C:\Documents and Settings\Maintenance\Application Data\Shareaza . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-03-03 19:04 --------- d-----w C:\Documents and Settings\Maintenance\Application Data\Ahead 2008-02-29 17:13 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-02-29 15:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer 2008-02-29 14:13 --------- d-----w C:\Documents and Settings\Maintenance\Application Data\Apple Computer 2008-02-29 10:40 --------- d-----w C:\Program Files\Windows Media Connect 2 2008-02-29 10:13 --------- d-----w C:\Program Files\Fichiers communs\InstallShield 2008-02-21 02:05 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys 2008-02-21 02:05 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys 2008-02-21 02:05 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys 2008-02-21 02:05 129,784 ------w C:\WINDOWS\system32\pxafs.dll 2008-02-21 02:05 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe 2008-02-21 02:05 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe 2008-02-21 02:04 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll 2008-02-21 02:04 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll 2008-02-21 02:04 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll 2008-02-21 02:04 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll 2008-02-21 02:04 682,496 ----a-w C:\WINDOWS\system32\DivX.dll 2008-02-21 02:04 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll 2008-02-21 02:04 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll 2008-02-21 02:04 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll 2008-02-21 02:04 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll 2008-02-21 02:04 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll 2008-02-21 02:04 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll 2008-02-21 02:04 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll 2008-02-15 13:48 --------- d-----w C:\Program Files\MSXML 4.0 2008-02-15 11:45 --------- d-----w C:\Documents and Settings\Maintenance\Application Data\vlc 2008-02-15 11:07 --------- d-----w C:\Documents and Settings\Maintenance\Application Data\TuneUp Software 2008-02-15 11:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-02-15 11:05 --------- d-----w C:\Program Files\Fichiers communs\Ahead 2008-02-15 11:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ahead 2008-02-15 11:03 --------- d-----w C:\Program Files\Nero 2008-02-15 11:03 --------- d-----w C:\Documents and Settings\All Users\Application Data\Nero 2008-02-15 11:01 --------- d-----w C:\Program Files\XviD 2008-02-15 10:48 --------- d-----w C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2008-02-15 10:46 --------- d-----w C:\Program Files\Lavasoft 2008-02-15 10:46 --------- d-----w C:\Documents and Settings\Maintenance\Application Data\Lavasoft 2008-02-15 10:45 --------- d-----w C:\Program Files\Executive Software 2008-02-15 10:45 --------- d-----w C:\Documents and Settings\Maintenance\Application Data\Leadertech 2008-02-15 10:43 --------- d-----w C:\Documents and Settings\Maintenance\Application Data\InterVideo 2008-02-15 10:40 --------- d-----w C:\Program Files\InterVideo Information Service 2008-02-15 10:40 --------- d-----w C:\Program Files\Fichiers communs\Ulead 2008-02-15 10:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\InstallShield 2008-02-15 10:39 --------- d-----w C:\Program Files\InterVideo 2008-02-15 10:39 --------- d-----w C:\Program Files\Fichiers communs\InterVideo 2008-02-15 10:33 --------- d-----w C:\Program Files\VideoLAN 2008-02-15 10:32 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-02-15 10:31 --------- d-----w C:\Program Files\CDex_170b2 2008-02-15 10:17 --------- d-----w C:\Program Files\Alwil Software 2008-02-15 09:26 --------- d-----w C:\Program Files\Multimedia V3.54 2008-02-15 09:22 --------- d-----w C:\Program Files\SiSLan 2008-02-15 09:22 --------- d-----w C:\Program Files\C-Media 3D Audio 2008-02-15 09:14 --------- d-----w C:\Program Files\microsoft frontpage 2008-02-15 09:12 --------- d-----w C:\Program Files\Services en ligne 2008-02-01 10:17 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR 2001-11-23 04:08 712,704 ----a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SiSUSBRG"="C:\WINDOWS\SiSUSBrg.exe" [2002-07-12 11:15 106496] "Cmaudio"="cmicnfg.cpl" [] "SiS Tray"="C:\WINDOWS\system32\sistray.EXE" [2003-10-30 14:10 667648] "SiS Windows KeyHook"="C:\WINDOWS\system32\keyhook.exe" [2003-10-30 14:09 249856] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06 40048] "ISUSPM"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 17:34 213936] "DiskeeperSystray"="C:\Program Files\Executive Software\Diskeeper\DkIcon.exe" [2005-07-26 17:52 184408] "NeroFilterCheck"="C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2007-03-01 15:57 153136] "ATIModeChange"="Ati2mdxx.exe" [2001-09-04 16:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2003-09-12 21:10 335872] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-01-31 23:13 385024] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 13:10 267048] "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" [2008-02-29 17:09 185632] "HP Software Update"="G:\HP Software Update\HPWuSchd2.exe" [2004-02-12 13:38 49152] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 15:18 241664] "ToUcamVProperty"="C:\PROGRA~1\PHILIP~1\VProperty.exe" [2003-04-02 14:56 131072] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00 15360] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ D‚marrage rapide du logiciel HP Image Zone.lnk - G:\Digital Imaging\bin\hpqthb08.exe [2004-05-28 23:06:36 53248] HP Digital Imaging Monitor.lnk - G:\Digital Imaging\bin\hpqtra08.exe [2004-05-28 22:31:38 241664] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify qrsppn] rqrsppn.dll [HKEY_CURRENT_USER\software\microsoft\windows\currentversion un-] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un-] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "C:\Program Files\InterVideo\DVD8\WinDVD.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "G:\Program Files\Shareaza\Shareaza.exe"= "C:\Program Files\Bonjour\mDNSResponder.exe"= "C:\Program Files\iTunes\iTunes.exe"= "G:\Jeux\Warcraft III\Warcraft III.exe"= "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= S3 camvid20;Philips ToUcam Camera; Video;C:\WINDOWS\system32\DRIVERS\camdrv21.sys [] S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 22:58] S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08] . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2008-03-16 13:15:00 C:\WINDOWS\Tasks\Maintenance en 1 clic.job" - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe "2008-03-18 11:29:00 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job" - C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-03-18 12:33:12 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run ToUcamVProperty = C:\PROGRA~1\PHILIP~1\VProperty.exe??~?1?\?V?P?r?o?p?e?r?t?y?.?e?x?e??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? Balayage des fichiers cachés ... Scan terminé avec succès Les fichiers cachés: 0 ************************************************************************** . Temps d'accomplissement: 2008-03-18 12:33:55 ComboFix-quarantined-files.txt 2008-03-18 11:33:45 . 2008-03-12 22:09:32 --- E O F ---

Gwendal · Answer

Mon rapport hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:44:22, on 18/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\sistray.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
G:\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\PROGRA~1\PHILIP~1\VProperty.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe
G:\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\svchost.exe
G:\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32
otepad.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32undll32.exe
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/offres-numericable.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Executive Software\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [HP Software Update] "G:\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = G:\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = G:\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: rqrsppn - rqrsppn.dll (file missing)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

jlpjlp · Answer

refais hijakchtis et renomme le cette fois puis recolle le rapport

ensuite dis moi si encore des soucis

Gwendal · Answer

Le rapport hijackthis ci-dessus a été fais après avoir renommé le fichier hijackthis.exe avant installation.

Pour le moment je ne vois plus rien de suspect apparaitre lorsque je suis sur internet.

jlpjlp · Answer

je pense pas car il donne ceci quand tu me colle le rapport

C:\HijackThis\HijackThis.exe 


______________


Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O20 - Winlogon Notify: rqrsppn - rqrsppn.dll (file missing) 

_________________

pour voir si il en reste pas:


 colle le rapport d'un scan en ligne 
avec un des suivants: (désactiver avast si besoin)


bitdefender en ligne : 
http://www.bitdefender.fr/scan_fr/scan8/ie.html 

Panda en ligne : 
http://pandasoftware.fr


___________________

installe spywareblaster pour te proteger de vundo que tu avais

https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/28872.html

Gwendal · Answer

Voilà c'est boin pour le rapport hijack que tu me lavais dis de faire en le renommant :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:07:35, on 18/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\sistray.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
G:\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\PROGRA~1\PHILIP~1\VProperty.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
G:\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
G:\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\agent.exe
C:\eden\eden.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/offres-numericable.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Executive Software\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [HP Software Update] "G:\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = G:\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = G:\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: rqrsppn - rqrsppn.dll (file missing)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Gwendal · Answer

Rapport de bitdefender :

BitDefender Online Scanner - Rapport d'analyseBitDefender Online Scanner  
      Rapport d'analyse généré à: Tue, Mar 18, 2008 - 19:58:51
         
      Voie d'analyse: A:\;C:\;D:\;E:\;F:\;G:\;H:\;  
         
            Statistiques
            Temps00:41:12
            Fichiers101411
            Directoires12659
            Secteurs de boot8
            Archives2029
            Paquets programmes7728
        
            Résultats
            Virus identifiés3
            Fichiers infectés5
            Fichiers suspects0
            Avertissements0
            Désinfectés0
            Fichiers effacés5
        
            Info sur les moteurs
            Définition virus1008515
            Version des moteursAVCORE v1.0 (build 2422) (i386) (Sep 25 2007 
            08:26:36)
            Analyse des plugins16
            Archive des plugins41
            Unpack des plugins7
            E-mail plugins6
            Système plugins5
        
            Paramètres d'analyse
            Première actionDésinfecté
            Seconde ActionSupprimé
            HeuristiqueOui
            Acceptez les avertissementsOui
            Extensions 
            analyséesexe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;
            Excludez les extensions 
            Analyse d'emailsOui
            Analyse des ArchivesOui
            Analyser paquets programmesOui
            Analyse des fichiersOui
            Analyse de bootOui
        
        Fichier analysé Statut
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010446.exeInfecté 
            par: Trojan.Peed.JAS
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010446.exeEchec 
            de la désinfection
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010446.exeSupprimé
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010447.exeInfecté 
            par: Trojan.Peed.JAS
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010447.exeEchec 
            de la désinfection
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010447.exeSupprimé
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010482.dllInfecté 
            par: Trojan.Vundo.DZZ
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010482.dllSupprimé
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010570.exeInfecté 
            par: Trojan.Peed.JAS
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010570.exeEchec 
            de la désinfection
            C:\System Volume 
            Information\_restore{A1EA2651-75FA-4F43-A755-4BAEE964EAA7}\RP48\A0010570.exeSupprimé
            C:\WINDOWS\Downloaded Program Files\webinst.dllDétecté avec: 
            Application.Malwarealarm.B
            C:\WINDOWS\Downloaded Program Files\webinst.dllEchec de la 
            désinfection
            C:\WINDOWS\Downloaded Program Files\webinst.dllSupprimé

jlpjlp · Answer

désactive ta restauration systeme, puis redemarre ton ordi puis reactive la

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fdocid/20020830101856924

_______________

refais bitdefender pour voir si encore des virus et dis moi tes problemes

si pas de soucis et rien dans bitdefender c'est bon

locdog · Answer

bonjour voila depuis un petit moment je suis attaqué parcé ce méme trojan pouvait vous m aider

jlpjlp · Answer

ok



Télécharge Combofix de sUBs : Renomme le avant toute installation, par exemple, nomme le "KillBagle". aide ici : https://forum.pcastuces.com/sujet.asp?f=25&s=37315

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Sauvegarde le sur ton bureau et pas ailleurs !

Aide à l’utilisation de combofix ici: https://bibou0007.forumpro.fr/login?redirect=%2Ft121-topic

Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider.
Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.
_______ 


colle un rapport hijackthis


http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

manuel :
http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

Ensuite avec Explorer créer un dossier c:\hijackthis
Décompresser Hijackthis dans ce dossier.
C'est important pour les sauvegardes."

locdog · Answer

raport hijackthis



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:35:04, on 14/05/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Trust\GM-4200 Gamer Mouse Optical\Panel.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Trust Gaming mouse] "C:\Program Files\Trust\GM-4200 Gamer Mouse Optical\Panel.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: WiFi Station.lnk = ?
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet	ools\BitCometBHO_1.2.2.28.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - https://sdlc-esd.oracle.com/ESD40/JSCDL/jre/6u5-b19/jinstall-6u5-windows-i586-jc.cab?GroupName=JSC&FilePath=/ESD40/JSCDL/jre/6u5-b19/jinstall-6u5-windows-i586-jc.cab&BHost=javadl.sun.com&File=jinstall-6u5-windows-i586-jc.cab&AuthParam=1580944752_ad714b48b0d186f5adbe4ba05260ecbd&ext=.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe

locdog · Answer

ComboFix 08-05-12.1 - geoffrey 2008-05-14 21:41:40.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.2533 [GMT 2:00] Endroit: C:\Documents and Settings\geoffrey\Bureau\ComboFix.exe * Création d'un nouveau point de restauration * Resident AV is active [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\bHklmnmp.ini C:\WINDOWS\system32\bHklmnmp.ini2 C:\WINDOWS\system32\hook.dll C:\WINDOWS\system32\pmnmlkHb.dll . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-04-14 to 2008-05-14 )))))))))))))))))))))))))))))))))))) . 2008-05-14 19:57 . 2008-04-13 19:34 153,088 --a------ C:\WINDOWS\system32\irftp.exe 2008-05-14 19:57 . 2008-04-13 19:34 153,088 --a--c--- C:\WINDOWS\system32\dllcache\irftp.exe 2008-05-14 19:57 . 2008-04-13 19:33 29,184 --a------ C:\WINDOWS\system32\irmon.dll 2008-05-14 19:57 . 2008-04-13 19:33 29,184 --a--c--- C:\WINDOWS\system32\dllcache\irmon.dll 2008-05-14 19:57 . 2008-04-13 19:33 8,192 --a------ C:\WINDOWS\system32\wshirda.dll 2008-05-14 19:57 . 2008-04-13 19:33 8,192 --a--c--- C:\WINDOWS\system32\dllcache\wshirda.dll 2008-05-14 19:56 . 2008-05-14 19:56 d-------- C:\Documents and Settings\geoffrey\Bluetooth Software 2008-05-14 19:52 . 2008-05-14 19:52 d-------- C:\Program Files\WIDCOMM 2008-05-14 19:20 . 2008-05-14 19:20 d-------- C:\Program Files\Enigma Software Group 2008-05-13 21:44 . 2008-05-13 21:47 d--h----- C:\WINDOWS\$hf_mig$ 2008-05-13 21:43 . 2008-03-01 14:58 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-05-13 21:43 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-05-13 21:43 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-05-13 21:43 . 2008-03-01 14:58 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-05-13 21:43 . 2008-03-01 14:58 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-05-13 21:43 . 2008-03-01 14:58 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-05-13 21:43 . 2008-03-01 14:58 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2008-05-13 21:43 . 2008-03-01 14:58 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-05-13 21:43 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-05-12 11:18 . 2008-05-12 11:18 1,160 --a------ C:\WINDOWS\mozver.dat 2008-05-11 21:33 . 2008-05-11 21:33 0 --a------ C:\WINDOWS sreg.dat 2008-05-11 20:19 . 2008-05-11 20:19 d-------- C:\Documents and Settings\geoffrey\Application Data\Grisoft 2008-05-11 20:19 . 2008-05-11 20:19 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2008-05-11 20:19 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-05-11 19:46 . 2008-05-11 19:46 0 --ah----- C:\WINDOWS\system32\config\systemprofile tuser.dat.LOG 2008-05-11 18:54 . 2008-05-11 18:54 d-------- C:\VundoFix Backups 2008-05-11 18:37 . 2008-05-11 18:37 d-------- C:\Program Files\Trend Micro 2008-05-11 18:37 . 2008-05-11 18:37 d-------- C:\Deckard 2008-05-11 11:07 . 2008-05-14 19:39 d-------- C:\WINDOWS\BDOSCAN8 2008-05-10 21:24 . 2008-05-10 21:24 d-------- C:\Documents and Settings\geoffrey\Application Data\Ubisoft 2008-05-10 21:20 . 2008-05-10 21:20 98,304 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2008-05-10 21:12 . 2008-05-10 21:24 d-------- C:\Documents and Settings\geoffrey\Application Data\LimeWire 2008-05-10 21:01 . 2008-05-10 21:01 d-------- C:\WINDOWS\Sun 2008-05-10 20:55 . 2008-05-10 20:55 d-------- C:\Program Files\Java 2008-05-10 20:55 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-05-10 20:54 . 2008-05-10 20:54 d-------- C:\Program Files\Fichiers communs\Java 2008-05-10 19:34 . 2008-04-13 11:45 26,368 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2008-05-10 10:57 . 2008-05-10 19:32 d-------- C:\Program Files\Steam 2008-05-09 23:42 . 2008-05-09 23:42 d-------- C:\Documents and Settings\All Users\Application Data\ATI 2008-05-09 23:41 . 2008-05-09 23:41 0 --a------ C:\WINDOWS\ativpsrm.bin 2008-05-09 23:28 . 2008-05-09 23:28 d----c--- C:\ATI 2008-05-09 23:12 . 2008-05-09 23:12 d-------- C:\Program Files\MSBuild 2008-05-09 23:09 . 2008-05-09 23:13 d-------- C:\WINDOWS\system32\XPSViewer 2008-05-09 23:08 . 2008-05-09 23:08 d-------- C:\Program Files\Reference Assemblies 2008-05-09 23:07 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll 2008-05-09 23:05 . 2008-05-09 23:05 d-------- C:\Documents and Settings\All Users\Application Data\Ubisoft 2008-05-09 23:03 . 2007-03-12 16:42 3,495,784 --a------ C:\WINDOWS\system32\d3dx9_33.dll 2008-05-09 22:55 . 2008-05-09 22:55 d-------- C:\Program Files\Ubisoft 2008-05-09 22:51 . 2008-05-09 22:51 d-------- C:\Program Files\DAEMON Tools Lite 2008-05-09 22:23 . 2008-05-09 22:23 d-------- C:\Documents and Settings\geoffrey\Application Data\DAEMON Tools 2008-05-09 22:23 . 2008-05-09 22:23 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-05-09 22:22 . 2008-05-09 22:22 d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus! 2008-05-09 22:21 . 2008-05-09 22:21 d-------- C:\Program Files\Radical Games 2008-05-09 22:17 . 2008-05-09 22:17 d-------- C:\Program Files\Trust 2008-05-09 22:17 . 2006-12-26 17:53 2,637,824 --a------ C:\WINDOWS\system32\XWheel.dll 2008-05-09 22:17 . 2006-12-27 18:44 1,146,880 --a------ C:\WINDOWS\system32\MousePage.dll 2008-05-09 22:17 . 2006-12-26 17:53 679,936 --a------ C:\WINDOWS\system32\XIndicator.dll 2008-05-09 22:17 . 2006-12-29 16:49 27,648 --a------ C:\WINDOWS\system32\drivers\GMFilter.sys 2008-05-09 20:33 . 2008-05-12 20:13 d-------- C:\Documents and Settings\geoffrey\Contacts 2008-05-09 20:32 . 2008-05-09 20:32 d----c--- C:\WINDOWS\system32\DRVSTORE 2008-05-09 20:32 . 2008-05-09 20:32 d-------- C:\Program Files\Messenger Plus! Live 2008-05-09 20:32 . 2008-05-09 20:32 268 --ah-c--- C:\sqmdata00.sqm 2008-05-09 20:32 . 2008-05-09 20:32 244 --ah-c--- C:\sqmnoopt00.sqm 2008-05-09 14:15 . 2008-05-09 14:15 d-------- C:\Program Files\Avira 2008-05-09 14:15 . 2008-05-09 14:15 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-05-09 14:13 . 2008-04-13 19:33 77,312 --a------ C:\WINDOWS\system32\usbui.dll 2008-05-09 14:13 . 2008-04-13 18:57 58,752 --a------ C:\WINDOWS\system32\drivers edbook.sys 2008-05-09 14:13 . 2008-04-13 11:45 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys 2008-05-09 14:13 . 2001-08-17 22:59 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2008-05-09 14:12 . 2008-05-09 20:32 d-------- C:\Program Files\Windows Live 2008-05-09 14:12 . 2008-05-09 20:31 d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-05-09 14:12 . 2008-05-09 14:12 d--h----- C:\Documents and Settings\Default User\Voisinage r‚seau 2008-05-09 14:12 . 2008-05-09 14:12 d--h----- C:\Documents and Settings\Default User\Voisinage d'impression 2008-05-09 14:12 . 2008-05-09 13:15 d--h----- C:\Documents and Settings\Default User\ModŠles 2008-05-09 14:12 . 2008-05-09 14:12 d-------- C:\Documents and Settings\Default User\Mes documents 2008-05-09 14:12 . 2008-05-09 14:12 dr------- C:\Documents and Settings\Default User\Menu D‚marrer 2008-05-09 14:12 . 2008-05-09 14:12 d-------- C:\Documents and Settings\Default User\Favoris 2008-05-09 14:12 . 2008-05-09 14:12 d-------- C:\Documents and Settings\Default User\Bureau 2008-05-09 14:12 . 2008-05-09 14:12 d--h----- C:\Documents and Settings\All Users\ModŠles 2008-05-09 14:12 . 2008-05-14 19:56 dr------- C:\Documents and Settings\All Users\Menu D‚marrer 2008-05-09 14:12 . 2008-05-09 14:12 d-------- C:\Documents and Settings\All Users\Favoris 2008-05-09 14:12 . 2008-05-09 14:08 dr------- C:\Documents and Settings\All Users\Documents 2008-05-09 14:12 . 2008-05-14 19:32 d-------- C:\Documents and Settings\All Users\Bureau 2008-05-09 14:12 . 2008-05-09 14:13 d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-05-09 14:11 . 2008-05-14 19:38 d-------- C:\WINDOWS\system32\CatRoot2 2008-05-09 14:11 . 2008-05-09 14:05 d-------- C:\WINDOWS\system32\CatRoot 2008-05-09 14:11 . 2008-05-09 13:18 d--h----- C:\Documents and Settings\Default User 2008-05-09 14:11 . 2008-05-09 13:17 d-------- C:\Documents and Settings\All Users 2008-05-09 14:11 . 2008-05-09 13:21 d-------- C:\Documents and Settings 2008-05-09 14:11 . 2002-08-29 16:35 1,086,182 -ra------ C:\WINDOWS\SET3.tmp 2008-05-09 14:11 . 2002-01-08 21:40 13,923 -ra------ C:\WINDOWS\SETA.tmp 2008-05-09 14:10 . 2008-05-09 14:11 d-------- C:\Program Files\LimeWire 2008-05-09 14:09 . 2008-05-09 14:11 d-------- C:\Program Files\BitComet 2008-05-09 14:09 . 2008-05-14 19:20 d-------- C:\Downloads 2008-05-09 14:09 . 2008-05-09 14:09 d--hs---- C:\Documents and Settings\geoffrey\UserData 2008-05-09 14:09 . 2007-07-30 19:19 43,352 --a------ C:\WINDOWS\system32\wups2.dll 2008-05-09 14:09 . 2007-07-30 19:19 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui 2008-05-09 14:09 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui 2008-05-09 14:09 . 2007-07-30 19:19 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui 2008-05-09 14:09 . 2007-07-30 19:18 21,336 --a------ C:\WINDOWS\system32\wuaueng.dll.mui 2008-05-09 14:09 . 2008-05-09 14:09 2,560 --a------ C:\WINDOWS\system32\bitcometres.dll 2008-05-09 14:08 . 2008-05-09 14:08 d-------- C:\Documents and Settings\LocalService\Menu D‚marrer 2008-05-09 14:08 . 2008-05-09 14:08 316,640 --a------ C:\WINDOWS\WMSysPr9.prx 2008-05-09 14:08 . 2008-05-09 14:08 1,024 --ah----- C:\Documents and Settings\Default User\NTUSER.DAT.LOG 2008-05-09 14:01 . 2008-05-09 14:03 d-------- C:\WINDOWS\EHome . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-05-10 09:15 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-05-09 21:42 --------- d-----w C:\Documents and Settings\geoffrey\Application Data\ATI 2008-05-09 21:39 --------- d-----w C:\Program Files\ATI Technologies 2008-05-09 21:37 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-05-09 20:17 --------- d-----w C:\Program Files\Fichiers communs\InstallShield 2008-05-09 11:35 --------- d-----w C:\Program Files\C-Media 2008-05-09 11:25 20,747 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys 2008-05-09 11:24 --------- d-----w C:\Program Files\Hercules 2008-05-09 11:24 --------- d-----w C:\Documents and Settings\geoffrey\Application Data\InstallShield 2008-05-09 11:23 --------- d-----w C:\Documents and Settings\geoffrey\Application Data\InterTrust 2008-05-09 11:18 --------- d-----w C:\Program Files\microsoft frontpage 2008-05-09 11:17 558,142 ----a-w C:\WINDOWS\java\Packages\SJBRNF1N.ZIP 2008-05-09 11:17 155,995 ----a-w C:\WINDOWS\java\Packages\G7XBTV1R.ZIP 2008-05-09 11:15 --------- d-----w C:\Program Files\Services en ligne 2008-04-13 17:50 1,804 ----a-w C:\WINDOWS\system32\dcache.bin 2008-04-13 17:37 332,800 ----a-w C:\WINDOWS\system32 etsetup.exe 2008-04-13 17:33 98,816 ----a-w C:\WINDOWS\system32\psbase.dll 2008-04-13 17:32 764,416 ----a-w C:\WINDOWS\system32\winntbbu.dll 2008-04-13 17:32 61,471 ----a-w C:\WINDOWS\system32\odbcji32.dll 2008-04-13 17:32 5,632 ----a-w C:\WINDOWS\system32\wmi.dll 2008-04-13 17:32 103,424 ----a-w C:\WINDOWS\system32\dpcdll.dll 2008-04-13 17:10 73,600 ----a-w C:\WINDOWS\system32\drivers\sr.sys 2008-04-13 17:09 80,384 ----a-w C:\WINDOWS\system32\drivers\parport.sys 2008-04-13 17:09 68,608 ----a-w C:\WINDOWS\system32\drivers\pci.sys 2008-04-13 17:09 46,848 ----a-w C:\WINDOWS\system32\drivers\p3.sys 2008-04-13 17:09 120,576 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys 2008-04-13 17:07 2,147,328 ----a-w C:\WINDOWS\system32 toskrnl.exe 2008-04-13 17:07 2,025,984 ----a-w C:\WINDOWS\system32 tkrnlpa.exe 2008-04-13 17:06 4,096 ----a-w C:\WINDOWS\system32\dsprpres.dll 2008-04-13 17:05 800,256 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys 2008-04-13 17:05 25,216 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys 2008-04-13 17:05 154,496 ----a-w C:\WINDOWS\system32\drivers\dmio.sys 2008-04-13 17:04 93,184 ------w C:\WINDOWS\system32\msxml6r.dll 2008-04-13 17:04 37,632 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys 2008-04-13 17:03 81,920 ------w C:\WINDOWS\system32\msshavmsg.dll 2008-04-13 17:03 40,576 ------w C:\WINDOWS\system32\drivers\intelppm.sys 2008-04-13 17:02 50,688 ----a-w C:\WINDOWS\system32\inetres.dll 2008-04-13 17:02 40,960 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys 2008-04-13 17:02 2,985,984 ----a-w C:\WINDOWS\system32\wmploc.dll 2008-04-13 17:01 572,416 ----a-w C:\WINDOWS\system32\shdoclc.dll 2008-04-13 17:00 66,048 ----a-w C:\WINDOWS\system32\drivers\serial.sys 2008-04-13 17:00 54,144 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys 2008-04-13 16:59 25,856 ------w C:\WINDOWS\system32\drivers\hidbth.sys 2008-04-13 16:59 200,704 ------w C:\WINDOWS\system32\wmerror.dll 2008-04-13 16:59 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dll 2008-04-13 16:58 273,664 ------w C:\WINDOWS\system32\drivers\bthport.sys 2008-04-13 16:58 1,845,760 ----a-w C:\WINDOWS\system32\win32k.sys 2008-04-13 16:58 1,647,616 ----a-w C:\WINDOWS\system32\winbrand.dll 2008-04-13 16:57 70,144 ----a-w C:\WINDOWS\system32\browselc.dll 2008-04-13 16:57 44,672 ----a-w C:\WINDOWS\system32\drivers\fips.sys 2008-04-13 16:56 53,376 ----a-w C:\WINDOWS\system32\drivers\volsnap.sys 2008-04-13 16:55 8,704 ----a-w C:\WINDOWS\system32\asferror.dll 2008-04-13 16:55 40,064 ----a-w C:\WINDOWS\system32\drivers\processr.sys 2008-04-13 16:55 327,168 ------w C:\WINDOWS\system32\drivers\ati2mtaa.sys 2008-04-13 16:54 41,856 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys 2008-04-13 16:54 41,472 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys 2008-04-13 16:53 70,688 ----a-w C:\WINDOWS\system32\mmsystem.dll 2008-04-13 16:53 30,336 ----a-w C:\WINDOWS\system32\drivers\modem.sys 2008-04-13 16:53 23,680 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys 2008-04-13 16:52 188,672 ----a-w C:\WINDOWS\system32\drivers\acpi.sys 2008-04-13 10:28 175,744 ----a-w C:\WINDOWS\system32\drivers dbss.sys 2008-04-13 10:21 162,816 ----a-w C:\WINDOWS\system32\drivers etbt.sys 2008-04-13 10:20 91,520 ----a-w C:\WINDOWS\system32\drivers diswan.sys 2008-04-13 10:20 361,344 ----a-w C:\WINDOWS\system32\drivers cpip.sys 2008-04-13 10:20 182,656 ----a-w C:\WINDOWS\system32\drivers dis.sys 2008-04-13 10:19 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys 2008-04-13 10:19 51,328 ----a-w C:\WINDOWS\system32\drivers asl2tp.sys 2008-04-13 10:19 48,384 ----a-w C:\WINDOWS\system32\drivers aspptp.sys 2008-04-13 10:19 146,048 ----a-w C:\WINDOWS\system32\drivers\portcls.sys 2008-04-13 10:19 138,112 ----a-w C:\WINDOWS\system32\drivers\afd.sys 2008-04-13 10:17 83,072 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys 2008-04-13 10:17 456,576 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys 2008-04-13 10:17 105,344 ----a-w C:\WINDOWS\system32\drivers\mup.sys 2008-04-13 10:16 49,536 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys 2008-04-13 10:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys 2008-04-13 10:15 60,800 ----a-w C:\WINDOWS\system32\drivers\sysaudio.sys 2008-04-13 10:15 574,976 ----a-w C:\WINDOWS\system32\drivers tfs.sys 2008-04-13 10:15 334,848 ----a-w C:\WINDOWS\system32\drivers\srv.sys 2008-04-13 10:14 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys 2008-04-13 10:14 143,744 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys 2008-04-13 10:00 225,664 ----a-w C:\WINDOWS\system32\drivers cpip6.sys 2008-04-13 10:00 19,072 ----a-w C:\WINDOWS\system32\drivers di.sys 2008-04-13 09:57 41,472 ----a-w C:\WINDOWS\system32\drivers aspppoe.sys 2008-04-13 09:57 40,576 ----a-w C:\WINDOWS\system32\drivers dproxy.sys 2008-04-13 09:57 34,560 ----a-w C:\WINDOWS\system32\drivers\wanarp.sys 2008-04-13 09:57 20,864 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys 2008-04-13 09:57 152,832 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys 2008-04-13 09:57 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys 2008-04-13 09:57 10,112 ----a-w C:\WINDOWS\system32\drivers distapi.sys 2008-04-13 09:56 88,320 ----a-w C:\WINDOWS\system32\drivers wlnkipx.sys 2008-04-13 09:56 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys 2008-04-13 09:56 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys 2008-04-13 09:56 34,688 ----a-w C:\WINDOWS\system32\drivers etbios.sys 2008-04-13 09:56 30,592 ----a-w C:\WINDOWS\system32\drivers ndismp.sys 2008-04-13 09:56 30,592 ------w C:\WINDOWS\system32\drivers ndismpx.sys 2008-04-13 09:56 14,592 ----a-w C:\WINDOWS\system32\drivers disuio.sys 2008-04-13 09:56 12,800 ----a-w C:\WINDOWS\system32\drivers\usb8023.sys 2008-04-13 09:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023x.sys 2008-04-13 09:56 12,288 ----a-w C:\WINDOWS\system32\drivers unmp.sys 2008-04-13 09:55 202,624 ----a-w C:\WINDOWS\system32\drivers mcast.sys . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-13 19:34 15360] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2008-04-13 19:34 1695232] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "C-Media Mixer"="Mixer.exe" [2002-07-12 18:33 1581056 C:\WINDOWS\mixer.exe] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401] "Trust Gaming mouse"="C:\Program Files\Trust\GM-4200 Gamer Mouse Optical\Panel.exe" [2006-12-28 09:20 1232896] "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 12:17 61440] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312] "BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-13 19:34 110592 C:\WINDOWS\system32\bthprops.cpl] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-13 19:34 15360] [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe"= "%windir%\system32\sessmgr.exe"= "C:\Program Files\BitComet\BitComet.exe"= "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "C:\Program Files\Windows Live\Messenger\livecall.exe"= "C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe"= "C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe"= "C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "10680:TCP"= 10680:TCP:BitComet 10680 TCP "10680:UDP"= 10680:UDP:BitComet 10680 UDP R3 GMFilter Filter;GMFilter Filter;C:\WINDOWS\system32\Drivers\GMFilter.sys [2006-12-29 16:49] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E] \Shell\AutoRun\command - E:\autorun.exe . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-05-14 21:45:51 Windows 5.1.2600 Service Pack 3 NTFS Balayage processus cach‚s ... Balayage cach‚ autostart entries ... Balayage des fichiers cach‚s ... Scan termin‚ avec succŠs Les fichiers cach‚s: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\WINDOWS\system32\ati2evxx.exe C:\WINDOWS\system32\ati2evxx.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\WINDOWS\system32 undll32.exe C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe C:\Program Files\Hercules\WiFi Station\WiFiStation.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe . ************************************************************************** . Temps d'accomplissement: 2008-05-14 21:47:26 - machine was rebooted ComboFix-quarantined-files.txt 2008-05-14 19:47:23 Pre-Run: 145,321,586,688 octets libres Post-Run: 145,297,735,680 octets libres 293

locdog · Answer

voila mes 2 rapport dite moi ce que je doit faire ensuite merci

jlpjlp · Answer

scan avec 
MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ 


________

colle un rapport avec antivir que tu as et dis tes soucis actuels

locdog · Answer

Malwarebytes' Anti-Malware 1.12
Version de la base de données: 751

Type de recherche: Examen complet (A:\|C:\|D:\|E:\|F:\|G:\|)
Eléments examinés: 91315
Temps écoulé: 34 minute(s), 42 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

locdog · Answer

je ferai l analyse antivir se soir je m en vais travailler la merci

jlpjlp · Answer

Gwendal  = locdog ????????????

locdog · Answer

ha nn dsl

locdog · Answer

voici mon raport antivir 


Avira AntiVir Personal
Report file date: jeudi 15 mai 2008  20:59

Scanning for 1260844 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 3)  [5.1.2600]
Boot mode:        Normally booted
Username:         SYSTEM
Computer name:    GEOFFREY-CQVWI1

Version information:
BUILD.DAT     : 8.1.00.295      16479 Bytes  09/04/2008 16:24:00
AVSCAN.EXE    : 8.1.2.12       311553 Bytes  18/03/2008 09:02:56
AVSCAN.DLL    : 8.1.1.0         53505 Bytes  07/02/2008 08:43:37
LUKE.DLL      : 8.1.2.9        151809 Bytes  28/02/2008 08:41:23
LUKERES.DLL   : 8.1.2.1         12033 Bytes  21/02/2008 08:28:40
ANTIVIR0.VDF  : 6.40.0.0     11030528 Bytes  18/07/2007 10:33:34
ANTIVIR1.VDF  : 7.0.3.2       5447168 Bytes  07/03/2008 13:08:58
ANTIVIR2.VDF  : 7.0.4.0       1554432 Bytes  05/05/2008 12:16:19
ANTIVIR3.VDF  : 7.0.4.25       125952 Bytes  11/05/2008 19:31:37
Engineversion : 8.1.0.42  
AEVDF.DLL     : 8.1.0.5        102772 Bytes  25/02/2008 09:58:21
AESCRIPT.DLL  : 8.1.0.31       262522 Bytes  09/05/2008 12:16:32
AESCN.DLL     : 8.1.0.16       119156 Bytes  09/05/2008 12:16:31
AERDL.DLL     : 8.1.0.20       418165 Bytes  09/05/2008 12:16:30
AEPACK.DLL    : 8.1.1.4        364918 Bytes  09/05/2008 12:16:29
AEOFFICE.DLL  : 8.1.0.18       192890 Bytes  09/05/2008 12:16:27
AEHEUR.DLL    : 8.1.0.26      1237366 Bytes  09/05/2008 12:16:26
AEHELP.DLL    : 8.1.0.14       115063 Bytes  09/05/2008 12:16:24
AEGEN.DLL     : 8.1.0.20       299380 Bytes  09/05/2008 12:16:23
AEEMU.DLL     : 8.1.0.6        430451 Bytes  09/05/2008 12:16:22
AECORE.DLL    : 8.1.0.28       168310 Bytes  09/05/2008 12:16:21
AVWINLL.DLL   : 1.0.0.7         14593 Bytes  23/01/2008 17:07:53
AVPREF.DLL    : 8.0.0.1         25857 Bytes  18/02/2008 10:37:50
AVREP.DLL     : 7.0.0.1        155688 Bytes  16/04/2007 13:26:47
AVREG.DLL     : 8.0.0.0         30977 Bytes  23/01/2008 17:07:49
AVARKT.DLL    : 1.0.0.23       307457 Bytes  12/02/2008 08:29:23
AVEVTLOG.DLL  : 8.0.0.11       114945 Bytes  28/02/2008 08:31:31
SQLITE3.DLL   : 3.3.17.1       339968 Bytes  22/01/2008 17:28:02
SMTPLIB.DLL   : 1.2.0.19        28929 Bytes  23/01/2008 17:08:39
NETNT.DLL     : 8.0.0.1          7937 Bytes  25/01/2008 12:05:10
RCIMAGE.DLL   : 8.0.0.35      2371841 Bytes  10/03/2008 14:37:25
RCTEXT.DLL    : 8.0.32.0        86273 Bytes  06/03/2008 12:02:11

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, F:, 
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: high
Deviating risk categories........: +GAME,

Start of the scan: jeudi 15 mai 2008  20:59

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'BTSTAC~1.EXE' - '1' Module(s) have been scanned
Scan process 'CCC.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wscntfy.exe' - '1' Module(s) have been scanned
Scan process 'WiFiStation.exe' - '1' Module(s) have been scanned
Scan process 'BTTray.exe' - '1' Module(s) have been scanned
Scan process 'msmsgs.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'avgas.exe' - '1' Module(s) have been scanned
Scan process 'MOM.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'Panel.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'mixer.exe' - '1' Module(s) have been scanned
Scan process 'btwdins.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '0' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
36 processes with 36 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
      [INFO]      No virus was found!
Master boot sector HD1
      [INFO]      No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
      [INFO]      No virus was found!
Boot sector 'F:\'
      [INFO]      No virus was found!

Starting to scan the registry.
The registry was scanned ( '26' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
      [WARNING]   The file could not be opened!
C:\WINDOWS\system32\drivers\sptd.sys
      [WARNING]   The file could not be opened!
Begin scan in 'F:\' <DISK2>


End of the scan: jeudi 15 mai 2008  21:20
Used time: 20:46 min

The scan has been done completely.

   3506 Scanning directories
 140247 Files were scanned
      0 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      2 Files cannot be scanned
 140247 Files not concerned
    750 Archives were scanned
      2 Warnings
      0 Notes

locdog · Answer

re bonjour alors que pensez vous demon raport suis je encore infecter par tout type de spywra trojan ou autre connerie ?

jlpjlp · Answer

ok rien dans les rapports

en core des soucis??

locdog · Answer

ben ui un autre souci qui c est présenter avant hier quand j allume mon pc il y a une toute petite fenêtre qui s ouvre avec marqué load DLL et en dessous hook load failed voila ce qui il est marquer de quoi cela peut il provenir ?
merci

jlpjlp · Answer

repare windows:

https://www.pcastuces.com/pratique/windows/xp/default.htm



si cela persiste:

télécharge combofix (par sUBs) ici : 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

et enregistre le sur le bureau. 

déconnecte toi d'internet et ferme toutes tes applications. 

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware) 


double-clique sur combofix.exe et suis les instructions 

à la fin, il va produire un rapport C:\ComboFix.txt 

réactive ton parefeu, ton antivirus, la garde de ton antispyware 

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse. 

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi. 

