Rapport Hijackthis

Résolu
Bonjour,
Comme beaucoup ici j'ai été infestée par le "virus" em.pc-internet, qui me fait bénéficier de publicités intempestives et d'un considérable ralentissement de mon ordinateur, sans parler de mon système de protection qui s'affole.
J'ai donc téléchargé HijackThis comme conseillé, et je vous poste donc le rapport, en espérant que quelqu'un pourra m'aider et me dire quoi faire ensuite. Merci beaucoup.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:55:47, on 02/04/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_SL.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Microsoft Money\System\mnyexpr.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Windows\system32\DllHost.exe
C:\Users\Serleena\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Program Files\eChanblard\emule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [RegPowerClean] "C:\Program Files\Winferno\RegistryPowerCleaner\RegPowerClean.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

--
End of file - 7748 bytes
Configuration: Windows Vista
Internet Explorer 7.0

7 réponses

  1. telecharge sdfix

    SDFix Download Link

    decompresse le sur ton bureau

    demarre ton pc en mode safe

    ouvre le dossier sdfix

    click sur RunThis.bat

    repond Y

    et poste moi le rapport
    0
    1. Je suis désolée ça ne marche pas! La première fois en cliquant sur runthis, une fenêtre a écran noir s'est ouvert une seconde puis s'est refermé, rien de plus. Idem en insistant.
      Au second redémarrage, les icones de sdfix avaient disparus, sauf read me!
      Est-ce que les problèmes de clavier (touches qui ne répondent qu'une fois sur deux) et les problèmes de mémoire (passer de 12Go à 3Go en une aprem) peuvent être liés à ça?
      0
      1. En démarrage normal, j'ai pu obtenir ça, si ça peut aider:

        [b]System Report[/b]
        *************

        Run on 02/04/2008 at 17:25

        Microsoft Windows [version 6.0.6000]

        Current user is an administrator

        [b]Running Processes[/b]:

        \SystemRoot\System32\smss.exe [412]
        C:\Windows\system32\csrss.exe [480]
        C:\Windows\system32\wininit.exe [520]
        C:\Windows\system32\csrss.exe [528]
        C:\Windows\system32\winlogon.exe [580]
        C:\Windows\system32\services.exe [616]
        C:\Windows\system32\lsass.exe [632]
        C:\Windows\system32\lsm.exe [640]
        C:\Windows\system32\svchost.exe [788]
        C:\Windows\system32\svchost.exe [848]
        C:\Windows\System32\svchost.exe [876]
        C:\Windows\System32\svchost.exe [944]
        C:\Windows\System32\svchost.exe [1032]
        C:\Windows\system32\svchost.exe [1048]
        C:\Windows\system32\SLsvc.exe [1148]
        C:\Windows\system32\svchost.exe [1180]
        C:\Windows\system32\svchost.exe [1328]
        C:\Windows\System32\spoolsv.exe [1484]
        C:\Windows\system32\svchost.exe [1508]
        C:\Windows\system32\taskeng.exe [1872]
        C:\Windows\system32\Dwm.exe [1920]
        C:\Windows\Explorer.EXE [1972]
        C:\Program Files\Windows Defender\MSASCui.exe [272]
        C:\Windows\System32\igfxtray.exe [280]
        C:\Windows\System32\hkcmd.exe [292]
        C:\Windows\System32\igfxpers.exe [344]
        C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [352]
        C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [424]
        C:\Program Files\Grisoft\AVG7\avgcc.exe [432]
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [444]
        C:\Program Files\Winamp\winampa.exe [456]
        C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [484]
        C:\Program Files\Microsoft Money\System\mnyexpr.exe [468]
        C:\Program Files\MSN Messenger\msnmsgr.exe [556]
        C:\Windows\ehome\ehtray.exe [532]
        C:\Program Files\Windows Media Player\wmpnscfg.exe [512]
        C:\Users\Serleena\AppData\Local\trxvcgm.exe [396]
        C:\Program Files\Google\Google Updater\GoogleUpdater.exe [832]
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe [2496]
        C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe [2524]
        C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe [2540]
        C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe [2576]
        C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2620]
        C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe [2644]
        C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2972]
        C:\Windows\system32\svchost.exe [3092]
        C:\Windows\system32\svchost.exe [3200]
        C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe [3252]
        C:\Windows\System32\svchost.exe [3280]
        C:\Windows\system32\SearchIndexer.exe [3324]
        C:\Program Files\Windows Media Player\wmpnetwk.exe [3528]
        C:\Windows\system32\taskeng.exe [3604]
        C:\Program Files\Internet Explorer\iexplore.exe [2876]
        C:\Program Files\MSN Messenger\usnsvc.exe [3932]
        C:\Windows\system32\wbem\wmiprvse.exe [2204]
        C:\Windows\system32\conime.exe [2244]
        C:\Windows\system32\SearchProtocolHost.exe [976]
        C:\Windows\system32\SearchFilterHost.exe [2992]
        C:\Windows\system32\msfeedssync.exe [2240]