Tu as un tutoriel complet ici : 

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

locdog · Answer

bonjour voila j ai fait le repars windows et au redémarrage du système l erreur est toujours la je vais donc essayer combofix je vous tient au courant merci

jlpjlp · Answer

ok si elle persiste donne exactement ce qui s'affiche

a plus

locdog · Answer

voila le rapport de cambofix ComboFix 08-05-15.3 - geoffrey 2008-05-16 20:36:38.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.2632 [GMT 2:00] Endroit: C:\Documents and Settings\geoffrey\Bureau\ComboFix.exe * Création d'un nouveau point de restauration [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color] . ((((((((((((((((((((((((((((( Fichiers créés 2008-04-16 to 2008-05-16 )))))))))))))))))))))))))))))))))))) . 2008-05-16 13:03 . 2008-05-16 13:11 d-------- C:\Program Files\adslTV 2008-05-16 13:03 . 2008-05-16 13:03 d-------- C:\Documents and Settings\geoffrey\Application Data\vlc 2008-05-15 22:34 . 2001-08-23 17:47 525,568 --a--c--- C:\WINDOWS\system32\dllcache ridxp.dll 2008-05-15 22:33 . 2001-08-23 17:18 899,914 --a--c--- C:\WINDOWS\system32\dllcache 2mdkxga.sys 2008-05-15 22:32 . 2008-04-13 19:07 2,067,968 --a--c--- C:\WINDOWS\system32\dllcache tkrnlpa.exe 2008-05-15 22:31 . 2008-04-13 19:33 702,845 --a--c--- C:\WINDOWS\system32\dllcache\i81xdnt5.dll 2008-05-15 22:30 . 2001-08-23 17:46 1,733,120 --a--c--- C:\WINDOWS\system32\dllcache\g400d.dll 2008-05-15 22:29 . 2001-08-23 17:04 980,034 --a--c--- C:\WINDOWS\system32\dllcache\cicap.sys 2008-05-15 22:28 . 2001-08-17 21:28 871,388 --a--c--- C:\WINDOWS\system32\dllcache\bcmdm.sys 2008-05-15 22:27 . 2008-04-13 19:08 2,191,104 --a--c--- C:\WINDOWS\system32\dllcache toskrnl.exe 2008-05-15 21:34 . 2005-05-27 09:23 2,180,096 --a------ C:\WINDOWS\system32\drivers\lvsvf2.sys 2008-05-15 21:34 . 2008-04-13 19:33 54,784 --a------ C:\WINDOWS\system32\vfwwdm32.dll 2008-05-15 21:34 . 2008-04-13 19:33 54,784 --a--c--- C:\WINDOWS\system32\dllcache\vfwwdm32.dll 2008-05-15 21:30 . 2008-05-15 21:30 d-------- C:\Program Files\Fichiers communs\Logitech 2008-05-15 21:29 . 2005-06-08 14:38 90,112 --a------ C:\WINDOWS\system32\LQCUI2.dll 2008-05-15 21:28 . 2008-05-15 21:29 d-------- C:\Program Files\Logitech 2008-05-15 13:07 . 2004-10-01 14:44 44,003 --a------ C:\WINDOWS\system32\drivers\btwhid.sys 2008-05-15 12:17 . 2008-05-15 12:17 d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-05-15 12:17 . 2008-05-15 12:17 d-------- C:\Documents and Settings\geoffrey\Application Data\Malwarebytes 2008-05-15 12:17 . 2008-05-15 12:17 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-05-15 12:17 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-05-15 12:17 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-05-14 19:57 . 2008-04-13 19:34 153,088 --a------ C:\WINDOWS\system32\irftp.exe 2008-05-14 19:57 . 2008-04-13 19:34 153,088 --a--c--- C:\WINDOWS\system32\dllcache\irftp.exe 2008-05-14 19:57 . 2008-04-13 19:33 29,184 --a------ C:\WINDOWS\system32\irmon.dll 2008-05-14 19:57 . 2008-04-13 19:33 29,184 --a--c--- C:\WINDOWS\system32\dllcache\irmon.dll 2008-05-14 19:57 . 2008-04-13 19:33 8,192 --a------ C:\WINDOWS\system32\wshirda.dll 2008-05-14 19:57 . 2008-04-13 19:33 8,192 --a--c--- C:\WINDOWS\system32\dllcache\wshirda.dll 2008-05-14 19:56 . 2008-05-14 19:56 d-------- C:\Documents and Settings\geoffrey\Bluetooth Software 2008-05-14 19:52 . 2008-05-14 19:52 d-------- C:\Program Files\WIDCOMM 2008-05-14 19:20 . 2008-05-14 19:20 d-------- C:\Program Files\Enigma Software Group 2008-05-13 21:44 . 2008-05-13 21:47 d--h----- C:\WINDOWS\$hf_mig$ 2008-05-13 21:43 . 2008-03-01 14:58 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-05-13 21:43 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-05-13 21:43 . 2007-03-08 07:10 1,048,576 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-05-13 21:43 . 2008-03-01 14:58 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-05-13 21:43 . 2008-03-01 14:58 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-05-13 21:43 . 2008-03-01 14:58 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-05-13 21:43 . 2008-03-01 14:58 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2008-05-13 21:43 . 2008-03-01 14:58 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-05-13 21:43 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-05-12 11:18 . 2008-05-12 11:18 1,160 --a------ C:\WINDOWS\mozver.dat 2008-05-11 21:33 . 2008-05-11 21:33 0 --a------ C:\WINDOWS sreg.dat 2008-05-11 20:19 . 2008-05-11 20:19 d-------- C:\Documents and Settings\geoffrey\Application Data\Grisoft 2008-05-11 20:19 . 2008-05-11 20:19 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2008-05-11 20:19 . 2007-05-30 14:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-05-11 19:46 . 2008-05-11 19:46 0 --ah----- C:\WINDOWS\system32\config\systemprofile tuser.dat.LOG 2008-05-11 18:54 . 2008-05-11 18:54 d-------- C:\VundoFix Backups 2008-05-11 18:37 . 2008-05-11 18:37 d-------- C:\Program Files\Trend Micro 2008-05-11 18:37 . 2008-05-11 18:37 d-------- C:\Deckard 2008-05-11 11:07 . 2008-05-15 22:27 d-------- C:\WINDOWS\BDOSCAN8 2008-05-10 21:24 . 2008-05-10 21:24 d-------- C:\Documents and Settings\geoffrey\Application Data\Ubisoft 2008-05-10 21:20 . 2008-05-10 21:20 98,304 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2008-05-10 21:12 . 2008-05-10 21:24 d-------- C:\Documents and Settings\geoffrey\Application Data\LimeWire 2008-05-10 21:01 . 2008-05-10 21:01 d-------- C:\WINDOWS\Sun 2008-05-10 20:55 . 2008-05-10 20:55 d-------- C:\Program Files\Java 2008-05-10 20:55 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-05-10 20:54 . 2008-05-10 20:54 d-------- C:\Program Files\Fichiers communs\Java 2008-05-10 19:34 . 2008-04-13 11:45 26,368 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2008-05-10 10:57 . 2008-05-10 19:32 d-------- C:\Program Files\Steam 2008-05-09 23:42 . 2008-05-09 23:42 d-------- C:\Documents and Settings\All Users\Application Data\ATI 2008-05-09 23:41 . 2008-05-09 23:41 0 --a------ C:\WINDOWS\ativpsrm.bin 2008-05-09 23:28 . 2008-05-09 23:28 d----c--- C:\ATI 2008-05-09 23:12 . 2008-05-09 23:12 d-------- C:\Program Files\MSBuild 2008-05-09 23:09 . 2008-05-09 23:13 d-------- C:\WINDOWS\system32\XPSViewer 2008-05-09 23:08 . 2008-05-09 23:08 d-------- C:\Program Files\Reference Assemblies 2008-05-09 23:07 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll 2008-05-09 23:05 . 2008-05-09 23:05 d-------- C:\Documents and Settings\All Users\Application Data\Ubisoft 2008-05-09 23:03 . 2007-03-12 16:42 3,495,784 --a------ C:\WINDOWS\system32\d3dx9_33.dll 2008-05-09 22:55 . 2008-05-09 22:55 d-------- C:\Program Files\Ubisoft 2008-05-09 22:51 . 2008-05-09 22:51 d-------- C:\Program Files\DAEMON Tools Lite 2008-05-09 22:23 . 2008-05-09 22:23 d-------- C:\Documents and Settings\geoffrey\Application Data\DAEMON Tools 2008-05-09 22:23 . 2008-05-09 22:23 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-05-09 22:22 . 2008-05-09 22:22 d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus! 2008-05-09 22:21 . 2008-05-09 22:21 d-------- C:\Program Files\Radical Games 2008-05-09 22:17 . 2008-05-09 22:17 d-------- C:\Program Files\Trust 2008-05-09 22:17 . 2006-12-26 17:53 2,637,824 --a------ C:\WINDOWS\system32\XWheel.dll 2008-05-09 22:17 . 2006-12-27 18:44 1,146,880 --a------ C:\WINDOWS\system32\MousePage.dll 2008-05-09 22:17 . 2006-12-26 17:53 679,936 --a------ C:\WINDOWS\system32\XIndicator.dll 2008-05-09 22:17 . 2006-12-29 16:49 27,648 --a------ C:\WINDOWS\system32\drivers\GMFilter.sys 2008-05-09 20:33 . 2008-05-12 20:13 d-------- C:\Documents and Settings\geoffrey\Contacts 2008-05-09 20:32 . 2008-05-09 20:32 d----c--- C:\WINDOWS\system32\DRVSTORE 2008-05-09 20:32 . 2008-05-09 20:32 d-------- C:\Program Files\Messenger Plus! Live 2008-05-09 20:32 . 2008-05-09 20:32 268 --ah-c--- C:\sqmdata00.sqm 2008-05-09 20:32 . 2008-05-09 20:32 244 --ah-c--- C:\sqmnoopt00.sqm 2008-05-09 14:15 . 2008-05-09 14:15 d-------- C:\Program Files\Avira 2008-05-09 14:15 . 2008-05-09 14:15 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2008-05-09 14:13 . 2008-04-13 19:33 77,312 --a------ C:\WINDOWS\system32\usbui.dll 2008-05-09 14:13 . 2008-04-13 19:33 77,312 --a--c--- C:\WINDOWS\system32\dllcache\usbui.dll 2008-05-09 14:13 . 2008-04-13 18:57 58,752 --a------ C:\WINDOWS\system32\drivers edbook.sys 2008-05-09 14:13 . 2008-04-13 18:57 58,752 --a--c--- C:\WINDOWS\system32\dllcache edbook.sys 2008-05-09 14:13 . 2008-04-13 11:45 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys 2008-05-09 14:13 . 2008-04-13 11:45 10,624 --a--c--- C:\WINDOWS\system32\dllcache\gameenum.sys 2008-05-09 14:13 . 2001-08-17 22:59 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2008-05-09 14:13 . 2001-08-17 22:59 3,072 --a--c--- C:\WINDOWS\system32\dllcache\audstub.sys 2008-05-09 14:12 . 2008-05-09 20:32 d-------- C:\Program Files\Windows Live 2008-05-09 14:12 . 2008-05-09 20:31 d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-05-09 14:12 . 2008-05-09 14:12 d--h----- C:\Documents and Settings\Default User\Voisinage réseau 2008-05-09 14:12 . 2008-05-09 14:12 d--h----- C:\Documents and Settings\Default User\Voisinage d'impression 2008-05-09 14:12 . 2008-05-09 13:15 d--h----- C:\Documents and Settings\Default User\Modèles 2008-05-09 14:12 . 2008-05-09 14:12 d-------- C:\Documents and Settings\Default User\Mes documents 2008-05-09 14:12 . 2008-05-09 14:12 dr------- C:\Documents and Settings\Default User\Menu Démarrer 2008-05-09 14:12 . 2008-05-09 14:12 d-------- C:\Documents and Settings\Default User\Favoris 2008-05-09 14:12 . 2008-05-09 14:12 d-------- C:\Documents and Settings\Default User\Bureau 2008-05-09 14:12 . 2008-05-09 14:12 d--h----- C:\Documents and Settings\All Users\Modèles 2008-05-09 14:12 . 2008-05-15 13:08 dr------- C:\Documents and Settings\All Users\Menu Démarrer 2008-05-09 14:12 . 2008-05-09 14:12 d-------- C:\Documents and Settings\All Users\Favoris 2008-05-09 14:12 . 2008-05-09 14:08 dr------- C:\Documents and Settings\All Users\Documents 2008-05-09 14:12 . 2008-05-15 21:42 d-------- C:\Documents and Settings\All Users\Bureau 2008-05-09 14:12 . 2008-05-09 14:13 d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller 2008-05-09 14:11 . 2008-05-16 20:35 d-------- C:\WINDOWS\system32\CatRoot2 2008-05-09 14:11 . 2008-05-09 14:05 d-------- C:\WINDOWS\system32\CatRoot 2008-05-09 14:11 . 2008-05-09 13:18 d--h----- C:\Documents and Settings\Default User 2008-05-09 14:11 . 2008-05-09 13:17 d-------- C:\Documents and Settings\All Users 2008-05-09 14:11 . 2008-05-09 13:21 d-------- C:\Documents and Settings 2008-05-09 14:11 . 2002-08-29 16:35 1,086,182 -ra------ C:\WINDOWS\SET3.tmp 2008-05-09 14:11 . 2002-01-08 21:40 13,923 -ra------ C:\WINDOWS\SETA.tmp 2008-05-09 14:10 . 2008-05-09 14:11 d-------- C:\Program Files\LimeWire 2008-05-09 14:09 . 2008-05-09 14:11 d-------- C:\Program Files\BitComet 2008-05-09 14:09 . 2008-05-14 19:20 d-------- C:\Downloads 2008-05-09 14:09 . 2008-05-09 14:09 d--hs---- C:\Documents and Settings\geoffrey\UserData 2008-05-09 14:09 . 2007-07-30 19:19 43,352 --a------ C:\WINDOWS\system32\wups2.dll 2008-05-09 14:09 . 2007-07-30 19:19 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui 2008-05-09 14:09 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui 2008-05-09 14:09 . 2007-07-30 19:19 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-05-15 19:29 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-05-10 09:15 --------- d-----w C:\Program Files\Fichiers communs\Adobe 2008-05-09 21:42 --------- d-----w C:\Documents and Settings\geoffrey\Application Data\ATI 2008-05-09 21:39 --------- d-----w C:\Program Files\ATI Technologies 2008-05-09 20:17 --------- d-----w C:\Program Files\Fichiers communs\InstallShield 2008-05-09 11:35 --------- d-----w C:\Program Files\C-Media 2008-05-09 11:25 20,747 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys 2008-05-09 11:24 --------- d-----w C:\Program Files\Hercules 2008-05-09 11:24 --------- d-----w C:\Documents and Settings\geoffrey\Application Data\InstallShield 2008-05-09 11:23 --------- d-----w C:\Documents and Settings\geoffrey\Application Data\InterTrust 2008-05-09 11:18 --------- d-----w C:\Program Files\microsoft frontpage 2008-05-09 11:17 558,142 ----a-w C:\WINDOWS\java\Packages\SJBRNF1N.ZIP 2008-05-09 11:17 155,995 ----a-w C:\WINDOWS\java\Packages\G7XBTV1R.ZIP 2008-05-09 11:15 --------- d-----w C:\Program Files\Services en ligne 2008-04-13 17:50 1,804 ----a-w C:\WINDOWS\system32\dcache.bin 2008-04-13 17:37 332,800 ----a-w C:\WINDOWS\system32 etsetup.exe 2008-04-13 17:33 98,816 ----a-w C:\WINDOWS\system32\psbase.dll 2008-04-13 17:32 764,416 ----a-w C:\WINDOWS\system32\winntbbu.dll 2008-04-13 17:32 61,471 ----a-w C:\WINDOWS\system32\odbcji32.dll 2008-04-13 17:32 5,632 ----a-w C:\WINDOWS\system32\wmi.dll 2008-04-13 17:32 103,424 ----a-w C:\WINDOWS\system32\dpcdll.dll 2008-04-13 17:10 73,600 ----a-w C:\WINDOWS\system32\drivers\sr.sys 2008-04-13 17:09 80,384 ----a-w C:\WINDOWS\system32\drivers\parport.sys 2008-04-13 17:09 68,608 ----a-w C:\WINDOWS\system32\drivers\pci.sys 2008-04-13 17:09 46,848 ----a-w C:\WINDOWS\system32\drivers\p3.sys 2008-04-13 17:09 120,576 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys 2008-04-13 17:07 2,147,328 ----a-w C:\WINDOWS\system32 toskrnl.exe 2008-04-13 17:07 2,025,984 ----a-w C:\WINDOWS\system32 tkrnlpa.exe 2008-04-13 17:06 4,096 ----a-w C:\WINDOWS\system32\dsprpres.dll 2008-04-13 17:05 800,256 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys 2008-04-13 17:05 25,216 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys 2008-04-13 17:05 154,496 ----a-w C:\WINDOWS\system32\drivers\dmio.sys 2008-04-13 17:04 93,184 ------w C:\WINDOWS\system32\msxml6r.dll 2008-04-13 17:04 37,632 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys 2008-04-13 17:03 81,920 ------w C:\WINDOWS\system32\msshavmsg.dll 2008-04-13 17:03 40,576 ------w C:\WINDOWS\system32\drivers\intelppm.sys 2008-04-13 17:02 50,688 ----a-w C:\WINDOWS\system32\inetres.dll 2008-04-13 17:02 40,960 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys 2008-04-13 17:02 2,985,984 ----a-w C:\WINDOWS\system32\wmploc.dll 2008-04-13 17:01 572,416 ----a-w C:\WINDOWS\system32\shdoclc.dll 2008-04-13 17:00 66,048 ----a-w C:\WINDOWS\system32\drivers\serial.sys 2008-04-13 17:00 54,144 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys 2008-04-13 16:59 25,856 ------w C:\WINDOWS\system32\drivers\hidbth.sys 2008-04-13 16:59 200,704 ------w C:\WINDOWS\system32\wmerror.dll 2008-04-13 16:59 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dll 2008-04-13 16:58 273,664 ------w C:\WINDOWS\system32\drivers\bthport.sys 2008-04-13 16:58 1,845,760 ----a-w C:\WINDOWS\system32\win32k.sys 2008-04-13 16:58 1,647,616 ----a-w C:\WINDOWS\system32\winbrand.dll 2008-04-13 16:57 70,144 ----a-w C:\WINDOWS\system32\browselc.dll 2008-04-13 16:57 44,672 ----a-w C:\WINDOWS\system32\drivers\fips.sys 2008-04-13 16:56 53,376 ----a-w C:\WINDOWS\system32\drivers\volsnap.sys 2008-04-13 16:55 8,704 ----a-w C:\WINDOWS\system32\asferror.dll 2008-04-13 16:55 40,064 ----a-w C:\WINDOWS\system32\drivers\processr.sys 2008-04-13 16:55 327,168 ------w C:\WINDOWS\system32\drivers\ati2mtaa.sys 2008-04-13 16:54 41,856 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys 2008-04-13 16:54 41,472 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys 2008-04-13 16:53 70,688 ----a-w C:\WINDOWS\system32\mmsystem.dll 2008-04-13 16:53 30,336 ----a-w C:\WINDOWS\system32\drivers\modem.sys 2008-04-13 16:53 23,680 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys 2008-04-13 16:52 188,672 ----a-w C:\WINDOWS\system32\drivers\acpi.sys 2008-04-13 10:28 175,744 ----a-w C:\WINDOWS\system32\drivers dbss.sys 2008-04-13 10:21 162,816 ----a-w C:\WINDOWS\system32\drivers etbt.sys 2008-04-13 10:20 91,520 ----a-w C:\WINDOWS\system32\drivers diswan.sys 2008-04-13 10:20 361,344 ----a-w C:\WINDOWS\system32\drivers cpip.sys 2008-04-13 10:20 182,656 ----a-w C:\WINDOWS\system32\drivers dis.sys 2008-04-13 10:19 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys 2008-04-13 10:19 51,328 ----a-w C:\WINDOWS\system32\drivers asl2tp.sys 2008-04-13 10:19 48,384 ----a-w C:\WINDOWS\system32\drivers aspptp.sys 2008-04-13 10:19 146,048 ----a-w C:\WINDOWS\system32\drivers\portcls.sys 2008-04-13 10:19 138,112 ----a-w C:\WINDOWS\system32\drivers\afd.sys 2008-04-13 10:17 83,072 ----a-w C:\WINDOWS\system32\drivers\wdmaud.sys 2008-04-13 10:17 456,576 ----a-w C:\WINDOWS\system32\drivers\mrxsmb.sys 2008-04-13 10:17 105,344 ----a-w C:\WINDOWS\system32\drivers\mup.sys 2008-04-13 10:16 49,536 ----a-w C:\WINDOWS\system32\drivers\classpnp.sys 2008-04-13 10:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys 2008-04-13 10:15 60,800 ----a-w C:\WINDOWS\system32\drivers\sysaudio.sys 2008-04-13 10:15 574,976 ----a-w C:\WINDOWS\system32\drivers tfs.sys 2008-04-13 10:15 334,848 ----a-w C:\WINDOWS\system32\drivers\srv.sys 2008-04-13 10:14 63,744 ----a-w C:\WINDOWS\system32\drivers\cdfs.sys 2008-04-13 10:14 143,744 ----a-w C:\WINDOWS\system32\drivers\fastfat.sys 2008-04-13 10:00 225,664 ----a-w C:\WINDOWS\system32\drivers cpip6.sys 2008-04-13 10:00 19,072 ----a-w C:\WINDOWS\system32\drivers di.sys 2008-04-13 09:57 41,472 ----a-w C:\WINDOWS\system32\drivers aspppoe.sys 2008-04-13 09:57 40,576 ----a-w C:\WINDOWS\system32\drivers dproxy.sys 2008-04-13 09:57 34,560 ----a-w C:\WINDOWS\system32\drivers\wanarp.sys 2008-04-13 09:57 20,864 ----a-w C:\WINDOWS\system32\drivers\ipinip.sys 2008-04-13 09:57 152,832 ----a-w C:\WINDOWS\system32\drivers\ipnat.sys 2008-04-13 09:57 14,336 ----a-w C:\WINDOWS\system32\drivers\asyncmac.sys 2008-04-13 09:57 10,112 ----a-w C:\WINDOWS\system32\drivers distapi.sys 2008-04-13 09:56 88,320 ----a-w C:\WINDOWS\system32\drivers wlnkipx.sys 2008-04-13 09:56 69,120 ----a-w C:\WINDOWS\system32\drivers\psched.sys 2008-04-13 09:56 35,072 ----a-w C:\WINDOWS\system32\drivers\msgpc.sys 2008-04-13 09:56 34,688 ----a-w C:\WINDOWS\system32\drivers etbios.sys 2008-04-13 09:56 30,592 ----a-w C:\WINDOWS\system32\drivers ndismp.sys 2008-04-13 09:56 30,592 ------w C:\WINDOWS\system32\drivers ndismpx.sys 2008-04-13 09:56 14,592 ----a-w C:\WINDOWS\system32\drivers disuio.sys 2008-04-13 09:56 12,800 ----a-w C:\WINDOWS\system32\drivers\usb8023.sys 2008-04-13 09:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023x.sys 2008-04-13 09:56 12,288 ----a-w C:\WINDOWS\system32\drivers unmp.sys 2008-04-13 09:55 202,624 ----a-w C:\WINDOWS\system32\drivers mcast.sys . ((((((((((((((((((((((((((((( snapshot@2008-05-14_21.47.14.68 ))))))))))))))))))))))))))))))))))))))))) . - 2008-05-14 19:45:26 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-05-16 18:30:42 2,048 --s-a-w C:\WINDOWS\bootstat.dat - 2008-05-14 17:53:26 33,982 ----a-r C:\WINDOWS\Installer\{90535871-81B9-4D99-8A13-A7EE97F2D7FE}\ARPPRODUCTICON.exe + 2008-05-15 11:07:37 33,982 ----a-r C:\WINDOWS\Installer\{90535871-81B9-4D99-8A13-A7EE97F2D7FE}\ARPPRODUCTICON.exe + 2003-03-18 18:05:50 89,088 ----a-w C:\WINDOWS\system32\atl71.dll + 2003-05-02 12:14:44 466,944 ----a-w C:\WINDOWS\system32\capicom.dll + 1998-07-12 22:00:00 32,768 ----a-w C:\WINDOWS\system32\CMDLGFR.DLL + 2008-04-13 09:46:20 53,376 -c--a-w C:\WINDOWS\system32\dllcache\1394bus.sys + 2001-08-17 20:06:48 11,264 -c--a-w C:\WINDOWS\system32\dllcache\1394vdbg.sys + 2001-08-17 19:28:00 762,780 -c--a-w C:\WINDOWS\system32\dllcache\3cwmcru.sys + 2001-08-23 15:46:44 689,216 -c--a-w C:\WINDOWS\system32\dllcache\3dfxvs.dll + 2001-08-17 18:48:32 148,352 -c--a-w C:\WINDOWS\system32\dllcache\3dfxvsm.sys + 2008-04-13 09:40:52 12,288 -c--a-w C:\WINDOWS\system32\dllcache\4mmdat.sys + 2008-04-13 09:46:22 48,128 -c--a-w C:\WINDOWS\system32\dllcache\61883.sys + 2008-04-13 17:33:20 100,352 -c--a-w C:\WINDOWS\system32\dllcache\6to4svc.dll + 2001-08-23 15:46:44 38,400 -c--a-w C:\WINDOWS\system32\dllcache\8514a.dll + 2001-11-23 12:08:20 712,704 -c--a-w C:\WINDOWS\system32\dllcache\a3d.dll + 2001-08-23 15:46:58 462,848 -c--a-w C:\WINDOWS\system32\dllcache\a3dapi.dll + 2008-04-13 17:33:20 136,192 -c--a-w C:\WINDOWS\system32\dllcache\aaclient.dll + 2001-08-17 19:52:00 23,552 -c--a-w C:\WINDOWS\system32\dllcache\abp480n5.sys + 2008-04-13 07:36:02 231,552 -c--a-w C:\WINDOWS\system32\dllcache\ac97ali.sys + 2001-08-17 18:20:04 96,256 -c--a-w C:\WINDOWS\system32\dllcache\ac97intc.sys + 2001-08-17 18:20:16 297,728 -c--a-w C:\WINDOWS\system32\dllcache\ac97sis.sys + 2008-04-13 07:36:08 84,480 -c--a-w C:\WINDOWS\system32\dllcache\ac97via.sys + 2008-04-13 17:33:54 190,464 -c--a-w C:\WINDOWS\system32\dllcache\accwiz.exe + 2001-08-23 15:46:58 61,952 -c--a-w C:\WINDOWS\system32\dllcache\acerscad.dll + 2008-04-13 17:33:20 1,852,928 -c--a-w C:\WINDOWS\system32\dllcache\acgenral.dll + 2008-04-13 17:33:20 451,072 -c--a-w C:\WINDOWS\system32\dllcache\aclayers.dll + 2008-04-13 17:33:20 141,312 -c--a-w C:\WINDOWS\system32\dllcache\aclua.dll + 2008-04-13 17:33:20 120,320 -c--a-w C:\WINDOWS\system32\dllcache\aclui.dll + 2008-04-13 16:52:44 188,672 -c--a-w C:\WINDOWS\system32\dllcache\acpi.sys + 2002-01-08 19:37:28 12,032 -c--a-w C:\WINDOWS\system32\dllcache\acpiec.sys + 2008-04-13 17:33:20 245,248 -c--a-w C:\WINDOWS\system32\dllcache\acspecfc.dll + 2008-04-13 17:33:20 193,536 -c--a-w C:\WINDOWS\system32\dllcache\activeds.dll + 2008-04-13 17:33:54 4,096 -c--a-w C:\WINDOWS\system32\dllcache\actmovie.exe + 2008-04-13 17:33:20 98,304 -c--a-w C:\WINDOWS\system32\dllcache\actxprxy.dll + 2008-04-13 17:33:20 116,224 -c--a-w C:\WINDOWS\system32\dllcache\acxtrnal.dll + 2001-08-17 19:53:02 7,424 -c--a-w C:\WINDOWS\system32\dllcache\adicvls.sys + 2001-08-17 18:11:18 20,160 -c--a-w C:\WINDOWS\system32\dllcache\adm8511.sys + 2001-08-17 18:19:10 584,448 -c--a-w C:\WINDOWS\system32\dllcache\adm8810.sys + 2001-08-17 18:19:14 553,984 -c--a-w C:\WINDOWS\system32\dllcache\adm8820.sys + 2001-08-17 18:19:14 747,392 -c--a-w C:\WINDOWS\system32\dllcache\adm8830.sys + 2008-04-13 17:33:20 29,696 -c--a-w C:\WINDOWS\system32\dllcache\admexs.dll + 2008-04-13 17:33:20 20,540 -c--a-w C:\WINDOWS\system32\dllcache\admin.dll + 2008-04-13 17:33:54 16,439 -c--a-w C:\WINDOWS\system32\dllcache\admin.exe + 2008-04-13 07:36:02 10,880 -c--a-w C:\WINDOWS\system32\dllcache\admjoy.sys + 2008-04-13 17:33:20 43,520 -c--a-w C:\WINDOWS\system32\dllcache\admwprox.dll + 2001-08-17 18:11:16 46,112 -c--a-w C:\WINDOWS\system32\dllcache\adptsf50.sys + 2001-08-17 20:07:32 101,888 -c--a-w C:\WINDOWS\system32\dllcache\adpu160m.sys + 2008-04-13 17:33:20 290,816 -c--a-w C:\WINDOWS\system32\dllcache\adsiis51.dll + 2008-04-13 17:33:20 175,616 -c--a-w C:\WINDOWS\system32\dllcache\adsldp.dll + 2008-04-13 17:33:20 143,360 -c--a-w C:\WINDOWS\system32\dllcache\adsldpc.dll + 2008-04-13 17:33:20 68,096 -c--a-w C:\WINDOWS\system32\dllcache\adsmsext.dll + 2008-04-13 17:33:20 263,680 -c--a-w C:\WINDOWS\system32\dllcache\adsnt.dll + 2008-04-13 17:33:20 123,392 -c--a-w C:\WINDOWS\system32\dllcache\adsnw.dll + 2008-04-13 17:33:20 4,255 -c--a-w C:\WINDOWS\system32\dllcache\adv01nt5.dll + 2008-04-13 17:33:20 3,967 -c--a-w C:\WINDOWS\system32\dllcache\adv02nt5.dll + 2008-04-13 17:33:20 3,615 -c--a-w C:\WINDOWS\system32\dllcache\adv05nt5.dll + 2008-04-13 17:33:20 3,647 -c--a-w C:\WINDOWS\system32\dllcache\adv07nt5.dll + 2008-04-13 17:33:20 3,135 -c--a-w C:\WINDOWS\system32\dllcache\adv08nt5.dll + 2008-04-13 17:33:20 3,711 -c--a-w C:\WINDOWS\system32\dllcache\adv09nt5.dll + 2008-04-13 17:33:20 3,775 -c--a-w C:\WINDOWS\system32\dllcache\adv11nt5.dll + 2008-04-13 17:33:20 685,568 -c--a-w C:\WINDOWS\system32\dllcache\advapi32.dll + 2008-04-13 07:39:24 142,592 -c--a-w C:\WINDOWS\system32\dllcache\aec.sys + 2008-04-13 10:19:24 138,112 -c--a-w C:\WINDOWS\system32\dllcache\afd.sys + 2008-04-13 17:33:20 24,064 -c--a-w C:\WINDOWS\system32\dllcache\agentanm.dll + 2008-04-13 17:33:20 214,016 -c--a-w C:\WINDOWS\system32\dllcache\agentctl.dll + 2008-04-13 17:33:20 42,496 -c--a-w C:\WINDOWS\system32\dllcache\agentdp2.dll + 2008-04-13 17:33:20 57,344 -c--a-w C:\WINDOWS\system32\dllcache\agentdpv.dll + 2008-04-13 17:33:20 49,152 -c--a-w C:\WINDOWS\system32\dllcache\agentmpx.dll + 2008-04-13 17:33:20 24,064 -c--a-w C:\WINDOWS\system32\dllcache\agentpsh.dll + 2008-04-13 17:33:20 44,032 -c--a-w C:\WINDOWS\system32\dllcache\agentsr.dll + 2008-04-13 17:33:54 256,512 -c--a-w C:\WINDOWS\system32\dllcache\agentsvr.exe + 2008-04-13 09:36:40 42,368 -c--a-w C:\WINDOWS\system32\dllcache\agp440.sys + 2008-04-13 09:36:40 44,928 -c--a-w C:\WINDOWS\system32\dllcache\agpcpq.sys + 2007-04-02 09:26:00 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0401.dll + 2007-04-02 09:26:00 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0404.dll + 2007-04-02 09:26:00 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0405.dll + 2007-04-02 09:26:00 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0406.dll + 2007-04-02 09:26:02 21,504 -c--a-w C:\WINDOWS\system32\dllcache\agt0407.dll + 2007-04-02 09:26:02 22,016 -c--a-w C:\WINDOWS\system32\dllcache\agt0408.dll + 2008-04-13 08:32:30 19,968 -c--a-w C:\WINDOWS\system32\dllcache\agt0409.dll + 2007-04-02 09:26:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt040b.dll + 2007-04-02 09:26:02 21,504 -c--a-w C:\WINDOWS\system32\dllcache\agt040c.dll + 2007-04-02 09:26:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt040d.dll + 2007-04-02 09:26:02 19,968 -c--a-w C:\WINDOWS\system32\dllcache\agt040e.dll + 2007-04-02 09:26:02 20,992 -c--a-w C:\WINDOWS\system32\dllcache\agt0410.dll + 2007-04-02 09:26:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0411.dll + 2007-04-02 09:26:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0412.dll + 2007-04-02 09:26:02 20,992 -c--a-w C:\WINDOWS\system32\dllcache\agt0413.dll + 2007-04-02 09:26:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0414.dll + 2007-04-02 09:26:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0415.dll + 2007-04-02 09:26:02 20,480 -c--a-w C:\WINDOWS\system32\dllcache\agt0416.dll + 2007-04-02 09:26:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0419.dll + 2007-04-02 09:26:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt041d.dll + 2007-04-02 09:26:02 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt041f.dll + 2007-04-02 09:26:04 19,456 -c--a-w C:\WINDOWS\system32\dllcache\agt0804.dll + 2007-04-02 09:26:04 20,992 -c--a-w C:\WINDOWS\system32\dllcache\agt0816.dll + 2007-04-02 09:26:04 20,480 -c--a-w C:\WINDOWS\system32\dllcache\agt0c0a.dll + 2008-04-13 17:33:20 24,064 -c--a-w C:\WINDOWS\system32\dllcache\agtintl.dll + 2001-08-17 19:52:02 12,800 -c--a-w C:\WINDOWS\system32\dllcache\aha154x.sys + 2008-04-13 17:33:54 98,304 -c--a-w C:\WINDOWS\system32\dllcache\ahui.exe + 2001-08-17 20:07:36 55,168 -c--a-w C:\WINDOWS\system32\dllcache\aic78u2.sys + 2001-08-17 20:07:38 56,960 -c--a-w C:\WINDOWS\system32\dllcache\aic78xx.sys + 2008-04-13 17:33:54 44,544 -c--a-w C:\WINDOWS\system32\dllcache\alg.exe + 2001-08-17 18:11:18 27,678 -c--a-w C:\WINDOWS\system32\dllcache\ali5261.sys + 2001-08-17 19:49:02 26,624 -c--a-w C:\WINDOWS\system32\dllcache\alifir.sys + 2001-08-17 19:51:56 5,248 -c--a-w C:\WINDOWS\system32\dllcache\aliide.sys + 2008-04-13 09:36:40 42,752 -c--a-w C:\WINDOWS\system32\dllcache\alim1541.sys + 2008-04-13 17:33:20 17,408 -c--a-w C:\WINDOWS\system32\dllcache\alrsvc.dll + 2001-08-17 18:11:20 16,969 -c--a-w C:\WINDOWS\system32\dllcache\amb8002.sys + 2008-04-13 09:36:40 43,008 -c--a-w C:\WINDOWS\system32\dllcache\amdagp.sys + 2008-04-13 16:54:30 41,472 -c--a-w C:\WINDOWS\system32\dllcache\amdk6.sys + 2008-04-13 16:54:30 41,856 -c--a-w C:\WINDOWS\system32\dllcache\amdk7.sys + 2001-08-17 19:52:04 12,032 -c--a-w C:\WINDOWS\system32\dllcache\amsint.sys + 2008-04-13 17:33:20 70,656 -c--a-w C:\WINDOWS\system32\dllcache\amstream.dll + 2008-04-13 07:35:30 36,224 -c--a-w C:\WINDOWS\system32\dllcache\an983.sys + 2001-08-17 19:47:22 6,272 -c--a-w C:\WINDOWS\system32\dllcache\apmbatt.sys + 2008-04-13 17:33:20 110,080 -c--a-w C:\WINDOWS\system32\dllcache\appconf.dll + 2008-04-13 17:33:20 125,952 -c--a-w C:\WINDOWS\system32\dllcache\apphelp.dll + 2008-04-13 17:33:20 176,640 -c--a-w C:\WINDOWS\system32\dllcache\appmgmts.dll + 2008-04-13 17:33:20 302,592 -c--a-w C:\WINDOWS\system32\dllcache\appmgr.dll + 2008-04-13 17:33:20 334,336 -c--a-w C:\WINDOWS\system32\dllcache\aqueue.dll + 2008-04-13 09:51:26 60,800 -c--a-w C:\WINDOWS\system32\dllcache\arp1394.sys + 2001-08-17 19:52:00 26,496 -c--a-w C:\WINDOWS\system32\dllcache\asc.sys + 2001-08-17 19:52:04 22,400 -c--a-w C:\WINDOWS\system32\dllcache\asc3350p.sys + 2001-08-17 19:51:58 14,848 -c--a-w C:\WINDOWS\system32\dllcache\asc3550.sys + 2008-04-13 17:33:20 377,344 -c--a-w C:\WINDOWS\system32\dllcache\asp51.dll + 2001-08-17 18:12:34 97,354 -c--a-w C:\WINDOWS\system32\dllcache\aspndis3.sys + 2008-04-13 17:33:54 30,720 -c--a-w C:\WINDOWS\system32\dllcache\asr_fmt.exe + 2008-04-13 17:33:54 32,768 -c--a-w C:\WINDOWS\system32\dllcache\asr_pfu.exe + 2008-04-13 17:33:20 65,024 -c--a-w C:\WINDOWS\system32\dllcache\asycfilt.dll + 2008-04-13 09:57:28 14,336 -c--a-w C:\WINDOWS\system32\dllcache\asyncmac.sys + 2008-04-13 17:33:54 25,088 -c--a-w C:\WINDOWS\system32\dllcache\at.exe + 2008-04-13 09:40:32 96,512 -c--a-w C:\WINDOWS\system32\dllcache\atapi.sys + 2001-08-23 15:46:44 96,128 -c--a-w C:\WINDOWS\system32\dllcache\ati.dll + 2001-08-23 14:59:32 77,824 -c--a-w C:\WINDOWS\system32\dllcache\ati.sys + 2008-04-13 07:34:18 56,623 -c--a-w C:\WINDOWS\system32\dllcache\ati1btxx.sys + 2008-04-13 07:34:18 11,615 -c--a-w C:\WINDOWS\system32\dllcache\ati1mdxx.sys + 2008-04-13 07:34:18 12,047 -c--a-w C:\WINDOWS\system32\dllcache\ati1pdxx.sys + 2008-04-13 07:34:18 30,671 -c--a-w C:\WINDOWS\system32\dllcache\ati1raxx.sys + 2008-04-13 07:34:18 63,663 -c--a-w C:\WINDOWS\system32\dllcache\ati1rvxx.sys + 2008-04-13 07:34:18 26,367 -c--a-w C:\WINDOWS\system32\dllcache\ati1snxx.sys + 2008-04-13 07:34:18 21,343 -c--a-w C:\WINDOWS\system32\dllcache\ati1ttxx.sys + 2008-04-13 07:34:18 36,463 -c--a-w C:\WINDOWS\system32\dllcache\ati1tuxx.sys + 2008-04-13 07:34:20 29,455 -c--a-w C:\WINDOWS\system32\dllcache\ati1xbxx.sys + 2008-04-13 07:34:20 34,735 -c--a-w C:\WINDOWS\system32\dllcache\ati1xsxx.sys + 2008-03-29 03:12:59 520,192 -c--a-w C:\WINDOWS\system32\dllcache\ati2cqag.dll + 2008-04-13 17:33:20 377,984 -c--a-w C:\WINDOWS\system32\dllcache\ati2dvaa.dll - 2005-10-14 14:07:30 241,664 -c--a-w C:\WINDOWS\system32\dllcache\ati2dvag.dll + 2008-03-29 04:04:32 299,008 -c--a-w C:\WINDOWS\system32\dllcache\ati2dvag.dll + 2008-04-13 16:55:32 327,168 -c--a-w C:\WINDOWS\system32\dllcache\ati2mtaa.sys + 2008-04-13 17:33:20 870,784 -c--a-w C:\WINDOWS\system32\dllcache\ati3d1ag.dll + 2008-03-29 03:43:58 3,176,480 -c--a-w C:\WINDOWS\system32\dllcache\ati3duag.dll + 2001-08-17 18:49:04 46,464 -c--a-w C:\WINDOWS\system32\dllcache\atibt829.sys + 2001-08-23 15:46:44 382,592 -c--a-w C:\WINDOWS\system32\dllcache\atidrab.dll + 2001-08-23 15:46:44 137,216 -c--a-w C:\WINDOWS\system32\dllcache\atidrae.dll + 2001-08-23 15:46:44 268,160 -c--a-w C:\WINDOWS\system32\dllcache\atidvai.dll + 2001-08-23 15:47:26 37,376 -c--a-w C:\WINDOWS\system32\dllcache\atievxx.exe + 2001-08-23 14:59:36 289,920 -c--a-w C:\WINDOWS\system32\dllcache\atimpab.sys + 2001-08-23 14:59:36 75,392 -c--a-w C:\WINDOWS\system32\dllcache\atimpae.sys + 2001-08-23 14:59:38 281,728 -c--a-w C:\WINDOWS\system32\dllcache\atimtai.sys + 2008-04-13 07:34:18 57,856 -c--a-w C:\WINDOWS\system32\dllcache\atinbtxx.sys + 2008-04-13 07:34:18 13,824 -c--a-w C:\WINDOWS\system32\dllcache\atinmdxx.sys + 2008-04-13 07:34:18 14,336 -c--a-w C:\WINDOWS\system32\dllcache\atinpdxx.sys + 2008-04-13 07:34:18 52,224 -c--a-w C:\WINDOWS\system32\dllcache\atinraxx.sys + 2008-04-13 07:34:18 104,960 -c--a-w C:\WINDOWS\system32\dllcache\atinrvxx.sys + 2008-04-13 07:34:18 28,672 -c--a-w C:\WINDOWS\system32\dllcache\atinsnxx.sys + 2008-04-13 07:34:18 13,824 -c--a-w C:\WINDOWS\system32\dllcache\atinttxx.sys + 2008-04-13 07:34:18 73,216 -c--a-w C:\WINDOWS\system32\dllcache\atintuxx.sys + 2008-04-13 07:34:20 31,744 -c--a-w C:\WINDOWS\system32\dllcache\atinxbxx.sys + 2008-04-13 07:34:20 63,488 -c--a-w C:\WINDOWS\system32\dllcache\atinxsxx.sys + 2001-08-17 18:49:36 10,240 -c--a-w C:\WINDOWS\system32\dllcache\atipcxxx.sys + 2001-08-23 15:46:44 104,832 -c--a-w C:\WINDOWS\system32\dllcache\atiraged.dll + 2001-08-23 14:59:40 70,784 -c--a-w C:\WINDOWS\system32\dllcache\atiragem.sys + 2001-08-17 18:49:12 49,920 -c--a-w C:\WINDOWS\system32\dllcache\atirtcap.sys + 2001-08-17 18:49:18 26,880 -c--a-w C:\WINDOWS\system32\dllcache\atirtsnd.sys + 2001-08-17 18:49:22 17,152 -c--a-w C:\WINDOWS\system32\dllcache\atitunep.sys + 2001-08-17 18:49:28 17,152 -c--a-w C:\WINDOWS\system32\dllcache\atitvsnd.sys + 2001-08-17 18:49:38 9,472 -c--a-w C:\WINDOWS\system32\dllcache\ativmdcd.sys + 2008-04-13 17:33:20 32,768 -c--a-w C:\WINDOWS\system32\dllcache\ativtmxx.dll + 2001-08-17 18:49:44 19,456 -c--a-w C:\WINDOWS\system32\dllcache\ativttxx.sys + 2008-03-29 03:36:32 1,765,120 -c--a-w C:\WINDOWS\system32\dllcache\ativvaxx.dll + 2001-08-17 18:49:48 26,624 -c--a-w C:\WINDOWS\system32\dllcache\ativxbar.sys + 2001-08-17 18:49:34 23,552 -c--a-w C:\WINDOWS\system32\dllcache\atixbar.sys + 2008-04-13 17:33:20 58,880 -c--a-w C:\WINDOWS\system32\dllcache\atl.dll + 2008-04-13 17:33:54 11,264 -c--a-w C:\WINDOWS\system32\dllcache\atmadm.exe + 2008-04-13 09:51:26 59,904 -c--a-w C:\WINDOWS\system32\dllcache\atmarpc.sys + 2008-04-13 17:31:02 285,696 -c--a-w C:\WINDOWS\system32\dllcache\atmfd.dll + 2008-04-13 09:51:32 55,808 -c--a-w C:\WINDOWS\system32\dllcache\atmlane.sys + 2008-04-13 17:33:20 30,208 -c--a-w C:\WINDOWS\system32\dllcache\atmlib.dll + 2008-04-13 17:33:54 12,288 -c--a-w C:\WINDOWS\system32\dllcache\attrib.exe + 2008-04-13 17:33:20 21,183 -c--a-w C:\WINDOWS\system32\dllcache\atv01nt5.dll + 2008-04-13 17:33:20 11,359 -c--a-w C:\WINDOWS\system32\dllcache\atv02nt5.dll + 2008-04-13 17:33:20 25,471 -c--a-w C:\WINDOWS\system32\dllcache\atv04nt5.dll + 2008-04-13 17:33:20 14,143 -c--a-w C:\WINDOWS\system32\dllcache\atv06nt5.dll + 2008-04-13 17:33:20 17,279 -c--a-w C:\WINDOWS\system32\dllcache\atv10nt5.dll + 2008-04-13 17:33:20 42,496 -c--a-w C:\WINDOWS\system32\dllcache\audiosrv.dll + 2008-04-13 17:33:54 14,336 -c--a-w C:\WINDOWS\system32\dllcache\auditusr.exe + 2008-04-13 17:33:20 20,540 -c--a-w C:\WINDOWS\system32\dllcache\author.dll + 2008-04-13 17:33:54 16,439 -c--a-w C:\WINDOWS\system32\dllcache\author.exe + 2008-04-13 17:33:20 62,464 -c--a-w C:\WINDOWS\system32\dllcache\authz.dll + 2008-04-13 17:33:54 625,152 -c--a-w C:\WINDOWS\system32\dllcache\autochk.exe + 2008-04-13 17:33:54 638,976 -c--a-w C:\WINDOWS\system32\dllcache\autoconv.exe + 2008-04-13 17:33:56 616,960 -c--a-w C:\WINDOWS\system32\dllcache\autofmt.exe + 2008-04-13 17:33:56 11,264 -c--a-w C:\WINDOWS\system32\dllcache\autolfn.exe + 2008-04-13 09:46:22 38,912 -c--a-w C:\WINDOWS\system32\dllcache\avc.sys + 2001-08-17 20:01:12 36,096 -c--a-w C:\WINDOWS\system32\dllcache\avcaudio.sys + 2008-04-13 09:46:08 13,696 -c--a-w C:\WINDOWS\system32\dllcache\avcstrm.sys + 2008-04-13 17:33:20 85,504 -c--a-w C:\WINDOWS\system32\dllcache\avifil32.dll + 2001-08-23 15:46:58 87,552 -c--a-w C:\WINDOWS\system32\dllcache\avmcoxp.dll + 2001-08-23 15:46:58 144,384 -c--a-w C:\WINDOWS\system32\dllcache\avmenum.dll + 2001-08-17 18:13:48 37,568 -c--a-w C:\WINDOWS\system32\dllcache\avmwan.sys + 2008-04-13 17:33:20 233,472 -c--a-w C:\WINDOWS\system32\dllcache\azroles.dll + 2001-08-17 18:19:16 36,992 -c--a-w C:\WINDOWS\system32\dllcache\aztw2320.sys + 2001-08-17 18:13:56 89,952 -c--a-w C:\WINDOWS\system32\dllcache\b1cbase.sys + 2001-08-23 15:00:08 97,248 -c--a-w C:\WINDOWS\system32\dllcache\b57xp32.sys + 2001-08-23 15:46:44 342,336 -c--a-w C:\WINDOWS\system32\dllcache\banshee.dll + 2001-08-17 18:48:28 36,128 -c--a-w C:\WINDOWS\system32\dllcache\banshee.sys + 2008-04-13 17:33:20 52,736 -c--a-w C:\WINDOWS\system32\dllcache\basesrv.dll + 2008-04-13 17:33:20 29,184 -c--a-w C:\WINDOWS\system32\dllcache\batmeter.dll + 2008-04-13 17:33:20 8,704 -c--a-w C:\WINDOWS\system32\dllcache\batt.dll + 2008-04-13 09:36:34 14,208 -c--a-w C:\WINDOWS\system32\dllcache\battc.sys + 2001-08-17 18:11:28 66,557 -c--a-w C:\WINDOWS\system32\dllcache\bcm42u.sys + 2001-08-17 18:11:26 54,271 -c--a-w C:\WINDOWS\system32\dllcache\bcm42xx5.sys + 2001-08-17 18:11:30 26,568 -c--a-w C:\WINDOWS\system32\dllcache\bcm4e5.sys + 2008-04-13 09:46:22 11,776 -c--a-w C:\WINDOWS\system32\dllcache\bdasup.sys + 2008-04-13 17:33:20 17,408 -c--a-w C:\WINDOWS\system32\dllcache\bidispl.dll + 2001-08-23 15:46:58 105,472 -c--a-w C:\WINDOWS\system32\dllcache\binlsvc.dll + 2008-04-13 17:33:20 8,192 -c--a-w C:\WINDOWS\system32\dllcache\bitsprx2.dll + 2008-04-13 17:33:20 7,168 -c--a-w C:\WINDOWS\system32\dllcache\bitsprx3.dll + 2008-04-13 17:33:20 7,168 -c--a-w C:\WINDOWS\system32\dllcache\bitsprx4.dll + 2008-04-13 17:33:56 71,680 -c--a-w C:\WINDOWS\system32\dllcache\blastcln.exe + 2008-04-13 17:33:56 158,208 -c--a-w C:\WINDOWS\system32\dllcache\bootcfg.exe + 2001-08-23 15:46:58 19,456 -c--a-w C:\WINDOWS\system32\dllcache\brbidiif.dll + 2001-08-23 15:46:58 9,728 -c--a-w C:\WINDOWS\system32\dllcache\brcoinst.dll + 2001-08-23 15:46:58 12,800 -c--a-w C:\WINDOWS\system32\dllcache\brevif.dll + 2001-08-17 19:12:12 2,944 -c--a-w C:\WINDOWS\system32\dllcache\brfilt.sys + 2001-08-17 19:12:22 12,160 -c--a-w C:\WINDOWS\system32\dllcache\brfiltlo.sys + 2001-08-17 19:12:24 3,968 -c--a-w C:\WINDOWS\system32\dllcache\brfiltup.sys + 2008-04-13 09:53:24 71,552 -c--a-w C:\WINDOWS\system32\dllcache\bridge.sys + 2001-08-23 15:46:58 15,360 -c--a-w C:\WINDOWS\system32\dllcache\brmfbidi.dll + 2001-08-23 15:46:58 81,920 -c--a-w C:\WINDOWS\system32\dllcache\brmfcwia.dll + 2001-08-23 15:46:58 29,696 -c--a-w C:\WINDOWS\system32\dllcache\brmflpt.dll + 2001-08-23 15:47:30 32,256 -c--a-w C:\WINDOWS\system32\dllcache\brmfrsmg.exe + 2001-08-23 15:46:58 41,472 -c--a-w C:\WINDOWS\system32\dllcache\brmfusb.dll + 2008-04-13 16:57:50 70,144 -c--a-w C:\WINDOWS\system32\dllcache\browselc.dll + 2008-04-13 17:33:22 77,824 -c--a-w C:\WINDOWS\system32\dllcache\browser.dll - 2006-09-23 11:12:50 1,022,976 -c----w C:\WINDOWS\system32\dllcache\browseui.dll + 2008-04-13 17:33:22 1,025,024 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll + 2008-04-13 17:33:22 78,336 -c--a-w C:\WINDOWS\system32\dllcache\browsewm.dll + 2001-08-17 19:12:24 3,168 -c--a-w C:\WINDOWS\system32\dllcache\brparimg.sys + 2001-08-23 15:01:54 39,808 -c--a-w C:\WINDOWS\system32\dllcache\brparwdm.sys + 2001-08-23 15:46:58 5,120 -c--a-w C:\WINDOWS\system32\dllcache\brscnrsm.dll + 2001-08-23 15:46:58 9,728 -c--a-w C:\WINDOWS\system32\dllcache\brserif.dll + 2001-08-17 19:12:20 60,416 -c--a-w C:\WINDOWS\system32\dllcache\brserwdm.sys + 2001-08-17 19:12:20 11,008 -c--a-w C:\WINDOWS\system32\dllcache\brusbmdm.sys + 2001-08-17 19:12:22 10,368 -c--a-w C:\WINDOWS\system32\dllcache\brusbscn.sys + 2001-08-17 18:11:24 31,529 -c--a-w C:\WINDOWS\system32\dllcache\brzwlan.sys + 2008-04-13 17:33:22 20,992 -c--a-w C:\WINDOWS\system32\dllcache\bthci.dll + 2008-04-13 09:46:34 17,024 -c--a-w C:\WINDOWS\system32\dllcache\bthenum.sys + 2008-04-13 09:46:34 37,888 -c--a-w C:\WINDOWS\system32\dllcache\bthmodem.sys + 2008-04-13 09:51:36 101,120 -c--a-w C:\WINDOWS\system32\dllcache\bthpan.sys + 2008-04-13 16:58:02 273,664 -c--a-w C:\WINDOWS\system32\dllcache\bthport.sys + 2008-04-13 09:46:32 36,480 -c--a-w C:\WINDOWS\system32\dllcache\bthprint.sys + 2008-04-13 17:33:22 30,208 -c--a-w C:\WINDOWS\system32\dllcache\bthserv.dll + 2008-04-13 09:46:30 18,944 -c--a-w C:\WINDOWS\system32\dllcache\bthusb.sys + 2008-04-13 17:33:22 50,688 -c--a-w C:\WINDOWS\system32\dllcache\btpanui.dll + 2001-08-23 15:02:02 14,080 -c--a-w C:\WINDOWS\system32\dllcache\bulltlp3.sys + 2008-04-13 17:33:22 218,112 -c--a-w C:\WINDOWS\system32\dllcache\c_g18030.dll + 2008-04-13 17:33:22 60,416 -c--a-w C:\WINDOWS\system32\dllcache\cabinet.dll + 2008-04-13 17:33:22 85,504 -c--a-w C:\WINDOWS\system32\dllcache\cabview.dll + 2008-04-13 17:33:56 20,992 -c--a-w C:\WINDOWS\system32\dllcache\cacls.exe + 2008-04-13 17:33:22 385,024 -c--a-w C:\WINDOWS\system32\dllcache\callcont.dll + 2001-08-17 20:05:48 314,752 -c--a-w C:\WINDOWS\system32\dllcache\camdro21.sys + 2001-08-17 20:04:46 223,232 -c--a-w C:\WINDOWS\system32\dllcache\camdrv21.sys + 2001-08-17 20:04:48 171,264 -c--a-w C:\WINDOWS\system32\dllcache\camdrv30.sys + 2001-08-23 15:47:00 74,240 -c--a-w C:\WINDOWS\system32\dllcache\camexo20.dll + 2001-08-23 15:47:00 236,032 -c--a-w C:\WINDOWS\system32\dllcache\camext20.dll + 2008-04-13 17:33:22 121,856 -c--a-w C:\WINDOWS\system32\dllcache\camext30.dll + 2008-04-13 17:33:22 50,688 -c--a-w C:\WINDOWS\system32\dllcache\camocx.dll + 2008-04-13 17:33:22 153,600 -c--a-w C:\WINDOWS\system32\dllcache\capesnpn.dll + 2008-04-13 17:33:22 226,304 -c--a-w C:\WINDOWS\system32\dllcache\catsrv.dll + 2008-04-13 17:33:22 85,504 -c--a-w C:\WINDOWS\system32\dllcache\catsrvps.dll + 2008-04-13 17:33:22 625,664 -c--a-w C:\WINDOWS\system32\dllcache\catsrvut.dll + 2001-08-17 18:12:16 37,916 -c--a-w C:\WINDOWS\system32\dllcache\cb102.sys + 2001-08-17 18:12:42 39,680 -c--a-w C:\WINDOWS\system32\dllcache\cb325.sys + 2001-08-17 18:13:14 46,108 -c--a-w C:\WINDOWS\system32\dllcache\cben5.sys + 2002-01-08 19:37:58 13,952 -c--a-w C:\WINDOWS\system32\dllcache\cbidf2k.sys + 2001-08-23 15:03:10 715,466 -c--a-w C:\WINDOWS\system32\dllcache\cbmdmkxx.sys + 2008-04-13 09:46:24 17,024 -c--a-w C:\WINDOWS\system32\dllcache\ccdecode.sys + 2001-08-17 19:52:06 7,680 -c--a-w C:\WINDOWS\system32\dllcache\cd20xrnt.sys + 2002-01-08 19:39:34 18,688 -c--a-w C:\WINDOWS\system32\dllcache\cdaudio.sys + 2008-04-13 10:14:22 63,744 -c--a-w C:\WINDOWS\system32\dllcache\cdfs.sys + 2008-04-13 17:33:22 152,064 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll + 2008-04-13 17:33:22 2,091,520 -c--a-w C:\WINDOWS\system32\dllcache\cdosys.dll + 2008-04-13 09:40:48 62,976 -c--a-w C:\WINDOWS\system32\dllcache\cdrom.sys + 2001-08-23 15:03:18 21,530 -c--a-w C:\WINDOWS\system32\dllcache\ce2n5.sys + 2001-08-23 15:03:18 27,164 -c--a-w C:\WINDOWS\system32\dllcache\ce3n5.sys + 2001-08-23 15:03:18 22,556 -c--a-w C:\WINDOWS\system32\dllcache\cem28n5.sys + 2001-08-23 15:03:20 22,556 -c--a-w C:\WINDOWS\system32\dllcache\cem33n5.sys + 2001-08-23 15:03:20 49,182 -c--a-w C:\WINDOWS\system32\dllcache\cem56n5.sys + 2008-04-13 17:33:22 200,192 -c--a-w C:\WINDOWS\system32\dllcache\certcli.dll + 2008-04-13 17:33:22 467,968 -c--a-w C:\WINDOWS\system32\dllcache\certmgr.dll + 2008-04-13 17:33:22 39,424 -c--a-w C:\WINDOWS\system32\dllcache\cfgbkend.dll + 2008-04-13 17:31:04 16,896 -c--a-w C:\WINDOWS\system32\dllcache\cfgmgr32.dll + 2008-04-13 17:33:58 188,480 -c--a-w C:\WINDOWS\system32\dllcache\cfgwiz.exe + 2008-04-13 17:33:22 15,423 -c--a-w C:\WINDOWS\system32\dllcache\ch7xxnt5.dll + 2008-04-13 09:41:00 8,192 -c--a-w C:\WINDOWS\system32\dllcache\changer.sys + 2008-04-13 17:33:22 148,480 -c--a-w C:\WINDOWS\system32\dllcache\cic.dll + 2008-04-13 17:33:22 1,359,360 -c--a-w C:\WINDOWS\system32\dllcache\cimwin32.dll + 2001-08-23 15:04:06 272,640 -c--a-w C:\WINDOWS\system32\dllcache\cinemclc.sys + 2002-01-08 19:39:34 262,528 -c--a-w C:\WINDOWS\system32\dllcache\cinemst2.sys + 2008-04-13 17:33:22 69,120 -c--a-w C:\WINDOWS\system32\dllcache\ciodm.dll + 2008-04-13 17:33:58 57,344 -c--a-w C:\WINDOWS\system32\dllcache\cipher.exe + 2001-08-23 15:46:44 91,264 -c--a-w C:\WINDOWS\system32\dllcache\cirrus.dll + 2001-08-17 19:57:16 45,696 -c--a-w C:\WINDOWS\system32\dllcache\cirrus.sys + 2008-04-13 17:33:58 5,632 -c--a-w C:\WINDOWS\system32\dllcache\cisvc.exe + 2001-08-23 15:46:44 111,232 -c--a-w C:\WINDOWS\system32\dllcache\cl5465.dll + 2001-08-23 15:46:44 170,880 -c--a-w C:\WINDOWS\system32\dllcache\cl546x.dll + 2001-08-17 19:57:36 248,064 -c--a-w C:\WINDOWS\system32\dllcache\cl546xm.sys + 2008-04-13 10:16:24 49,536 -c--a-w C:\WINDOWS\system32\dllcache\classpnp.sys + 2008-04-13 17:33:22 110,592 -c--a-w C:\WINDOWS\system32\dllcache\clbcatex.dll + 2008-04-13 17:33:22 498,688 -c--a-w C:\WINDOWS\system32\dllcache\clbcatq.dll + 2008-04-13 17:33:58 65,536 -c--a-w C:\WINDOWS\system32\dllcache\cleanmgr.exe + 2008-04-13 17:33:58 104,448 -c--a-w C:\WINDOWS\system32\dllcache\clipbrd.exe + 2008-04-13 17:33:58 33,280 -c--a-w C:\WINDOWS\system32\dllcache\clipsrv.exe + 2008-04-13 17:33:22 58,368 -c--a-w C:\WINDOWS\system32\dllcache\clusapi.dll + 2008-04-13 09:36:38 13,952 -c--a-w C:\WINDOWS\system32\dllcache\cmbatt.sys + 2001-08-23 15:04:40 20,864 -c--a-w C:\WINDOWS\system32\dllcache\cmbp0wdm.sys + 2008-04-13 17:33:22 15,872 -c--a-w C:\WINDOWS\system32\dllcache\cmcfg32.dll + 2008-04-13 17:33:58 401,408 -c--a-w C:\WINDOWS\system32\dllcache\cmd.exe + 2008-04-13 17:33:22 353,280 -c--a-w C:\WINDOWS\system32\dllcache\cmdial32.dll + 2001-08-23 15:04:44 6,656 -c--a-w C:\WINDOWS\system32\dllcache\cmdide.sys + 2008-04-13 17:33:58 25,600 -c--a-w C:\WINDOWS\system32\dllcache\cmdl32.exe + 2008-04-13 17:33:58 39,936 -c--a-w C:\WINDOWS\system32\dllcache\cmmon32.exe + 2008-04-13 17:33:22 191,488 -c--a-w C:\WINDOWS\system32\dllcache\cmprops.dll + 2008-04-13 17:33:22 13,312 -c--a-w C:\WINDOWS\system32\dllcache\cmsetacl.dll + 2008-04-13 17:33:58 65,536 -c--a-w C:\WINDOWS\system32\dllcache\cmstp.exe + 2008-04-13 17:33:22 40,960 -c--a-w C:\WINDOWS\system32\dllcache\cmutil.dll + 2008-04-13 17:33:22 50,688 -c--a-w C:\WINDOWS\system32\dllcache\cnbjmon.dll + 2001-08-23 15:47:00 44,544 -c--a-w C:\WINDOWS\system32\dllcache\cnusd.dll + 2001-08-17 18:11:42 39,936 -c--a-w C:\WINDOWS\system32\dllcache\cnxt1803.sys + 2008-04-13 17:33:22 47,104 -c--a-w C:\WINDOWS\system32\dllcache\coadmin.dll + 2008-04-13 07:44:18 17,920 -c--a-w C:\WINDOWS\system32\dllcache\cobramsg.dll + 2008-04-13 17:33:22 60,416 -c--a-w C:\WINDOWS\system32\dllcache\colbact.dll + 2008-04-13 17:33:22 28,160 -c--a-w C:\WINDOWS\system32\dllcache\comaddin.dll + 2008-04-13 17:33:22 195,072 -c--a-w C:\WINDOWS\system32\dllcache\comadmin.dll + 2008-04-13 17:33:22 617,472 -c--a-w C:\WINDOWS\system32\dllcache\comctl32.dll + 2008-04-13 17:33:22 281,600 -c--a-w C:\WINDOWS\system32\dllcache\comdlg32.dll + 2008-04-13 17:33:22 253,440 -c--a-w C:\WINDOWS\system32\dllcache\compatui.dll + 2008-04-13 09:36:38 10,240 -c--a-w C:\WINDOWS\system32\dllcache\compbatt.sys + 2008-04-13 17:33:22 24,064 -c--a-w C:\WINDOWS\system32\dllcache\compfilt.dll + 2008-04-13 17:33:22 230,912 -c--a-w C:\WINDOWS\system32\dllcache\compstui.dll + 2008-04-13 17:33:22 97,792 -c--a-w C:\WINDOWS\system32\dllcache\comrepl.dll + 2008-04-13 17:33:58 9,728 -c--a-w C:\WINDOWS\system32\dllcache\comrepl.exe + 2008-04-13 17:33:58 6,144 -c--a-w C:\WINDOWS\system32\dllcache\comrereg.exe + 2008-04-13 17:33:22 851,968 -c--a-w C:\WINDOWS\system32\dllcache\comres.dll + 2008-04-13 17:33:22 274,944 -c--a-w C:\WINDOWS\system32\dllcache\comsetup.dll + 2008-04-13 17:33:22 167,424 -c--a-w C:\WINDOWS\system32\dllcache\comsnap.dll + 2008-04-13 17:33:22 1,267,200 -c--a-w C:\WINDOWS\system32\dllcache\comsvcs.dll + 2008-04-13 17:33:22 539,648 -c--a-w C:\WINDOWS\system32\dllcache\comuid.dll + 2008-04-13 17:34:00 1,044,480 -c--a-w C:\WINDOWS\system32\dllcache\conf.exe + 2008-04-13 17:33:22 45,056 -c--a-w C:\WINDOWS\system32\dllcache\confmrsl.dll + 2008-04-13 17:33:22 358,400 -c--a-w C:\WINDOWS\system32\dllcache\confmsp.dll + 2008-04-13 17:34:00 27,648 -c--a-w C:\WINDOWS\system32\dllcache\conime.exe - 2007-08-13 16:42:54 17,408 -c----w C:\WINDOWS\system32\dllcache\corpol.dll + 2008-04-13 17:33:22 35,328 -c--a-w C:\WINDOWS\system32\dllcache\corpol.dll + 2001-08-17 19:52:06 14,976 -c--a-w C:\WINDOWS\system32\dllcache\cpqarray.sys + 2002-01-08 19:39:34 11,776 -c--a-w C:\WINDOWS\system32\dllcache\cpqdap01.sys + 2001-08-23 15:07:28 21,533 -c--a-w C:\WINDOWS\system32\dllcache\cpqndis5.sys + 2001-08-23 15:07:28 61,194 -c--a-w C:\WINDOWS\system32\dllcache\cpqtrnd5.sys + 2001-08-23 15:47:00 216,576 -c--a-w C:\WINDOWS\system32\dllcache\cpscan.dll + 2008-04-13 17:33:22 12,800 -c--a-w C:\WINDOWS\system32\dllcache\credssp.dll + 2008-04-13 17:33:22 165,888 -c--a-w C:\WINDOWS\system32\dllcache\credui.dll + 2001-08-17 18:19:18 42,112 -c--a-w C:\WINDOWS\system32\dllcache\crtaud.sys + 2008-04-13 17:02:48 40,960 -c--a-w C:\WINDOWS\system32\dllcache\crusoe.sys + 2008-04-13 17:33:22 606,208 -c--a-w C:\WINDOWS\system32\dllcache\crypt32.dll + 2008-04-13 17:33:22 75,776 -c--a-w C:\WINDOWS\system32\dllcache\cryptdlg.dll + 2008-04-13 17:33:22 33,280 -c--a-w C:\WINDOWS\system32\dllcache\cryptdll.dll + 2008-04-13 17:33:22 54,784 -c--a-w C:\WINDOWS\system32\dllcache\cryptext.dll + 2008-04-13 17:33:22 64,512 -c--a-w C:\WINDOWS\system32\dllcache\cryptnet.dll + 2008-04-13 17:33:22 62,464 -c--a-w C:\WINDOWS\system32\dllcache\cryptsvc.dll + 2008-04-13 17:33:22 530,432 -c--a-w C:\WINDOWS\system32\dllcache\cryptui.dll + 2001-08-23 15:47:00 175,104 -c--a-w C:\WINDOWS\system32\dllcache\csamsp.dll + 2008-04-13 17:33:22 102,912 -c--a-w C:\WINDOWS\system32\dllcache\cscdll.dll + 2008-04-13 17:34:00 139,264 -c--a-w C:\WINDOWS\system32\dllcache\cscript.exe + 2008-04-13 17:33:22 337,920 -c--a-w C:\WINDOWS\system32\dllcache\cscui.dll + 2008-04-13 17:33:24 32,256 -c--a-w C:\WINDOWS\system32\dllcache\csrsrv.dll + 2008-04-13 17:34:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\csrss.exe + 2008-04-13 17:34:00 15,360 -c--a-w C:\WINDOWS\system32\dllcache\ctfmon.exe + 2001-08-17 18:19:28 6,912 -c--a-w C:\WINDOWS\system32\dllcache\ctlfacem.sys + 2001-08-17 18:19:20 3,712 -c--a-w C:\WINDOWS\system32\dllcache\ctljystk.sys + 2001-08-17 18:19:20 96,256 -c--a-w C:\WINDOWS\system32\dllcache\ctlsb16.sys + 2008-04-13 17:33:24 252,416 -c--a-w C:\WINDOWS\system32\dllcache\ctmasetp.dll + 2001-08-23 15:47:00 4,096 -c--a-w C:\WINDOWS\system32\dllcache\ctwdm32.dll - 2007-08-13 16:54:10 33,792 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll + 2008-04-13 17:33:24 33,792 -c--a-w C:\WINDOWS\system32\dllcache\custsat.dll + 2001-08-17 18:19:24 3,072 -c--a-w C:\WINDOWS\system32\dllcache\cwbase.sys + 2001-08-17 18:19:26 3,072 -c--a-w C:\WINDOWS\system32\dllcache\cwbmidi.sys + 2001-08-17 18:19:28 72,832 -c--a-w C:\WINDOWS\system32\dllcache\cwbwdm.sys + 2001-08-17 18:19:30 3,584 -c--a-w C:\WINDOWS\system32\dllcache\cwcosnt5.sys + 2001-08-17 18:19:36 111,872 -c--a-w C:\WINDOWS\system32\dllcache\cwcspud.sys + 2001-08-17 18:19:48 93,952 -c--a-w C:\WINDOWS\system32\dllcache\cwcwdm.sys + 2008-04-13 07:36:04 48,640 -c--a-w C:\WINDOWS\system32\dllcache\cwrwdm.sys + 2001-08-23 15:08:38 17,536 -c--a-w C:\WINDOWS\system32\dllcache\cyclad-z.sys + 2001-08-23 15:08:38 15,104 -c--a-w C:\WINDOWS\system32\dllcache\cyclom-y.sys + 2001-08-23 15:47:00 29,184 -c--a-w C:\WINDOWS\system32\dllcache\cyycoins.dll + 2001-08-23 15:08:40 50,944 -c--a-w C:\WINDOWS\system32\dllcache\cyyport.sys + 2001-08-23 15:47:00 28,160 -c--a-w C:\WINDOWS\system32\dllcache\cyyports.dll + 2001-08-23 15:47:00 28,160 -c--a-w C:\WINDOWS\system32\dllcache\cyzcoins.dll + 2001-08-23 15:08:42 50,688 -c--a-w C:\WINDOWS\system32\dllcache\cyzport.sys + 2001-08-23 15:47:00 28,160 -c--a-w C:\WINDOWS\system32\dllcache\cyzports.dll + 2001-08-23 15:08:44 117,760 -c--a-w C:\WINDOWS\system32\dllcache\d100ib5.sys + 2008-04-13 17:33:24 1,179,648 -c--a-w C:\WINDOWS\system32\dllcache\d3d8.dll + 2008-04-13 17:33:24 8,192 -c--a-w C:\WINDOWS\system32\dllcache\d3d8thk.dll + 2008-04-13 17:33:24 1,689,088 -c--a-w C:\WINDOWS\system32\dllcache\d3d9.dll + 2008-04-13 17:33:24 824,320 -c--a-w C:\WINDOWS\system32\dllcache\d3dim700.dll + 2001-08-17 19:52:16 179,584 -c--a-w C:\WINDOWS\system32\dllcache\dac2w2k.sys + 2001-08-17 19:52:16 14,720 -c--a-w C:\WINDOWS\system32\dllcache\dac960nt.sys + 2008-04-13 17:33:24 1,056,768 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll + 2008-01-19 02:04:50 554,008 -c--a-w C:\WINDOWS\system32\dllcache\dao360.dll + 2008-04-13 17:33:24 55,296 -c--a-w C:\WINDOWS\system32\dllcache\dataclen.dll + 2008-04-13 17:33:24 165,376 -c--a-w C:\WINDOWS\system32\dllcache\datime.dll + 2008-04-13 17:34:00 42,496 -c--a-w C:\WINDOWS\system32\dllcache\davcdata.exe + 2008-04-13 17:33:24 25,600 -c--a-w C:\WINDOWS\system32\dllcache\davclnt.dll + 2008-04-13 17:33:24 640,000 -c--a-w C:\WINDOWS\system32\dllcache\dbghelp.dll + 2008-04-13 17:33:24 110,592 -c--a-w C:\WINDOWS\system32\dllcache\dbnetlib.dll + 2001-08-23 15:47:00 25,600 -c--a-w C:\WINDOWS\system32\dllcache\dc210_32.dll + 2001-08-23 15:47:00 82,432 -c--a-w C:\WINDOWS\system32\dllcache\dc210usd.dll + 2001-08-17 18:12:02 63,208 -c--a-w C:\WINDOWS\system32\dllcache\dc21x4.sys + 2001-08-23 15:47:00 87,552 -c--a-w C:\WINDOWS\system32\dllcache\dc240usd.dll + 2001-08-23 15:47:00 112,128 -c--a-w C:\WINDOWS\system32\dllcache\dc260usd.dll + 2008-04-13 17:33:24 40,960 -c--a-w C:\WINDOWS\system32\dllcache\dcap32.dll + 2008-04-13 17:33:24 8,704 -c--a-w C:\WINDOWS\system32\dllcache\dciman32.dll + 2008-04-13 17:34:00 6,144 -c--a-w C:\WINDOWS\system32\dllcache\dcomcnfg.exe + 2008-04-13 17:34:00 31,744 -c--a-w C:\WINDOWS\system32\dllcache\ddeshare.exe + 2008-04-13 17:33:24 279,552 -c--a-w C:\WINDOWS\system32\dllcache\ddraw.dll + 2008-04-13 17:33:24 27,136 -c--a-w C:\WINDOWS\system32\dllcache\ddrawex.dll + 2001-08-17 19:52:58 7,424 -c--a-w C:\WINDOWS\system32\dllcache\ddsmc.sys + 2001-08-17 18:11:44 20,928 -c--a-w C:\WINDOWS\system32\dllcache\defpa.sys + 2008-04-13 17:34:00 25,088 -c--a-w C:\WINDOWS\system32\dllcache\defrag.exe + 2001-08-23 15:47:00 256,512 -c--a-w C:\WINDOWS\system32\dllcache\devcon32.dll + 2008-04-13 17:33:24 59,904 -c--a-w C:\WINDOWS\system32\dllcache\devenum.dll + 2001-08-23 15:47:34 24,064 -c--a-w C:\WINDOWS\system32\dllcache\devldr32.exe + 2008-04-13 17:33:24 290,816 -c--a-w C:\WINDOWS\system32\dllcache\devmgr.dll + 2001-08-17 18:11:48 24,648 -c--a-w C:\WINDOWS\system32\dllcache\dfe650.sys + 2001-08-17 18:11:48 24,649 -c--a-w C:\WINDOWS\system32\dllcache\dfe650d.sys + 2008-04-13 17:34:00 82,944 -c--a-w C:\WINDOWS\system32\dllcache\dfrgfat.exe + 2008-04-13 17:34:00 105,472 -c--a-w C:\WINDOWS\system32\dllcache\dfrgntfs.exe + 2008-04-13 17:33:24 39,936 -c--a-w C:\WINDOWS\system32\dllcache\dfrgsnap.dll + 2008-04-13 17:33:24 124,416 -c--a-w C:\WINDOWS\system32\dllcache\dfrgui.dll + 2008-04-13 17:33:24 28,672 -c--a-w C:\WINDOWS\system32\dllcache\dfsshlex.dll + 2001-08-23 15:09:48 29,691 -c--a-w C:\WINDOWS\system32\dllcache\dgapci.sys + 2001-08-23 15:47:00 422,429 -c--a-w C:\WINDOWS\system32\dllcache\dgconfig.dll + 2008-04-13 17:33:24 115,200 -c--a-w C:\WINDOWS\system32\dllcache\dgnet.dll + 2008-04-13 17:33:24 127,488 -c--a-w C:\WINDOWS\system32\dllcache\dhcpcsvc.dll + 2008-04-13 17:33:24 411,136 -c--a-w C:\WINDOWS\system32\dllcache\dhcpmon.dll + 2008-04-13 17:33:24 49,152 -c--a-w C:\WINDOWS\system32\dllcache\dhcpqec.dll + 2008-04-13 17:34:00 548,352 -c--a-w C:\WINDOWS\system32\dllcache\dialer.exe + 2008-04-13 17:34:02 87,040 -c--a-w C:\WINDOWS\system32\dllcache\diantz.exe + 2001-08-17 18:13:48 164,923 -c--a-w C:\WINDOWS\system32\dllcache\diapi2.sys + 2001-08-23 15:47:02 32,256 -c--a-w C:\WINDOWS\system32\dllcache\diapi2NT.dll + 2008-04-13 17:33:24 68,608 -c--a-w C:\WINDOWS\system32\dllcache\digest.dll + 2001-08-23 15:47:02 65,622 -c--a-w C:\WINDOWS\system32\dllcache\digiasyn.dll + 2001-08-23 15:10:10 37,927 -c--a-w C:\WINDOWS\system32\dllcache\digiasyn.sys + 2001-08-23 15:47:02 135,252 -c--a-w C:\WINDOWS\system32\dllcache\digidbp.dll + 2001-08-23 15:10:10 103,492 -c--a-w C:\WINDOWS\system32\dllcache\digidxb.sys + 2001-08-23 15:10:12 90,685 -c--a-w C:\WINDOWS\system32\dllcache\digifep5.sys + 2001-08-23 15:47:02 229,462 -c--a-w C:\WINDOWS\system32\dllcache\digifwrk.dll + 2001-08-23 15:47:02 159,828 -c--a-w C:\WINDOWS\system32\dllcache\digihlc.dll + 2001-08-23 15:47:02 102,484 -c--a-w C:\WINDOWS\system32\dllcache\digiinf.dll + 2001-08-23 15:47:02 41,046 -c--a-w C:\WINDOWS\system32\dllcache\digiisdn.dll + 2001-08-17 18:14:44 21,606 -c--a-w C:\WINDOWS\system32\dllcache\digiisdn.sys + 2001-08-23 15:47:02 110,621 -c--a-w C:\WINDOWS\system32\dllcache\digirlpt.dll + 2001-08-23 15:10:16 42,656 -c--a-w C:\WINDOWS\system32\dllcache\digirlpt.sys + 2001-08-23 15:47:34 622,621 -c--a-w C:\WINDOWS\system32\dllcache\digiview.exe + 2001-08-17 18:13:52 91,305 -c--a-w C:\WINDOWS\system32\dllcache\dimaint.sys + 2008-04-13 17:33:24 19,456 -c--a-w C:\WINDOWS\system32\dllcache\dimsntfy.dll + 2008-04-13 17:33:24 39,936 -c--a-w C:\WINDOWS\system32\dllcache\dimsroam.dll + 2008-04-13 17:33:24 165,376 -c--a-w C:\WINDOWS\system32\dllcache\dinput.dll + 2008-04-13 17:33:24 187,904 -c--a-w C:\WINDOWS\system32\dllcache\dinput8.dll + 2008-04-13 17:33:24 86,528 -c--a-w C:\WINDOWS\system32\dllcache\directdb.dll + 2008-04-13 09:40:48 36,352 -c--a-w C:\WINDOWS\system32\dllcache\disk.sys + 2008-04-13 17:33:24 1,504,768 -c--a-w C:\WINDOWS\system32\dllcache\diskcopy.dll + 2008-04-13 09:40:46 14,208 -c--a-w C:\WINDOWS\system32\dllcache\diskdump.sys + 2008-04-13 17:34:02 167,936 -c--a-w C:\WINDOWS\system32\dllcache\diskpart.exe + 2008-04-13 17:33:24 32,768 -c--a-w C:\WINDOWS\system32\dllcache\dispex.dll + 2001-08-23 15:47:02 6,729 -c--a-w C:\WINDOWS\system32\dllcache\disrvci.dll + 2001-08-23 15:47:02 31,817 -c--a-w C:\WINDOWS\system32\dllcache\disrvpp.dll + 2001-08-23 15:47:02 38,985 -c--a-w C:\WINDOWS\system32\dllcache\disrvsu.dll + 2001-08-23 15:47:34 236,060 -c--a-w C:\WINDOWS\system32\dllcache\ditrace.exe + 2001-08-23 15:47:02 6,216 -c--a-w C:\WINDOWS\system32\dllcache\divaci.dll + 2001-08-23 15:47:02 37,962 -c--a-w C:\WINDOWS\system32\dllcache\divaprop.dll + 2001-08-23 15:47:02 29,768 -c--a-w C:\WINDOWS\system32\dllcache\divasu.dll + 2001-08-17 18:14:52 952,007 -c--a-w C:\WINDOWS\system32\dllcache\diwan.sys + 2001-08-17 18:11:44 26,698 -c--a-w C:\WINDOWS\system32\dllcache\dlh5xnd5.sys + 2008-04-13 17:34:02 5,120 -c--a-w C:\WINDOWS\system32\dllcache\dllhost.exe + 2008-04-13 09:40:52 8,320 -c--a-w C:\WINDOWS\system32\dllcache\dlttape.sys + 2001-08-17 18:11:42 29,696 -c--a-w C:\WINDOWS\system32\dllcache\dm9pci5.sys + 2008-04-13 17:34:02 225,280 -c--a-w C:\WINDOWS\system32\dllcache\dmadmin.exe + 2008-04-13 17:33:24 28,672 -c--a-w C:\WINDOWS\system32\dllcache\dmband.dll + 2008-04-13 17:05:08 800,256 -c--a-w C:\WINDOWS\system32\dllcache\dmboot.sys + 2008-04-13 17:33:24 61,440 -c--a-w C:\WINDOWS\system32\dllcache\dmcompos.dll + 2008-04-13 17:33:24 285,184 -c--a-w C:\WINDOWS\system32\dllcache\dmdlgs.dll + 2008-04-13 17:33:24 200,704 -c--a-w C:\WINDOWS\system32\dllcache\dmdskmgr.dll + 2008-04-13 17:33:24 181,248 -c--a-w C:\WINDOWS\system32\dllcache\dmime.dll + 2008-04-13 17:05:14 154,496 -c--a-w C:\WINDOWS\system32\dllcache\dmio.sys + 2008-04-13 17:33:24 35,840 -c--a-w C:\WINDOWS\system32\dllcache\dmloader.dll + 2008-04-13 17:34:02 15,872 -c--a-w C:\WINDOWS\system32\dllcache\dmremote.exe + 2008-04-13 17:33:24 82,432 -c--a-w C:\WINDOWS\system32\dllcache\dmscript.dll + 2008-04-13 17:33:24 24,576 -c--a-w C:\WINDOWS\system32\dllcache\dmserver.dll + 2008-04-13 17:33:24 105,984 -c--a-w C:\WINDOWS\system32\dllcache\dmstyle.dll + 2008-04-13 17:33:24 103,424 -c--a-w C:\WINDOWS\system32\dllcache\dmsynth.dll + 2008-04-13 17:33:24 104,448 -c--a-w C:\WINDOWS\system32\dllcache\dmusic.dll + 2008-04-13 09:45:02 52,864 -c--a-w C:\WINDOWS\system32\dllcache\dmusic.sys + 2008-04-13 17:33:24 58,880 -c--a-w C:\WINDOWS\system32\dllcache\dmutil.dll + 2008-04-13 17:33:24 147,968 -c--a-w C:\WINDOWS\system32\dllcache\dnsapi.dll + 2008-04-13 17:33:24 45,568 -c--a-w C:\WINDOWS\system32\dllca