        [b]Drivers - Running[/b]:

        ACPI
        AFD
        atapi
        AVG
        AvgAsCln
        AvgClean
        AvgMfx86
        Beep
        bowser
        cdfs
        cdrom
        CLFS
        CmBatt
        Compbatt
        crcdisk
        DfsC
        disk
        DXGKrnl
        Ecache
        FileInfo
        FltMgr
        HDAudBus
        HTTP
        i8042prt
        iaStor
        igfx
        IntcAzAudAddService
        intelide
        intelppm
        iScsiPrt
        kbdclass
        KSecDD
        lltdio
        luafv
        Modem
        monitor
        mouclass
        MountMgr
        mpsdrv
        MRxDAV
        mrxsmb
        mrxsmb10
        mrxsmb20
        Msfs
        msisadrv
        mssmbios
        Mup
        NativeWifiP
        NDIS
        NdisTapi
        Ndisuio
        NdisWan
        NDProxy
        NetBIOS
        netbt
        Npfs
        nsiproxy
        Ntfs
        Null
        partmgr
        pci
        PEAUTH
        PptpMiniport
        PSched
        RasAcd
        Rasl2tp
        RasPppoe
        rdbss
        RDPCDD
        RDPENCDD
        rspndr
        RTL8023xp
        secdrv
        SIS163u
        Smb
        smserial
        spldr
        srv
        srv2
        srvnet
        swenum
        Tcpip
        tcpipreg
        tdx
        TermDD
        tunmp
        tunnel
        umbus
        usbehci
        usbhub
        usbuhci
        VgaSave
        volmgr
        volmgrx
        volsnap
        Wanarpv6
        Wdf01000

        [b]Drivers - Stopped[/b]:

        adp94xx
        adpahci
        adpu160m
        adpu320
        agp440
        aic78xx
        aliide
        amdagp
        amdide
        AmdK7
        AmdK8
        arc
        arcsas
        AsyncMac
        blbdrive
        BrFiltLo
        BrFiltUp
        Brserid
        BrSerWdm
        BrUsbMdm
        BrUsbSer
        BTHMODEM
        circlass
        cmdide
        Crusoe
        drmkaud
        E1G60
        elxstor
        fastfat
        fdc
        Filetrace
        flpydisk
        gagp30kx
        HidBth
        HidIr
        HidUsb
        HpCISSs
        i2omp
        iaStorV
        iirsp
        IpFilterDriver
        IpInIp
        IPMIDRV
        IPNAT
        IRENUM
        isapnp
        iteatapi
        iteraid
        kbdhid
        LSI_FC
        LSI_SAS
        LSI_SCSI
        LVUSBSta
        megasas
        mouhid
        mpio
        Mraid35x
        msahci
        msdsm
        MSKSSRV
        MSPCLOCK
        MSPQM
        MsRPC
        MSTEE
        nfrd960
        ntrigdigi
        nvatabus
        nvraid
        nvstor
        nv_agp
        NwlnkFlt
        NwlnkFwd
        ohci1394
        Parport
        Parvdm
        PCAMp50
        PCASp50
        pciide
        pcmcia
        PID_0928
        Processor
        ql2300
        ql40xx
        QWAVEdrv
        rdpdr
        RDPWD
        sbp2port
        Serenum
        Serial
        sermouse
        sffdisk
        sffp_mmc
        sffp_sd
        sfloppy
        sisagp
        SiSRaid2
        SiSRaid4
        Symc8xx
        Sym_hi
        Sym_u3
        Tcpip6
        TDPIPE
        TDTCP
        tssecsrv
        uagp35
        udfs
        uliagpkx
        uliahci
        UlSata
        ulsata2
        usbccgp
        usbcir
        usbohci
        usbprint
        USBSTOR
        vga
        viaagp
        ViaC7
        viaide
        viamraid
        vsmraid
        WacomPen
        Wanarp
        Wd
        WmiAcpi
        WpdUsb
        ws2ifsl
        WUDFRd

        [b]Services - Running[/b]:

        AeLookupSvc
        AudioEndpointBuilder
        Audiosrv
        AVG
        Avg7Alrt
        Avg7UpdSvc
        AvgCoreSvc
        BFE
        BITS
        Browser
        CryptSvc
        DcomLaunch
        Dhcp
        Dnscache
        DPS
        EapHost
        EMDMgmt
        Eventlog
        EventSystem
        fdPHost
        FDResPub
        gpsvc
        gusvc
        IAANTMON
        IKEEXT
        iphlpsvc
        KeyIso
        KtmRm
        LanmanServer
        LanmanWorkstation
        lmhosts
        MMCSS
        MpsSvc
        Netman
        netprofm
        NlaSvc
        nsi
        PcaSvc
        PlugPlay
        PolicyAgent
        ProfSvc
        RasMan
        RpcSs
        SamSs
        Schedule
        seclogon
        SENS
        ShellHWDetection
        slsvc
        Spooler
        SSDPSRV
        stisvc
        SysMain
        TabletInputService
        TapiSrv
        TermService
        TestHandler
        Themes
        TrkWks
        upnphost
        usnjsvc
        UxSms
        W32Time
        WdiSystemHost
        WebClient
        WerSvc
        WinDefend
        WinHttpAutoProxySvc
        Winmgmt
        Wlansvc
        WMPNetworkSvc
        WPDBusEnum
        wscsvc
        WSearch
        wuauserv
        wudfsvc

        [b]Services - Stopped[/b]:

        ALG
        Appinfo
        CertPropSvc
        clr_optimization_v2.0.50727_32
        COMSysApp
        DFSR
        dot3svc
        ehRecvr
        ehSched
        ehstart
        FontCache3.0.0.0
        hidserv
        hkmsvc
        idsvc
        IPBusEnum
        lltdsvc
        Mcx2Svc
        MSDTC
        MSiSCSI
        msiserver
        napagent
        Netlogon
        NetTcpPortSharing
        NMIndexingService
        ose
        p2pimsvc
        p2psvc
        pla
        PNRPAutoReg
        PNRPsvc
        ProtectedStorage
        QWAVE
        RasAuto
        RemoteAccess
        RemoteRegistry
        RpcLocator
        SCardSvr
        SCPolicySvc
        SDRSVC
        SessionEnv
        SharedAccess
        SLUINotify
        SNMPTRAP
        swprv
        TBS
        THREADORDER
        TrustedInstaller
        UI0Detect
        vds
        VSS
        wcncsvc
        WcsPlugInService
        WdiServiceHost
        Wecsvc
        wercplsupport
        WinRM
        wmiApSrv
        WPCSvc

        [b]Files Created/Modified - 60 Days[/b]:

        C:\

        2 Apr 2008 17:11:56 0 A.SHR "C:\IO.SYS"
        2 Apr 2008 17:11:56 0 A.SHR "C:\MSDOS.SYS"
        2 Apr 2008 17:11:10 1 377 370 112 A.SH. "C:\pagefile.sys"