locdog · Answer

2008-04-13 17:33:24	58,880	-c--a-w	C:\WINDOWS\system32\dllcache\dmutil.dll
+ 2008-04-13 17:33:24	147,968	-c--a-w	C:\WINDOWS\system32\dllcache\dnsapi.dll
+ 2008-04-13 17:33:24	45,568	-c--a-w	C:\WINDOWS\system32\dllcache\dnsrslvr.dll
+ 2008-04-13 17:33:24	48,640	-c--a-w	C:\WINDOWS\system32\dllcache\docprop2.dll
+ 2008-04-13 07:54:56	54,080	-c--a-w	C:\WINDOWS\system32\dllcache\dosx.exe
+ 2008-04-13 17:33:24	26,112	-c--a-w	C:\WINDOWS\system32\dllcache\dot3api.dll
+ 2008-04-13 17:33:24	60,928	-c--a-w	C:\WINDOWS\system32\dllcache\dot3cfg.dll
+ 2008-04-13 17:33:24	39,936	-c--a-w	C:\WINDOWS\system32\dllcache\dot3clnt.dll
+ 2008-04-13 17:33:24	9,216	-c--a-w	C:\WINDOWS\system32\dllcache\dot3dlg.dll
+ 2008-04-13 17:33:24	56,832	-c--a-w	C:\WINDOWS\system32\dllcache\dot3msm.dll
+ 2008-04-13 17:33:24	133,120	-c--a-w	C:\WINDOWS\system32\dllcache\dot3svc.dll
+ 2008-04-13 17:33:24	651,264	-c--a-w	C:\WINDOWS\system32\dllcache\dot3ui.dll
+ 2008-04-13 09:39:48	206,976	-c--a-w	C:\WINDOWS\system32\dllcache\dot4.sys
+ 2001-08-17 19:47:32	12,928	-c--a-w	C:\WINDOWS\system32\dllcache\dot4prt.sys
+ 2001-08-17 19:47:32	8,704	-c--a-w	C:\WINDOWS\system32\dllcache\dot4scan.sys
+ 2001-08-23 15:11:02	24,064	-c--a-w	C:\WINDOWS\system32\dllcache\dot4usb.sys
+ 2001-08-17 18:12:32	28,062	-c--a-w	C:\WINDOWS\system32\dllcache\dp83820.sys
+ 2008-04-13 17:34:02	29,696	-c--a-w	C:\WINDOWS\system32\dllcache\dplaysvr.exe
+ 2008-04-13 17:33:24	229,888	-c--a-w	C:\WINDOWS\system32\dllcache\dplayx.dll
+ 2008-04-13 17:33:24	24,064	-c--a-w	C:\WINDOWS\system32\dllcache\dpmodemx.dll
+ 2008-04-13 17:31:16	3,072	-c--a-w	C:\WINDOWS\system32\dllcache\dpnaddr.dll
+ 2008-04-13 17:33:24	375,296	-c--a-w	C:\WINDOWS\system32\dllcache\dpnet.dll
+ 2008-04-13 17:33:24	35,328	-c--a-w	C:\WINDOWS\system32\dllcache\dpnhpast.dll
+ 2008-04-13 17:33:24	60,928	-c--a-w	C:\WINDOWS\system32\dllcache\dpnhupnp.dll
+ 2008-04-13 17:31:16	3,072	-c--a-w	C:\WINDOWS\system32\dllcache\dpnlobby.dll
+ 2008-04-13 17:34:02	18,432	-c--a-w	C:\WINDOWS\system32\dllcache\dpnsvr.exe
+ 2001-08-17 20:07:44	20,192	-c--a-w	C:\WINDOWS\system32\dllcache\dpti2o.sys
+ 2008-04-13 17:33:24	21,504	-c--a-w	C:\WINDOWS\system32\dllcache\dpvacm.dll
+ 2008-04-13 17:33:24	213,504	-c--a-w	C:\WINDOWS\system32\dllcache\dpvoice.dll
+ 2008-04-13 17:34:02	83,456	-c--a-w	C:\WINDOWS\system32\dllcache\dpvsetup.exe
+ 2008-04-13 17:33:24	116,736	-c--a-w	C:\WINDOWS\system32\dllcache\dpvvox.dll
+ 2008-04-13 17:33:24	57,344	-c--a-w	C:\WINDOWS\system32\dllcache\dpwsockx.dll
+ 2008-04-13 09:45:16	60,160	-c--a-w	C:\WINDOWS\system32\dllcache\drmk.sys
+ 2008-04-13 09:45:14	2,944	-c--a-w	C:\WINDOWS\system32\dllcache\drmkaud.sys
+ 2008-04-13 17:33:24	14,336	-c--a-w	C:\WINDOWS\system32\dllcache\drprov.dll
+ 2008-04-13 17:34:02	65,536	-c--a-w	C:\WINDOWS\system32\dllcache\drvqry.exe
+ 2001-08-17 18:20:18	334,208	-c--a-w	C:\WINDOWS\system32\dllcache\ds1wdm.sys
+ 2008-04-13 17:33:24	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\ds32gt.dll
+ 2008-04-13 17:33:24	181,248	-c--a-w	C:\WINDOWS\system32\dllcache\dsdmo.dll
+ 2008-04-13 17:33:24	72,192	-c--a-w	C:\WINDOWS\system32\dllcache\dsdmoprp.dll
+ 2008-04-13 17:33:24	93,696	-c--a-w	C:\WINDOWS\system32\dllcache\dskquota.dll
+ 2008-04-13 17:33:24	161,280	-c--a-w	C:\WINDOWS\system32\dllcache\dskquoui.dll
+ 2008-04-13 17:33:24	367,616	-c--a-w	C:\WINDOWS\system32\dllcache\dsound.dll
+ 2008-04-13 17:33:24	1,293,824	-c--a-w	C:\WINDOWS\system32\dllcache\dsound3d.dll
+ 2008-04-13 17:33:24	145,920	-c--a-w	C:\WINDOWS\system32\dllcache\dsprop.dll
+ 2008-04-13 17:06:30	4,096	-c--a-w	C:\WINDOWS\system32\dllcache\dsprpres.dll
+ 2008-04-13 17:33:24	240,640	-c--a-w	C:\WINDOWS\system32\dllcache\dsquery.dll
+ 2008-04-13 17:33:24	52,736	-c--a-w	C:\WINDOWS\system32\dllcache\dssec.dll
+ 2008-04-13 08:37:58	138,752	-c--a-w	C:\WINDOWS\system32\dllcache\dssenh.dll
+ 2008-04-13 17:33:24	113,664	-c--a-w	C:\WINDOWS\system32\dllcache\dsuiext.dll
+ 2008-04-13 17:33:24	19,456	-c--a-w	C:\WINDOWS\system32\dllcache\dswave.dll
+ 2008-04-13 17:34:02	10,752	-c--a-w	C:\WINDOWS\system32\dllcache\dumprep.exe
+ 2008-04-13 17:33:24	304,128	-c--a-w	C:\WINDOWS\system32\dllcache\duser.dll
+ 2002-01-08 19:39:34	59,392	-c--a-w	C:\WINDOWS\system32\dllcache\dvdplay.exe
+ 2008-04-13 17:34:02	17,920	-c--a-w	C:\WINDOWS\system32\dllcache\dvdupgrd.exe
+ 2008-04-13 17:34:02	180,224	-c--a-w	C:\WINDOWS\system32\dllcache\dwwin.exe
+ 2008-04-13 17:33:24	619,008	-c--a-w	C:\WINDOWS\system32\dllcache\dx7vb.dll
+ 2008-04-13 17:33:24	1,227,264	-c--a-w	C:\WINDOWS\system32\dllcache\dx8vb.dll
+ 2008-04-13 17:34:02	1,298,432	-c--a-w	C:\WINDOWS\system32\dllcache\dxdiag.exe
+ 2008-04-13 17:33:24	2,113,536	-c--a-w	C:\WINDOWS\system32\dllcache\dxdiagn.dll
+ 2008-04-13 09:38:30	71,168	-c--a-w	C:\WINDOWS\system32\dllcache\dxg.sys
+ 2001-08-23 15:12:50	51,743	-c--a-w	C:\WINDOWS\system32\dllcache\e1000nt5.sys
+ 2001-08-23 15:12:50	117,760	-c--a-w	C:\WINDOWS\system32\dllcache\e100b325.sys
+ 2001-08-17 18:12:12	19,594	-c--a-w	C:\WINDOWS\system32\dllcache\e100isa4.sys
+ 2008-04-13 17:33:24	30,720	-c--a-w	C:\WINDOWS\system32\dllcache\eapolqec.dll
+ 2008-04-13 17:33:24	184,832	-c--a-w	C:\WINDOWS\system32\dllcache\eapp3hst.dll
+ 2008-04-13 17:33:24	126,976	-c--a-w	C:\WINDOWS\system32\dllcache\eappcfg.dll
+ 2008-04-13 17:33:24	94,720	-c--a-w	C:\WINDOWS\system32\dllcache\eappgnui.dll
+ 2008-04-13 17:33:24	180,736	-c--a-w	C:\WINDOWS\system32\dllcache\eapphost.dll
+ 2008-04-13 17:33:24	40,960	-c--a-w	C:\WINDOWS\system32\dllcache\eappprxy.dll
+ 2008-04-13 17:33:24	59,392	-c--a-w	C:\WINDOWS\system32\dllcache\eapqec.dll
+ 2008-04-13 17:33:24	33,792	-c--a-w	C:\WINDOWS\system32\dllcache\eapsvc.dll
+ 2008-04-13 17:33:24	27,136	-c--a-w	C:\WINDOWS\system32\dllcache\efsadu.dll
+ 2001-08-23 15:13:26	44,615	-c--a-w	C:\WINDOWS\system32\dllcache\el515.sys
+ 2001-08-17 18:10:56	55,999	-c--a-w	C:\WINDOWS\system32\dllcache\el556nd5.sys
+ 2001-08-17 18:10:56	24,653	-c--a-w	C:\WINDOWS\system32\dllcache\el574nd4.sys
+ 2001-08-17 18:10:58	69,692	-c--a-w	C:\WINDOWS\system32\dllcache\el575nd5.sys
+ 2001-08-17 18:10:52	26,141	-c--a-w	C:\WINDOWS\system32\dllcache\el589nd5.sys
+ 2001-08-17 18:11:00	69,194	-c--a-w	C:\WINDOWS\system32\dllcache\el656cd5.sys
+ 2001-08-23 15:13:28	634,166	-c--a-w	C:\WINDOWS\system32\dllcache\el656ct5.sys
+ 2001-08-17 18:11:00	77,386	-c--a-w	C:\WINDOWS\system32\dllcache\el656nd5.sys
+ 2001-08-23 15:13:30	241,238	-c--a-w	C:\WINDOWS\system32\dllcache\el656se5.sys
+ 2001-08-17 18:11:06	66,591	-c--a-w	C:\WINDOWS\system32\dllcache\el90xbc5.sys
+ 2001-08-23 15:13:30	153,631	-c--a-w	C:\WINDOWS\system32\dllcache\el90xnd5.sys
+ 2001-08-23 15:13:30	455,711	-c--a-w	C:\WINDOWS\system32\dllcache\el985n51.sys
+ 2001-08-17 18:11:04	70,174	-c--a-w	C:\WINDOWS\system32\dllcache\el98xn5.sys
+ 2001-08-23 15:13:32	175,104	-c--a-w	C:\WINDOWS\system32\dllcache\el99xn51.sys
+ 2001-08-17 19:53:02	7,296	-c--a-w	C:\WINDOWS\system32\dllcache\elmsmc.sys
+ 2001-08-17 18:10:52	25,159	-c--a-w	C:\WINDOWS\system32\dllcache\elnk3.sys
+ 2008-04-13 17:33:24	187,392	-c--a-w	C:\WINDOWS\system32\dllcache\els.dll
+ 2001-08-17 18:10:54	19,996	-c--a-w	C:\WINDOWS\system32\dllcache\em556n4.sys
+ 2001-08-17 18:19:26	283,904	-c--a-w	C:\WINDOWS\system32\dllcache\emu10k1m.sys
+ 2008-04-13 17:33:24	20,480	-c--a-w	C:\WINDOWS\system32\dllcache\encapi.dll
+ 2008-04-13 17:33:24	186,880	-c--a-w	C:\WINDOWS\system32\dllcache\encdec.dll
+ 2001-08-17 19:46:40	6,400	-c--a-w	C:\WINDOWS\system32\dllcache\enum1394.sys
+ 2001-08-17 19:50:20	144,896	-c--a-w	C:\WINDOWS\system32\dllcache\epcfw2k.sys
+ 2001-08-17 18:12:08	18,503	-c--a-w	C:\WINDOWS\system32\dllcache\epro4.sys
+ 2001-08-17 19:50:20	114,944	-c--a-w	C:\WINDOWS\system32\dllcache\epstw2k.sys
+ 2001-08-23 15:16:00	630,016	-c--a-w	C:\WINDOWS\system32\dllcache\eqn.sys
+ 2001-08-23 15:47:34	53,760	-c--a-w	C:\WINDOWS\system32\dllcache\eqndiag.exe
+ 2001-08-23 15:47:34	51,712	-c--a-w	C:\WINDOWS\system32\dllcache\eqnlogr.exe
+ 2001-08-23 15:47:34	62,464	-c--a-w	C:\WINDOWS\system32\dllcache\eqnloop.exe
+ 2008-04-13 17:33:26	23,040	-c--a-w	C:\WINDOWS\system32\dllcache\ersvc.dll
+ 2008-04-13 17:33:26	246,272	-c--a-w	C:\WINDOWS\system32\dllcache\es.dll
+ 2001-08-17 18:19:38	37,120	-c--a-w	C:\WINDOWS\system32\dllcache\es1370mp.sys
+ 2001-08-17 18:19:34	40,704	-c--a-w	C:\WINDOWS\system32\dllcache\es1371mp.sys
+ 2001-08-17 18:19:58	72,192	-c--a-w	C:\WINDOWS\system32\dllcache\es1969.sys
+ 2001-08-17 18:19:48	174,464	-c--a-w	C:\WINDOWS\system32\dllcache\es198x.sys
+ 2001-08-23 15:16:04	596,319	-c--a-w	C:\WINDOWS\system32\dllcache\es56cvmp.sys
+ 2001-08-23 15:16:06	594,910	-c--a-w	C:\WINDOWS\system32\dllcache\es56hpi.sys
+ 2001-08-23 15:16:06	348,222	-c--a-w	C:\WINDOWS\system32\dllcache\es56tpi.sys
+ 2008-04-13 17:33:26	1,097,728	-c--a-w	C:\WINDOWS\system32\dllcache\esent.dll
+ 2001-08-17 18:19:56	63,360	-c--a-w	C:\WINDOWS\system32\dllcache\ess.sys
+ 2008-04-13 17:33:26	247,808	-c--a-w	C:\WINDOWS\system32\dllcache\esscli.dll
+ 2008-04-13 07:36:06	137,088	-c--a-w	C:\WINDOWS\system32\dllcache\essm2e.sys
+ 2001-08-23 15:47:04	43,008	-c--a-w	C:\WINDOWS\system32\dllcache\esucm.dll
+ 2001-08-23 15:47:04	34,816	-c--a-w	C:\WINDOWS\system32\dllcache\esuimg.dll
+ 2001-08-23 15:47:04	46,080	-c--a-w	C:\WINDOWS\system32\dllcache\esuni.dll
+ 2001-08-23 15:47:04	46,080	-c--a-w	C:\WINDOWS\system32\dllcache\esunib.dll
+ 2008-04-13 17:34:02	195,072	-c--a-w	C:\WINDOWS\system32\dllcache\eudcedit.exe
+ 2008-04-13 17:34:02	53,248	-c--a-w	C:\WINDOWS\system32\dllcache\evcreate.exe
+ 2008-04-13 17:33:26	56,320	-c--a-w	C:\WINDOWS\system32\dllcache\eventlog.dll
+ 2008-04-13 17:33:26	109,568	-c--a-w	C:\WINDOWS\system32\dllcache\evntagnt.dll
+ 2008-04-13 17:34:02	26,112	-c--a-w	C:\WINDOWS\system32\dllcache\evntcmd.exe
+ 2008-04-13 17:33:26	21,504	-c--a-w	C:\WINDOWS\system32\dllcache\evntrprv.dll
+ 2008-04-13 17:34:04	94,720	-c--a-w	C:\WINDOWS\system32\dllcache\evntwin.exe
+ 2008-04-13 17:33:26	45,056	-c--a-w	C:\WINDOWS\system32\dllcache\evtgprov.dll
+ 2008-04-13 17:34:04	86,528	-c--a-w	C:\WINDOWS\system32\dllcache\evtrig.exe
+ 2001-08-17 18:12:08	16,998	-c--a-w	C:\WINDOWS\system32\dllcache\ex10.sys
+ 2001-08-17 19:52:48	7,040	-c--a-w	C:\WINDOWS\system32\dllcache\exabyte2.sys
+ 2008-04-13 17:34:04	1,037,824	-c--a-w	C:\WINDOWS\system32\dllcache\explorer.exe
+ 2008-04-13 17:33:26	380,445	-c--a-w	C:\WINDOWS\system32\dllcache\expsrv.dll
+ 2008-04-13 17:33:26	14,336	-c--a-w	C:\WINDOWS\system32\dllcache\exstrace.dll
+ 2008-04-13 17:34:06	24,064	-c--a-w	C:\WINDOWS\system32\dllcache\extrac32.exe
+ 2008-04-13 17:33:26	125,952	-c--a-w	C:\WINDOWS\system32\dllcache\exts.dll
+ 2001-08-17 18:11:54	12,362	-c--a-w	C:\WINDOWS\system32\dllcache\f3ab18xi.sys
+ 2001-08-17 18:11:56	11,850	-c--a-w	C:\WINDOWS\system32\dllcache\f3ab18xj.sys
+ 2008-04-13 17:31:22	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\f3ahvoas.dll
+ 2001-08-17 18:12:32	16,074	-c--a-w	C:\WINDOWS\system32\dllcache\fa312nd5.sys
+ 2001-08-17 18:12:32	24,618	-c--a-w	C:\WINDOWS\system32\dllcache\fa410nd5.sys
+ 2008-04-13 10:14:30	143,744	-c--a-w	C:\WINDOWS\system32\dllcache\fastfat.sys
+ 2008-04-13 17:33:26	472,064	-c--a-w	C:\WINDOWS\system32\dllcache\fastprox.dll
+ 2008-04-13 17:33:26	80,896	-c--a-w	C:\WINDOWS\system32\dllcache\faultrep.dll
+ 2008-04-13 09:40:26	27,392	-c--a-w	C:\WINDOWS\system32\dllcache\fdc.sys
+ 2008-04-13 17:33:26	126,464	-c--a-w	C:\WINDOWS\system32\dllcache\fde.dll
+ 2008-04-13 17:33:26	76,288	-c--a-w	C:\WINDOWS\system32\dllcache\fdeploy.dll
+ 2008-04-13 17:33:26	21,504	-c--a-w	C:\WINDOWS\system32\dllcache\feclient.dll
+ 2001-08-17 18:10:54	22,090	-c--a-w	C:\WINDOWS\system32\dllcache\fem556n5.sys
+ 2001-08-17 18:13:08	27,165	-c--a-w	C:\WINDOWS\system32\dllcache\fetnd5.sys
+ 2008-04-13 17:33:26	348,160	-c--a-w	C:\WINDOWS\system32\dllcache\filemgmt.dll
+ 2008-04-13 17:34:06	29,184	-c--a-w	C:\WINDOWS\system32\dllcache\findstr.exe
+ 2008-04-13 16:57:40	44,672	-c--a-w	C:\WINDOWS\system32\dllcache\fips.sys
+ 2008-04-13 17:33:26	88,064	-c--a-w	C:\WINDOWS\system32\dllcache\fldrclnr.dll
+ 2008-04-13 09:40:26	20,480	-c--a-w	C:\WINDOWS\system32\dllcache\flpydisk.sys
+ 2008-04-13 17:33:26	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\fltlib.dll
+ 2008-04-13 17:34:06	23,040	-c--a-w	C:\WINDOWS\system32\dllcache\fltmc.exe
+ 2008-04-13 09:33:00	129,792	-c--a-w	C:\WINDOWS\system32\dllcache\fltmgr.sys
+ 2001-08-23 15:47:04	72,192	-c--a-w	C:\WINDOWS\system32\dllcache\fnfilter.dll
+ 2008-04-13 17:33:26	386,560	-c--a-w	C:\WINDOWS\system32\dllcache\fontext.dll
+ 2008-04-13 17:33:26	80,896	-c--a-w	C:\WINDOWS\system32\dllcache\fontsub.dll
+ 2008-04-13 17:34:06	21,504	-c--a-w	C:\WINDOWS\system32\dllcache\fontview.exe
+ 2008-04-13 17:34:06	7,680	-c--a-w	C:\WINDOWS\system32\dllcache\forcedos.exe
+ 2008-04-13 07:35:32	34,173	-c--a-w	C:\WINDOWS\system32\dllcache\forehe.sys
+ 2008-04-13 17:33:26	32,828	-c--a-w	C:\WINDOWS\system32\dllcache\fp40ext.dll
+ 2008-04-13 17:33:26	184,435	-c--a-w	C:\WINDOWS\system32\dllcache\fp4amsft.dll
+ 2008-04-13 17:33:26	82,035	-c--a-w	C:\WINDOWS\system32\dllcache\fp4anscp.dll
+ 2008-04-13 17:33:26	147,513	-c--a-w	C:\WINDOWS\system32\dllcache\fp4apws.dll
+ 2008-04-13 17:33:26	49,210	-c--a-w	C:\WINDOWS\system32\dllcache\fp4areg.dll
+ 2008-04-13 17:33:26	102,509	-c--a-w	C:\WINDOWS\system32\dllcache\fp4atxt.dll
+ 2008-04-13 17:33:26	618,605	-c--a-w	C:\WINDOWS\system32\dllcache\fp4autl.dll
+ 2008-04-13 17:33:26	41,020	-c--a-w	C:\WINDOWS\system32\dllcache\fp4avnb.dll
+ 2008-04-13 17:33:26	32,826	-c--a-w	C:\WINDOWS\system32\dllcache\fp4avss.dll
+ 2008-04-13 17:33:26	49,212	-c--a-w	C:\WINDOWS\system32\dllcache\fp4awebs.dll
+ 2008-04-13 17:33:26	876,653	-c--a-w	C:\WINDOWS\system32\dllcache\fp4awel.dll
+ 2008-04-13 17:34:06	15,120	-c--a-w	C:\WINDOWS\system32\dllcache\fp98sadm.exe
+ 2008-04-13 17:34:06	109,840	-c--a-w	C:\WINDOWS\system32\dllcache\fp98swin.exe
+ 2008-04-13 17:34:06	24,632	-c--a-w	C:\WINDOWS\system32\dllcache\fpadmcgi.exe
+ 2008-04-13 17:33:26	20,541	-c--a-w	C:\WINDOWS\system32\dllcache\fpadmdll.dll
+ 2001-08-17 18:14:24	444,416	-c--a-w	C:\WINDOWS\system32\dllcache\fpcibase.sys
+ 2001-08-17 18:14:44	441,728	-c--a-w	C:\WINDOWS\system32\dllcache\fpcmbase.sys
+ 2008-04-13 17:34:06	188,494	-c--a-w	C:\WINDOWS\system32\dllcache\fpcount.exe
+ 2008-04-13 17:33:26	94,208	-c--a-w	C:\WINDOWS\system32\dllcache\fpencode.dll
+ 2008-04-13 17:33:26	20,541	-c--a-w	C:\WINDOWS\system32\dllcache\fpexedll.dll
+ 2008-04-13 17:33:26	598,071	-c--a-w	C:\WINDOWS\system32\dllcache\fpmmc.dll
+ 2007-03-28 03:53:14	217,088	-c--a-w	C:\WINDOWS\system32\dllcache\fpmmcsat.dll
+ 2001-08-17 18:15:02	442,240	-c--a-w	C:\WINDOWS\system32\dllcache\fpnpbase.sys
+ 2008-04-13 17:34:06	20,538	-c--a-w	C:\WINDOWS\system32\dllcache\fpremadm.exe
+ 2008-04-13 17:31:24	9,344	-c--a-w	C:\WINDOWS\system32\dllcache\framebuf.dll
+ 2008-04-13 17:33:26	185,344	-c--a-w	C:\WINDOWS\system32\dllcache\framedyn.dll
+ 2008-04-13 17:34:06	193,024	-c--a-w	C:\WINDOWS\system32\dllcache\fsquirt.exe
+ 2002-01-08 19:39:34	12,416	-c--a-w	C:\WINDOWS\system32\dllcache\fsvga.sys
+ 2002-01-08 19:39:50	126,080	-c--a-w	C:\WINDOWS\system32\dllcache\ftdisk.sys
+ 2008-04-13 17:34:06	46,080	-c--a-w	C:\WINDOWS\system32\dllcache\ftp.exe
+ 2008-04-13 17:33:26	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\ftpmib.dll
+ 2008-04-13 17:33:26	127,488	-c--a-w	C:\WINDOWS\system32\dllcache\ftpsv251.dll
+ 2001-08-17 18:15:22	455,680	-c--a-w	C:\WINDOWS\system32\dllcache\fus2base.sys
+ 2001-08-17 18:15:38	455,296	-c--a-w	C:\WINDOWS\system32\dllcache\fusbbase.sys
+ 2001-08-23 15:47:04	92,672	-c--a-w	C:\WINDOWS\system32\dllcache\fuusd.dll
+ 2008-04-13 17:33:26	60,416	-c--a-w	C:\WINDOWS\system32\dllcache\fwcfg.dll
+ 2008-04-13 17:33:26	451,584	-c--a-w	C:\WINDOWS\system32\dllcache\fxsapi.dll
+ 2008-04-13 17:34:06	142,848	-c--a-w	C:\WINDOWS\system32\dllcache\fxsclnt.exe
+ 2008-04-13 17:33:26	72,192	-c--a-w	C:\WINDOWS\system32\dllcache\fxscom.dll
+ 2008-04-13 17:33:26	285,184	-c--a-w	C:\WINDOWS\system32\dllcache\fxscomex.dll
+ 2008-04-13 17:34:06	238,592	-c--a-w	C:\WINDOWS\system32\dllcache\fxscover.exe
+ 2008-04-13 17:33:26	26,624	-c--a-w	C:\WINDOWS\system32\dllcache\fxsdrv.dll
+ 2008-04-13 17:33:26	66,048	-c--a-w	C:\WINDOWS\system32\dllcache\fxsevent.dll
+ 2008-04-13 17:33:26	23,552	-c--a-w	C:\WINDOWS\system32\dllcache\fxsext32.dll
+ 2008-04-13 17:33:26	24,064	-c--a-w	C:\WINDOWS\system32\dllcache\fxsmon.dll
+ 2008-04-13 17:33:26	132,608	-c--a-w	C:\WINDOWS\system32\dllcache\fxsocm.dll
+ 2008-04-13 17:33:26	8,704	-c--a-w	C:\WINDOWS\system32\dllcache\fxsperf.dll
+ 2008-04-13 17:31:26	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\fxsres.dll
+ 2008-04-13 17:33:26	563,712	-c--a-w	C:\WINDOWS\system32\dllcache\fxsst.dll
+ 2008-04-13 17:34:06	268,800	-c--a-w	C:\WINDOWS\system32\dllcache\fxssvc.exe
+ 2008-04-13 17:33:26	246,272	-c--a-w	C:\WINDOWS\system32\dllcache\fxst30.dll
+ 2008-04-13 17:33:26	397,312	-c--a-w	C:\WINDOWS\system32\dllcache\fxstiff.dll
+ 2008-04-13 17:33:26	156,672	-c--a-w	C:\WINDOWS\system32\dllcache\fxsui.dll
+ 2008-04-13 17:33:26	197,120	-c--a-w	C:\WINDOWS\system32\dllcache\fxswzrd.dll
+ 2008-04-13 17:33:26	400,896	-c--a-w	C:\WINDOWS\system32\dllcache\fxsxp32.dll
+ 2001-08-17 18:15:56	454,912	-c--a-w	C:\WINDOWS\system32\dllcache\fxusbase.sys
+ 2001-08-23 15:46:44	470,144	-c--a-w	C:\WINDOWS\system32\dllcache\g200d.dll
+ 2001-08-23 15:18:04	320,512	-c--a-w	C:\WINDOWS\system32\dllcache\g200m.sys
+ 2001-08-23 15:18:06	322,560	-c--a-w	C:\WINDOWS\system32\dllcache\g400m.sys
+ 2008-04-13 09:36:42	46,464	-c--a-w	C:\WINDOWS\system32\dllcache\gagp30kx.sys
+ 2008-04-13 09:45:34	59,136	-c--a-w	C:\WINDOWS\system32\dllcache\gckernel.sys
+ 2008-04-13 17:33:26	285,184	-c--a-w	C:\WINDOWS\system32\dllcache\gdi32.dll
+ 2008-04-13 17:34:06	61,952	-c--a-w	C:\WINDOWS\system32\dllcache\getmac.exe
+ 2008-04-13 17:33:26	123,904	-c--a-w	C:\WINDOWS\system32\dllcache\glu32.dll
+ 2008-04-13 17:33:26	577,536	-c--a-w	C:\WINDOWS\system32\dllcache\gpedit.dll
+ 2008-04-13 16:59:16	10,240	-c--a-w	C:\WINDOWS\system32\dllcache\gpkrsrc.dll
+ 2001-08-23 15:18:36	17,664	-c--a-w	C:\WINDOWS\system32\dllcache\gpr400.sys
+ 2008-04-13 17:34:06	124,416	-c--a-w	C:\WINDOWS\system32\dllcache\gprslt.exe
+ 2008-04-13 17:33:28	202,240	-c--a-w	C:\WINDOWS\system32\dllcache\gptext.dll
+ 2001-08-23 15:18:40	82,560	-c--a-w	C:\WINDOWS\system32\dllcache\grclass.sys
+ 2008-04-13 17:34:06	39,424	-c--a-w	C:\WINDOWS\system32\dllcache\grpconv.exe
+ 2008-04-13 16:59:22	28,544	-c--a-w	C:\WINDOWS\system32\dllcache\grserial.sys
+ 2008-04-13 17:33:28	134,656	-c--a-w	C:\WINDOWS\system32\dllcache\guitrn.dll
+ 2008-04-13 17:33:28	115,712	-c--a-w	C:\WINDOWS\system32\dllcache\guitrna.dll
+ 2008-04-13 17:33:28	32,256	-c--a-w	C:\WINDOWS\system32\dllcache\gzip.dll
+ 2008-04-13 17:33:28	57,344	-c--a-w	C:\WINDOWS\system32\dllcache\h323cc.dll
+ 2008-04-13 17:33:28	614,912	-c--a-w	C:\WINDOWS\system32\dllcache\h323msp.dll
+ 2008-04-13 17:33:28	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\hccoin.dll
+ 2001-08-23 15:19:04	908,000	-c--a-w	C:\WINDOWS\system32\dllcache\hcf_msft.sys
+ 2008-04-13 17:34:06	17,408	-c--a-w	C:\WINDOWS\system32\dllcache\help.exe
+ 2008-04-13 17:34:08	769,024	-c--a-w	C:\WINDOWS\system32\dllcache\helpctr.exe
+ 2008-04-13 17:34:08	744,448	-c--a-w	C:\WINDOWS\system32\dllcache\helpsvc.exe
+ 2008-04-13 17:34:08	10,752	-c--a-w	C:\WINDOWS\system32\dllcache\hh.exe
+ 2008-04-13 17:33:28	41,472	-c--a-w	C:\WINDOWS\system32\dllcache\hhsetup.dll
+ 2008-04-13 17:33:28	20,992	-c--a-w	C:\WINDOWS\system32\dllcache\hid.dll
+ 2008-04-13 09:36:40	20,352	-c--a-w	C:\WINDOWS\system32\dllcache\hidbatt.sys
+ 2008-04-13 16:59:56	25,856	-c--a-w	C:\WINDOWS\system32\dllcache\hidbth.sys
+ 2008-04-13 09:45:28	36,864	-c--a-w	C:\WINDOWS\system32\dllcache\hidclass.sys
+ 2001-08-17 20:02:32	8,576	-c--a-w	C:\WINDOWS\system32\dllcache\hidgame.sys
+ 2008-04-13 09:45:28	19,200	-c--a-w	C:\WINDOWS\system32\dllcache\hidir.sys
+ 2008-04-13 09:45:24	24,960	-c--a-w	C:\WINDOWS\system32\dllcache\hidparse.sys
+ 2008-04-13 17:33:28	21,504	-c--a-w	C:\WINDOWS\system32\dllcache\hidserv.dll
+ 2001-08-17 20:02:50	2,688	-c--a-w	C:\WINDOWS\system32\dllcache\hidswvd.sys
+ 2008-04-13 09:45:28	10,368	-c--a-w	C:\WINDOWS\system32\dllcache\hidusb.sys
+ 2008-04-13 17:33:28	72,704	-c--a-w	C:\WINDOWS\system32\dllcache\hlink.dll
+ 2008-04-13 17:33:28	347,136	-c--a-w	C:\WINDOWS\system32\dllcache\hnetcfg.dll
+ 2008-04-13 17:33:28	336,384	-c--a-w	C:\WINDOWS\system32\dllcache\hnetwiz.dll
+ 2008-04-13 17:33:28	39,936	-c--a-w	C:\WINDOWS\system32\dllcache\hostmib.dll
+ 2008-04-13 17:33:28	146,944	-c--a-w	C:\WINDOWS\system32\dllcache\hotplug.dll
+ 2001-08-23 15:47:04	119,296	-c--a-w	C:\WINDOWS\system32\dllcache\hpdigwia.dll
+ 2001-08-23 15:47:04	83,968	-c--a-w	C:\WINDOWS\system32\dllcache\hpgt21.dll
+ 2001-08-23 15:47:04	123,392	-c--a-w	C:\WINDOWS\system32\dllcache\hpgt21tk.dll
+ 2001-08-23 15:47:04	89,088	-c--a-w	C:\WINDOWS\system32\dllcache\hpgt33.dll
+ 2001-08-23 15:47:04	48,128	-c--a-w	C:\WINDOWS\system32\dllcache\hpgt33tk.dll
+ 2001-08-23 15:47:04	101,376	-c--a-w	C:\WINDOWS\system32\dllcache\hpgt34.dll
+ 2001-08-23 15:47:04	126,976	-c--a-w	C:\WINDOWS\system32\dllcache\hpgt34tk.dll
+ 2001-08-23 15:47:04	93,696	-c--a-w	C:\WINDOWS\system32\dllcache\hpgt42.dll
+ 2001-08-23 15:47:04	31,232	-c--a-w	C:\WINDOWS\system32\dllcache\hpgt42tk.dll
+ 2001-08-23 15:47:04	165,888	-c--a-w	C:\WINDOWS\system32\dllcache\hpgt53.dll
+ 2001-08-23 15:47:04	68,608	-c--a-w	C:\WINDOWS\system32\dllcache\hpgt53tk.dll
+ 2001-08-23 15:47:04	32,768	-c--a-w	C:\WINDOWS\system32\dllcache\hpgtmcro.dll
+ 2001-08-17 20:07:44	25,952	-c--a-w	C:\WINDOWS\system32\dllcache\hpn.sys
+ 2001-08-23 15:47:04	324,608	-c--a-w	C:\WINDOWS\system32\dllcache\hpojwia.dll
+ 2001-08-23 15:47:04	13,312	-c--a-w	C:\WINDOWS\system32\dllcache\hpsjmcro.dll
+ 2001-08-17 19:52:50	5,760	-c--a-w	C:\WINDOWS\system32\dllcache\hpt4qic.sys
+ 2001-08-23 15:47:04	19,456	-c--a-w	C:\WINDOWS\system32\dllcache\hr1w.dll
+ 2008-04-13 17:34:08	18,432	-c--a-w	C:\WINDOWS\system32\dllcache\hscupd.exe
+ 2001-08-17 19:28:04	150,239	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_amos.sys
+ 2001-08-17 19:28:04	67,167	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_bsc2.sys
+ 2001-08-17 19:28:06	289,887	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_fall.sys
+ 2001-08-17 19:28:06	199,711	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_faxx.sys
+ 2001-08-17 19:28:06	115,807	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_fsks.sys
+ 2001-08-23 15:47:04	9,759	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_inst.dll

locdog · Answer

+ 2001-08-17 19:28:08	391,199	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_k56k.sys
+ 2001-08-17 19:28:10	542,879	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_msft.sys
+ 2001-08-17 19:28:10	57,471	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_samp.sys
+ 2001-08-17 19:28:10	44,863	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_soar.sys
+ 2001-08-17 19:28:10	73,279	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_spkp.sys
+ 2001-08-17 19:28:12	50,751	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_tone.sys
+ 2001-08-17 19:28:12	488,383	-c--a-w	C:\WINDOWS\system32\dllcache\hsf_v124.sys
+ 2008-04-13 09:23:50	220,032	-c--a-w	C:\WINDOWS\system32\dllcache\hsfbs2s2.sys
+ 2008-04-13 17:33:28	32,285	-c--a-w	C:\WINDOWS\system32\dllcache\hsfcisp2.dll
+ 2008-04-13 09:23:52	685,056	-c--a-w	C:\WINDOWS\system32\dllcache\hsfcxts2.sys
+ 2008-04-13 09:23:54	1,041,536	-c--a-w	C:\WINDOWS\system32\dllcache\hsfdpsp2.sys
+ 2008-04-13 09:53:54	264,832	-c--a-w	C:\WINDOWS\system32\dllcache\http.sys
+ 2008-04-13 17:33:28	24,576	-c--a-w	C:\WINDOWS\system32\dllcache\httpapi.dll
+ 2008-04-13 17:33:28	268,288	-c--a-w	C:\WINDOWS\system32\dllcache\httpext.dll
+ 2008-04-13 17:33:28	8,192	-c--a-w	C:\WINDOWS\system32\dllcache\httpmb51.dll
+ 2008-04-13 17:33:28	62,464	-c--a-w	C:\WINDOWS\system32\dllcache\httpod51.dll
+ 2008-04-13 17:33:28	43,008	-c--a-w	C:\WINDOWS\system32\dllcache\htui.dll
+ 2008-04-13 09:41:24	8,576	-c--a-w	C:\WINDOWS\system32\dllcache\i2omgmt.sys
+ 2008-04-13 09:41:24	18,560	-c--a-w	C:\WINDOWS\system32\dllcache\i2omp.sys
+ 2001-08-23 15:46:46	353,184	-c--a-w	C:\WINDOWS\system32\dllcache\i740dnt5.dll
+ 2001-08-17 18:49:06	58,592	-c--a-w	C:\WINDOWS\system32\dllcache\i740nt5.sys
+ 2008-04-13 17:00:54	54,144	-c--a-w	C:\WINDOWS\system32\dllcache\i8042prt.sys
+ 2008-04-13 07:34:28	161,020	-c--a-w	C:\WINDOWS\system32\dllcache\i81xnt5.sys
+ 2008-04-13 17:33:28	119,808	-c--a-w	C:\WINDOWS\system32\dllcache\iasrad.dll
+ 2001-08-17 18:11:58	28,700	-c--a-w	C:\WINDOWS\system32\dllcache\ibmexmp.sys
+ 2001-08-23 15:45:26	10,240	-c--a-w	C:\WINDOWS\system32\dllcache\ibmsgnet.dll
+ 2001-08-17 18:12:00	100,936	-c--a-w	C:\WINDOWS\system32\dllcache\ibmtok.sys
+ 2001-08-17 18:12:02	109,085	-c--a-w	C:\WINDOWS\system32\dllcache\ibmtrp.sys
+ 2001-08-17 20:06:46	38,528	-c--a-w	C:\WINDOWS\system32\dllcache\ibmvcap.sys
+ 2008-04-13 17:33:28	11,264	-c--a-w	C:\WINDOWS\system32\dllcache\icaapi.dll
+ 2001-08-17 20:05:44	141,056	-c--a-w	C:\WINDOWS\system32\dllcache\icam3.sys
+ 2001-08-23 15:47:04	27,136	-c--a-w	C:\WINDOWS\system32\dllcache\icam3ext.dll
+ 2001-08-23 15:47:04	92,160	-c--a-w	C:\WINDOWS\system32\dllcache\icam4com.dll
+ 2001-08-23 15:47:04	63,488	-c--a-w	C:\WINDOWS\system32\dllcache\icam4ext.dll
+ 2001-08-17 20:06:02	154,496	-c--a-w	C:\WINDOWS\system32\dllcache\icam4usb.sys
+ 2001-08-23 15:47:04	45,056	-c--a-w	C:\WINDOWS\system32\dllcache\icam5com.dll
+ 2001-08-23 15:47:04	20,992	-c--a-w	C:\WINDOWS\system32\dllcache\icam5ext.dll
+ 2001-08-17 20:06:20	100,992	-c--a-w	C:\WINDOWS\system32\dllcache\icam5usb.sys
+ 2008-04-13 17:33:28	254,976	-c--a-w	C:\WINDOWS\system32\dllcache\icm32.dll
+ 2008-04-13 17:31:32	3,584	-c--a-w	C:\WINDOWS\system32\dllcache\icmp.dll
+ 2001-08-23 15:47:04	372,824	-c--a-w	C:\WINDOWS\system32\dllcache\iconf32.dll
+ 2008-04-13 17:33:28	61,440	-c--a-w	C:\WINDOWS\system32\dllcache\icwconn.dll
+ 2008-04-13 17:34:08	218,624	-c--a-w	C:\WINDOWS\system32\dllcache\icwconn1.exe
+ 2008-04-13 17:34:08	86,016	-c--a-w	C:\WINDOWS\system32\dllcache\icwconn2.exe
+ 2008-04-13 17:33:28	73,728	-c--a-w	C:\WINDOWS\system32\dllcache\icwdial.dll
+ 2008-04-13 17:33:28	32,768	-c--a-w	C:\WINDOWS\system32\dllcache\icwdl.dll
+ 2008-04-13 17:33:28	176,128	-c--a-w	C:\WINDOWS\system32\dllcache\icwhelp.dll
+ 2008-04-13 17:33:28	65,536	-c--a-w	C:\WINDOWS\system32\dllcache\icwphbk.dll
+ 2008-04-13 17:34:08	24,576	-c--a-w	C:\WINDOWS\system32\dllcache\icwrmind.exe
+ 2008-04-13 17:33:28	49,152	-c--a-w	C:\WINDOWS\system32\dllcache\icwutil.dll
+ 2008-04-13 17:33:28	121,856	-c--a-w	C:\WINDOWS\system32\dllcache\idq.dll
- 2007-08-13 16:45:18	78,336	-c----w	C:\WINDOWS\system32\dllcache\ieencode.dll
+ 2008-04-13 17:33:28	81,920	-c--a-w	C:\WINDOWS\system32\dllcache\ieencode.dll
+ 2008-04-13 17:34:08	114,688	-c--a-w	C:\WINDOWS\system32\dllcache\iexpress.exe
+ 2008-04-13 17:33:28	142,848	-c--a-w	C:\WINDOWS\system32\dllcache\ifmon.dll
+ 2008-04-13 17:33:28	8,192	-c--a-w	C:\WINDOWS\system32\dllcache\igmpagnt.dll
+ 2008-04-13 17:31:34	508,416	-c--a-w	C:\WINDOWS\system32\dllcache\iis.dll
+ 2008-04-13 17:33:28	25,088	-c--a-w	C:\WINDOWS\system32\dllcache\iisadmin.dll
+ 2008-04-13 17:33:28	145,408	-c--a-w	C:\WINDOWS\system32\dllcache\iische51.dll
+ 2008-04-13 17:33:28	68,608	-c--a-w	C:\WINDOWS\system32\dllcache\iisext51.dll
+ 2008-04-13 17:33:28	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\iisfecnv.dll
+ 2008-04-13 17:33:28	79,872	-c--a-w	C:\WINDOWS\system32\dllcache\iislog51.dll
+ 2008-04-13 17:33:28	64,512	-c--a-w	C:\WINDOWS\system32\dllcache\iismap.dll
+ 2008-04-13 17:34:08	31,232	-c--a-w	C:\WINDOWS\system32\dllcache\iisrstas.exe
+ 2008-04-13 17:33:28	133,632	-c--a-w	C:\WINDOWS\system32\dllcache\iisrtl.dll
+ 2008-04-13 17:33:28	81,920	-c--a-w	C:\WINDOWS\system32\dllcache\ils.dll
+ 2008-04-13 17:33:28	144,384	-c--a-w	C:\WINDOWS\system32\dllcache\imagehlp.dll
+ 2008-04-13 17:34:08	150,528	-c--a-w	C:\WINDOWS\system32\dllcache\imapi.exe
+ 2008-04-13 09:41:00	42,112	-c--a-w	C:\WINDOWS\system32\dllcache\imapi.sys
+ 2008-04-13 17:33:28	36,921	-c--a-w	C:\WINDOWS\system32\dllcache\imeshare.dll
+ 2008-04-13 17:33:28	110,080	-c--a-w	C:\WINDOWS\system32\dllcache\imm32.dll
- 2002-08-28 19:39:06	59,392	-c--a-w	C:\WINDOWS\system32\dllcache\imscinst.exe
+ 2008-04-13 07:43:38	59,392	-c--a-w	C:\WINDOWS\system32\dllcache\imscinst.exe
+ 2008-04-13 17:33:28	126,464	-c--a-w	C:\WINDOWS\system32\dllcache\imsinsnt.dll
+ 2008-04-13 17:33:28	282,624	-c--a-w	C:\WINDOWS\system32\dllcache\inetcfg.dll
+ 2008-04-13 17:33:28	691,712	-c--a-w	C:\WINDOWS\system32\dllcache\inetcomm.dll
+ 2008-04-13 17:34:08	15,872	-c--a-w	C:\WINDOWS\system32\dllcache\inetin51.exe
+ 2008-04-13 17:33:28	842,240	-c--a-w	C:\WINDOWS\system32\dllcache\inetmgr.dll
+ 2008-04-13 17:33:28	32,768	-c--a-w	C:\WINDOWS\system32\dllcache\inetmib1.dll
+ 2008-04-13 17:33:28	75,264	-c--a-w	C:\WINDOWS\system32\dllcache\inetpp.dll
+ 2008-04-13 17:33:28	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\inetppui.dll
+ 2008-04-13 17:02:56	50,688	-c--a-w	C:\WINDOWS\system32\dllcache\inetres.dll
+ 2008-04-13 17:34:08	20,480	-c--a-w	C:\WINDOWS\system32\dllcache\inetwiz.exe
+ 2008-04-13 17:33:28	13,312	-c--a-w	C:\WINDOWS\system32\dllcache\infoadmn.dll
+ 2008-04-13 17:33:28	257,024	-c--a-w	C:\WINDOWS\system32\dllcache\infocomm.dll
+ 2001-08-17 19:52:08	16,000	-c--a-w	C:\WINDOWS\system32\dllcache\ini910u.sys
+ 2008-04-13 17:33:28	147,456	-c--a-w	C:\WINDOWS\system32\dllcache\initpki.dll
+ 2001-08-23 14:57:12	13,824	-c--a-w	C:\WINDOWS\system32\dllcache\inport.sys
+ 2008-04-13 17:33:28	126,464	-c--a-w	C:\WINDOWS\system32\dllcache\input.dll
+ 2008-04-13 17:03:26	5,504	-c--a-w	C:\WINDOWS\system32\dllcache\intelide.sys
+ 2008-04-13 17:03:28	40,576	-c--a-w	C:\WINDOWS\system32\dllcache\intelppm.sys
+ 2001-08-17 19:50:56	38,784	-c--a-w	C:\WINDOWS\system32\dllcache\io8.sys
+ 2001-08-23 15:47:04	90,200	-c--a-w	C:\WINDOWS\system32\dllcache\io8ports.dll
+ 2001-08-17 18:12:12	45,632	-c--a-w	C:\WINDOWS\system32\dllcache\ip5515.sys
+ 2008-04-13 09:53:36	36,608	-c--a-w	C:\WINDOWS\system32\dllcache\ip6fw.sys
+ 2008-04-13 17:34:10	58,368	-c--a-w	C:\WINDOWS\system32\dllcache\ipconfig.exe
+ 2008-04-13 17:33:28	95,744	-c--a-w	C:\WINDOWS\system32\dllcache\iphlpapi.dll
+ 2008-04-13 09:57:08	20,864	-c--a-w	C:\WINDOWS\system32\dllcache\ipinip.sys
+ 2008-04-13 17:33:28	174,592	-c--a-w	C:\WINDOWS\system32\dllcache\ipmontr.dll
+ 2008-04-13 09:57:16	152,832	-c--a-w	C:\WINDOWS\system32\dllcache\ipnat.sys
+ 2008-04-13 17:33:28	332,800	-c--a-w	C:\WINDOWS\system32\dllcache\ipnathlp.dll
+ 2008-04-13 17:33:28	355,840	-c--a-w	C:\WINDOWS\system32\dllcache\ippromon.dll
+ 2008-04-13 17:33:28	36,864	-c--a-w	C:\WINDOWS\system32\dllcache\iprip.dll
+ 2008-04-13 17:33:28	177,152	-c--a-w	C:\WINDOWS\system32\dllcache\iprtrmgr.dll
+ 2008-04-13 10:19:44	75,264	-c--a-w	C:\WINDOWS\system32\dllcache\ipsec.sys
+ 2008-04-13 17:33:28	361,472	-c--a-w	C:\WINDOWS\system32\dllcache\ipsecsnp.dll
+ 2008-04-13 17:33:28	185,344	-c--a-w	C:\WINDOWS\system32\dllcache\ipsecsvc.dll
+ 2008-04-13 17:33:28	388,096	-c--a-w	C:\WINDOWS\system32\dllcache\ipsmsnap.dll
+ 2008-04-13 17:34:10	53,760	-c--a-w	C:\WINDOWS\system32\dllcache\ipv6.exe
+ 2008-04-13 17:33:28	59,904	-c--a-w	C:\WINDOWS\system32\dllcache\ipv6mon.dll
+ 2008-04-13 17:34:10	24,576	-c--a-w	C:\WINDOWS\system32\dllcache\ipxroute.exe
+ 2008-04-13 17:33:28	22,016	-c--a-w	C:\WINDOWS\system32\dllcache\ipxwan.dll
+ 2008-04-13 09:45:36	46,592	-c--a-w	C:\WINDOWS\system32\dllcache\irbus.sys
+ 2008-04-13 09:54:38	88,192	-c--a-w	C:\WINDOWS\system32\dllcache\irda.sys
+ 2008-04-13 09:54:30	11,264	-c--a-w	C:\WINDOWS\system32\dllcache\irenum.sys
+ 2001-08-17 19:49:04	23,552	-c--a-w	C:\WINDOWS\system32\dllcache\irmk7.sys
+ 2001-08-17 19:51:32	18,688	-c--a-w	C:\WINDOWS\system32\dllcache\irsir.sys
+ 2001-08-17 19:49:10	26,624	-c--a-w	C:\WINDOWS\system32\dllcache\irstusb.sys
+ 2008-04-13 17:04:36	37,632	-c--a-w	C:\WINDOWS\system32\dllcache\isapnp.sys
+ 2008-04-13 17:33:28	68,608	-c--a-w	C:\WINDOWS\system32\dllcache\isatq.dll
+ 2008-04-13 17:33:28	27,648	-c--a-w	C:\WINDOWS\system32\dllcache\iscomlog.dll
+ 2008-04-13 17:33:28	86,016	-c--a-w	C:\WINDOWS\system32\dllcache\isign32.dll
+ 2008-04-13 17:33:28	32,768	-c--a-w	C:\WINDOWS\system32\dllcache\isrdbg32.dll
+ 2008-04-13 17:33:28	155,136	-c--a-w	C:\WINDOWS\system32\dllcache\itircl.dll
+ 2008-04-13 17:33:28	138,240	-c--a-w	C:\WINDOWS\system32\dllcache\itss.dll
+ 2008-04-13 17:33:28	191,488	-c--a-w	C:\WINDOWS\system32\dllcache\iuengine.dll
+ 2008-04-13 17:33:28	54,784	-c--a-w	C:\WINDOWS\system32\dllcache\ixsso.dll
+ 2008-04-13 17:33:28	47,616	-c--a-w	C:\WINDOWS\system32\dllcache\iyuv_32.dll
- 2007-08-13 16:38:04	491,520	-c----w	C:\WINDOWS\system32\dllcache\jscript.dll
+ 2008-04-13 17:33:28	512,000	-c--a-w	C:\WINDOWS\system32\dllcache\jscript.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbd101.dll
+ 2001-08-17 20:55:56	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbd101b.dll
+ 2001-08-17 20:55:56	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbd101c.dll
+ 2001-08-17 20:55:56	5,632	-c--a-w	C:\WINDOWS\system32\dllcache\kbd103.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbd106.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbd106n.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbdax2.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbdbhc.dll
+ 2008-04-13 17:05:16	25,216	-c--a-w	C:\WINDOWS\system32\dllcache\kbdclass.sys
+ 2008-04-13 17:31:44	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\kbdfi1.dll
+ 2008-04-13 17:05:16	14,720	-c--a-w	C:\WINDOWS\system32\dllcache\kbdhid.sys
+ 2008-04-13 17:31:44	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\kbdibm02.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbdinbe1.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbdinben.dll
+ 2008-04-13 17:31:44	6,656	-c--a-w	C:\WINDOWS\system32\dllcache\kbdinmal.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbdiultn.dll
+ 2001-08-23 15:47:06	8,704	-c--a-w	C:\WINDOWS\system32\dllcache\kbdjpn.dll
+ 2001-08-23 15:47:06	8,192	-c--a-w	C:\WINDOWS\system32\dllcache\kbdkor.dll
+ 2008-04-13 17:31:44	6,656	-c--a-w	C:\WINDOWS\system32\dllcache\kbdlk41a.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbdlk41j.dll
+ 2008-04-13 17:31:44	5,632	-c--a-w	C:\WINDOWS\system32\dllcache\kbdmaori.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbdmlt47.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbdmlt48.dll
+ 2008-04-13 17:31:44	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\kbdnec.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbdnepr.dll
+ 2008-04-13 17:31:44	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\kbdno1.dll
+ 2008-04-13 17:31:44	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\kbdpash.dll
+ 2008-04-13 17:31:44	7,680	-c--a-w	C:\WINDOWS\system32\dllcache\kbdsmsfi.dll
+ 2008-04-13 17:31:44	7,680	-c--a-w	C:\WINDOWS\system32\dllcache\kbdsmsno.dll
+ 2008-04-13 17:31:44	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\kbdukx.dll
+ 2008-04-13 09:31:36	7,424	-c--a-w	C:\WINDOWS\system32\dllcache\kd1394.dll
+ 2008-04-13 17:33:30	49,152	-c--a-w	C:\WINDOWS\system32\dllcache\kdsui.dll
+ 2008-04-13 17:33:30	254,464	-c--a-w	C:\WINDOWS\system32\dllcache\kdsusd.dll
+ 2008-04-13 17:33:30	299,520	-c--a-w	C:\WINDOWS\system32\dllcache\kerberos.dll
+ 2008-04-13 17:33:30	1,054,720	-c--a-w	C:\WINDOWS\system32\dllcache\kernel32.dll
+ 2008-04-13 17:33:30	157,184	-c--a-w	C:\WINDOWS\system32\dllcache\keymgr.dll
+ 2008-04-13 09:45:10	172,416	-c--a-w	C:\WINDOWS\system32\dllcache\kmixer.sys
+ 2008-04-13 17:33:30	61,440	-c--a-w	C:\WINDOWS\system32\dllcache\kmsvc.dll
+ 2001-08-23 15:47:06	37,888	-c--a-w	C:\WINDOWS\system32\dllcache\kousd.dll
+ 2008-04-13 07:53:38	92,608	-c--a-w	C:\WINDOWS\system32\dllcache\krnl386.exe
+ 2008-04-13 17:33:30	24,576	-c--a-w	C:\WINDOWS\system32\dllcache\krnlprov.dll
+ 2008-04-13 10:16:38	141,056	-c--a-w	C:\WINDOWS\system32\dllcache\ks.sys
+ 2008-04-13 09:31:44	92,288	-c--a-w	C:\WINDOWS\system32\dllcache\ksecdd.sys
+ 2008-04-13 17:33:30	4,096	-c--a-w	C:\WINDOWS\system32\dllcache\ksuser.dll
+ 2001-08-17 18:12:14	19,016	-c--a-w	C:\WINDOWS\system32\dllcache\ktc111.sys
+ 2008-04-13 17:33:30	37,376	-c--a-w	C:\WINDOWS\system32\dllcache\l2store.dll
+ 2001-08-23 14:59:46	26,922	-c--a-w	C:\WINDOWS\system32\dllcache\lanepic5.sys
+ 2008-04-13 09:40:28	34,688	-c--a-w	C:\WINDOWS\system32\dllcache\lbrtfdc.sys
+ 2008-04-13 17:34:10	677,888	-c--a-w	C:\WINDOWS\system32\dllcache\lhmstsc.exe
+ 2008-04-13 17:33:30	2,061,824	-c--a-w	C:\WINDOWS\system32\dllcache\lhmstscx.dll
+ 2008-04-13 17:33:30	424,960	-c--a-w	C:\WINDOWS\system32\dllcache\licdll.dll
+ 2008-04-13 17:33:30	58,880	-c--a-w	C:\WINDOWS\system32\dllcache\licwmi.dll
+ 2008-04-13 17:33:30	19,968	-c--a-w	C:\WINDOWS\system32\dllcache\linkinfo.dll
+ 2001-08-23 15:00:10	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\lit220p.sys
+ 2008-04-13 17:33:30	13,824	-c--a-w	C:\WINDOWS\system32\dllcache\lmhsvc.dll
+ 2008-04-13 17:33:30	33,792	-c--a-w	C:\WINDOWS\system32\dllcache\lmmib2.dll
+ 2001-08-17 18:11:52	25,065	-c--a-w	C:\WINDOWS\system32\dllcache\lmndis3.sys
+ 2008-04-13 17:33:30	399,872	-c--a-w	C:\WINDOWS\system32\dllcache\lmrt.dll
+ 2001-08-17 18:12:20	20,573	-c--a-w	C:\WINDOWS\system32\dllcache\lne100.sys
+ 2001-08-17 18:12:24	70,730	-c--a-w	C:\WINDOWS\system32\dllcache\lne100tx.sys
+ 2008-04-13 17:33:30	100,352	-c--a-w	C:\WINDOWS\system32\dllcache\loadperf.dll
+ 2008-04-13 17:33:30	228,352	-c--a-w	C:\WINDOWS\system32\dllcache\localsec.dll
+ 2008-04-13 17:33:30	346,112	-c--a-w	C:\WINDOWS\system32\dllcache\localspl.dll
+ 2008-04-13 17:33:30	11,776	-c--a-w	C:\WINDOWS\system32\dllcache\localui.dll
+ 2008-04-13 17:34:10	75,264	-c--a-w	C:\WINDOWS\system32\dllcache\locator.exe
+ 2008-04-13 17:33:30	19,968	-c--a-w	C:\WINDOWS\system32\dllcache\log.dll
+ 2008-04-13 17:34:10	61,952	-c--a-w	C:\WINDOWS\system32\dllcache\logman.exe
+ 2008-04-13 17:34:34	221,696	-c--a-w	C:\WINDOWS\system32\dllcache\logon.scr
+ 2008-04-13 17:34:10	515,584	-c--a-w	C:\WINDOWS\system32\dllcache\logonui.exe
+ 2008-04-13 17:33:30	13,312	-c--a-w	C:\WINDOWS\system32\dllcache\lonsint.dll
+ 2001-08-17 19:53:42	4,992	-c--a-w	C:\WINDOWS\system32\dllcache\loop.sys
+ 2008-04-13 17:33:30	23,040	-c--a-w	C:\WINDOWS\system32\dllcache\lpdsvc.dll
+ 2008-04-13 17:33:30	22,016	-c--a-w	C:\WINDOWS\system32\dllcache\lpk.dll
+ 2008-04-13 17:33:30	10,240	-c--a-w	C:\WINDOWS\system32\dllcache\lprhelp.dll
+ 2008-04-13 17:33:30	19,456	-c--a-w	C:\WINDOWS\system32\dllcache\lprmon.dll
+ 2008-04-13 17:33:30	734,720	-c--a-w	C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2008-04-13 17:34:10	13,312	-c--a-w	C:\WINDOWS\system32\dllcache\lsass.exe
+ 2001-08-23 15:00:48	728,554	-c--a-w	C:\WINDOWS\system32\dllcache\ltck000c.sys
+ 2008-04-13 17:07:04	607,452	-c--a-w	C:\WINDOWS\system32\dllcache\ltmdmnt.sys
+ 2001-08-23 15:00:50	577,514	-c--a-w	C:\WINDOWS\system32\dllcache\ltmdmntl.sys
+ 2008-04-13 17:07:06	422,528	-c--a-w	C:\WINDOWS\system32\dllcache\ltmdmntt.sys
+ 2008-04-13 09:40:54	7,040	-c--a-w	C:\WINDOWS\system32\dllcache\ltotape.sys
+ 2001-08-17 19:28:10	802,683	-c--a-w	C:\WINDOWS\system32\dllcache\ltsm.sys
+ 2001-08-17 19:28:12	797,500	-c--a-w	C:\WINDOWS\system32\dllcache\ltsmt.sys
+ 2008-04-13 07:39:14	20,864	-c--a-w	C:\WINDOWS\system32\dllcache\lwadihid.sys
+ 2001-08-17 18:49:20	22,848	-c--a-w	C:\WINDOWS\system32\dllcache\lwusbhid.sys
+ 2001-08-23 15:47:06	58,880	-c--a-w	C:\WINDOWS\system32\dllcache\m3091dc.dll
+ 2001-08-23 15:47:06	59,392	-c--a-w	C:\WINDOWS\system32\dllcache\m3092dc.dll
+ 2001-08-17 18:19:58	48,768	-c--a-w	C:\WINDOWS\system32\dllcache\maestro.sys
+ 2008-04-13 17:34:12	73,216	-c--a-w	C:\WINDOWS\system32\dllcache\magnify.exe
+ 2008-04-13 17:34:12	57,344	-c--a-w	C:\WINDOWS\system32\dllcache\makecab.exe
+ 2001-08-17 19:52:50	7,424	-c--a-w	C:\WINDOWS\system32\dllcache\mammoth.sys
+ 2008-04-13 17:33:30	14,336	-c--a-w	C:\WINDOWS\system32\dllcache\mcastmib.dll
+ 2008-04-13 17:33:30	85,504	-c--a-w	C:\WINDOWS\system32\dllcache\mciavi32.dll
+ 2008-04-13 17:33:30	35,328	-c--a-w	C:\WINDOWS\system32\dllcache\mciqtz32.dll
+ 2008-04-13 17:33:30	23,040	-c--a-w	C:\WINDOWS\system32\dllcache\mciseq.dll
+ 2008-04-13 17:33:30	23,552	-c--a-w	C:\WINDOWS\system32\dllcache\mciwave.dll
+ 2008-04-13 17:33:30	37,888	-c--a-w	C:\WINDOWS\system32\dllcache\md5filt.dll
+ 2001-08-23 15:02:28	165,066	-c--a-w	C:\WINDOWS\system32\dllcache\mdgndis5.sys
+ 2008-04-13 17:33:30	120,320	-c--a-w	C:\WINDOWS\system32\dllcache\mdminst.dll
+ 2002-01-08 19:39:34	147,968	-c--a-w	C:\WINDOWS\system32\dllcache\mdwmdmsp.dll
+ 2008-04-13 17:33:30	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\medctroc.dll
+ 2001-08-17 19:58:04	8,320	-c--a-w	C:\WINDOWS\system32\dllcache\memcard.sys
+ 2001-08-23 15:47:06	47,616	-c--a-w	C:\WINDOWS\system32\dllcache\memgrp.dll
+ 2008-04-13 09:41:22	26,112	-c--a-w	C:\WINDOWS\system32\dllcache\memstpci.sys
+ 2008-04-13 17:33:30	86,016	-c--a-w	C:\WINDOWS\system32\dllcache\metada51.dll
+ 2008-04-13 09:36:42	63,744	-c--a-w	C:\WINDOWS\system32\dllcache\mf.sys
+ 2008-04-13 17:33:30	40,960	-c--a-w	C:\WINDOWS\system32\dllcache\mf3216.dll
+ 2008-04-13 17:33:30	927,504	-c--a-w	C:\WINDOWS\system32\dllcache\mfc40u.dll
+ 2008-04-13 17:33:30	1,028,096	-c--a-w	C:\WINDOWS\system32\dllcache\mfc42.dll
+ 2007-04-02 18:14:48	981,760	-c--a-w	C:\WINDOWS\system32\dllcache\mfc42u.dll
+ 2008-04-13 17:33:30	22,528	-c--a-w	C:\WINDOWS\system32\dllcache\mfcsubs.dll
+ 2001-08-23 15:46:46	235,648	-c--a-w	C:\WINDOWS\system32\dllcache\mgaud.dll
+ 2001-08-23 15:03:46	320,384	-c--a-w	C:\WINDOWS\system32\dllcache\mgaum.sys
+ 2008-04-13 17:33:30	14,848	-c--a-w	C:\WINDOWS\system32\dllcache\mgmtapi.dll
+ 2008-04-13 17:33:30	18,944	-c--a-w	C:\WINDOWS\system32\dllcache\midimap.dll
+ 2008-04-13 17:33:30	274,432	-c--a-w	C:\WINDOWS\system32\dllcache\migism.dll
+ 2008-04-13 17:33:30	261,120	-c--a-w	C:\WINDOWS\system32\dllcache\migisma.dll
+ 2008-04-13 17:33:30	60,928	-c--a-w	C:\WINDOWS\system32\dllcache\miglibnt.dll
+ 2008-04-13 17:34:12	104,448	-c--a-w	C:\WINDOWS\system32\dllcache\migload.exe
+ 2008-04-13 17:34:12	7,680	-c--a-w	C:\WINDOWS\system32\dllcache\migregdb.exe
+ 2008-04-13 17:34:12	251,904	-c--a-w	C:\WINDOWS\system32\dllcache\migwiz.exe
+ 2008-04-13 17:34:12	247,808	-c--a-w	C:\WINDOWS\system32\dllcache\migwiza.exe
+ 2008-04-13 17:33:30	29,696	-c--a-w	C:\WINDOWS\system32\dllcache\mimefilt.dll
+ 2001-08-17 19:52:50	6,528	-c--a-w	C:\WINDOWS\system32\dllcache\miniqic.sys
+ 2002-01-08 19:42:00	673,088	-c--a-w	C:\WINDOWS\system32\dllcache\mlang.dat
+ 2008-04-13 17:33:30	586,240	-c--a-w	C:\WINDOWS\system32\dllcache\mlang.dll
+ 2008-04-13 17:34:12	1,415,680	-c--a-w	C:\WINDOWS\system32\dllcache\mmc.exe
+ 2008-04-13 17:33:30	184,320	-c--a-w	C:\WINDOWS\system32\dllcache\mmc30.dll
+ 2008-04-13 17:33:30	174,080	-c--a-w	C:\WINDOWS\system32\dllcache\mmcbase.dll
+ 2008-04-13 17:33:32	397,312	-c--a-w	C:\WINDOWS\system32\dllcache\mmcex.dll
+ 2008-04-13 17:33:32	106,496	-c--a-w	C:\WINDOWS\system32\dllcache\Mmcfxc.dll
+ 2008-04-13 17:33:32	1,879,040	-c--a-w	C:\WINDOWS\system32\dllcache\mmcndmgr.dll
+ 2008-04-13 17:34:12	33,792	-c--a-w	C:\WINDOWS\system32\dllcache\mmcperf.exe
+ 2008-04-13 17:33:32	61,440	-c--a-w	C:\WINDOWS\system32\dllcache\mmcshext.dll
+ 2008-04-13 17:33:32	17,920	-c--a-w	C:\WINDOWS\system32\dllcache\mmfutil.dll
+ 2008-04-13 16:53:00	70,688	-c--a-w	C:\WINDOWS\system32\dllcache\mmsystem.dll
+ 2008-04-13 17:33:32	34,560	-c--a-w	C:\WINDOWS\system32\dllcache\mnmdd.dll
+ 2008-04-13 17:34:12	32,768	-c--a-w	C:\WINDOWS\system32\dllcache\mnmsrvc.exe
+ 2008-04-13 17:33:32	210,432	-c--a-w	C:\WINDOWS\system32\dllcache\mobsync.dll
+ 2008-04-13 17:34:12	143,872	-c--a-w	C:\WINDOWS\system32\dllcache\mobsync.exe
+ 2008-04-13 16:53:06	30,336	-c--a-w	C:\WINDOWS\system32\dllcache\modem.sys
+ 2001-08-17 19:57:38	16,128	-c--a-w	C:\WINDOWS\system32\dllcache\modemcsa.sys
+ 2008-04-13 17:33:32	156,160	-c--a-w	C:\WINDOWS\system32\dllcache\modemui.dll
+ 2008-04-13 17:34:12	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\mofcomp.exe
+ 2008-04-13 17:33:32	124,928	-c--a-w	C:\WINDOWS\system32\dllcache\mofd.dll
+ 2008-04-13 07:45:32	216,064	-c--a-w	C:\WINDOWS\system32\dllcache\moricons.dll
+ 2008-04-13 16:53:20	23,680	-c--a-w	C:\WINDOWS\system32\dllcache\mouclass.sys
+ 2002-01-08 19:39:34	12,288	-c--a-w	C:\WINDOWS\system32\dllcache\mouhid.sys
+ 2008-04-13 09:39:48	42,368	-c--a-w	C:\WINDOWS\system32\dllcache\mountmgr.sys
+ 2008-04-13 17:34:14	3,558,912	-c--a-w	C:\WINDOWS\system32\dllcache\moviemk.exe
+ 2008-04-13 09:46:24	15,232	-c--a-w	C:\WINDOWS\system32\dllcache\mpe.sys
+ 2008-04-13 17:33:32	59,904	-c--a-w	C:\WINDOWS\system32\dllcache\mpr.dll
+ 2008-04-13 17:33:32	87,040	-c--a-w	C:\WINDOWS\system32\dllcache\mprapi.dll
+ 2008-04-13 17:33:32	53,248	-c--a-w	C:\WINDOWS\system32\dllcache\mprdim.dll
+ 2008-04-13 09:39:46	92,544	-c--a-w	C:\WINDOWS\system32\dllcache\mqac.sys
+ 2008-04-13 17:33:32	138,240	-c--a-w	C:\WINDOWS\system32\dllcache\mqad.dll
+ 2008-04-13 17:34:14	19,968	-c--a-w	C:\WINDOWS\system32\dllcache\mqbkup.exe
+ 2008-04-13 17:33:32	47,616	-c--a-w	C:\WINDOWS\system32\dllcache\mqdscli.dll
+ 2008-04-13 17:33:32	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\mqise.dll
+ 2008-04-13 17:33:32	89,088	-c--a-w	C:\WINDOWS\system32\dllcache\mqlogmgr.dll
+ 2008-04-13 17:33:32	225,280	-c--a-w	C:\WINDOWS\system32\dllcache\mqoa.dll
+ 2008-04-13 17:33:32	663,040	-c--a-w	C:\WINDOWS\system32\dllcache\mqqm.dll
+ 2008-04-13 17:33:32	177,152	-c--a-w	C:\WINDOWS\system32\dllcache\mqrt.dll
+ 2008-04-13 17:33:32	123,904	-c--a-w	C:\WINDOWS\system32\dllcache\mqrtdep.dll
+ 2008-04-13 17:33:32	95,744	-c--a-w	C:\WINDOWS\system32\dllcache\mqsec.dll
+ 2008-04-13 17:33:32	517,632	-c--a-w	C:\WINDOWS\system32\dllcache\mqsnap.dll
+ 2008-04-13 17:34:14	4,608	-c--a-w	C:\WINDOWS\system32\dllcache\mqsvc.exe
+ 2008-04-13 17:34:14	117,248	-c--a-w	C:\WINDOWS\system32\dllcache\mqtgsvc.exe
+ 2008-04-13 17:33:32	187,392	-c--a-w	C:\WINDOWS\system32\dllcache\mqtrig.dll
+ 2008-04-13 17:33:32	49,152	-c--a-w	C:\WINDOWS\system32\dllcache\mqupgrd.dll
+ 2008-04-13 17:33:32	527,360	-c--a-w	C:\WINDOWS\system32\dllcache\mqutil.dll
+ 2001-08-17 19:52:12	17,280	-c--a-w	C:\WINDOWS\system32\dllcache\mraid35x.sys
+ 2008-04-13 09:32:46	180,608	-c--a-w	C:\WINDOWS\system32\dllcache\mrxdav.sys
+ 2008-04-13 10:17:02	456,576	-c--a-w	C:\WINDOWS\system32\dllcache\mrxsmb.sys
+ 2008-04-13 17:33:32	72,192	-c--a-w	C:\WINDOWS\system32\dllcache\msacm32.dll
+ 2008-04-13 17:33:32	331,776	-c--a-w	C:\WINDOWS\system32\dllcache\msadce.dll
+ 2007-03-28 03:56:28	20,480	-c--a-w	C:\WINDOWS\system32\dllcache\msadcer.dll
+ 2008-04-13 17:33:32	61,440	-c--a-w	C:\WINDOWS\system32\dllcache\msadcf.dll
+ 2007-03-28 03:56:28	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\msadcfr.dll
+ 2008-04-13 17:33:32	143,360	-c--a-w	C:\WINDOWS\system32\dllcache\msadco.dll
+ 2007-03-28 03:56:28	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\msadcor.dll
+ 2008-04-13 17:33:32	53,248	-c--a-w	C:\WINDOWS\system32\dllcache\msadcs.dll
+ 2008-04-13 17:33:32	155,648	-c--a-w	C:\WINDOWS\system32\dllcache\msadds.dll
+ 2007-03-28 03:56:30	24,576	-c--a-w	C:\WINDOWS\system32\dllcache\msaddsr.dll
+ 2007-03-28 03:56:30	28,672	-c--a-w	C:\WINDOWS\system32\dllcache\msader15.dll
+ 2008-04-13 17:33:32	536,576	-c--a-w	C:\WINDOWS\system32\dllcache\msado15.dll
+ 2008-04-13 17:33:32	180,224	-c--a-w	C:\WINDOWS\system32\dllcache\msadomd.dll
+ 2008-04-13 17:33:32	57,344	-c--a-w	C:\WINDOWS\system32\dllcache\msador15.dll
+ 2008-04-13 17:33:32	200,704	-c--a-w	C:\WINDOWS\system32\dllcache\msadox.dll
+ 2008-04-13 17:33:32	57,344	-c--a-w	C:\WINDOWS\system32\dllcache\msadrh15.dll
+ 2008-04-13 17:31:52	3,584	-c--a-w	C:\WINDOWS\system32\dllcache\msafd.dll
+ 2008-04-13 17:33:32	86,016	-c--a-w	C:\WINDOWS\system32\dllcache\msapsspc.dll
+ 2008-04-13 17:33:32	57,344	-c--a-w	C:\WINDOWS\system32\dllcache\msasn1.dll
+ 2008-04-13 17:33:32	220,160	-c--a-w	C:\WINDOWS\system32\dllcache\mscandui.dll
+ 2008-04-13 17:33:32	73,728	-c--a-w	C:\WINDOWS\system32\dllcache\mscms.dll
+ 2008-04-13 17:33:32	69,632	-c--a-w	C:\WINDOWS\system32\dllcache\msconf.dll
+ 2008-04-13 17:34:14	172,544	-c--a-w	C:\WINDOWS\system32\dllcache\msconfig.exe
+ 2008-04-13 08:26:08	12,288	-c--a-w	C:\WINDOWS\system32\dllcache\mscpx32r.dll
+ 2008-04-13 17:33:32	36,864	-c--a-w	C:\WINDOWS\system32\dllcache\mscpxl32.dll
+ 2008-04-13 17:33:32	297,984	-c--a-w	C:\WINDOWS\system32\dllcache\msctf.dll
+ 2008-04-13 17:33:32	68,608	-c--a-w	C:\WINDOWS\system32\dllcache\msctfp.dll
+ 2008-04-13 17:33:32	4,096	-c--a-w	C:\WINDOWS\system32\dllcache\msdadc.dll
+ 2008-04-13 17:33:32	118,784	-c--a-w	C:\WINDOWS\system32\dllcache\msdadiag.dll
+ 2008-04-13 17:33:32	4,096	-c--a-w	C:\WINDOWS\system32\dllcache\msdaenum.dll
+ 2008-04-13 17:33:32	4,096	-c--a-w	C:\WINDOWS\system32\dllcache\msdaer.dll
+ 2008-04-13 17:33:32	233,472	-c--a-w	C:\WINDOWS\system32\dllcache\msdaora.dll
+ 2007-03-28 03:56:32	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\msdaorar.dll
+ 2008-04-13 17:33:32	77,824	-c--a-w	C:\WINDOWS\system32\dllcache\msdaosp.dll
+ 2007-03-28 03:56:34	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\msdaprsr.dll
+ 2008-04-13 17:33:32	200,704	-c--a-w	C:\WINDOWS\system32\dllcache\msdaprst.dll
+ 2008-04-13 17:33:32	204,800	-c--a-w	C:\WINDOWS\system32\dllcache\msdaps.dll
+ 2008-04-13 17:33:32	118,784	-c--a-w	C:\WINDOWS\system32\dllcache\msdarem.dll
+ 2007-03-28 03:56:34	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\msdaremr.dll
+ 2008-04-13 17:33:32	151,552	-c--a-w	C:\WINDOWS\system32\dllcache\msdart.dll
+ 2008-04-13 17:33:32	4,096	-c--a-w	C:\WINDOWS\system32\dllcache\msdasc.dll
+ 2008-04-13 17:33:32	315,392	-c--a-w	C:\WINDOWS\system32\dllcache\msdasql.dll
+ 2007-03-28 03:56:34	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\msdasqlr.dll
+ 2008-04-13 17:33:32	94,208	-c--a-w	C:\WINDOWS\system32\dllcache\msdatl3.dll
+ 2008-04-13 17:33:32	20,480	-c--a-w	C:\WINDOWS\system32\dllcache\msdatt.dll
+ 2008-04-13 17:33:32	4,096	-c--a-w	C:\WINDOWS\system32\dllcache\msdaurl.dll
+ 2008-04-13 17:33:32	36,864	-c--a-w	C:\WINDOWS\system32\dllcache\msdfmap.dll
+ 2008-04-13 17:33:32	14,336	-c--a-w	C:\WINDOWS\system32\dllcache\msdmo.dll
+ 2008-04-13 17:34:14	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\msdtc.exe
+ 2008-04-13 17:33:32	58,880	-c--a-w	C:\WINDOWS\system32\dllcache\msdtclog.dll
+ 2008-04-13 17:33:32	427,008	-c--a-w	C:\WINDOWS\system32\dllcache\msdtcprx.dll
+ 2008-04-13 17:33:32	90,112	-c--a-w	C:\WINDOWS\system32\dllcache\msdtcstp.dll
+ 2008-04-13 17:33:32	956,928	-c--a-w	C:\WINDOWS\system32\dllcache\msdtctm.dll
+ 2008-04-13 17:33:32	161,792	-c--a-w	C:\WINDOWS\system32\dllcache\msdtcuiu.dll
+ 2008-04-13 09:46:10	51,200	-c--a-w	C:\WINDOWS\system32\dllcache\msdv.sys
+ 2007-04-02 03:47:44	518,944	-c--a-w	C:\WINDOWS\system32\dllcache\msexch40.dll
+ 2007-04-02 03:48:00	326,432	-c--a-w	C:\WINDOWS\system32\dllcache\msexcl40.dll
+ 2008-04-13 09:32:40	19,072	-c--a-w	C:\WINDOWS\system32\dllcache\msfs.sys
+ 2001-08-17 19:48:36	6,016	-c--a-w	C:\WINDOWS\system32\dllcache\msfsio.sys
+ 2008-04-13 17:33:32	539,136	-c--a-w	C:\WINDOWS\system32\dllcache\msftedit.dll
+ 2001-08-17 20:02:40	35,200	-c--a-w	C:\WINDOWS\system32\dllcache\msgame.sys
+ 2008-04-13 17:33:32	1,007,104	-c--a-w	C:\WINDOWS\system32\dllcache\msgina.dll
+ 2008-04-13 09:56:34	35,072	-c--a-w	C:\WINDOWS\system32\dllcache\msgpc.sys
+ 2008-04-13 17:33:32	3,166,208	-c--a-w	C:\WINDOWS\system32\dllcache\msgr3en.dll
+ 2008-04-13 17:33:32	15,360	-c--a-w	C:\WINDOWS\system32\dllcache\msgrocm.dll
+ 2008-04-13 17:33:32	33,792	-c--a-w	C:\WINDOWS\system32\dllcache\msgsvc.dll
+ 2008-04-13 17:33:34	2,843,136	-c--a-w	C:\WINDOWS\system32\dllcache\msi.dll
+ 2008-04-13 17:33:34	51,712	-c--a-w	C:\WINDOWS\system32\dllcache\msident.dll
+ 2008-04-13 17:33:34	6,656	-c--a-w	C:\WINDOWS\system32\dllcache\msidle.dll
+ 2008-04-13 17:33:34	252,416	-c--a-w	C:\WINDOWS\system32\dllcache\msieftp.dll
+ 2008-04-13 17:34:14	78,848	-c--a-w	C:\WINDOWS\system32\dllcache\msiexec.exe
+ 2008-04-13 17:33:34	271,360	-c--a-w	C:\WINDOWS\system32\dllcache\msihnd.dll
+ 2008-04-13 17:33:34	4,608	-c--a-w	C:\WINDOWS\system32\dllcache\msimg32.dll
+ 2008-04-13 17:34:14	60,416	-c--a-w	C:\WINDOWS\system32\dllcache\msimn.exe
+ 2008-04-13 06:39:44	884,736	-c--a-w	C:\WINDOWS\system32\dllcache\msimsg.dll
+ 2008-04-13 17:33:34	159,232	-c--a-w	C:\WINDOWS\system32\dllcache\msimtf.dll
+ 2008-04-13 17:33:34	382,464	-c--a-w	C:\WINDOWS\system32\dllcache\msinfo.dll
+ 2008-04-13 09:54:30	22,016	-c--a-w	C:\WINDOWS\system32\dllcache\msircomm.sys
+ 2008-04-13 17:34:14	40,960	-c--a-w	C:\WINDOWS\system32\dllcache\msiregmv.exe
+ 2008-04-13 17:33:34	15,360	-c--a-w	C:\WINDOWS\system32\dllcache\msisip.dll
+ 2007-10-22 00:30:52	1,516,568	-c--a-w	C:\WINDOWS\system32\dllcache\msjet40.dll
+ 2007-04-02 03:49:22	355,112	-c--a-w	C:\WINDOWS\system32\dllcache\msjetol1.dll
+ 2007-09-10 02:25:02	194,144	-c--a-w	C:\WINDOWS\system32\dllcache\msjint40.dll
+ 2008-04-13 17:33:34	102,400	-c--a-w	C:\WINDOWS\system32\dllcache\msjro.dll
+ 2007-04-02 03:49:34	60,192	-c--a-w	C:\WINDOWS\system32\dllcache\msjter40.dll
+ 2007-04-02 03:49:38	248,608	-c--a-w	C:\WINDOWS\system32\dllcache\msjtes40.dll
+ 2008-04-13 09:39:54	7,552	-c--a-w	C:\WINDOWS\system32\dllcache\mskssrv.sys
+ 2008-04-13 17:33:34	25,600	-c--a-w	C:\WINDOWS\system32\dllcache\mslbui.dll
+ 2007-04-02 03:49:52	219,936	-c--a-w	C:\WINDOWS\system32\dllcache\msltus40.dll
+ 2008-04-13 17:33:34	39,936	-c--a-w	C:\WINDOWS\system32\dllcache\mslwvtts.dll
+ 2001-08-17 20:00:04	2,944	-c--a-w	C:\WINDOWS\system32\dllcache\msmpu401.sys
+ 2008-04-13 17:33:34	170,496	-c--a-w	C:\WINDOWS\system32\dllcache\msmqocm.dll
+ 2008-04-13 17:33:34	290,816	-c--a-w	C:\WINDOWS\system32\dllcache\msnsspc.dll
+ 2008-04-13 17:33:34	122,368	-c--a-w	C:\WINDOWS\system32\dllcache\msobcomm.dll
+ 2008-04-13 17:33:34	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\msobdl.dll
+ 2008-04-13 17:33:34	566,272	-c--a-w	C:\WINDOWS\system32\dllcache\msobmain.dll
+ 2008-04-13 17:33:34	30,720	-c--a-w	C:\WINDOWS\system32\dllcache\msobshel.dll
+ 2008-04-13 17:33:34	19,456	-c--a-w	C:\WINDOWS\system32\dllcache\msobweb.dll
+ 2008-04-13 17:33:34	1,314,816	-c--a-w	C:\WINDOWS\system32\dllcache\msoe.dll
+ 2008-04-13 17:33:34	252,928	-c--a-w	C:\WINDOWS\system32\dllcache\msoeacct.dll
+ 2008-04-13 17:02:36	2,534,400	-c--a-w	C:\WINDOWS\system32\dllcache\msoeres.dll
+ 2008-04-13 17:33:34	105,984	-c--a-w	C:\WINDOWS\system32\dllcache\msoert2.dll
+ 2008-04-13 17:34:14	29,184	-c--a-w	C:\WINDOWS\system32\dllcache\msoobe.exe
+ 2007-03-28 03:56:36	24,576	-c--a-w	C:\WINDOWS\system32\dllcache\msorc32r.dll
+ 2008-04-13 17:33:34	143,360	-c--a-w	C:\WINDOWS\system32\dllcache\msorcl32.dll
+ 2008-04-13 17:34:16	347,648	-c--a-w	C:\WINDOWS\system32\dllcache\mspaint.exe
+ 2008-04-13 17:33:34	29,696	-c--a-w	C:\WINDOWS\system32\dllcache\mspatcha.dll
+ 2007-04-02 03:50:06	355,104	-c--a-w	C:\WINDOWS\system32\dllcache\mspbde40.dll
+ 2008-04-13 09:39:52	5,376	-c--a-w	C:\WINDOWS\system32\dllcache\mspclock.sys
+ 2008-04-13 09:39:52	4,992	-c--a-w	C:\WINDOWS\system32\dllcache\mspqm.sys
+ 2008-04-13 07:23:32	48,128	-c--a-w	C:\WINDOWS\system32\dllcache\msprivs.dll
+ 2007-04-02 03:50:28	432,928	-c--a-w	C:\WINDOWS\system32\dllcache\msrd2x40.dll
+ 2007-04-02 03:50:44	322,336	-c--a-w	C:\WINDOWS\system32\dllcache\msrd3x40.dll
+ 2007-04-02 03:51:06	559,904	-c--a-w	C:\WINDOWS\system32\dllcache\msrepl40.dll
+ 2001-08-17 19:48:50	12,416	-c--a-w	C:\WINDOWS\system32\dllcache\msriffwv.sys
+ 2008-04-13 17:33:34	11,264	-c--a-w	C:\WINDOWS\system32\dllcache\msrle32.dll
+ 2008-04-13 17:33:34	134,656	-c--a-w	C:\WINDOWS\system32\dllcache\mssap.dll
+ 2008-04-13 17:33:34	155,136	-c--a-w	C:\WINDOWS\system32\dllcache\mssha.dll
+ 2008-04-13 17:03:10	81,920	-c--a-w	C:\WINDOWS\system32\dllcache\msshamsg.dll
+ 2008-04-13 09:36:48	15,488	-c--a-w	C:\WINDOWS\system32\dllcache\mssmbios.sys
+ 2008-04-13 17:33:34	274,432	-c--a-w	C:\WINDOWS\system32\dllcache\mst120.dll
+ 2008-04-13 17:33:34	57,344	-c--a-w	C:\WINDOWS\system32\dllcache\mst123.dll
+ 2008-04-13 09:46:10	49,024	-c--a-w	C:\WINDOWS\system32\dllcache\mstape.sys
+ 2008-04-13 17:33:34	281,600	-c--a-w	C:\WINDOWS\system32\dllcache\mstask.dll
+ 2008-04-13 09:39:52	5,504	-c--a-w	C:\WINDOWS\system32\dllcache\mstee.sys
+ 2007-04-02 03:51:28	264,992	-c--a-w	C:\WINDOWS\system32\dllcache\mstext40.dll
+ 2008-04-13 17:34:16	12,288	-c--a-w	C:\WINDOWS\system32\dllcache\mstinit.exe
+ 2008-04-13 17:33:34	116,224	-c--a-w	C:\WINDOWS\system32\dllcache\mstlsapi.dll
+ 2008-04-13 17:33:34	195,584	-c--a-w	C:\WINDOWS\system32\dllcache\msutb.dll
+ 2008-04-13 17:33:34	132,608	-c--a-w	C:\WINDOWS\system32\dllcache\msv1_0.dll
+ 2008-04-13 17:33:34	57,344	-c--a-w	C:\WINDOWS\system32\dllcache\msvcirt.dll
+ 2008-04-13 17:33:34	413,696	-c--a-w	C:\WINDOWS\system32\dllcache\msvcp60.dll
+ 2008-04-13 17:33:34	343,040	-c--a-w	C:\WINDOWS\system32\dllcache\msvcrt.dll
+ 2008-04-13 09:30:48	61,440	-c--a-w	C:\WINDOWS\system32\dllcache\msvcrt40.dll
+ 2008-04-13 17:33:34	122,368	-c--a-w	C:\WINDOWS\system32\dllcache\msvfw32.dll
+ 2008-04-13 17:33:34	1,434,112	-c--a-w	C:\WINDOWS\system32\dllcache\msvidctl.dll
+ 2008-04-13 17:33:34	72,704	-c--a-w	C:\WINDOWS\system32\dllcache\msw3prt.dll
+ 2007-04-02 03:51:48	838,432	-c--a-w	C:\WINDOWS\system32\dllcache\mswdat10.dll
+ 2008-04-13 17:33:34	204,800	-c--a-w	C:\WINDOWS\system32\dllcache\mswebdvd.dll
+ 2008-04-13 17:33:34	247,808	-c--a-w	C:\WINDOWS\system32\dllcache\mswsock.dll
+ 2007-03-28 03:56:40	621,344	-c--a-w	C:\WINDOWS\system32\dllcache\mswstr10.dll
+ 2008-04-13 17:33:36	24,576	-c--a-w	C:\WINDOWS\system32\dllcache\msxactps.dll
+ 2007-04-02 03:52:02	355,104	-c--a-w	C:\WINDOWS\system32\dllcache\msxbde40.dll
+ 2008-04-13 17:33:36	506,368	-c--a-w	C:\WINDOWS\system32\dllcache\msxml.dll
+ 2008-04-13 17:33:36	701,440	-c--a-w	C:\WINDOWS\system32\dllcache\msxml2.dll
+ 2008-04-13 17:33:36	1,104,896	-c--a-w	C:\WINDOWS\system32\dllcache\msxml3.dll
+ 2008-04-13 17:33:36	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\msyuv.dll
+ 2008-04-13 09:23:42	126,686	-c--a-w	C:\WINDOWS\system32\dllcache\mtlmnt5.sys
+ 2008-04-13 09:23:40	1,309,184	-c--a-w	C:\WINDOWS\system32\dllcache\mtlstrm.sys
+ 2008-04-13 17:34:16	119,808	-c--a-w	C:\WINDOWS\system32\dllcache\mtstocom.exe
+ 2008-04-13 17:33:36	66,560	-c--a-w	C:\WINDOWS\system32\dllcache\mtxclu.dll
+ 2008-04-13 17:33:36	30,720	-c--a-w	C:\WINDOWS\system32\dllcache\mtxdm.dll
+ 2008-04-13 17:33:36	4,096	-c--a-w	C:\WINDOWS\system32\dllcache\mtxex.dll
+ 2008-04-13 17:33:36	34,304	-c--a-w	C:\WINDOWS\system32\dllcache\mtxlegih.dll
+ 2008-04-13 17:33:36	91,648	-c--a-w	C:\WINDOWS\system32\dllcache\mtxoci.dll
+ 2008-04-13 17:33:36	1,737,856	-c--a-w	C:\WINDOWS\system32\dllcache\mtxparhd.dll
+ 2008-04-13 07:34:28	452,736	-c--a-w	C:\WINDOWS\system32\dllcache\mtxparhm.sys
+ 2001-08-17 18:50:04	103,296	-c--a-w	C:\WINDOWS\system32\dllcache\mtxvideo.sys
+ 2008-04-13 10:17:06	105,344	-c--a-w	C:\WINDOWS\system32\dllcache\mup.sys
+ 2008-04-13 09:43:56	12,672	-c--a-w	C:\WINDOWS\system32\dllcache\mutohpen.sys
+ 2001-08-23 15:08:58	22,144	-c--a-w	C:\WINDOWS\system32\dllcache\mxcard.sys
+ 2001-08-23 15:47:14	19,968	-c--a-w	C:\WINDOWS\system32\dllcache\mxicfg.dll
+ 2001-08-17 19:49:32	19,968	-c--a-w	C:\WINDOWS\system32\dllcache\mxnic.sys
+ 2001-08-23 15:47:14	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\mxport.dll
+ 2001-08-23 15:09:00	76,928	-c--a-w	C:\WINDOWS\system32\dllcache\mxport.sys
+ 2008-04-13 17:33:36	91,648	-c--a-w	C:\WINDOWS\system32\dllcache\mydocs.dll
+ 2001-08-23 15:09:02	53,791	-c--a-w	C:\WINDOWS\system32\dllcache
1000nt5.sys
+ 2001-08-23 15:09:02	131,072	-c--a-w	C:\WINDOWS\system32\dllcache
100325.sys
+ 2001-08-23 15:46:46	35,392	-c--a-w	C:\WINDOWS\system32\dllcache
9i128.dll
+ 2001-08-17 18:50:06	13,664	-c--a-w	C:\WINDOWS\system32\dllcache
9i128.sys
+ 2001-08-23 15:46:46	59,104	-c--a-w	C:\WINDOWS\system32\dllcache
9i128v2.dll
+ 2001-08-17 18:50:08	33,088	-c--a-w	C:\WINDOWS\system32\dllcache
9i128v2.sys
+ 2001-08-17 18:50:10	27,936	-c--a-w	C:\WINDOWS\system32\dllcache
9i3d.sys
+ 2001-08-23 15:46:46	91,488	-c--a-w	C:\WINDOWS\system32\dllcache
9i3disp.dll
+ 2008-04-13 09:46:26	85,248	-c--a-w	C:\WINDOWS\system32\dllcache
abtsfec.sys
+ 2008-04-13 17:33:36	221,184	-c--a-w	C:\WINDOWS\system32\dllcache
ac.dll
+ 2008-04-13 17:33:36	30,208	-c--a-w	C:\WINDOWS\system32\dllcache
apipsec.dll
+ 2008-04-13 17:33:36	200,704	-c--a-w	C:\WINDOWS\system32\dllcache
apmontr.dll
+ 2008-04-13 17:34:16	177,664	-c--a-w	C:\WINDOWS\system32\dllcache
apstat.exe
+ 2008-04-13 17:34:16	55,296	-c--a-w	C:\WINDOWS\system32\dllcache
arrator.exe
+ 2008-04-13 17:33:36	36,352	-c--a-w	C:\WINDOWS\system32\dllcache
cobjapi.dll
+ 2008-04-13 17:33:36	47,104	-c--a-w	C:\WINDOWS\system32\dllcache
cprov.dll
+ 2008-04-13 17:33:36	18,432	-c--a-w	C:\WINDOWS\system32\dllcache
ddeapi.dll
+ 2008-04-13 17:34:16	4,096	-c--a-w	C:\WINDOWS\system32\dllcache
ddeapir.exe
+ 2008-04-13 17:33:36	19,456	-c--a-w	C:\WINDOWS\system32\dllcache
ddenb32.dll

locdog · Answer

+ 2008-04-13 10:20:38	182,656	-c--a-w	C:\WINDOWS\system32\dllcache
dis.sys
+ 2008-04-13 09:46:24	10,880	-c--a-w	C:\WINDOWS\system32\dllcache
disip.sys
+ 2008-04-13 17:33:36	57,344	-c--a-w	C:\WINDOWS\system32\dllcache
disnpp.dll
+ 2008-04-13 09:57:28	10,112	-c--a-w	C:\WINDOWS\system32\dllcache
distapi.sys
+ 2008-04-13 09:56:00	14,592	-c--a-w	C:\WINDOWS\system32\dllcache
disuio.sys
+ 2008-04-13 10:20:44	91,520	-c--a-w	C:\WINDOWS\system32\dllcache
diswan.sys
+ 2008-04-13 09:57:30	40,576	-c--a-w	C:\WINDOWS\system32\dllcache
dproxy.sys
+ 2001-08-17 19:49:14	15,872	-c--a-w	C:\WINDOWS\system32\dllcache
e2000.sys
+ 2001-08-23 15:46:46	60,480	-c--a-w	C:\WINDOWS\system32\dllcache
eo20xx.dll
+ 2001-08-17 18:50:04	39,264	-c--a-w	C:\WINDOWS\system32\dllcache
eo20xx.sys
+ 2008-04-13 17:34:16	42,496	-c--a-w	C:\WINDOWS\system32\dllcache
et.exe
+ 2008-04-13 17:34:16	124,928	-c--a-w	C:\WINDOWS\system32\dllcache
et1.exe
+ 2008-04-13 17:33:36	337,408	-c--a-w	C:\WINDOWS\system32\dllcache
etapi32.dll
+ 2008-04-13 09:56:04	34,688	-c--a-w	C:\WINDOWS\system32\dllcache
etbios.sys
+ 2008-04-13 10:21:02	162,816	-c--a-w	C:\WINDOWS\system32\dllcache
etbt.sys
+ 2008-04-13 17:33:36	634,368	-c--a-w	C:\WINDOWS\system32\dllcache
etcfgx.dll
+ 2008-04-13 17:34:16	114,176	-c--a-w	C:\WINDOWS\system32\dllcache
etdde.exe
+ 2001-08-23 15:10:08	66,302	-c--a-w	C:\WINDOWS\system32\dllcache
etflx3.sys
+ 2008-04-13 17:33:36	144,896	-c--a-w	C:\WINDOWS\system32\dllcache
etid.dll
+ 2008-04-13 17:33:36	407,040	-c--a-w	C:\WINDOWS\system32\dllcache
etlogon.dll
+ 2008-04-13 17:33:36	198,144	-c--a-w	C:\WINDOWS\system32\dllcache
etman.dll
+ 2008-04-13 17:33:36	78,336	-c--a-w	C:\WINDOWS\system32\dllcache
etoc.dll
+ 2008-04-13 17:33:36	885,248	-c--a-w	C:\WINDOWS\system32\dllcache
etplwiz.dll
+ 2008-04-13 17:33:36	11,776	-c--a-w	C:\WINDOWS\system32\dllcache
etrap.dll
+ 2008-04-13 17:37:12	332,800	-c--a-w	C:\WINDOWS\system32\dllcache
etsetup.exe
+ 2008-04-13 17:34:16	88,576	-c--a-w	C:\WINDOWS\system32\dllcache
etsh.exe
+ 2008-04-13 17:33:36	1,719,808	-c--a-w	C:\WINDOWS\system32\dllcache
etshell.dll
+ 2008-04-13 17:34:16	37,888	-c--a-w	C:\WINDOWS\system32\dllcache
etstat.exe
+ 2008-04-13 17:33:36	83,456	-c--a-w	C:\WINDOWS\system32\dllcache
etui0.dll
+ 2008-04-13 17:33:36	245,760	-c--a-w	C:\WINDOWS\system32\dllcache
etui1.dll
+ 2008-04-13 17:06:02	132,695	-c--a-w	C:\WINDOWS\system32\dllcache
etwlan5.sys
+ 2008-04-13 17:33:36	250,880	-c--a-w	C:\WINDOWS\system32\dllcache
ewdev.dll
+ 2001-08-17 18:12:20	32,840	-c--a-w	C:\WINDOWS\system32\dllcache
grpci.sys
+ 2008-04-13 09:51:26	61,824	-c--a-w	C:\WINDOWS\system32\dllcache
ic1394.sys
+ 2002-01-08 19:39:34	12,032	-c--a-w	C:\WINDOWS\system32\dllcache
ikedrv.sys
+ 2008-04-13 17:33:36	98,304	-c--a-w	C:\WINDOWS\system32\dllcache
lhtml.dll
+ 2001-08-17 18:20:08	126,080	-c--a-w	C:\WINDOWS\system32\dllcache
m5a2wdm.sys
+ 2001-08-17 18:20:08	87,040	-c--a-w	C:\WINDOWS\system32\dllcache
m6wdm.sys
+ 2008-04-13 17:33:38	229,376	-c--a-w	C:\WINDOWS\system32\dllcache
mas.dll
+ 2008-04-13 17:33:38	28,672	-c--a-w	C:\WINDOWS\system32\dllcache
masnt.dll
+ 2008-04-13 17:33:38	81,920	-c--a-w	C:\WINDOWS\system32\dllcache
mchat.dll
+ 2008-04-13 17:33:38	77,824	-c--a-w	C:\WINDOWS\system32\dllcache
mcom.dll
+ 2008-04-13 17:33:38	155,648	-c--a-w	C:\WINDOWS\system32\dllcache
mft.dll
+ 2008-04-13 17:33:38	28,672	-c--a-w	C:\WINDOWS\system32\dllcache
mmkcert.dll
+ 2008-04-13 09:53:10	40,320	-c--a-w	C:\WINDOWS\system32\dllcache
mnt.sys
+ 2008-04-13 17:33:38	172,032	-c--a-w	C:\WINDOWS\system32\dllcache
moldwb.dll
+ 2008-04-13 17:33:38	192,512	-c--a-w	C:\WINDOWS\system32\dllcache
mwb.dll
+ 2008-04-13 17:34:16	70,656	-c--a-w	C:\WINDOWS\system32\dllcache
otepad.exe
+ 2008-04-13 09:32:40	30,848	-c--a-w	C:\WINDOWS\system32\dllcache
pfs.sys
+ 2008-04-13 17:34:16	15,360	-c--a-w	C:\WINDOWS\system32\dllcache
ppagent.exe
+ 2008-04-13 17:33:38	55,296	-c--a-w	C:\WINDOWS\system32\dllcache
pptools.dll
+ 2008-04-13 09:54:38	28,672	-c--a-w	C:\WINDOWS\system32\dllcache
scirda.sys
+ 2008-04-13 17:33:38	45,056	-c--a-w	C:\WINDOWS\system32\dllcache
sepm.dll
+ 2008-04-13 17:34:16	79,360	-c--a-w	C:\WINDOWS\system32\dllcache
slookup.exe
+ 2001-08-17 19:53:02	7,552	-c--a-w	C:\WINDOWS\system32\dllcache
smmc.sys
+ 2001-08-23 15:11:48	9,472	-c--a-w	C:\WINDOWS\system32\dllcache
tapm.sys
+ 2008-04-13 17:34:18	1,231,360	-c--a-w	C:\WINDOWS\system32\dllcache
tbackup.exe
+ 2008-04-13 17:33:04	731,136	-c--a-w	C:\WINDOWS\system32\dllcache
tdll.dll
+ 2008-04-13 17:33:38	67,072	-c--a-w	C:\WINDOWS\system32\dllcache
tdsapi.dll
+ 2008-04-13 17:33:38	212,992	-c--a-w	C:\WINDOWS\system32\dllcache
tevt.dll
+ 2008-04-13 10:15:54	574,976	-c--a-w	C:\WINDOWS\system32\dllcache
tfs.sys
+ 2001-08-17 18:49:04	51,552	-c--a-w	C:\WINDOWS\system32\dllcache
tgrip.sys
+ 2008-04-13 07:49:52	34,000	-c--a-w	C:\WINDOWS\system32\dllcache
tio.sys
+ 2008-04-13 07:49:44	34,560	-c--a-w	C:\WINDOWS\system32\dllcache
tio404.sys
+ 2008-04-13 07:49:40	35,648	-c--a-w	C:\WINDOWS\system32\dllcache
tio411.sys
+ 2008-04-13 07:49:44	35,424	-c--a-w	C:\WINDOWS\system32\dllcache
tio412.sys
+ 2008-04-13 07:49:42	34,560	-c--a-w	C:\WINDOWS\system32\dllcache
tio804.sys
+ 2008-04-13 17:07:18	2,147,328	-c--a-w	C:\WINDOWS\system32\dllcache
tkrnlmp.exe
+ 2008-04-13 17:07:36	2,025,984	-c--a-w	C:\WINDOWS\system32\dllcache
tkrpamp.exe
+ 2008-04-13 17:33:38	44,032	-c--a-w	C:\WINDOWS\system32\dllcache
tlanman.dll
+ 2008-04-13 17:33:38	8,192	-c--a-w	C:\WINDOWS\system32\dllcache
tlsapi.dll
+ 2008-04-13 17:33:38	119,808	-c--a-w	C:\WINDOWS\system32\dllcache
tmarta.dll
+ 2008-04-13 17:33:38	40,960	-c--a-w	C:\WINDOWS\system32\dllcache
tmsapi.dll
+ 2008-04-13 17:33:38	181,248	-c--a-w	C:\WINDOWS\system32\dllcache
tmsdba.dll
+ 2008-04-13 17:33:38	496,640	-c--a-w	C:\WINDOWS\system32\dllcache
tmsmgr.dll
+ 2008-04-13 17:33:38	438,272	-c--a-w	C:\WINDOWS\system32\dllcache
tmssvc.dll
+ 2008-04-13 09:23:42	180,360	-c--a-w	C:\WINDOWS\system32\dllcache
tmtlfax.sys
+ 2008-04-13 17:33:38	63,488	-c--a-w	C:\WINDOWS\system32\dllcache
toc.dll
+ 2008-04-13 17:33:38	91,648	-c--a-w	C:\WINDOWS\system32\dllcache
tprint.dll
+ 2008-04-13 17:33:38	145,920	-c--a-w	C:\WINDOWS\system32\dllcache
tshrui.dll
+ 2008-04-13 17:34:18	421,888	-c--a-w	C:\WINDOWS\system32\dllcache
tvdm.exe
+ 2008-04-13 17:33:38	15,360	-c--a-w	C:\WINDOWS\system32\dllcache
tvdmd.dll
+ 2001-08-23 15:46:46	123,776	-c--a-w	C:\WINDOWS\system32\dllcache
v3.dll
+ 2001-08-17 18:50:18	198,144	-c--a-w	C:\WINDOWS\system32\dllcache
v3.sys
+ 2008-04-13 17:33:38	4,274,816	-c--a-w	C:\WINDOWS\system32\dllcache
v4_disp.dll
+ 2008-04-13 07:34:32	1,897,408	-c--a-w	C:\WINDOWS\system32\dllcache
v4_mini.sys
+ 2008-04-13 17:33:38	64,000	-c--a-w	C:\WINDOWS\system32\dllcache
wapi32.dll
+ 2008-04-13 09:56:08	88,320	-c--a-w	C:\WINDOWS\system32\dllcache
wlnkipx.sys
+ 2008-04-13 17:33:38	145,920	-c--a-w	C:\WINDOWS\system32\dllcache
wprovau.dll
+ 2008-04-13 09:34:14	163,584	-c--a-w	C:\WINDOWS\system32\dllcache
wrdr.sys
+ 2008-04-13 17:33:38	65,536	-c--a-w	C:\WINDOWS\system32\dllcache
wwks.dll
+ 2008-04-13 17:33:38	271,360	-c--a-w	C:\WINDOWS\system32\dllcache\oakley.dll
+ 2008-04-13 17:33:38	289,280	-c--a-w	C:\WINDOWS\system32\dllcache\objsel.dll
+ 2008-04-13 09:40:34	445,440	-c--a-w	C:\WINDOWS\system32\dllcache\obrs040c.dll
+ 2008-04-13 17:33:40	15,872	-c--a-w	C:\WINDOWS\system32\dllcache\ocgen.dll
+ 2008-04-13 17:33:40	69,632	-c--a-w	C:\WINDOWS\system32\dllcache\ocmanage.dll
+ 2008-04-13 17:33:40	17,408	-c--a-w	C:\WINDOWS\system32\dllcache\ocmsn.dll
+ 2008-04-13 17:33:40	249,856	-c--a-w	C:\WINDOWS\system32\dllcache\odbc32.dll
+ 2008-04-13 17:33:40	16,384	-c--a-w	C:\WINDOWS\system32\dllcache\odbc32gt.dll
+ 2008-04-13 17:34:18	32,768	-c--a-w	C:\WINDOWS\system32\dllcache\odbcad32.exe
+ 2008-04-13 17:33:40	135,168	-c--a-w	C:\WINDOWS\system32\dllcache\odbcconf.dll
+ 2008-04-13 17:34:18	69,632	-c--a-w	C:\WINDOWS\system32\dllcache\odbcconf.exe
+ 2008-04-13 17:33:40	106,496	-c--a-w	C:\WINDOWS\system32\dllcache\odbccp32.dll
+ 2008-04-13 17:33:40	65,536	-c--a-w	C:\WINDOWS\system32\dllcache\odbccr32.dll
+ 2008-04-13 17:33:40	65,536	-c--a-w	C:\WINDOWS\system32\dllcache\odbccu32.dll
+ 2007-03-28 03:56:44	98,304	-c--a-w	C:\WINDOWS\system32\dllcache\odbcint.dll
+ 2008-04-13 17:32:16	61,471	-c--a-w	C:\WINDOWS\system32\dllcache\odbcji32.dll
+ 2008-04-13 17:33:40	278,559	-c--a-w	C:\WINDOWS\system32\dllcache\odbcjt32.dll
+ 2008-04-13 08:26:06	12,288	-c--a-w	C:\WINDOWS\system32\dllcache\odbcp32r.dll
+ 2008-04-13 17:33:40	147,456	-c--a-w	C:\WINDOWS\system32\dllcache\odbctrac.dll
+ 2008-04-13 17:33:40	20,511	-c--a-w	C:\WINDOWS\system32\dllcache\oddbse32.dll
+ 2008-04-13 17:33:40	20,510	-c--a-w	C:\WINDOWS\system32\dllcache\odexl32.dll
+ 2008-04-13 17:33:40	20,510	-c--a-w	C:\WINDOWS\system32\dllcache\odfox32.dll
+ 2008-04-13 17:33:40	20,510	-c--a-w	C:\WINDOWS\system32\dllcache\odpdx32.dll
+ 2008-04-13 17:33:40	20,511	-c--a-w	C:\WINDOWS\system32\dllcache\odtext32.dll
+ 2008-04-13 17:33:40	104,448	-c--a-w	C:\WINDOWS\system32\dllcache\oeimport.dll
+ 2008-04-13 17:34:18	60,928	-c--a-w	C:\WINDOWS\system32\dllcache\oemig50.exe
+ 2008-04-13 17:33:40	35,840	-c--a-w	C:\WINDOWS\system32\dllcache\oemiglib.dll
+ 2008-04-13 17:33:40	192,000	-c--a-w	C:\WINDOWS\system32\dllcache\offfilt.dll
+ 2008-04-13 09:46:20	61,696	-c--a-w	C:\WINDOWS\system32\dllcache\ohci1394.sys
+ 2008-04-13 17:33:40	1,287,168	-c--a-w	C:\WINDOWS\system32\dllcache\ole32.dll
+ 2008-04-13 17:33:40	551,936	-c--a-w	C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2008-04-13 17:33:40	75,264	-c--a-w	C:\WINDOWS\system32\dllcache\olecli32.dll
+ 2008-04-13 17:33:40	37,376	-c--a-w	C:\WINDOWS\system32\dllcache\olecnv32.dll
+ 2008-04-13 17:33:40	487,424	-c--a-w	C:\WINDOWS\system32\dllcache\oledb32.dll
+ 2008-04-13 17:33:40	77,824	-c--a-w	C:\WINDOWS\system32\dllcache\oledb32r.dll
+ 2008-04-13 17:33:40	124,928	-c--a-w	C:\WINDOWS\system32\dllcache\oledlg.dll
+ 2008-04-13 17:33:40	110,592	-c--a-w	C:\WINDOWS\system32\dllcache\oleprn.dll
+ 2008-04-13 17:33:40	84,992	-c--a-w	C:\WINDOWS\system32\dllcache\olepro32.dll
+ 2008-04-13 17:33:40	144,896	-c--a-w	C:\WINDOWS\system32\dllcache\onex.dll
+ 2008-04-13 17:34:18	51,712	-c--a-w	C:\WINDOWS\system32\dllcache\oobebaln.exe
+ 2008-04-13 17:33:40	713,728	-c--a-w	C:\WINDOWS\system32\dllcache\opengl32.dll
+ 2001-08-17 18:20:16	54,528	-c--a-w	C:\WINDOWS\system32\dllcache\opl3sax.sys
+ 2008-04-13 17:34:18	71,680	-c--a-w	C:\WINDOWS\system32\dllcache\opnfiles.exe
+ 2002-01-08 19:43:24	3,456	-c--a-w	C:\WINDOWS\system32\dllcache\oprghdlr.sys
+ 2008-04-13 17:34:18	216,576	-c--a-w	C:\WINDOWS\system32\dllcache\osk.exe
+ 2008-04-13 17:33:40	68,096	-c--a-w	C:\WINDOWS\system32\dllcache\osuninst.dll
+ 2001-08-17 18:12:36	27,209	-c--a-w	C:\WINDOWS\system32\dllcache\otc06x5.sys
+ 2001-08-23 15:15:04	44,297	-c--a-w	C:\WINDOWS\system32\dllcache\otceth5.sys
+ 2001-08-23 15:15:04	54,954	-c--a-w	C:\WINDOWS\system32\dllcache\otcsercb.sys
+ 2001-08-17 20:05:04	25,088	-c--a-w	C:\WINDOWS\system32\dllcache\ovca.sys
+ 2001-08-17 20:05:12	48,000	-c--a-w	C:\WINDOWS\system32\dllcache\ovcam2.sys
+ 2001-08-17 20:05:16	28,032	-c--a-w	C:\WINDOWS\system32\dllcache\ovcd.sys
+ 2001-08-17 20:05:20	31,872	-c--a-w	C:\WINDOWS\system32\dllcache\ovce.sys
+ 2001-08-23 15:47:16	116,736	-c--a-w	C:\WINDOWS\system32\dllcache\ovcodec2.dll
+ 2001-08-17 20:05:12	351,616	-c--a-w	C:\WINDOWS\system32\dllcache\ovcodek2.sys
+ 2001-08-23 15:47:16	20,480	-c--a-w	C:\WINDOWS\system32\dllcache\ovcomc.dll
+ 2001-08-23 15:47:42	39,424	-c--a-w	C:\WINDOWS\system32\dllcache\ovcoms.exe
+ 2001-08-17 20:05:06	25,216	-c--a-w	C:\WINDOWS\system32\dllcache\ovsound2.sys
+ 2001-08-23 15:47:16	44,544	-c--a-w	C:\WINDOWS\system32\dllcache\ovui2.dll
+ 2001-08-23 15:47:16	42,496	-c--a-w	C:\WINDOWS\system32\dllcache\ovui2rc.dll
+ 2008-04-13 17:33:40	153,600	-c--a-w	C:\WINDOWS\system32\dllcache\p2p.dll
+ 2008-04-13 17:33:40	105,472	-c--a-w	C:\WINDOWS\system32\dllcache\p2pgasvc.dll
+ 2008-04-13 17:33:40	313,856	-c--a-w	C:\WINDOWS\system32\dllcache\p2pgraph.dll
+ 2008-04-13 17:33:40	115,712	-c--a-w	C:\WINDOWS\system32\dllcache\p2pnetsh.dll
+ 2008-04-13 17:33:40	554,496	-c--a-w	C:\WINDOWS\system32\dllcache\p2psvc.dll
+ 2008-04-13 17:09:38	46,848	-c--a-w	C:\WINDOWS\system32\dllcache\p3.sys
+ 2008-04-13 17:34:18	59,904	-c--a-w	C:\WINDOWS\system32\dllcache\packager.exe
+ 2002-01-08 19:39:34	157,696	-c--a-w	C:\WINDOWS\system32\dllcache\paqsp.dll
+ 2008-04-13 17:09:42	80,384	-c--a-w	C:\WINDOWS\system32\dllcache\parport.sys
+ 2008-04-13 09:40:50	19,712	-c--a-w	C:\WINDOWS\system32\dllcache\partmgr.sys
+ 2008-04-13 17:33:40	69,632	-c--a-w	C:\WINDOWS\system32\dllcache\pautoenr.dll
+ 2001-08-17 18:12:18	30,495	-c--a-w	C:\WINDOWS\system32\dllcache\pc100nds.sys
+ 2008-04-13 07:35:34	29,502	-c--a-w	C:\WINDOWS\system32\dllcache\pca200e.sys
+ 2008-04-13 17:33:40	102,912	-c--a-w	C:\WINDOWS\system32\dllcache\pchshell.dll
+ 2008-04-13 17:33:40	38,400	-c--a-w	C:\WINDOWS\system32\dllcache\pchsvc.dll
+ 2008-04-13 17:09:48	68,608	-c--a-w	C:\WINDOWS\system32\dllcache\pci.sys
+ 2002-01-08 19:43:28	3,328	-c--a-w	C:\WINDOWS\system32\dllcache\pciide.sys
+ 2008-04-13 09:40:30	24,960	-c--a-w	C:\WINDOWS\system32\dllcache\pciidex.sys
+ 2008-04-13 17:09:54	120,576	-c--a-w	C:\WINDOWS\system32\dllcache\pcmcia.sys
+ 2001-08-17 18:12:18	26,153	-c--a-w	C:\WINDOWS\system32\dllcache\pcmlm56.sys
+ 2001-08-17 18:11:22	30,282	-c--a-w	C:\WINDOWS\system32\dllcache\pcntn5hl.sys
+ 2001-08-17 18:11:20	29,769	-c--a-w	C:\WINDOWS\system32\dllcache\pcntn5m.sys
+ 2001-08-17 18:11:22	35,328	-c--a-w	C:\WINDOWS\system32\dllcache\pcntpci5.sys
+ 2001-08-23 15:47:42	86,016	-c--a-w	C:\WINDOWS\system32\dllcache\pctspk.exe
+ 2008-04-13 07:12:44	169,984	-c--a-w	C:\WINDOWS\system32\dllcache\pcx500.sys
+ 2008-04-13 17:33:40	286,720	-c--a-w	C:\WINDOWS\system32\dllcache\pdh.dll
+ 2001-08-17 20:07:40	27,296	-c--a-w	C:\WINDOWS\system32\dllcache\perc2.sys
+ 2001-08-17 20:07:42	5,504	-c--a-w	C:\WINDOWS\system32\dllcache\perc2hib.sys
+ 2008-04-13 17:33:40	42,496	-c--a-w	C:\WINDOWS\system32\dllcache\perfctrs.dll
+ 2008-04-13 17:33:40	27,136	-c--a-w	C:\WINDOWS\system32\dllcache\perfdisk.dll
+ 2008-04-13 17:34:18	15,872	-c--a-w	C:\WINDOWS\system32\dllcache\perfmon.exe
+ 2008-04-13 17:33:40	18,432	-c--a-w	C:\WINDOWS\system32\dllcache\perfnet.dll
+ 2008-04-13 17:33:40	26,624	-c--a-w	C:\WINDOWS\system32\dllcache\perfos.dll
+ 2008-04-13 17:33:40	35,840	-c--a-w	C:\WINDOWS\system32\dllcache\perfproc.dll
+ 2008-04-13 09:44:30	27,904	-c--a-w	C:\WINDOWS\system32\dllcache\perm2.sys
+ 2008-04-13 17:32:18	211,584	-c--a-w	C:\WINDOWS\system32\dllcache\perm2dll.dll
+ 2008-04-13 09:44:32	28,032	-c--a-w	C:\WINDOWS\system32\dllcache\perm3.sys
+ 2008-04-13 17:32:18	259,328	-c--a-w	C:\WINDOWS\system32\dllcache\perm3dd.dll
+ 2001-08-23 15:47:16	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\philcam1.dll
+ 2001-08-17 20:04:50	75,776	-c--a-w	C:\WINDOWS\system32\dllcache\philcam1.sys
+ 2001-08-17 20:04:08	173,696	-c--a-w	C:\WINDOWS\system32\dllcache\philcam2.sys
+ 2001-08-17 20:04:04	92,416	-c--a-w	C:\WINDOWS\system32\dllcache\phildec.sys
+ 2001-08-17 20:07:20	19,840	-c--a-w	C:\WINDOWS\system32\dllcache\philtune.sys
+ 2008-04-13 17:33:40	172,032	-c--a-w	C:\WINDOWS\system32\dllcache\photowiz.dll
+ 2001-08-23 15:47:16	121,344	-c--a-w	C:\WINDOWS\system32\dllcache\phvfwext.dll
+ 2008-04-13 17:33:40	35,328	-c--a-w	C:\WINDOWS\system32\dllcache\pid.dll
+ 2008-04-13 17:34:20	284,160	-c--a-w	C:\WINDOWS\system32\dllcache\pinball.exe
+ 2008-04-13 17:34:20	19,456	-c--a-w	C:\WINDOWS\system32\dllcache\ping.exe
+ 2008-04-13 17:33:40	15,360	-c--a-w	C:\WINDOWS\system32\dllcache\pjlmon.dll
+ 2001-08-17 19:53:04	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\pnrmc.sys
+ 2008-04-13 17:33:40	58,880	-c--a-w	C:\WINDOWS\system32\dllcache\pnrpnsp.dll
+ 2008-04-13 17:33:40	92,672	-c--a-w	C:\WINDOWS\system32\dllcache\policman.dll
+ 2008-04-13 17:33:40	106,496	-c--a-w	C:\WINDOWS\system32\dllcache\polstore.dll
+ 2008-04-13 10:19:42	146,048	-c--a-w	C:\WINDOWS\system32\dllcache\portcls.sys
+ 2008-04-13 17:34:20	49,152	-c--a-w	C:\WINDOWS\system32\dllcache\powercfg.exe
+ 2008-04-13 09:40:58	8,832	-c--a-w	C:\WINDOWS\system32\dllcache\powerfil.sys
+ 2008-04-13 17:33:40	17,408	-c--a-w	C:\WINDOWS\system32\dllcache\powrprof.dll
+ 2001-08-17 19:53:22	17,792	-c--a-w	C:\WINDOWS\system32\dllcache\ppa.sys
+ 2008-04-13 09:41:02	17,664	-c--a-w	C:\WINDOWS\system32\dllcache\ppa3.sys
+ 2008-04-13 17:33:40	578,560	-c--a-w	C:\WINDOWS\system32\dllcache\printui.dll
+ 2008-04-13 16:55:32	40,064	-c--a-w	C:\WINDOWS\system32\dllcache\processr.sys
+ 2008-04-13 17:33:40	27,648	-c--a-w	C:\WINDOWS\system32\dllcache\profmap.dll
+ 2008-04-13 17:34:20	109,568	-c--a-w	C:\WINDOWS\system32\dllcache\progman.exe
+ 2008-04-13 17:34:20	50,688	-c--a-w	C:\WINDOWS\system32\dllcache\proquota.exe
+ 2008-04-13 17:33:40	237,056	-c--a-w	C:\WINDOWS\system32\dllcache\provthrd.dll
+ 2008-04-13 17:34:20	9,728	-c--a-w	C:\WINDOWS\system32\dllcache\proxycfg.exe
+ 2008-04-13 17:33:40	23,040	-c--a-w	C:\WINDOWS\system32\dllcache\psapi.dll
+ 2008-04-13 17:33:40	98,816	-c--a-w	C:\WINDOWS\system32\dllcache\psbase.dll
+ 2008-04-13 09:56:40	69,120	-c--a-w	C:\WINDOWS\system32\dllcache\psched.sys
+ 2001-08-23 15:17:32	16,512	-c--a-w	C:\WINDOWS\system32\dllcache\pscr.sys
+ 2008-04-13 17:33:40	363,520	-c--a-w	C:\WINDOWS\system32\dllcache\psisdecd.dll
+ 2001-08-23 15:47:16	35,328	-c--a-w	C:\WINDOWS\system32\dllcache\psisload.dll
+ 2008-04-13 17:33:40	43,520	-c--a-w	C:\WINDOWS\system32\dllcache\pstorec.dll
+ 2008-04-13 17:33:40	34,304	-c--a-w	C:\WINDOWS\system32\dllcache\pstorsvc.dll
+ 2001-08-23 15:47:16	5,632	-c--a-w	C:\WINDOWS\system32\dllcache\ptpusb.dll
+ 2008-04-13 17:33:40	159,232	-c--a-w	C:\WINDOWS\system32\dllcache\ptpusd.dll
+ 2001-08-17 19:28:12	128,286	-c--a-w	C:\WINDOWS\system32\dllcache\ptserli.sys
+ 2001-08-17 19:28:14	112,574	-c--a-w	C:\WINDOWS\system32\dllcache\ptserlp.sys
+ 2001-08-17 19:28:14	130,942	-c--a-w	C:\WINDOWS\system32\dllcache\ptserlv.sys
+ 2008-04-13 17:33:40	7,680	-c--a-w	C:\WINDOWS\system32\dllcache\pwsdata.dll
+ 2008-04-13 17:33:40	151,040	-c--a-w	C:\WINDOWS\system32\dllcache\qagent.dll
+ 2008-04-13 17:33:40	293,376	-c--a-w	C:\WINDOWS\system32\dllcache\qagentrt.dll
+ 2008-04-13 17:33:40	237,568	-c--a-w	C:\WINDOWS\system32\dllcache\qasf.dll
+ 2008-04-13 17:33:40	192,512	-c--a-w	C:\WINDOWS\system32\dllcache\qcap.dll
+ 2008-04-13 17:33:40	62,464	-c--a-w	C:\WINDOWS\system32\dllcache\qcliprov.dll
+ 2008-04-13 17:33:40	279,040	-c--a-w	C:\WINDOWS\system32\dllcache\qdv.dll
+ 2008-04-13 17:33:40	387,072	-c--a-w	C:\WINDOWS\system32\dllcache\qdvd.dll
+ 2008-04-13 17:33:40	563,200	-c--a-w	C:\WINDOWS\system32\dllcache\qedit.dll
+ 2008-04-13 08:21:34	733,696	-c--a-w	C:\WINDOWS\system32\dllcache\qedwipes.dll
+ 2008-04-13 09:40:54	6,016	-c--a-w	C:\WINDOWS\system32\dllcache\qic157.sys
+ 2001-08-17 19:52:20	40,320	-c--a-w	C:\WINDOWS\system32\dllcache\ql1080.sys
+ 2001-08-17 19:52:16	33,152	-c--a-w	C:\WINDOWS\system32\dllcache\ql10wnt.sys
+ 2001-08-17 19:52:20	45,312	-c--a-w	C:\WINDOWS\system32\dllcache\ql12160.sys
+ 2001-08-17 19:52:16	40,448	-c--a-w	C:\WINDOWS\system32\dllcache\ql1240.sys
+ 2001-08-17 19:52:18	49,024	-c--a-w	C:\WINDOWS\system32\dllcache\ql1280.sys
+ 2008-04-13 17:33:40	409,088	-c--a-w	C:\WINDOWS\system32\dllcache\qmgr.dll
+ 2008-04-13 17:33:40	18,944	-c--a-w	C:\WINDOWS\system32\dllcache\qmgrprxy.dll
+ 2008-04-13 17:34:20	20,992	-c--a-w	C:\WINDOWS\system32\dllcache\qprocess.exe
+ 2008-04-13 17:33:40	1,294,336	-c--a-w	C:\WINDOWS\system32\dllcache\quartz.dll
+ 2008-04-13 17:33:40	1,440,768	-c--a-w	C:\WINDOWS\system32\dllcache\query.dll
+ 2008-04-13 17:33:40	76,800	-c--a-w	C:\WINDOWS\system32\dllcache\qutil.dll
+ 2001-08-17 19:53:32	3,328	-c--a-w	C:\WINDOWS\system32\dllcache\qv2kux.sys
+ 2001-08-23 15:47:16	41,984	-c--a-w	C:\WINDOWS\system32\dllcache\qvusd.dll
+ 2001-08-23 15:18:16	715,530	-c--a-w	C:\WINDOWS\system32\dllcache2mdmkxx.sys
+ 2008-04-13 17:33:40	43,520	-c--a-w	C:\WINDOWS\system32\dllcacheacpldlg.dll
+ 2008-04-13 09:41:24	20,736	-c--a-w	C:\WINDOWS\system32\dllcacheamdisk.sys
+ 2008-04-13 17:33:40	7,680	-c--a-w	C:\WINDOWS\system32\dllcacheasadhlp.dll
+ 2008-04-13 17:33:40	237,056	-c--a-w	C:\WINDOWS\system32\dllcacheasapi32.dll
+ 2008-04-13 17:33:40	88,576	-c--a-w	C:\WINDOWS\system32\dllcacheasauto.dll
+ 2008-04-13 17:33:40	79,872	-c--a-w	C:\WINDOWS\system32\dllcacheaschap.dll
+ 2008-04-13 17:33:40	685,568	-c--a-w	C:\WINDOWS\system32\dllcacheasdlg.dll
+ 2001-08-17 19:51:32	19,584	-c--a-w	C:\WINDOWS\system32\dllcacheasirda.sys
+ 2008-04-13 10:19:44	51,328	-c--a-w	C:\WINDOWS\system32\dllcacheasl2tp.sys
+ 2008-04-13 17:33:40	61,440	-c--a-w	C:\WINDOWS\system32\dllcacheasman.dll
+ 2008-04-13 17:33:40	186,368	-c--a-w	C:\WINDOWS\system32\dllcacheasmans.dll
+ 2008-04-13 17:34:20	57,344	-c--a-w	C:\WINDOWS\system32\dllcacheasphone.exe
+ 2008-04-13 17:33:40	210,944	-c--a-w	C:\WINDOWS\system32\dllcacheasppp.dll
+ 2008-04-13 09:57:34	41,472	-c--a-w	C:\WINDOWS\system32\dllcacheaspppoe.sys
+ 2008-04-13 10:19:50	48,384	-c--a-w	C:\WINDOWS\system32\dllcacheaspptp.sys
+ 2008-04-13 17:33:40	61,952	-c--a-w	C:\WINDOWS\system32\dllcacheasqec.dll
+ 2008-04-13 17:33:40	16,384	-c--a-w	C:\WINDOWS\system32\dllcacheassapi.dll
+ 2008-04-13 17:33:40	58,368	-c--a-w	C:\WINDOWS\system32\dllcacheastapi.dll
+ 2008-04-13 17:33:40	151,040	-c--a-w	C:\WINDOWS\system32\dllcacheastls.dll
+ 2008-04-13 17:33:40	102,912	-c--a-w	C:\WINDOWS\system32\dllcachecbdyctl.dll
+ 2008-04-13 17:34:20	35,840	-c--a-w	C:\WINDOWS\system32\dllcachecimlby.exe
+ 2008-04-13 17:34:20	23,040	-c--a-w	C:\WINDOWS\system32\dllcachecp.exe
+ 2008-04-13 10:28:40	175,744	-c--a-w	C:\WINDOWS\system32\dllcachedbss.sys
+ 2008-04-13 17:33:40	147,968	-c--a-w	C:\WINDOWS\system32\dllcachedchost.dll
+ 2008-04-13 17:34:20	62,976	-c--a-w	C:\WINDOWS\system32\dllcachedpclip.exe
+ 2008-04-13 17:34:54	92,424	-c--a-w	C:\WINDOWS\system32\dllcachedpdd.dll
+ 2008-04-13 09:32:52	196,224	-c--a-w	C:\WINDOWS\system32\dllcachedpdr.sys
+ 2008-04-13 17:33:40	19,968	-c--a-w	C:\WINDOWS\system32\dllcachedpsnd.dll
+ 2008-04-13 17:34:56	139,656	-c--a-w	C:\WINDOWS\system32\dllcachedpwd.sys
+ 2008-04-13 17:34:56	87,176	-c--a-w	C:\WINDOWS\system32\dllcachedpwsx.dll
+ 2008-04-13 17:34:20	13,824	-c--a-w	C:\WINDOWS\system32\dllcachedsaddin.exe
+ 2008-04-13 17:34:20	67,072	-c--a-w	C:\WINDOWS\system32\dllcachedshost.exe
+ 2008-04-13 09:23:44	13,776	-c--a-w	C:\WINDOWS\system32\dllcacheecagent.sys
+ 2008-04-13 07:52:34	3,352	-c--a-w	C:\WINDOWS\system32\dllcacheedir.exe
+ 2008-04-13 17:34:20	53,248	-c--a-w	C:\WINDOWS\system32\dllcacheeg.exe
+ 2008-04-13 17:33:40	49,664	-c--a-w	C:\WINDOWS\system32\dllcacheegapi.dll
+ 2008-04-13 17:34:20	153,088	-c--a-w	C:\WINDOWS\system32\dllcacheegedit.exe
+ 2008-04-13 17:33:40	59,904	-c--a-w	C:\WINDOWS\system32\dllcacheegsvc.dll
+ 2008-04-13 17:34:20	12,288	-c--a-w	C:\WINDOWS\system32\dllcacheegsvr32.exe
+ 2008-04-13 17:33:40	405,504	-c--a-w	C:\WINDOWS\system32\dllcacheegwizc.dll
+ 2008-04-13 17:33:40	61,952	-c--a-w	C:\WINDOWS\system32\dllcacheemotepg.dll
+ 2008-04-13 17:33:40	178,176	-c--a-w	C:\WINDOWS\system32\dllcacheepdrvfs.dll
+ 2001-08-23 15:47:16	86,097	-c--a-w	C:\WINDOWS\system32\dllcacheeslog32.dll
+ 2008-04-13 17:33:40	58,880	-c--a-w	C:\WINDOWS\system32\dllcacheesutils.dll
+ 2008-04-13 17:34:20	14,848	-c--a-w	C:\WINDOWS\system32\dllcacheexec.exe
+ 2008-04-13 09:46:34	59,136	-c--a-w	C:\WINDOWS\system32\dllcachefcomm.sys
+ 2008-04-13 17:33:40	290,304	-c--a-w	C:\WINDOWS\system32\dllcachehttpaa.dll
+ 2008-04-13 17:33:40	433,664	-c--a-w	C:\WINDOWS\system32\dllcacheiched20.dll
+ 2002-01-08 19:39:34	12,032	-c--a-w	C:\WINDOWS\system32\dllcacheio8drv.sys
+ 2002-01-08 19:39:34	12,032	-c--a-w	C:\WINDOWS\system32\dllcacheiodrv.sys
+ 2001-08-17 18:12:36	37,563	-c--a-w	C:\WINDOWS\system32\dllcachelnet5.sys
+ 2008-04-13 09:55:10	202,624	-c--a-w	C:\WINDOWS\system32\dllcachemcast.sys
+ 2008-04-13 09:56:50	30,592	-c--a-w	C:\WINDOWS\system32\dllcachendismp.sys
+ 2008-04-13 09:56:50	30,592	-c--a-w	C:\WINDOWS\system32\dllcachendismpx.sys
+ 2008-04-13 16:58:30	79,360	-c--a-w	C:\WINDOWS\system32\dllcacheocket.sys
+ 2008-04-13 17:33:40	4,096	-c--a-w	C:\WINDOWS\system32\dllcachepcref.dll
+ 2008-04-13 17:33:40	584,704	-c--a-w	C:\WINDOWS\system32\dllcachepcrt4.dll
+ 2008-04-13 17:33:40	399,360	-c--a-w	C:\WINDOWS\system32\dllcachepcss.dll
+ 2001-08-17 18:19:20	3,840	-c--a-w	C:\WINDOWS\system32\dllcachepfun.sys
+ 2008-04-13 17:33:40	61,440	-c--a-w	C:\WINDOWS\system32\dllcachercm.dll
+ 2008-04-13 08:37:58	208,384	-c--a-w	C:\WINDOWS\system32\dllcachesaenh.dll
+ 2008-04-13 17:34:20	15,872	-c--a-w	C:\WINDOWS\system32\dllcachesh.exe
+ 2008-04-13 17:33:40	40,960	-c--a-w	C:\WINDOWS\system32\dllcacheshx32.dll
+ 2001-08-23 15:47:16	10,240	-c--a-w	C:\WINDOWS\system32\dllcachesmgrstr.dll
+ 2008-04-13 17:33:40	18,944	-c--a-w	C:\WINDOWS\system32\dllcachesmps.dll
+ 2008-04-13 17:34:20	107,520	-c--a-w	C:\WINDOWS\system32\dllcachesnotify.exe
+ 2008-04-13 17:34:20	384,512	-c--a-w	C:\WINDOWS\system32\dllcachestrui.exe
+ 2008-04-13 17:33:40	92,672	-c--a-w	C:\WINDOWS\system32\dllcachesvpsp.dll
+ 2008-04-13 17:34:22	78,336	-c--a-w	C:\WINDOWS\system32\dllcachetcshare.exe
+ 2001-08-17 18:19:22	30,720	-c--a-w	C:\WINDOWS\system32\dllcachethwcls.sys
+ 2008-04-13 17:33:40	31,744	-c--a-w	C:\WINDOWS\system32\dllcachetipxmib.dll
+ 2001-08-17 18:12:40	19,017	-c--a-w	C:\WINDOWS\system32\dllcachetl8029.sys
+ 2008-04-13 07:35:40	20,992	-c--a-w	C:\WINDOWS\system32\dllcachetl8139.sys
+ 2008-04-13 17:33:40	44,032	-c--a-w	C:\WINDOWS\system32\dllcachetutils.dll
+ 2008-04-13 17:34:22	33,792	-c--a-w	C:\WINDOWS\system32\dllcacheundll32.exe
+ 2008-04-13 17:34:22	14,336	-c--a-w	C:\WINDOWS\system32\dllcacheunonce.exe
+ 2008-04-13 17:33:40	28,160	-c--a-w	C:\WINDOWS\system32\dllcachew001ext.dll
+ 2008-04-13 17:33:40	29,184	-c--a-w	C:\WINDOWS\system32\dllcachew330ext.dll
+ 2008-04-13 17:33:40	28,160	-c--a-w	C:\WINDOWS\system32\dllcachew430ext.dll
+ 2008-04-13 17:33:40	29,696	-c--a-w	C:\WINDOWS\system32\dllcachew450ext.dll
+ 2001-08-23 15:47:16	81,408	-c--a-w	C:\WINDOWS\system32\dllcachewia430.dll
+ 2001-08-23 15:47:16	83,968	-c--a-w	C:\WINDOWS\system32\dllcachewia450.dll
+ 2008-04-13 17:33:40	9,728	-c--a-w	C:\WINDOWS\system32\dllcachewnh.dll
+ 2008-04-13 17:33:40	397,056	-c--a-w	C:\WINDOWS\system32\dllcache\s3gnb.dll
+ 2008-04-13 07:34:34	166,912	-c--a-w	C:\WINDOWS\system32\dllcache\s3gnbm.sys
+ 2001-08-23 15:46:46	66,048	-c--a-w	C:\WINDOWS\system32\dllcache\s3legacy.dll
+ 2001-08-17 19:57:46	65,664	-c--a-w	C:\WINDOWS\system32\dllcache\s3legacy.sys
+ 2001-08-17 18:50:34	166,720	-c--a-w	C:\WINDOWS\system32\dllcache\s3m.sys
+ 2001-08-23 15:46:46	182,272	-c--a-w	C:\WINDOWS\system32\dllcache\s3mt3d.dll
+ 2001-08-17 18:50:40	41,216	-c--a-w	C:\WINDOWS\system32\dllcache\s3mt3d.sys
+ 2001-08-23 15:46:46	62,496	-c--a-w	C:\WINDOWS\system32\dllcache\s3mtrio.dll
+ 2001-08-23 15:46:46	210,496	-c--a-w	C:\WINDOWS\system32\dllcache\s3mvirge.dll
+ 2001-08-23 15:46:48	179,264	-c--a-w	C:\WINDOWS\system32\dllcache\s3sav3d.dll
+ 2001-08-17 18:50:22	61,504	-c--a-w	C:\WINDOWS\system32\dllcache\s3sav3dm.sys
+ 2001-08-23 15:46:48	198,400	-c--a-w	C:\WINDOWS\system32\dllcache\s3sav4.dll
+ 2001-08-17 18:50:28	77,824	-c--a-w	C:\WINDOWS\system32\dllcache\s3sav4m.sys
+ 2001-08-23 15:46:48	245,632	-c--a-w	C:\WINDOWS\system32\dllcache\s3savmx.dll
+ 2001-08-17 18:50:34	75,392	-c--a-w	C:\WINDOWS\system32\dllcache\s3savmxm.sys
+ 2008-04-13 17:33:40	43,520	-c--a-w	C:\WINDOWS\system32\dllcache\safrcdlg.dll
+ 2008-04-13 17:33:40	29,696	-c--a-w	C:\WINDOWS\system32\dllcache\safrdm.dll
+ 2008-04-13 17:33:40	45,568	-c--a-w	C:\WINDOWS\system32\dllcache\safrslv.dll
+ 2008-04-13 17:33:40	64,000	-c--a-w	C:\WINDOWS\system32\dllcache\samlib.dll
+ 2008-04-13 17:33:40	431,104	-c--a-w	C:\WINDOWS\system32\dllcache\samsrv.dll
+ 2008-04-13 17:33:40	741,376	-c--a-w	C:\WINDOWS\system32\dllcache\sapi.dll
+ 2008-04-13 17:34:22	13,824	-c--a-w	C:\WINDOWS\system32\dllcache\savedump.exe
+ 2008-04-13 17:33:40	270,848	-c--a-w	C:\WINDOWS\system32\dllcache\sbe.dll
+ 2008-04-13 17:33:40	159,232	-c--a-w	C:\WINDOWS\system32\dllcache\sbeio.dll
+ 2001-08-23 15:47:16	495,616	-c--a-w	C:\WINDOWS\system32\dllcache\sblfx.dll
+ 2008-04-13 09:40:50	43,904	-c--a-w	C:\WINDOWS\system32\dllcache\sbp2port.sys
+ 2008-04-13 17:33:42	71,168	-c--a-w	C:\WINDOWS\system32\dllcache\scarddlg.dll
+ 2008-04-13 17:34:22	100,352	-c--a-w	C:\WINDOWS\system32\dllcache\scardsvr.exe
+ 2001-08-23 15:20:20	24,064	-c--a-w	C:\WINDOWS\system32\dllcache\sccmn50m.sys
+ 2001-08-17 19:51:14	23,936	-c--a-w	C:\WINDOWS\system32\dllcache\sccmusbm.sys
+ 2008-04-13 17:33:42	171,520	-c--a-w	C:\WINDOWS\system32\dllcache\sccsccp.dll
+ 2008-04-13 17:33:42	187,392	-c--a-w	C:\WINDOWS\system32\dllcache\scecli.dll
+ 2008-04-13 17:33:42	329,728	-c--a-w	C:\WINDOWS\system32\dllcache\scesrv.dll
+ 2008-04-13 17:33:42	144,384	-c--a-w	C:\WINDOWS\system32\dllcache\schannel.dll
+ 2008-04-13 17:33:42	194,560	-c--a-w	C:\WINDOWS\system32\dllcache\schedsvc.dll
+ 2008-04-13 17:33:42	22,016	-c--a-w	C:\WINDOWS\system32\dllcache\sclgntfy.dll
+ 2001-08-23 15:20:30	16,768	-c--a-w	C:\WINDOWS\system32\dllcache\scmstcs.sys
+ 2001-08-23 15:20:32	17,536	-c--a-w	C:\WINDOWS\system32\dllcache\scr111.sys
+ 2008-04-13 17:34:22	36,352	-c--a-w	C:\WINDOWS\system32\dllcache\scrcons.exe
+ 2008-04-13 17:33:42	217,600	-c--a-w	C:\WINDOWS\system32\dllcache\script.dll
+ 2008-04-13 17:33:42	201,216	-c--a-w	C:\WINDOWS\system32\dllcache\scripta.dll
+ 2008-04-13 17:34:34	9,216	-c--a-w	C:\WINDOWS\system32\dllcache\scrnsave.scr
+ 2008-04-13 17:33:42	180,224	-c--a-w	C:\WINDOWS\system32\dllcache\scrobj.dll
+ 2008-04-13 17:33:42	172,032	-c--a-w	C:\WINDOWS\system32\dllcache\scrrun.dll
+ 2008-04-13 09:40:32	96,384	-c--a-w	C:\WINDOWS\system32\dllcache\scsiport.sys
+ 2001-08-17 19:52:34	11,648	-c--a-w	C:\WINDOWS\system32\dllcache\scsiprnt.sys
+ 2008-04-13 09:45:34	11,520	-c--a-w	C:\WINDOWS\system32\dllcache\scsiscan.sys
+ 2008-04-13 17:34:22	130,560	-c--a-w	C:\WINDOWS\system32\dllcache\sctasks.exe
+ 2008-04-13 17:34:22	78,848	-c--a-w	C:\WINDOWS\system32\dllcache\sdbinst.exe
+ 2008-04-13 09:36:46	79,232	-c--a-w	C:\WINDOWS\system32\dllcache\sdbus.sys
+ 2008-04-13 17:33:42	29,184	-c--a-w	C:\WINDOWS\system32\dllcache\sdhcinst.dll
+ 2001-08-17 19:53:10	6,912	-c--a-w	C:\WINDOWS\system32\dllcache\seaddsmc.sys
+ 2008-04-13 17:34:22	19,968	-c--a-w	C:\WINDOWS\system32\dllcache\secedit.exe
+ 2008-04-13 17:33:42	18,944	-c--a-w	C:\WINDOWS\system32\dllcache\seclogon.dll
+ 2006-12-30 17:27:08	4,569	-c--a-w	C:\WINDOWS\system32\dllcache\secupd.dat
+ 2008-04-13 17:33:42	56,320	-c--a-w	C:\WINDOWS\system32\dllcache\secur32.dll
+ 2008-04-13 17:33:42	5,632	-c--a-w	C:\WINDOWS\system32\dllcache\security.dll
+ 2008-04-13 17:33:42	29,696	-c--a-w	C:\WINDOWS\system32\dllcache\sendcmsg.dll
+ 2008-04-13 17:33:42	55,296	-c--a-w	C:\WINDOWS\system32\dllcache\sendmail.dll
+ 2008-04-13 17:33:42	39,424	-c--a-w	C:\WINDOWS\system32\dllcache\sens.dll
+ 2008-04-13 17:33:42	7,168	-c--a-w	C:\WINDOWS\system32\dllcache\sensapi.dll
+ 2008-04-13 17:33:42	221,696	-c--a-w	C:\WINDOWS\system32\dllcache\seo.dll
+ 2008-04-13 09:40:14	15,744	-c--a-w	C:\WINDOWS\system32\dllcache\serenum.sys
+ 2008-04-13 17:00:10	66,048	-c--a-w	C:\WINDOWS\system32\dllcache\serial.sys
+ 2001-08-23 15:20:50	18,432	-c--a-w	C:\WINDOWS\system32\dllcache\sermouse.sys
+ 2001-08-23 15:20:50	6,912	-c--a-w	C:\WINDOWS\system32\dllcache\serscan.sys
+ 2008-04-13 17:33:42	56,320	-c--a-w	C:\WINDOWS\system32\dllcache\servdeps.dll
+ 2008-04-13 17:34:22	109,056	-c--a-w	C:\WINDOWS\system32\dllcache\services.exe
+ 2008-04-13 17:34:22	142,848	-c--a-w	C:\WINDOWS\system32\dllcache\sessmgr.exe
+ 2008-04-13 17:34:22	32,768	-c--a-w	C:\WINDOWS\system32\dllcache\sethc.exe
+ 2008-04-13 17:34:22	23,040	-c--a-w	C:\WINDOWS\system32\dllcache\setup.exe
+ 2008-04-13 17:34:22	73,728	-c--a-w	C:\WINDOWS\system32\dllcache\setup50.exe
+ 2008-04-13 17:33:42	1,005,056	-c--a-w	C:\WINDOWS\system32\dllcache\setupapi.dll
+ 2008-04-13 17:34:22	32,768	-c--a-w	C:\WINDOWS\system32\dllcache\setupn.exe
+ 2008-04-13 17:33:42	101,888	-c--a-w	C:\WINDOWS\system32\dllcache\setupqry.dll
+ 2008-04-13 17:33:42	5,120	-c--a-w	C:\WINDOWS\system32\dllcache\sfc.dll
+ 2008-04-13 17:33:42	142,336	-c--a-w	C:\WINDOWS\system32\dllcache\sfc_os.dll
+ 2008-04-13 17:33:42	1,571,840	-c--a-w	C:\WINDOWS\system32\dllcache\sfcfiles.dll
+ 2008-04-13 09:40:48	11,904	-c--a-w	C:\WINDOWS\system32\dllcache\sffdisk.sys
+ 2008-04-13 09:40:48	11,008	-c--a-w	C:\WINDOWS\system32\dllcache\sffp_sd.sys
+ 2008-04-13 09:40:50	11,392	-c--a-w	C:\WINDOWS\system32\dllcache\sfloppy.sys
+ 2001-08-17 18:19:34	36,480	-c--a-w	C:\WINDOWS\system32\dllcache\sfmanm.sys
+ 2001-08-23 15:46:48	386,560	-c--a-w	C:\WINDOWS\system32\dllcache\sgiul50.dll
+ 2001-08-17 18:51:04	98,080	-c--a-w	C:\WINDOWS\system32\dllcache\sgiulnt5.sys
+ 2001-07-21 20:29:20	18,400	-c--a-w	C:\WINDOWS\system32\dllcache\sgsmld.sys
+ 2001-08-23 15:21:04	161,664	-c--a-w	C:\WINDOWS\system32\dllcache\sgsmusb.sys
+ 2008-04-13 17:01:00	572,416	-c--a-w	C:\WINDOWS\system32\dllcache\shdoclc.dll
- 2006-09-23 11:12:50	1,497,088	-c----w	C:\WINDOWS\system32\dllcache\shdocvw.dll
+ 2008-04-13 17:33:42	1,499,136	-c--a-w	C:\WINDOWS\system32\dllcache\shdocvw.dll
+ 2008-04-13 17:33:42	8,517,632	-c--a-w	C:\WINDOWS\system32\dllcache\shell32.dll
+ 2008-04-13 17:33:42	25,088	-c--a-w	C:\WINDOWS\system32\dllcache\shfolder.dll
+ 2008-04-13 17:33:42	68,096	-c--a-w	C:\WINDOWS\system32\dllcache\shgina.dll
+ 2008-04-13 17:33:42	65,024	-c--a-w	C:\WINDOWS\system32\dllcache\shimeng.dll
+ 2008-04-13 17:33:42	440,320	-c--a-w	C:\WINDOWS\system32\dllcache\shimgvw.dll
- 2006-09-23 11:12:50	474,112	-c----w	C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2008-04-13 17:33:42	474,624	-c--a-w	C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2008-04-13 17:34:22	45,056	-c--a-w	C:\WINDOWS\system32\dllcache\shmgrate.exe
+ 2008-04-13 17:34:22	78,848	-c--a-w	C:\WINDOWS\system32\dllcache\shrpubw.exe
+ 2008-04-13 17:33:42	28,160	-c--a-w	C:\WINDOWS\system32\dllcache\shscrap.dll
+ 2008-04-13 17:33:42	135,680	-c--a-w	C:\WINDOWS\system32\dllcache\shsvcs.dll
+ 2008-04-13 17:33:42	20,536	-c--a-w	C:\WINDOWS\system32\dllcache\shtml.dll
+ 2008-04-13 17:34:22	16,437	-c--a-w	C:\WINDOWS\system32\dllcache\shtml.exe
+ 2008-04-13 17:34:22	20,480	-c--a-w	C:\WINDOWS\system32\dllcache\shutdown.exe
+ 2008-04-13 17:33:42	13,824	-c--a-w	C:\WINDOWS\system32\dllcache\sigtab.dll
+ 2008-04-13 17:34:22	71,168	-c--a-w	C:\WINDOWS\system32\dllcache\sigverif.exe
+ 2008-04-13 17:33:42	3,901	-c--a-w	C:\WINDOWS\system32\dllcache\siint5.dll
+ 2001-08-17 18:50:46	101,760	-c--a-w	C:\WINDOWS\system32\dllcache\sis300ip.sys
+ 2001-08-23 15:46:48	252,032	-c--a-w	C:\WINDOWS\system32\dllcache\sis300iv.dll
+ 2001-08-17 18:50:56	68,608	-c--a-w	C:\WINDOWS\system32\dllcache\sis6306p.sys
+ 2001-08-23 15:46:48	150,144	-c--a-w	C:\WINDOWS\system32\dllcache\sis6306v.dll
+ 2008-04-13 09:36:40	40,960	-c--a-w	C:\WINDOWS\system32\dllcache\sisagp.sys
+ 2001-08-17 18:50:48	104,064	-c--a-w	C:\WINDOWS\system32\dllcache\sisgrp.sys
+ 2001-08-23 15:47:18	238,592	-c--a-w	C:\WINDOWS\system32\dllcache\sisgrv.dll
+ 2008-04-13 07:35:40	32,768	-c--a-w	C:\WINDOWS\system32\dllcache\sisnic.sys
+ 2001-08-17 18:50:56	50,432	-c--a-w	C:\WINDOWS\system32\dllcache\sisv.sys
+ 2001-08-23 15:46:48	157,696	-c--a-w	C:\WINDOWS\system32\dllcache\sisv256.dll
+ 2001-08-23 15:21:34	95,114	-c--a-w	C:\WINDOWS\system32\dllcache\sk98xwin.sys
+ 2008-04-13 17:34:22	26,112	-c--a-w	C:\WINDOWS\system32\dllcache\skeys.exe
+ 2001-08-17 18:12:52	91,294	-c--a-w	C:\WINDOWS\system32\dllcache\skfpwin.sys
+ 2008-04-13 07:35:40	63,547	-c--a-w	C:\WINDOWS\system32\dllcache\sla30nd5.sys
+ 2008-04-13 17:33:42	25,600	-c--a-w	C:\WINDOWS\system32\dllcache\slayerxp.dll
+ 2008-04-13 08:38:00	306,176	-c--a-w	C:\WINDOWS\system32\dllcache\slbcsp.dll
+ 2008-04-13 17:33:42	98,304	-c--a-w	C:\WINDOWS\system32\dllcache\slbiop.dll
+ 2008-04-13 17:33:42	73,832	-c--a-w	C:\WINDOWS\system32\dllcache\slcoinst.dll
+ 2008-04-13 17:33:42	286,792	-c--a-w	C:\WINDOWS\system32\dllcache\slextspk.dll
+ 2008-04-13 17:33:42	188,508	-c--a-w	C:\WINDOWS\system32\dllcache\slgen.dll
+ 2008-04-13 09:46:24	11,136	-c--a-w	C:\WINDOWS\system32\dllcache\slip.sys
+ 2008-04-13 09:23:44	129,535	-c--a-w	C:\WINDOWS\system32\dllcache\slnt7554.sys
+ 2008-04-13 09:23:46	404,990	-c--a-w	C:\WINDOWS\system32\dllcache\slntamr.sys
+ 2008-04-13 09:23:48	95,424	-c--a-w	C:\WINDOWS\system32\dllcache\slnthal.sys
+ 2008-04-13 17:34:24	32,866	-c--a-w	C:\WINDOWS\system32\dllcache\slrundll.exe
+ 2008-04-13 17:34:24	73,796	-c--a-w	C:\WINDOWS\system32\dllcache\slserv.exe
+ 2008-04-13 09:23:48	13,240	-c--a-w	C:\WINDOWS\system32\dllcache\slwdmsup.sys
+ 2001-08-23 15:47:18	28,160	-c--a-w	C:\WINDOWS\system32\dllcache\sm91w.dll
+ 2001-08-23 15:47:18	28,672	-c--a-w	C:\WINDOWS\system32\dllcache\sma0w.dll
+ 2001-08-23 15:47:18	33,792	-c--a-w	C:\WINDOWS\system32\dllcache\smb0w.dll
+ 2001-08-23 15:47:18	45,568	-c--a-w	C:\WINDOWS\system32\dllcache\smb3w.dll
+ 2008-04-13 09:36:36	5,888	-c--a-w	C:\WINDOWS\system32\dllcache\smbali.sys
+ 2008-04-13 09:36:34	16,000	-c--a-w	C:\WINDOWS\system32\dllcache\smbbatt.sys
+ 2008-04-13 09:36:34	6,912	-c--a-w	C:\WINDOWS\system32\dllcache\smbclass.sys
+ 2001-08-17 19:57:56	6,784	-c--a-w	C:\WINDOWS\system32\dllcache\smbhc.sys
+ 2008-04-13 17:34:24	8,192	-c--a-w	C:\WINDOWS\system32\dllcache\smbinst.exe
+ 2001-08-17 18:12:46	24,576	-c--a-w	C:\WINDOWS\system32\dllcache\smc8000n.sys

locdog · Answer

+ 2001-08-23 15:21:42	36,937	-c--a-w	C:\WINDOWS\system32\dllcache\smcirda.sys
+ 2001-08-17 18:12:48	25,034	-c--a-w	C:\WINDOWS\system32\dllcache\smcpwr2n.sys
+ 2008-04-13 17:34:24	236,544	-c--a-w	C:\WINDOWS\system32\dllcache\smi2smir.exe
+ 2001-08-23 15:46:48	147,200	-c--a-w	C:\WINDOWS\system32\dllcache\smidispb.dll
+ 2001-08-17 18:51:00	58,368	-c--a-w	C:\WINDOWS\system32\dllcache\smiminib.sys
+ 2008-04-13 17:33:42	370,176	-c--a-w	C:\WINDOWS\system32\dllcache\smlogcfg.dll
+ 2008-04-13 17:34:24	93,184	-c--a-w	C:\WINDOWS\system32\dllcache\smlogsvc.exe
+ 2008-04-13 17:34:24	50,688	-c--a-w	C:\WINDOWS\system32\dllcache\smss.exe
+ 2008-04-13 17:33:42	189,440	-c--a-w	C:\WINDOWS\system32\dllcache\smtpadm.dll
+ 2008-04-13 17:33:42	10,752	-c--a-w	C:\WINDOWS\system32\dllcache\smtpapi.dll
+ 2008-04-13 17:33:42	2,134,528	-c--a-w	C:\WINDOWS\system32\dllcache\smtpsnap.dll
+ 2008-04-13 17:33:42	466,432	-c--a-w	C:\WINDOWS\system32\dllcache\smtpsvc.dll
+ 2008-04-13 17:34:24	133,120	-c--a-w	C:\WINDOWS\system32\dllcache\sndrec32.exe
+ 2008-04-13 17:33:42	34,816	-c--a-w	C:\WINDOWS\system32\dllcache\sniffpol.dll
+ 2008-04-13 17:34:24	33,280	-c--a-w	C:\WINDOWS\system32\dllcache\snmp.exe
+ 2008-04-13 17:33:42	18,944	-c--a-w	C:\WINDOWS\system32\dllcache\snmpapi.dll
+ 2008-04-13 17:33:42	259,072	-c--a-w	C:\WINDOWS\system32\dllcache\snmpcl.dll
+ 2008-04-13 17:33:42	358,400	-c--a-w	C:\WINDOWS\system32\dllcache\snmpincl.dll
+ 2008-04-13 17:33:42	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\snmpmib.dll
+ 2008-04-13 17:33:42	188,416	-c--a-w	C:\WINDOWS\system32\dllcache\snmpsmir.dll
+ 2008-04-13 17:33:42	184,320	-c--a-w	C:\WINDOWS\system32\dllcache\snmpsnap.dll
+ 2008-04-13 17:33:42	39,936	-c--a-w	C:\WINDOWS\system32\dllcache\snmpthrd.dll
+ 2008-04-13 17:34:24	8,704	-c--a-w	C:\WINDOWS\system32\dllcache\snmptrap.exe
+ 2001-08-17 19:53:14	7,040	-c--a-w	C:\WINDOWS\system32\dllcache\snyaitmc.sys
+ 2008-04-13 17:33:42	130,048	-c--a-w	C:\WINDOWS\system32\dllcache\softkbd.dll
+ 2008-04-13 09:40:54	7,552	-c--a-w	C:\WINDOWS\system32\dllcache\sonyait.sys
+ 2008-04-13 09:46:08	25,344	-c--a-w	C:\WINDOWS\system32\dllcache\sonydcam.sys
+ 2001-08-17 19:53:04	9,600	-c--a-w	C:\WINDOWS\system32\dllcache\sonymc.sys
+ 2001-08-17 18:51:20	20,752	-c--a-w	C:\WINDOWS\system32\dllcache\sonync.sys
+ 2001-08-23 15:47:18	114,688	-c--a-w	C:\WINDOWS\system32\dllcache\sonypi.dll
+ 2001-08-17 18:51:22	37,040	-c--a-w	C:\WINDOWS\system32\dllcache\sonypi.sys
+ 2001-08-17 19:56:16	7,552	-c--a-w	C:\WINDOWS\system32\dllcache\sonypvu1.sys
+ 2008-04-13 17:34:24	26,112	-c--a-w	C:\WINDOWS\system32\dllcache\sort.exe
+ 2001-08-17 20:07:44	19,072	-c--a-w	C:\WINDOWS\system32\dllcache\sparrow.sys
+ 2001-08-23 15:47:18	106,584	-c--a-w	C:\WINDOWS\system32\dllcache\spdports.dll
+ 2001-08-17 19:51:00	61,824	-c--a-w	C:\WINDOWS\system32\dllcache\speed.sys
+ 2008-04-13 07:43:20	62,976	-c--a-w	C:\WINDOWS\system32\dllcache\spgrmr.dll
+ 2008-04-13 17:34:24	539,136	-c--a-w	C:\WINDOWS\system32\dllcache\spider.exe
+ 2008-04-13 09:43:32	12,800	-c--a-w	C:\WINDOWS\system32\dllcache\spiisupd.exe
+ 2008-04-13 09:45:08	6,272	-c--a-w	C:\WINDOWS\system32\dllcache\splitter.sys
+ 2002-01-08 19:39:34	69,632	-c--a-w	C:\WINDOWS\system32\dllcache\spnike.dll
+ 2008-04-13 17:34:24	11,264	-c--a-w	C:\WINDOWS\system32\dllcache\spnpinst.exe
+ 2008-04-13 17:33:42	75,264	-c--a-w	C:\WINDOWS\system32\dllcache\spoolss.dll
+ 2008-04-13 17:34:24	57,856	-c--a-w	C:\WINDOWS\system32\dllcache\spoolsv.exe
+ 2002-01-08 19:39:34	70,656	-c--a-w	C:\WINDOWS\system32\dllcache\sprio600.dll
+ 2002-01-08 19:39:34	72,192	-c--a-w	C:\WINDOWS\system32\dllcache\sprio800.dll
+ 2008-04-13 09:35:22	197,632	-c--a-w	C:\WINDOWS\system32\dllcache\sprs040c.dll
+ 2008-04-13 09:36:48	2,986,496	-c--a-w	C:\WINDOWS\system32\dllcache\sprt040c.dll
+ 2008-04-13 09:39:18	778,752	-c--a-w	C:\WINDOWS\system32\dllcache\spru040c.dll
+ 2008-04-13 17:33:48	272,384	-c--a-w	C:\WINDOWS\system32\dllcache\sptip.dll
+ 2001-08-23 15:47:18	24,660	-c--a-w	C:\WINDOWS\system32\dllcache\spxupchk.dll
+ 2008-04-13 17:33:48	151,552	-c--a-w	C:\WINDOWS\system32\dllcache\sqldb20.dll
+ 2008-04-13 17:33:48	462,848	-c--a-w	C:\WINDOWS\system32\dllcache\sqlqp20.dll
+ 2008-04-13 17:33:48	110,592	-c--a-w	C:\WINDOWS\system32\dllcache\sqlse20.dll
+ 2008-04-13 17:33:48	180,800	-c--a-w	C:\WINDOWS\system32\dllcache\sqlunirl.dll
+ 2008-04-13 17:33:48	217,088	-c--a-w	C:\WINDOWS\system32\dllcache\sqlxmlx.dll
+ 2008-04-13 17:10:04	73,600	-c--a-w	C:\WINDOWS\system32\dllcache\sr.sys
+ 2008-04-13 17:33:48	58,434	-c--a-w	C:\WINDOWS\system32\dllcache\srchctls.dll
+ 2008-04-13 17:33:48	727,102	-c--a-w	C:\WINDOWS\system32\dllcache\srchui.dll
+ 2008-04-13 17:33:48	67,584	-c--a-w	C:\WINDOWS\system32\dllcache\srclient.dll
+ 2008-04-13 17:33:48	241,664	-c--a-w	C:\WINDOWS\system32\dllcache\srrstr.dll
+ 2008-04-13 17:33:48	171,520	-c--a-w	C:\WINDOWS\system32\dllcache\srsvc.dll
+ 2001-08-23 15:47:20	99,840	-c--a-w	C:\WINDOWS\system32\dllcache\srusd.dll
+ 2008-04-13 10:15:12	334,848	-c--a-w	C:\WINDOWS\system32\dllcache\srv.sys
+ 2008-04-13 17:33:48	96,768	-c--a-w	C:\WINDOWS\system32\dllcache\srvsvc.dll
+ 2001-08-17 18:11:08	48,736	-c--a-w	C:\WINDOWS\system32\dllcache\srwlnd5.sys
+ 2008-04-13 17:34:34	708,608	-c--a-w	C:\WINDOWS\system32\dllcache\ss3dfo.scr
+ 2008-04-13 17:34:34	19,968	-c--a-w	C:\WINDOWS\system32\dllcache\ssbezier.scr
+ 2008-04-13 17:33:48	34,816	-c--a-w	C:\WINDOWS\system32\dllcache\ssdpapi.dll
+ 2008-04-13 17:33:48	71,680	-c--a-w	C:\WINDOWS\system32\dllcache\ssdpsrv.dll
+ 2008-04-13 17:34:34	393,216	-c--a-w	C:\WINDOWS\system32\dllcache\ssflwbox.scr
+ 2008-04-13 17:33:48	45,568	-c--a-w	C:\WINDOWS\system32\dllcache\ssinc51.dll
+ 2008-04-13 17:34:34	20,992	-c--a-w	C:\WINDOWS\system32\dllcache\ssmarque.scr
+ 2008-04-13 17:34:34	47,104	-c--a-w	C:\WINDOWS\system32\dllcache\ssmypics.scr
+ 2008-04-13 17:34:34	18,944	-c--a-w	C:\WINDOWS\system32\dllcache\ssmyst.scr
+ 2008-04-13 17:33:48	46,592	-c--a-w	C:\WINDOWS\system32\dllcache\sspifilt.dll
+ 2008-04-13 17:34:34	610,304	-c--a-w	C:\WINDOWS\system32\dllcache\sspipes.scr
+ 2008-04-13 17:34:34	14,336	-c--a-w	C:\WINDOWS\system32\dllcache\ssstars.scr
+ 2008-04-13 17:34:34	684,032	-c--a-w	C:\WINDOWS\system32\dllcache\sstext3d.scr
+ 2008-04-13 17:33:48	33,280	-c--a-w	C:\WINDOWS\system32\dllcache\sstub.dll
+ 2008-04-13 17:33:48	8,192	-c--a-w	C:\WINDOWS\system32\dllcache\staxmem.dll
+ 2008-04-13 17:33:48	59,392	-c--a-w	C:\WINDOWS\system32\dllcache\stclient.dll
+ 2001-08-23 14:57:46	17,024	-c--a-w	C:\WINDOWS\system32\dllcache\stcusb.sys
+ 2008-04-13 17:33:48	86,528	-c--a-w	C:\WINDOWS\system32\dllcache\stdprov.dll
+ 2008-04-13 17:33:48	68,608	-c--a-w	C:\WINDOWS\system32\dllcache\sti.dll
+ 2008-04-13 17:33:48	138,240	-c--a-w	C:\WINDOWS\system32\dllcache\sti_ci.dll
+ 2008-04-13 17:34:24	14,848	-c--a-w	C:\WINDOWS\system32\dllcache\stimon.exe
+ 2001-08-23 14:57:58	286,848	-c--a-w	C:\WINDOWS\system32\dllcache\stlnata.sys
+ 2001-08-23 15:47:20	53,248	-c--a-w	C:\WINDOWS\system32\dllcache\stlncoin.dll
+ 2001-08-23 15:47:20	155,648	-c--a-w	C:\WINDOWS\system32\dllcache\stlnprop.dll
+ 2008-04-13 17:33:48	122,368	-c--a-w	C:\WINDOWS\system32\dllcache\stobject.dll
+ 2008-04-13 17:33:48	76,800	-c--a-w	C:\WINDOWS\system32\dllcache\storprop.dll
+ 2008-04-13 09:45:16	49,408	-c--a-w	C:\WINDOWS\system32\dllcache\stream.sys
+ 2002-01-08 19:39:34	8,192	-c--a-w	C:\WINDOWS\system32\dllcache\streamci.dll
+ 2008-04-13 09:46:22	15,232	-c--a-w	C:\WINDOWS\system32\dllcache\streamip.sys
+ 2008-04-13 17:33:48	75,776	-c--a-w	C:\WINDOWS\system32\dllcache\strmfilt.dll
+ 2008-04-13 17:33:48	46,592	-c--a-w	C:\WINDOWS\system32\dllcache\svcext51.dll
+ 2008-04-13 17:34:24	14,336	-c--a-w	C:\WINDOWS\system32\dllcache\svchost.exe
+ 2001-08-23 15:47:20	41,472	-c--a-w	C:\WINDOWS\system32\dllcache\sw_effct.dll
+ 2001-08-23 15:47:20	53,760	-c--a-w	C:\WINDOWS\system32\dllcache\sw_wheel.dll
+ 2008-04-13 09:39:54	4,352	-c--a-w	C:\WINDOWS\system32\dllcache\swenum.sys
+ 2008-04-13 09:45:10	56,576	-c--a-w	C:\WINDOWS\system32\dllcache\swmidi.sys
+ 2001-08-23 15:47:20	10,240	-c--a-w	C:\WINDOWS\system32\dllcache\swpdflt2.dll
+ 2001-08-23 15:47:20	10,240	-c--a-w	C:\WINDOWS\system32\dllcache\swpidflt.dll
+ 2001-08-17 20:02:56	3,968	-c--a-w	C:\WINDOWS\system32\dllcache\swusbflt.sys
+ 2001-08-17 19:50:58	103,936	-c--a-w	C:\WINDOWS\system32\dllcache\sx.sys
+ 2001-08-23 15:47:20	94,293	-c--a-w	C:\WINDOWS\system32\dllcache\sxports.dll
+ 2008-04-13 17:33:48	716,800	-c--a-w	C:\WINDOWS\system32\dllcache\sxs.dll
+ 2001-08-17 20:07:40	28,384	-c--a-w	C:\WINDOWS\system32\dllcache\sym_hi.sys
+ 2001-08-17 20:07:42	30,688	-c--a-w	C:\WINDOWS\system32\dllcache\sym_u3.sys
+ 2001-08-17 20:07:34	16,256	-c--a-w	C:\WINDOWS\system32\dllcache\symc810.sys
+ 2001-08-17 20:07:36	32,640	-c--a-w	C:\WINDOWS\system32\dllcache\symc8xx.sys
+ 2008-04-13 17:33:48	57,856	-c--a-w	C:\WINDOWS\system32\dllcache\synceng.dll
+ 2008-04-13 17:33:48	197,120	-c--a-w	C:\WINDOWS\system32\dllcache\syncui.dll
+ 2008-04-13 10:15:56	60,800	-c--a-w	C:\WINDOWS\system32\dllcache\sysaudio.sys
+ 2008-04-13 17:34:24	74,240	-c--a-w	C:\WINDOWS\system32\dllcache\sysinfo.exe
+ 2008-04-13 17:33:48	193,536	-c--a-w	C:\WINDOWS\system32\dllcache\sysmod.dll
+ 2008-04-13 17:33:48	173,568	-c--a-w	C:\WINDOWS\system32\dllcache\sysmoda.dll
+ 2008-04-13 17:34:26	107,520	-c--a-w	C:\WINDOWS\system32\dllcache\sysocmgr.exe
+ 2008-04-13 17:33:48	1,013,248	-c--a-w	C:\WINDOWS\system32\dllcache\syssetup.dll
+ 2008-04-13 17:33:48	117,760	-c--a-w	C:\WINDOWS\system32\dllcache	2embed.dll
+ 2001-08-23 15:46:48	172,768	-c--a-w	C:\WINDOWS\system32\dllcache	2r4disp.dll
+ 2001-08-17 18:50:12	36,640	-c--a-w	C:\WINDOWS\system32\dllcache	2r4mini.sys
+ 2008-04-13 17:33:48	34,304	-c--a-w	C:\WINDOWS\system32\dllcache	abletoc.dll
+ 2001-08-17 19:52:54	7,040	-c--a-w	C:\WINDOWS\system32\dllcache	andqic.sys
+ 2008-04-13 09:40:52	14,976	-c--a-w	C:\WINDOWS\system32\dllcache	ape.sys
+ 2008-04-13 17:33:48	860,160	-c--a-w	C:\WINDOWS\system32\dllcache	api3.dll
+ 2008-04-13 17:33:48	181,760	-c--a-w	C:\WINDOWS\system32\dllcache	api32.dll
+ 2008-04-13 17:33:48	249,856	-c--a-w	C:\WINDOWS\system32\dllcache	apisrv.dll
+ 2008-04-13 17:34:26	78,336	-c--a-w	C:\WINDOWS\system32\dllcache	askkill.exe
+ 2008-04-13 17:34:26	79,872	-c--a-w	C:\WINDOWS\system32\dllcache	asklist.exe
+ 2008-04-13 17:34:26	143,360	-c--a-w	C:\WINDOWS\system32\dllcache	askmgr.exe
+ 2001-08-17 19:49:46	30,464	-c--a-w	C:\WINDOWS\system32\dllcache	batm155.sys
+ 2008-04-13 10:20:18	361,344	-c--a-w	C:\WINDOWS\system32\dllcache	cpip.sys
+ 2008-04-13 10:00:04	225,664	-c--a-w	C:\WINDOWS\system32\dllcache	cpip6.sys
+ 2008-04-13 17:33:48	14,848	-c--a-w	C:\WINDOWS\system32\dllcache	cpmib.dll
+ 2008-04-13 17:33:48	46,592	-c--a-w	C:\WINDOWS\system32\dllcache	cpmon.dll
+ 2008-04-13 17:33:48	47,104	-c--a-w	C:\WINDOWS\system32\dllcache	cpmonui.dll
+ 2008-04-13 17:34:26	32,827	-c--a-w	C:\WINDOWS\system32\dllcache	cptest.exe
+ 2007-03-28 03:53:14	16,384	-c--a-w	C:\WINDOWS\system32\dllcache	cptsat.dll
+ 2008-04-13 10:00:06	19,072	-c--a-w	C:\WINDOWS\system32\dllcache	di.sys
+ 2001-08-17 18:13:00	37,961	-c--a-w	C:\WINDOWS\system32\dllcache	dk100b.sys
+ 2001-08-17 18:13:00	17,129	-c--a-w	C:\WINDOWS\system32\dllcache	dkcd31.sys
+ 2008-04-13 17:34:54	12,040	-c--a-w	C:\WINDOWS\system32\dllcache	dpipe.sys
+ 2008-04-13 17:34:54	21,896	-c--a-w	C:\WINDOWS\system32\dllcache	dtcp.sys
+ 2008-04-13 17:34:26	78,336	-c--a-w	C:\WINDOWS\system32\dllcache	elnet.exe
+ 2008-04-13 17:34:54	40,840	-c--a-w	C:\WINDOWS\system32\dllcache	ermdd.sys
+ 2008-04-13 17:33:48	358,912	-c--a-w	C:\WINDOWS\system32\dllcache	ermmgr.dll
+ 2008-04-13 17:33:48	297,984	-c--a-w	C:\WINDOWS\system32\dllcache	ermsrv.dll
+ 2008-04-13 09:40:52	149,376	-c--a-w	C:\WINDOWS\system32\dllcache	ffsport.sys
+ 2001-08-23 15:46:48	81,408	-c--a-w	C:\WINDOWS\system32\dllcache	giul50.dll
+ 2001-08-17 18:51:10	138,528	-c--a-w	C:\WINDOWS\system32\dllcache	giulnt5.sys
+ 2008-04-13 17:33:48	391,168	-c--a-w	C:\WINDOWS\system32\dllcache	hemeui.dll
- 2002-08-28 19:39:50	44,032	-c--a-w	C:\WINDOWS\system32\dllcache	intlphr.exe
+ 2008-04-13 07:43:52	44,032	-c--a-w	C:\WINDOWS\system32\dllcache	intlphr.exe
- 2002-08-28 19:39:50	455,168	-c--a-w	C:\WINDOWS\system32\dllcache	intsetp.exe
+ 2008-04-13 07:43:54	455,168	-c--a-w	C:\WINDOWS\system32\dllcache	intsetp.exe
+ 2001-08-17 18:14:26	123,995	-c--a-w	C:\WINDOWS\system32\dllcache	jisdn.sys
+ 2008-04-13 17:34:26	63,488	-c--a-w	C:\WINDOWS\system32\dllcache	lntadmn.exe
+ 2008-04-13 17:34:26	80,384	-c--a-w	C:\WINDOWS\system32\dllcache	lntsess.exe
+ 2008-04-13 17:34:26	75,264	-c--a-w	C:\WINDOWS\system32\dllcache	lntsvr.exe
+ 2008-04-13 17:33:48	7,168	-c--a-w	C:\WINDOWS\system32\dllcache	lntsvrp.dll
+ 2008-04-13 17:33:48	33,792	-c--a-w	C:\WINDOWS\system32\dllcache	ools.dll
+ 2001-08-17 18:10:26	28,232	-c--a-w	C:\WINDOWS\system32\dllcache	os4mo.sys
+ 2002-01-08 19:39:34	51,712	-c--a-w	C:\WINDOWS\system32\dllcache	osdvd.sys
+ 2001-08-17 20:01:52	241,664	-c--a-w	C:\WINDOWS\system32\dllcache	osdvd02.sys
+ 2001-08-17 20:02:00	230,912	-c--a-w	C:\WINDOWS\system32\dllcache	osdvd03.sys
+ 2001-08-23 15:00:46	4,992	-c--a-w	C:\WINDOWS\system32\dllcache	oside.sys
+ 2008-04-13 17:34:26	347,136	-c--a-w	C:\WINDOWS\system32\dllcache	ourstrt.exe
+ 2001-08-23 15:47:20	31,744	-c--a-w	C:\WINDOWS\system32\dllcache	p4.dll
+ 2008-04-13 17:34:26	82,944	-c--a-w	C:\WINDOWS\system32\dllcache	p4mon.exe
+ 2001-08-23 15:46:22	43,520	-c--a-w	C:\WINDOWS\system32\dllcache	p4res.dll
+ 2001-08-17 18:12:12	34,375	-c--a-w	C:\WINDOWS\system32\dllcache	pro4.sys
+ 2008-04-13 17:34:26	260,096	-c--a-w	C:\WINDOWS\system32\dllcache	racerpt.exe
+ 2008-04-13 17:34:26	13,312	-c--a-w	C:\WINDOWS\system32\dllcache	racert.exe
+ 2001-08-23 15:46:48	315,520	-c--a-w	C:\WINDOWS\system32\dllcache	rid3d.dll
+ 2001-08-17 18:51:16	222,336	-c--a-w	C:\WINDOWS\system32\dllcache	rid3dm.sys
+ 2001-08-23 15:46:48	440,576	-c--a-w	C:\WINDOWS\system32\dllcache	ridkb.dll
+ 2001-08-17 18:51:16	159,232	-c--a-w	C:\WINDOWS\system32\dllcache	ridkbm.sys
+ 2001-08-17 18:51:22	166,784	-c--a-w	C:\WINDOWS\system32\dllcache	ridxpm.sys
+ 2008-04-13 17:33:48	153,088	-c--a-w	C:\WINDOWS\system32\dllcache	riedit.dll
+ 2008-04-13 17:33:48	90,112	-c--a-w	C:\WINDOWS\system32\dllcache	rkwks.dll
+ 2002-01-08 19:39:34	21,376	-c--a-w	C:\WINDOWS\system32\dllcache	sbvcap.sys
+ 2002-01-08 19:39:34	8,192	-c--a-w	C:\WINDOWS\system32\dllcache	sbyuv.dll
+ 2008-04-13 17:33:48	94,208	-c--a-w	C:\WINDOWS\system32\dllcache	scfgwmi.dll
+ 2008-04-13 17:34:54	12,168	-c--a-w	C:\WINDOWS\system32\dllcache	sddd.dll
+ 2008-04-13 17:33:48	53,248	-c--a-w	C:\WINDOWS\system32\dllcache	sgqec.dll
+ 2008-04-13 17:33:48	279,040	-c--a-w	C:\WINDOWS\system32\dllcache	shoot.dll
+ 2008-04-13 17:33:48	132,096	-c--a-w	C:\WINDOWS\system32\dllcache	soc.dll
+ 2008-04-13 17:33:48	50,688	-c--a-w	C:\WINDOWS\system32\dllcache	spkg.dll
+ 2008-04-13 09:56:02	12,288	-c--a-w	C:\WINDOWS\system32\dllcache	unmp.sys
+ 2008-04-13 17:33:48	50,688	-c--a-w	C:\WINDOWS\system32\dllcache	wain_32.dll
+ 2008-04-13 17:33:48	57,856	-c--a-w	C:\WINDOWS\system32\dllcache	wext.dll
+ 2001-08-17 19:48:14	11,520	-c--a-w	C:\WINDOWS\system32\dllcache	wotrack.sys
+ 2008-04-13 17:33:48	101,376	-c--a-w	C:\WINDOWS\system32\dllcache	xflog.dll
+ 2008-04-13 09:36:42	44,672	-c--a-w	C:\WINDOWS\system32\dllcache\uagp35.sys
+ 2008-04-13 09:32:38	66,048	-c--a-w	C:\WINDOWS\system32\dllcache\udfs.sys
+ 2008-04-13 17:33:48	26,624	-c--a-w	C:\WINDOWS\system32\dllcache\udhisapi.dll
+ 2008-04-13 17:33:48	104,448	-c--a-w	C:\WINDOWS\system32\dllcache\uihelper.dll
+ 2008-04-13 17:33:48	311,808	-c--a-w	C:\WINDOWS\system32\dllcache\ulib.dll
+ 2001-08-17 19:52:22	36,736	-c--a-w	C:\WINDOWS\system32\dllcache\ultra.sys
+ 2001-08-23 15:47:20	216,576	-c--a-w	C:\WINDOWS\system32\dllcache\um34scan.dll
+ 2001-08-23 15:47:20	212,480	-c--a-w	C:\WINDOWS\system32\dllcache\um54scan.dll
+ 2008-04-13 17:33:48	36,864	-c--a-w	C:\WINDOWS\system32\dllcache\umandlg.dll
+ 2001-08-23 15:47:20	47,616	-c--a-w	C:\WINDOWS\system32\dllcache\umaxcam.dll
+ 2001-08-23 15:47:20	50,688	-c--a-w	C:\WINDOWS\system32\dllcache\umaxp60.dll
+ 2001-08-17 19:58:12	22,912	-c--a-w	C:\WINDOWS\system32\dllcache\umaxpcls.sys
+ 2001-08-23 15:47:20	50,688	-c--a-w	C:\WINDOWS\system32\dllcache\umaxscan.dll
+ 2001-08-23 15:47:20	70,144	-c--a-w	C:\WINDOWS\system32\dllcache\umaxu12.dll
+ 2001-08-23 15:47:20	27,136	-c--a-w	C:\WINDOWS\system32\dllcache\umaxu22.dll
+ 2001-08-23 15:47:20	28,672	-c--a-w	C:\WINDOWS\system32\dllcache\umaxu40.dll
+ 2001-08-23 15:47:20	94,720	-c--a-w	C:\WINDOWS\system32\dllcache\umaxud32.dll
+ 2008-04-13 17:33:48	124,928	-c--a-w	C:\WINDOWS\system32\dllcache\umpnpmgr.dll
+ 2008-04-13 17:33:48	78,848	-c--a-w	C:\WINDOWS\system32\dllcache\unimdmat.dll
+ 2008-04-13 17:33:48	13,824	-c--a-w	C:\WINDOWS\system32\dllcache\uniplat.dll
+ 2008-04-13 17:33:48	316,416	-c--a-w	C:\WINDOWS\system32\dllcache\untfs.dll
+ 2008-04-13 09:39:48	384,768	-c--a-w	C:\WINDOWS\system32\dllcache\update.sys
+ 2008-04-13 17:34:28	151,040	-c--a-w	C:\WINDOWS\system32\dllcache\uploadm.exe
+ 2008-04-13 17:33:48	133,632	-c--a-w	C:\WINDOWS\system32\dllcache\upnp.dll
+ 2008-04-13 17:34:28	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\upnpcont.exe
+ 2008-04-13 17:33:50	186,368	-c--a-w	C:\WINDOWS\system32\dllcache\upnphost.dll
+ 2008-04-13 17:33:50	240,128	-c--a-w	C:\WINDOWS\system32\dllcache\upnpui.dll
+ 2008-04-13 17:34:28	18,432	-c--a-w	C:\WINDOWS\system32\dllcache\ups.exe
+ 2008-04-13 16:55:02	32,384	-c--a-w	C:\WINDOWS\system32\dllcache\usb101et.sys
+ 2008-04-13 09:56:50	12,800	-c--a-w	C:\WINDOWS\system32\dllcache\usb8023.sys
+ 2008-04-13 09:56:50	12,800	-c--a-w	C:\WINDOWS\system32\dllcache\usb8023x.sys
+ 2008-04-13 09:45:14	60,032	-c--a-w	C:\WINDOWS\system32\dllcache\usbaudio.sys
+ 2008-04-13 09:45:42	25,600	-c--a-w	C:\WINDOWS\system32\dllcache\usbcamd.sys
+ 2008-04-13 09:45:42	25,728	-c--a-w	C:\WINDOWS\system32\dllcache\usbcamd2.sys
+ 2008-04-13 09:45:40	32,128	-c--a-w	C:\WINDOWS\system32\dllcache\usbccgp.sys
+ 2002-01-08 19:45:06	4,736	-c--a-w	C:\WINDOWS\system32\dllcache\usbd.sys
+ 2008-04-13 09:45:36	30,208	-c--a-w	C:\WINDOWS\system32\dllcache\usbehci.sys
+ 2008-04-13 09:45:38	59,520	-c--a-w	C:\WINDOWS\system32\dllcache\usbhub.sys
+ 2008-04-13 09:45:44	15,872	-c--a-w	C:\WINDOWS\system32\dllcache\usbintel.sys
+ 2008-04-13 17:33:50	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\usbmon.dll
+ 2008-04-13 09:45:36	17,152	-c--a-w	C:\WINDOWS\system32\dllcache\usbohci.sys
+ 2008-04-13 09:45:38	143,872	-c--a-w	C:\WINDOWS\system32\dllcache\usbport.sys
+ 2008-04-13 09:47:38	25,856	-c--a-w	C:\WINDOWS\system32\dllcache\usbprint.sys
+ 2008-04-13 09:45:36	15,104	-c--a-w	C:\WINDOWS\system32\dllcache\usbscan.sys
+ 2008-04-13 09:45:38	26,112	-c--a-w	C:\WINDOWS\system32\dllcache\usbser.sys
+ 2008-04-13 09:45:36	20,608	-c--a-w	C:\WINDOWS\system32\dllcache\usbuhci.sys
+ 2008-04-13 09:46:22	121,984	-c--a-w	C:\WINDOWS\system32\dllcache\usbvideo.sys
+ 2008-04-13 17:33:50	579,584	-c--a-w	C:\WINDOWS\system32\dllcache\user32.dll
+ 2008-04-13 17:33:50	734,720	-c--a-w	C:\WINDOWS\system32\dllcache\userenv.dll
+ 2008-04-13 17:34:28	26,624	-c--a-w	C:\WINDOWS\system32\dllcache\userinit.exe
+ 2008-04-13 17:33:50	406,016	-c--a-w	C:\WINDOWS\system32\dllcache\usp10.dll
+ 2001-08-17 19:28:16	794,654	-c--a-w	C:\WINDOWS\system32\dllcache\usr1801.sys
+ 2001-08-17 19:28:16	793,598	-c--a-w	C:\WINDOWS\system32\dllcache\usr1806.sys
+ 2001-08-17 19:28:18	794,399	-c--a-w	C:\WINDOWS\system32\dllcache\usr1806v.sys
+ 2001-08-17 19:28:24	224,802	-c--a-w	C:\WINDOWS\system32\dllcache\usr1807a.sys
+ 2002-01-08 19:39:34	61,500	-c--a-w	C:\WINDOWS\system32\dllcache\usrcntra.dll
+ 2002-01-08 19:39:34	69,699	-c--a-w	C:\WINDOWS\system32\dllcache\usrcoina.dll
+ 2002-01-08 19:39:34	77,890	-c--a-w	C:\WINDOWS\system32\dllcache\usrdpa.dll
+ 2002-01-08 19:39:34	323,641	-c--a-w	C:\WINDOWS\system32\dllcache\usrdtea.dll
+ 2002-01-08 19:39:34	86,073	-c--a-w	C:\WINDOWS\system32\dllcache\usrfaxa.dll
+ 2002-01-08 19:39:34	53,305	-c--a-w	C:\WINDOWS\system32\dllcache\usrlbva.dll
+ 2002-01-08 19:39:34	77,891	-c--a-w	C:\WINDOWS\system32\dllcache\usrmlnka.exe
+ 2001-08-17 19:28:24	7,556	-c--a-w	C:\WINDOWS\system32\dllcache\usroslba.sys
+ 2001-08-17 19:28:26	113,762	-c--a-w	C:\WINDOWS\system32\dllcache\usrpda.sys
+ 2002-01-08 19:39:34	61,508	-c--a-w	C:\WINDOWS\system32\dllcache\usrprbda.exe
+ 2002-01-08 19:39:34	77,883	-c--a-w	C:\WINDOWS\system32\dllcache\usrrtosa.dll
+ 2002-01-08 19:39:34	49,211	-c--a-w	C:\WINDOWS\system32\dllcache\usrsdpia.dll
+ 2002-01-08 19:39:34	69,700	-c--a-w	C:\WINDOWS\system32\dllcache\usrshuta.exe
+ 2002-01-08 19:39:34	41,019	-c--a-w	C:\WINDOWS\system32\dllcache\usrsvpia.dll
+ 2001-08-17 19:28:14	765,884	-c--a-w	C:\WINDOWS\system32\dllcache\usrti.sys
+ 2002-01-08 19:39:34	102,457	-c--a-w	C:\WINDOWS\system32\dllcache\usrv42a.dll
+ 2002-01-08 19:39:34	49,209	-c--a-w	C:\WINDOWS\system32\dllcache\usrv80a.dll
+ 2002-01-08 19:39:34	45,116	-c--a-w	C:\WINDOWS\system32\dllcache\usrvoica.dll
+ 2002-01-08 19:39:34	49,211	-c--a-w	C:\WINDOWS\system32\dllcache\usrvpa.dll
+ 2001-08-17 19:28:26	687,999	-c--a-w	C:\WINDOWS\system32\dllcache\usrwdxjs.sys
+ 2008-04-13 17:34:28	50,176	-c--a-w	C:\WINDOWS\system32\dllcache\utilman.exe
+ 2008-04-13 17:33:50	219,648	-c--a-w	C:\WINDOWS\system32\dllcache\uxtheme.dll
+ 2008-04-13 17:33:50	30,749	-c--a-w	C:\WINDOWS\system32\dllcache\vbajet32.dll
- 2007-08-13 16:54:10	413,696	-c----w	C:\WINDOWS\system32\dllcache\vbscript.dll
+ 2008-04-13 17:33:50	434,176	-c--a-w	C:\WINDOWS\system32\dllcache\vbscript.dll
+ 2008-04-13 17:33:50	11,325	-c--a-w	C:\WINDOWS\system32\dllcache\vchnt5.dll
+ 2008-04-13 17:33:50	26,112	-c--a-w	C:\WINDOWS\system32\dllcache\vdmdbg.dll
+ 2002-01-08 19:39:34	58,112	-c--a-w	C:\WINDOWS\system32\dllcache\vdmindvd.sys
+ 2008-04-13 17:33:50	51,712	-c--a-w	C:\WINDOWS\system32\dllcache\vdmredir.dll
+ 2008-04-13 17:33:50	26,624	-c--a-w	C:\WINDOWS\system32\dllcache\verifier.dll
+ 2008-04-13 17:33:50	18,944	-c--a-w	C:\WINDOWS\system32\dllcache\version.dll
+ 2008-04-13 09:44:42	20,992	-c--a-w	C:\WINDOWS\system32\dllcache\vga.sys
+ 2008-04-13 09:36:42	42,240	-c--a-w	C:\WINDOWS\system32\dllcache\viaagp.sys
+ 2008-04-13 09:40:32	5,376	-c--a-w	C:\WINDOWS\system32\dllcache\viaide.sys
+ 2001-08-17 19:49:04	24,576	-c--a-w	C:\WINDOWS\system32\dllcache\viairda.sys
+ 2008-04-13 09:44:42	81,664	-c--a-w	C:\WINDOWS\system32\dllcache\videoprt.sys
+ 2008-04-13 17:33:50	131,584	-c--a-w	C:\WINDOWS\system32\dllcache\viewprov.dll
+ 2001-08-17 18:14:12	249,402	-c--a-w	C:\WINDOWS\system32\dllcache\vinwm.sys
+ 2001-08-17 19:28:14	604,253	-c--a-w	C:\WINDOWS\system32\dllcache\vmodem.sys
+ 2008-04-13 16:56:06	53,376	-c--a-w	C:\WINDOWS\system32\dllcache\volsnap.sys
+ 2001-08-17 19:28:16	397,502	-c--a-w	C:\WINDOWS\system32\dllcache\vpctcom.sys
+ 2008-04-13 17:33:50	430,592	-c--a-w	C:\WINDOWS\system32\dllcache\vssapi.dll
+ 2008-04-13 17:34:28	295,424	-c--a-w	C:\WINDOWS\system32\dllcache\vssvc.exe
+ 2001-08-17 19:28:16	64,605	-c--a-w	C:\WINDOWS\system32\dllcache\vvoice.sys
+ 2008-04-13 17:33:50	178,176	-c--a-w	C:\WINDOWS\system32\dllcache\w32time.dll
+ 2008-04-13 17:33:50	15,872	-c--a-w	C:\WINDOWS\system32\dllcache\w3ssl.dll
+ 2008-04-13 17:33:50	367,104	-c--a-w	C:\WINDOWS\system32\dllcache\w3svc.dll
+ 2001-08-17 18:13:08	19,528	-c--a-w	C:\WINDOWS\system32\dllcache\w840nd.sys
+ 2001-08-17 18:13:08	19,016	-c--a-w	C:\WINDOWS\system32\dllcache\w926nd.sys
+ 2001-08-17 18:13:12	16,925	-c--a-w	C:\WINDOWS\system32\dllcache\w940nd.sys
+ 2008-04-13 17:34:28	46,080	-c--a-w	C:\WINDOWS\system32\dllcache\wab.exe
+ 2008-04-13 17:33:50	510,976	-c--a-w	C:\WINDOWS\system32\dllcache\wab32.dll
+ 2008-04-13 16:56:24	263,168	-c--a-w	C:\WINDOWS\system32\dllcache\wab32res.dll
+ 2008-04-13 17:33:50	32,768	-c--a-w	C:\WINDOWS\system32\dllcache\wabfind.dll
+ 2008-04-13 17:33:50	85,504	-c--a-w	C:\WINDOWS\system32\dllcache\wabimp.dll
+ 2008-04-13 17:34:28	30,208	-c--a-w	C:\WINDOWS\system32\dllcache\wabmig.exe
+ 2008-04-13 09:43:56	14,208	-c--a-w	C:\WINDOWS\system32\dllcache\wacompen.sys
+ 2008-04-13 07:34:28	12,415	-c--a-w	C:\WINDOWS\system32\dllcache\wadv01nt.sys
+ 2008-04-13 07:34:28	12,127	-c--a-w	C:\WINDOWS\system32\dllcache\wadv02nt.sys
+ 2008-04-13 07:34:28	11,775	-c--a-w	C:\WINDOWS\system32\dllcache\wadv05nt.sys
+ 2008-04-13 07:34:28	11,807	-c--a-w	C:\WINDOWS\system32\dllcache\wadv07nt.sys
+ 2008-04-13 07:34:28	11,295	-c--a-w	C:\WINDOWS\system32\dllcache\wadv08nt.sys
+ 2008-04-13 07:34:28	11,871	-c--a-w	C:\WINDOWS\system32\dllcache\wadv09nt.sys
+ 2008-04-13 07:34:30	11,935	-c--a-w	C:\WINDOWS\system32\dllcache\wadv11nt.sys
+ 2008-04-13 17:33:50	77,824	-c--a-w	C:\WINDOWS\system32\dllcache\wam51.dll
+ 2008-04-13 17:33:50	53,248	-c--a-w	C:\WINDOWS\system32\dllcache\wamreg51.dll
+ 2008-04-13 09:57:22	34,560	-c--a-w	C:\WINDOWS\system32\dllcache\wanarp.sys
+ 2008-04-13 09:45:00	17,664	-c--a-w	C:\WINDOWS\system32\dllcache\watchdog.sys
+ 2008-04-13 07:34:30	29,311	-c--a-w	C:\WINDOWS\system32\dllcache\watv01nt.sys
+ 2008-04-13 07:34:30	19,551	-c--a-w	C:\WINDOWS\system32\dllcache\watv02nt.sys
+ 2008-04-13 07:34:30	33,599	-c--a-w	C:\WINDOWS\system32\dllcache\watv04nt.sys
+ 2008-04-13 07:34:30	22,271	-c--a-w	C:\WINDOWS\system32\dllcache\watv06nt.sys
+ 2008-04-13 07:34:30	25,471	-c--a-w	C:\WINDOWS\system32\dllcache\watv10nt.sys
+ 2008-04-13 17:33:50	215,552	-c--a-w	C:\WINDOWS\system32\dllcache\wavemsp.dll
+ 2008-04-13 17:33:50	201,216	-c--a-w	C:\WINDOWS\system32\dllcache\wbemcntl.dll
+ 2008-04-13 17:33:50	214,528	-c--a-w	C:\WINDOWS\system32\dllcache\wbemcomn.dll
+ 2008-04-13 17:33:50	71,680	-c--a-w	C:\WINDOWS\system32\dllcache\wbemcons.dll
+ 2008-04-13 17:33:50	531,456	-c--a-w	C:\WINDOWS\system32\dllcache\wbemcore.dll
+ 2008-04-13 17:33:50	178,176	-c--a-w	C:\WINDOWS\system32\dllcache\wbemdisp.dll
+ 2008-04-13 17:33:50	273,920	-c--a-w	C:\WINDOWS\system32\dllcache\wbemess.dll
+ 2008-04-13 17:33:50	44,544	-c--a-w	C:\WINDOWS\system32\dllcache\wbemperf.dll
+ 2008-04-13 17:33:50	18,944	-c--a-w	C:\WINDOWS\system32\dllcache\wbemprox.dll
+ 2008-04-13 17:33:50	43,520	-c--a-w	C:\WINDOWS\system32\dllcache\wbemsvc.dll
+ 2008-04-13 17:34:28	119,808	-c--a-w	C:\WINDOWS\system32\dllcache\wbemtest.exe
+ 2008-04-13 17:33:50	197,120	-c--a-w	C:\WINDOWS\system32\dllcache\wbemupgd.dll
+ 2001-08-17 18:10:30	35,871	-c--a-w	C:\WINDOWS\system32\dllcache\wbfirdma.sys
+ 2008-04-13 16:57:14	32,128	-c--a-w	C:\WINDOWS\system32\dllcache\wceusbsh.sys
+ 2008-04-13 07:34:30	23,615	-c--a-w	C:\WINDOWS\system32\dllcache\wch7xxnt.sys
+ 2001-08-17 19:28:02	701,386	-c--a-w	C:\WINDOWS\system32\dllcache\wdhaalba.sys
+ 2008-04-13 17:33:50	49,152	-c--a-w	C:\WINDOWS\system32\dllcache\wdigest.dll
+ 2008-04-13 17:34:36	23,552	-c--a-w	C:\WINDOWS\system32\dllcache\wdmaud.drv
+ 2008-04-13 10:17:20	83,072	-c--a-w	C:\WINDOWS\system32\dllcache\wdmaud.sys
+ 2008-04-13 17:33:50	68,096	-c--a-w	C:\WINDOWS\system32\dllcache\webclnt.dll
+ 2008-04-13 17:33:50	136,192	-c--a-w	C:\WINDOWS\system32\dllcache\webvw.dll
+ 2008-04-13 17:34:28	66,560	-c--a-w	C:\WINDOWS\system32\dllcache\wextract.exe
+ 2008-04-13 17:34:28	438,784	-c--a-w	C:\WINDOWS\system32\dllcache\wiaacmgr.exe
+ 2008-04-13 17:33:50	465,920	-c--a-w	C:\WINDOWS\system32\dllcache\wiadefui.dll
+ 2008-04-13 17:33:50	124,928	-c--a-w	C:\WINDOWS\system32\dllcache\wiadss.dll
+ 2001-08-23 15:47:22	87,040	-c--a-w	C:\WINDOWS\system32\dllcache\wiafbdrv.dll
+ 2001-08-23 15:47:22	54,272	-c--a-w	C:\WINDOWS\system32\dllcache\wiamsmud.dll
+ 2008-04-13 17:33:50	75,776	-c--a-w	C:\WINDOWS\system32\dllcache\wiascr.dll
+ 2008-04-13 17:33:50	334,336	-c--a-w	C:\WINDOWS\system32\dllcache\wiaservc.dll
+ 2008-04-13 17:33:50	594,432	-c--a-w	C:\WINDOWS\system32\dllcache\wiashext.dll
+ 2008-04-13 17:33:50	111,104	-c--a-w	C:\WINDOWS\system32\dllcache\wiavideo.dll
+ 2008-04-13 16:58:08	1,845,760	-c--a-w	C:\WINDOWS\system32\dllcache\win32k.sys
+ 2008-04-13 17:33:50	102,912	-c--a-w	C:\WINDOWS\system32\dllcache\win32spl.dll
+ 2001-08-17 19:28:14	771,581	-c--a-w	C:\WINDOWS\system32\dllcache\winacisa.sys
+ 2008-04-13 16:58:14	1,647,616	-c--a-w	C:\WINDOWS\system32\dllcache\winbrand.dll
+ 2008-04-13 17:34:28	288,256	-c--a-w	C:\WINDOWS\system32\dllcache\winhlp32.exe
+ 2008-04-13 17:33:50	354,304	-c--a-w	C:\WINDOWS\system32\dllcache\winhttp.dll
+ 2008-04-13 17:33:50	32,256	-c--a-w	C:\WINDOWS\system32\dllcache\winipsec.dll
+ 2008-04-13 17:34:30	512,000	-c--a-w	C:\WINDOWS\system32\dllcache\winlogon.exe
+ 2008-04-13 17:33:50	180,736	-c--a-w	C:\WINDOWS\system32\dllcache\winmm.dll
+ 2008-04-13 17:32:54	764,416	-c--a-w	C:\WINDOWS\system32\dllcache\winntbbu.dll
+ 2008-04-13 17:33:50	16,896	-c--a-w	C:\WINDOWS\system32\dllcache\winrnr.dll
+ 2008-04-13 17:33:50	100,352	-c--a-w	C:\WINDOWS\system32\dllcache\winscard.dll
+ 2008-04-13 17:33:50	17,408	-c--a-w	C:\WINDOWS\system32\dllcache\winshfhc.dll
+ 2008-04-13 17:34:36	146,944	-c--a-w	C:\WINDOWS\system32\dllcache\winspool.drv
+ 2008-04-13 17:33:50	293,888	-c--a-w	C:\WINDOWS\system32\dllcache\winsrv.dll
+ 2008-04-13 17:33:50	53,760	-c--a-w	C:\WINDOWS\system32\dllcache\winsta.dll
+ 2008-04-13 17:33:50	176,640	-c--a-w	C:\WINDOWS\system32\dllcache\wintrust.dll
+ 2008-04-13 17:34:30	5,632	-c--a-w	C:\WINDOWS\system32\dllcache\winver.exe
+ 2008-04-13 17:33:50	132,096	-c--a-w	C:\WINDOWS\system32\dllcache\wkssvc.dll
+ 2008-04-13 17:33:50	69,120	-c--a-w	C:\WINDOWS\system32\dllcache\wlanapi.dll
+ 2001-08-23 15:05:46	35,402	-c--a-w	C:\WINDOWS\system32\dllcache\wlandrv2.sys
+ 2008-04-13 17:33:50	172,544	-c--a-w	C:\WINDOWS\system32\dllcache\wldap32.dll
+ 2008-04-13 07:35:36	154,624	-c--a-w	C:\WINDOWS\system32\dllcache\wlluc48.sys
+ 2008-04-13 17:33:50	94,208	-c--a-w	C:\WINDOWS\system32\dllcache\wlnotify.dll
+ 2008-04-13 17:32:56	5,632	-c--a-w	C:\WINDOWS\system32\dllcache\wmi.dll
+ 2008-04-13 09:36:40	8,832	-c--a-w	C:\WINDOWS\system32\dllcache\wmiacpi.sys
+ 2008-04-13 17:34:30	196,608	-c--a-w	C:\WINDOWS\system32\dllcache\wmiadap.exe
+ 2008-04-13 16:59:40	7,680	-c--a-w	C:\WINDOWS\system32\dllcache\wmiapres.dll
+ 2008-04-13 17:33:50	88,576	-c--a-w	C:\WINDOWS\system32\dllcache\wmiaprpl.dll
+ 2008-04-13 17:34:30	126,464	-c--a-w	C:\WINDOWS\system32\dllcache\wmiapsrv.exe
+ 2008-04-13 17:34:30	369,664	-c--a-w	C:\WINDOWS\system32\dllcache\wmic.exe
+ 2008-04-13 17:33:50	60,928	-c--a-w	C:\WINDOWS\system32\dllcache\wmicookr.dll
+ 2008-04-13 17:33:50	140,800	-c--a-w	C:\WINDOWS\system32\dllcache\wmidcprv.dll
+ 2008-04-13 17:33:50	156,672	-c--a-w	C:\WINDOWS\system32\dllcache\wmipcima.dll
+ 2008-04-13 17:33:50	132,096	-c--a-w	C:\WINDOWS\system32\dllcache\wmipdskq.dll
+ 2008-04-13 17:33:50	61,952	-c--a-w	C:\WINDOWS\system32\dllcache\wmipiprt.dll
+ 2008-04-13 17:33:50	62,464	-c--a-w	C:\WINDOWS\system32\dllcache\wmipjobj.dll
+ 2008-04-13 17:33:50	144,896	-c--a-w	C:\WINDOWS\system32\dllcache\wmiprov.dll
+ 2008-04-13 17:33:50	437,248	-c--a-w	C:\WINDOWS\system32\dllcache\wmiprvsd.dll
+ 2008-04-13 17:34:30	218,112	-c--a-w	C:\WINDOWS\system32\dllcache\wmiprvse.exe
+ 2008-04-13 17:33:50	41,472	-c--a-w	C:\WINDOWS\system32\dllcache\wmipsess.dll
+ 2008-04-13 17:33:50	145,408	-c--a-w	C:\WINDOWS\system32\dllcache\wmisvc.dll
+ 2008-04-13 17:33:50	99,328	-c--a-w	C:\WINDOWS\system32\dllcache\wmiutils.dll
+ 2008-04-13 17:33:50	167,936	-c--a-w	C:\WINDOWS\system32\dllcache\wmm2ae.dll
+ 2008-04-13 17:33:50	4,096	-c--a-w	C:\WINDOWS\system32\dllcache\wmm2eres.dll
+ 2008-04-13 17:33:50	7,680	-c--a-w	C:\WINDOWS\system32\dllcache\wmm2ext.dll
+ 2008-04-13 17:33:50	402,432	-c--a-w	C:\WINDOWS\system32\dllcache\wmm2filt.dll
+ 2008-04-13 17:33:50	502,272	-c--a-w	C:\WINDOWS\system32\dllcache\wmm2fxa.dll
+ 2008-04-13 17:33:50	325,632	-c--a-w	C:\WINDOWS\system32\dllcache\wmm2fxb.dll
+ 2008-04-13 17:33:50	4,290,048	-c--a-w	C:\WINDOWS\system32\dllcache\wmm2res.dll
+ 2008-04-13 17:33:50	6,144	-c--a-w	C:\WINDOWS\system32\dllcache\wmm2res2.dll
+ 2008-04-13 17:34:30	218,112	-c--a-w	C:\WINDOWS\system32\dllcache\wordpad.exe
+ 2008-04-13 17:33:50	265,216	-c--a-w	C:\WINDOWS\system32\dllcache\wow32.dll
+ 2002-01-08 19:39:34	3,200	-c--a-w	C:\WINDOWS\system32\dllcache\wowfax.dll
+ 2002-01-08 19:39:34	14,336	-c--a-w	C:\WINDOWS\system32\dllcache\wowfaxui.dll
+ 2008-04-13 17:34:30	32,256	-c--a-w	C:\WINDOWS\system32\dllcache\wpabaln.exe
+ 2008-04-13 17:34:30	11,776	-c--a-w	C:\WINDOWS\system32\dllcache\wpnpinst.exe
+ 2008-04-13 17:33:50	82,432	-c--a-w	C:\WINDOWS\system32\dllcache\ws2_32.dll
+ 2008-04-13 17:33:50	19,968	-c--a-w	C:\WINDOWS\system32\dllcache\ws2help.dll
+ 2008-04-13 17:34:30	13,824	-c--a-w	C:\WINDOWS\system32\dllcache\wscntfy.exe
+ 2008-04-13 17:34:30	155,648	-c--a-w	C:\WINDOWS\system32\dllcache\wscript.exe
+ 2008-04-13 17:33:52	80,896	-c--a-w	C:\WINDOWS\system32\dllcache\wscsvc.dll
+ 2008-04-13 17:33:52	621,568	-c--a-w	C:\WINDOWS\system32\dllcache\wsecedit.dll
+ 2008-04-13 17:33:52	108,032	-c--a-w	C:\WINDOWS\system32\dllcache\wshbth.dll
+ 2008-04-13 17:33:52	36,864	-c--a-w	C:\WINDOWS\system32\dllcache\wshcon.dll
+ 2008-04-13 17:33:52	90,112	-c--a-w	C:\WINDOWS\system32\dllcache\wshext.dll
+ 2008-04-13 17:33:52	14,336	-c--a-w	C:\WINDOWS\system32\dllcache\wship6.dll
+ 2008-04-13 17:33:52	11,264	-c--a-w	C:\WINDOWS\system32\dllcache\wshrm.dll
+ 2008-04-13 17:33:52	19,456	-c--a-w	C:\WINDOWS\system32\dllcache\wshtcpip.dll
+ 2008-04-13 07:34:32	12,063	-c--a-w	C:\WINDOWS\system32\dllcache\wsiintxx.sys
+ 2008-04-13 17:33:52	41,984	-c--a-w	C:\WINDOWS\system32\dllcache\wsnmp32.dll
+ 2008-04-13 17:33:52	25,088	-c--a-w	C:\WINDOWS\system32\dllcache\wsock32.dll
+ 2008-04-13 09:46:26	19,200	-c--a-w	C:\WINDOWS\system32\dllcache\wstcodec.sys
+ 2008-04-13 17:33:52	51,200	-c--a-w	C:\WINDOWS\system32\dllcache\wstdecod.dll
+ 2008-04-13 17:33:52	18,432	-c--a-w	C:\WINDOWS\system32\dllcache\wtsapi32.dll
+ 2008-04-13 17:34:30	168,960	-c--a-w	C:\WINDOWS\system32\dllcache\wuauclt1.exe
+ 2008-04-13 17:33:52	184,320	-c--a-w	C:\WINDOWS\system32\dllcache\wuaueng1.dll
+ 2008-04-13 17:33:52	6,656	-c--a-w	C:\WINDOWS\system32\dllcache\wuauserv.dll
+ 2008-04-13 07:34:34	19,455	-c--a-w	C:\WINDOWS\system32\dllcache\wvchntxx.sys
+ 2008-04-13 17:33:52	384,000	-c--a-w	C:\WINDOWS\system32\dllcache\wzcdlg.dll
+ 2008-04-13 17:33:52	52,736	-c--a-w	C:\WINDOWS\system32\dllcache\wzcsapi.dll
+ 2008-04-13 17:33:54	483,840	-c--a-w	C:\WINDOWS\system32\dllcache\wzcsvc.dll
+ 2008-04-13 17:33:54	91,648	-c--a-w	C:\WINDOWS\system32\dllcache\xactsrv.dll
+ 2008-04-13 17:34:30	30,720	-c--a-w	C:\WINDOWS\system32\dllcache\xcopy.exe
+ 2001-08-17 18:11:14	16,970	-c--a-w	C:\WINDOWS\system32\dllcache\xem336n5.sys
+ 2006-12-30 16:38:42	177,784	-c--a-w	C:\WINDOWS\system32\dllcache\xenroll.dll
+ 2001-08-23 15:47:50	99,865	-c--a-w	C:\WINDOWS\system32\dllcache\xlog.exe
+ 2008-04-13 17:33:54	129,024	-c--a-w	C:\WINDOWS\system32\dllcache\xmlprov.dll
+ 2008-04-13 17:33:54	50,176	-c--a-w	C:\WINDOWS\system32\dllcache\xmlprovi.dll
+ 2008-04-13 17:33:54	11,776	-c--a-w	C:\WINDOWS\system32\dllcache\xolehlp.dll
+ 2001-08-23 15:47:50	4,608	-c--a-w	C:\WINDOWS\system32\dllcache\xrxflnch.exe
+ 2001-08-23 15:47:50	27,648	-c--a-w	C:\WINDOWS\system32\dllcache\xrxftplt.exe
+ 2008-04-13 17:33:54	18,944	-c--a-w	C:\WINDOWS\system32\dllcache\xrxscnui.dll
+ 2001-08-23 15:47:24	23,040	-c--a-w	C:\WINDOWS\system32\dllcache\xrxwbtmp.dll
+ 2008-04-13 17:33:54	116,736	-c--a-w	C:\WINDOWS\system32\dllcache\xrxwiadr.dll
+ 2008-04-13 17:33:54	340,992	-c--a-w	C:\WINDOWS\system32\dllcache\zipfldr.dll
+ 2005-01-31 09:20:04	211,712	----a-w	C:\WINDOWS\system32\drivers\LV561AV.SYS
+ 2005-05-27 07:31:28	22,016	----a-w	C:\WINDOWS\system32\drivers\LVUSBSta.sys
+ 1998-07-12 22:00:00	15,360	----a-w	C:\WINDOWS\system32\INETFR.DLL
+ 2005-07-19 15:31:02	53,248	----a-r	C:\WINDOWS\system32\InstMed.exe
+ 2005-06-08 13:12:20	462,848	----a-w	C:\WINDOWS\system32\LCamCpl.dll
+ 2005-06-08 12:31:48	30,720	----a-w	C:\WINDOWS\system32\lfbmp12n.dll
+ 2005-06-08 12:31:48	328,704	----a-w	C:\WINDOWS\system32\LFCMP12n.DLL
+ 2005-06-08 12:31:48	78,336	----a-w	C:\WINDOWS\system32\lffax12n.dll
+ 2005-06-08 12:31:50	141,312	----a-w	C:\WINDOWS\system32\lftif12n.dll
+ 2005-06-08 12:31:52	259,072	----a-w	C:\WINDOWS\system32\LTDIS12n.dll
+ 2005-06-08 12:31:52	207,872	----a-w	C:\WINDOWS\system32\ltefx12n.dll
+ 2005-06-08 12:31:52	131,072	----a-w	C:\WINDOWS\system32\ltfil12n.DLL
+ 2005-06-08 12:31:52	164,864	----a-w	C:\WINDOWS\system32\ltimg12n.dll
+ 2005-06-08 12:31:52	406,016	----a-w	C:\WINDOWS\system32\ltkrn12n.dll
+ 2005-06-08 12:31:58	856,064	----a-w	C:\WINDOWS\system32\Ltwvc12n.dll
+ 2005-05-27 07:26:36	204,800	----a-w	C:\WINDOWS\system32\LVCodec2.dll
+ 2005-01-31 09:00:10	106,496	----a-w	C:\WINDOWS\system32\lvcoinst.dll
+ 2005-07-19 15:32:18	77,824	----a-w	C:\WINDOWS\system32\LVCOMCX.dll
+ 2005-07-19 15:32:18	221,184	----a-w	C:\WINDOWS\system32\LVCOMSX.EXE
+ 2005-06-08 12:31:58	215,552	----a-w	C:\WINDOWS\system32\Lvkrn12n.dll
+ 2005-07-19 15:32:18	258,048	----a-w	C:\WINDOWS\system32\LVMAENUM.dll
+ 2005-05-27 07:29:30	204,800	----a-w	C:\WINDOWS\system32\LVUI2.dll
+ 2005-05-27 07:36:42	372,736	----a-w	C:\WINDOWS\system32\LVUI2RC.dll
+ 2003-03-18 20:20:00	1,060,864	----a-w	C:\WINDOWS\system32\MFC71.dll
+ 2003-03-18 19:44:36	40,960	----a-w	C:\WINDOWS\system32\MFC71CHS.DLL
+ 2003-03-18 19:44:36	45,056	----a-w	C:\WINDOWS\system32\MFC71CHT.DLL
+ 2003-03-18 19:44:34	65,536	----a-w	C:\WINDOWS\system32\MFC71DEU.DLL
+ 2003-03-18 19:44:38	57,344	----a-w	C:\WINDOWS\system32\MFC71ENU.DLL
+ 2003-03-18 19:44:36	61,440	----a-w	C:\WINDOWS\system32\MFC71ESP.DLL
+ 2003-03-18 19:44:36	61,440	----a-w	C:\WINDOWS\system32\MFC71ITA.DLL
+ 2003-03-18 19:44:34	49,152	----a-w	C:\WINDOWS\system32\MFC71JPN.DLL
+ 2003-03-18 19:44:38	49,152	----a-w	C:\WINDOWS\system32\MFC71KOR.DLL
+ 2003-03-18 20:12:12	1,047,552	----a-w	C:\WINDOWS\system32\MFC71u.dll
+ 1998-07-12 22:00:00	59,904	----a-w	C:\WINDOWS\system32\MSCC2FR.DLL
+ 2004-02-22 22:00:00	119,808	----a-w	C:\WINDOWS\system32\MSSTDFMT.DLL
+ 2003-03-18 19:14:52	499,712	----a-w	C:\WINDOWS\system32\msvcp71.dll
+ 2003-02-21 03:42:22	348,160	----a-w	C:\WINDOWS\system32\msvcr71.dll
+ 1998-07-12 22:00:00	9,728	----a-w	C:\WINDOWS\system32\PCCLPFR.DLL
- 2008-05-14 19:40:47	70,124	----a-w	C:\WINDOWS\system32\perfc009.dat
+ 2008-05-15 10:41:23	70,124	----a-w	C:\WINDOWS\system32\perfc009.dat
- 2008-05-14 19:40:47	83,046	----a-w	C:\WINDOWS\system32\perfc00C.dat
+ 2008-05-15 10:41:23	83,046	----a-w	C:\WINDOWS\system32\perfc00C.dat
- 2008-05-14 19:40:47	436,360	----a-w	C:\WINDOWS\system32\perfh009.dat
+ 2008-05-15 10:41:23	436,360	----a-w	C:\WINDOWS\system32\perfh009.dat
- 2008-05-14 19:40:47	504,492	----a-w	C:\WINDOWS\system32\perfh00C.dat
+ 2008-05-15 10:41:23	504,492	----a-w	C:\WINDOWS\system32\perfh00C.dat
+ 2005-06-08 12:41:24	466,944	----a-w	C:\WINDOWS\system32\QCUI2.dll
+ 1998-07-12 22:00:00	6,656	----a-w	C:\WINDOWS\system32\STDFTFR.DLL
+ 2000-10-02 07:40:18	119,568	----a-w	C:\WINDOWS\system32\VB6FR.DLL
+ 2000-07-14 22:00:00	101,888	----a-w	C:\WINDOWS\system32\VB6STKIT.DLL
+ 2005-05-13 10:47:52	315,392	----a-w	C:\WINDOWS	wain_32\LogiVid\HPortal2.dll
+ 2005-05-13 10:47:06	212,992	----a-w	C:\WINDOWS	wain_32\LogiVid\HVideoS2.exe
+ 2005-05-13 10:47:10	6,656	----a-w	C:\WINDOWS	wain_32\LogiVid\HVidSp2.dll
+ 2005-05-27 08:03:38	49,152	----a-r	C:\WINDOWS	wain_32\LogiVid\InstVid.exe
+ 2005-05-13 10:47:14	696,320	----a-w	C:\WINDOWS	wain_32\LogiVid\LHPorta2.dll
+ 2005-05-13 10:18:48	14,848	----a-w	C:\WINDOWS	wain_32\LogiVid\LQCT32_2.dll
+ 2003-03-18 19:14:52	499,712	----a-w	C:\WINDOWS	wain_32\LogiVid\msvcp71.dll
+ 2003-02-21 03:42:22	348,160	----a-w	C:\WINDOWS	wain_32\LogiVid\msvcr71.dll
+ 2005-05-13 10:46:40	221,184	----a-w	C:\WINDOWS	wain_32\LogiVid\PCSmart2.dll
+ 2005-05-27 07:29:48	159,744	----a-w	C:\WINDOWS	wain_32\QuickCam\lvWIAext.dll
.
-- Snapshot reset to current date --
.
(((((((((((((((((((((((((((((((((   Point de chargement Reg   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-13 19:34 15360]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2008-04-13 19:34 1695232]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-06-08 14:44 196608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"C-Media Mixer"="Mixer.exe" [2002-07-12 18:33 1581056 C:\WINDOWS\mixer.exe]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
"Trust Gaming mouse"="C:\Program Files\Trust\GM-4200 Gamer Mouse Optical\Panel.exe" [2006-12-28 09:20 1232896]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 12:17 61440]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-13 19:34 110592 C:\WINDOWS\system32\bthprops.cpl]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 17:32 221184]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 15:24 458752]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 15:14 217088]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-13 19:34 15360]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
BTTray.lnk - C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe [2004-10-01 15:12:18 565309]
WiFi Station.lnk - C:\Program Files\Hercules\WiFi Station\WifiStation.exe [2008-05-09 13:24:50 650240]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"%windir%\system32\sessmgr.exe"=
"C:\Program Files\BitComet\BitComet.exe"=
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"C:\Program Files\Windows Live\Messenger\livecall.exe"=
"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe"=
"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe"=
"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe"=
"C:\Program Files\adslTV\adsltv.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"10680:TCP"= 10680:TCP:BitComet 10680 TCP
"10680:UDP"= 10680:UDP:BitComet 10680 UDP

R3 GMFilter Filter;GMFilter Filter;C:\WINDOWS\system32\Drivers\GMFilter.sys [2006-12-29 16:49]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
\Shell\AutoRun\command - E:\autorun.exe

*Newly Created Service* - CATCHME
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-16 20:37:32
Windows 5.1.2600 Service Pack 3 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-05-16 20:38:04
ComboFix-quarantined-files.txt  2008-05-16 18:37:59
ComboFix2.txt  2008-05-14 19:47:27

Pre-Run: 144,318,574,592 octets libres
Post-Run: 144,318,279,680 octets libres

2586

locdog · Answer

alors voila mon dernier rapport dsl si sa fait beaucoup xD cela est pour mon problème de message qui aparrait au démarrage windows sinon il affiche extament 

en titre load DLL pui en dessou 
       Hook load failed 

c est tout ce qui il affiche rien d autre qui diré de quel dll il s agit

jlpjlp · Answer

c'est un fichier qui a le raport avec un logiciel; et ce olgiciel le demande a ton ordinateur . par ce que il manque/

si tu sais de quel logiciel cela peux cvenir reinstalle le logiciel 

sinon dis moi depuis quand tu l'a exactement (apres quel rapport de desinfection)
_______________

lance ccleaner et repare le registre

https://www.malekal.com/tutoriel-ccleaner/

____________

recolle un hijackthis

locdog · Answer

voila j ai fait le ccleaner j ai réparé toutes les erreurs mais le petit message et toujours la mon dernier logiciel est ma clé bloutoot dsl je c est pas comment sa s écrit xD et elle fonctionne tres bien dc je ne comprend pas

jlpjlp · Answer

essaye de reinstaller le pilote pour voir si cela ne vient pas de là

locdog · Answer

c est bon sa a marché je vous remercie de votre aide et peut étre a une prochaine fois merci au revoir

jlpjlp · Answer

ok parfait!!!!

Malware/Win32/Virus Effaceur etc ...

43 réponses

Discussions similaires