        C:\Windows\

        2 Apr 2008 17:11:16 67 584 A.S.. "C:\Windows\bootstat.dat"
        12 Mar 2008 10:32:22 45 ...H. "C:\Windows\dsys9610.dat"
        2 Apr 2008 17:10:14 255 598 A.... "C:\Windows\ntbtlog.txt"
        2 Apr 2008 16:27:56 13 820 A.... "C:\Windows\PFRO.log"
        13 Mar 2008 9:47:54 0 A.... "C:\Windows\setupact.log"
        13 Mar 2008 9:47:54 0 A.... "C:\Windows\setuperr.log"
        2 Apr 2008 17:15:54 2 038 776 A.... "C:\Windows\WindowsUpdate.log"
        14 Feb 2008 8:58:06 2 144 256 A.... "C:\Windows\AppPatch\AcGenral.dll"
        14 Feb 2008 8:58:04 537 600 A.... "C:\Windows\AppPatch\AcLayers.dll"
        14 Feb 2008 8:58:06 2 560 A.... "C:\Windows\AppPatch\AcRes.dll"
        14 Feb 2008 8:58:04 449 536 A.... "C:\Windows\AppPatch\AcSpecfc.dll"
        14 Feb 2008 8:58:04 173 056 A.... "C:\Windows\AppPatch\AcXtrnal.dll"
        14 Feb 2008 8:58:04 82 194 A.... "C:\Windows\AppPatch\drvmain.sdb"
        14 Feb 2008 8:55:28 52 736 A.... "C:\Windows\AppPatch\iebrshim.dll"
        14 Feb 2008 8:58:06 1 534 322 A.... "C:\Windows\AppPatch\msimain.sdb"
        14 Feb 2008 8:58:04 22 618 A.... "C:\Windows\AppPatch\pcamain.sdb"
        14 Feb 2008 8:58:06 3 217 016 A.... "C:\Windows\AppPatch\sysmain.sdb"
        13 Mar 2008 9:06:24 9 358 A.... "C:\Windows\Debug\mrt.log"
        13 Mar 2008 9:06:24 4 662 A.... "C:\Windows\Debug\mrteng.log"
        2 Apr 2008 17:11:16 0 A.... "C:\Windows\Debug\PASSWD.LOG"
        13 Mar 2008 9:47:52 665 600 A.... "C:\Windows\inf\drvindex.dat"
        22 Feb 2008 0:19:42 9 856 A.... "C:\Windows\inf\flpydisk.PNF"
        13 Mar 2008 9:47:52 1 673 824 A.... "C:\Windows\inf\INFCACHE.1"
        13 Mar 2008 9:47:54 51 200 A.... "C:\Windows\inf\infpub.dat"
        13 Mar 2008 9:47:52 86 016 A.... "C:\Windows\inf\infstor.dat"
        13 Mar 2008 9:47:52 86 016 A.... "C:\Windows\inf\infstrng.dat"
        14 Feb 2008 9:51:14 65 966 A.... "C:\Windows\inf\keyboard.inf"
        14 Feb 2008 9:57:32 96 504 A.... "C:\Windows\inf\keyboard.PNF"
        13 Mar 2008 9:47:52 789 490 A.... "C:\Windows\inf\monitor.inf"
        13 Mar 2008 9:47:54 1 163 660 A.... "C:\Windows\inf\monitor.PNF"
        14 Feb 2008 9:51:08 47 458 A.... "C:\Windows\inf\mshdc.inf"
        14 Feb 2008 9:51:10 82 344 A.... "C:\Windows\inf\mshdc.PNF"
        14 Feb 2008 9:51:16 56 342 A.... "C:\Windows\inf\msmouse.inf"
        14 Feb 2008 9:51:18 99 376 A.... "C:\Windows\inf\msmouse.PNF"
        13 Mar 2008 9:47:54 12 176 A.... "C:\Windows\inf\setupapi.ev1"
        13 Mar 2008 9:47:54 20 248 A.... "C:\Windows\inf\setupapi.ev2"
        13 Mar 2008 9:47:54 86 016 A.... "C:\Windows\inf\setupapi.ev3"
        2 Apr 2008 17:14:58 1 708 226 A.... "C:\Windows\inf\setupapi.app.log"
        13 Mar 2008 9:47:56 7 240 048 A.... "C:\Windows\inf\setupapi.dev.log"
        14 Feb 2008 9:57:34 98 088 A.... "C:\Windows\inf\usbport.PNF"
        14 Feb 2008 9:55:28 682 072 A.... "C:\Windows\rescache\ResCache.mni"
        14 Feb 2008 9:05:00 18 432 A.... "C:\Windows\servicing\CbsMsg.dll"
        2 Apr 2008 17:11:28 3 456 A..H. "C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0"
        2 Apr 2008 17:11:28 3 456 A..H. "C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0"
        14 Feb 2008 8:55:34 124 928 A.... "C:\Windows\System32\advpack.dll"
        14 Feb 2008 9:04:56 12 800 A.... "C:\Windows\System32\batt.dll"
        14 Feb 2008 9:05:02 19 456 A.... "C:\Windows\System32\cfgmgr32.dll"
        14 Feb 2008 9:05:02 224 824 A.... "C:\Windows\System32\clfs.sys"
        14 Feb 2008 9:04:56 35 328 A.... "C:\Windows\System32\dispci.dll"
        14 Feb 2008 9:05:00 260 096 A.... "C:\Windows\System32\dpx.dll"
        14 Feb 2008 9:05:02 101 888 A.... "C:\Windows\System32\drvinst.exe"
        14 Feb 2008 8:55:26 347 136 A.... "C:\Windows\System32\dxtmsft.dll"
        14 Feb 2008 8:55:26 214 528 A.... "C:\Windows\System32\dxtrans.dll"
        14 Feb 2008 9:04:58 7 168 A.... "C:\Windows\System32\f3ahvoas.dll"
        18 Feb 2008 21:20:28 423 056 A.... "C:\Windows\System32\FNTCACHE.DAT"
        14 Feb 2008 8:58:04 1 686 528 A.... "C:\Windows\System32\gameux.dll"
        14 Feb 2008 8:55:22 63 488 A.... "C:\Windows\System32\icardie.dll"
        14 Feb 2008 8:55:10 70 656 A.... "C:\Windows\System32\ie4uinit.exe"
        14 Feb 2008 8:55:28 383 488 A.... "C:\Windows\System32\ieapfltr.dll"
        14 Feb 2008 8:55:40 6 066 176 A.... "C:\Windows\System32\ieframe.dll"
        14 Feb 2008 8:55:10 44 544 A.... "C:\Windows\System32\iernonce.dll"
        14 Feb 2008 8:55:10 56 320 A.... "C:\Windows\System32\iesetup.dll"
        14 Feb 2008 8:55:42 180 736 A.... "C:\Windows\System32\ieui.dll"
        14 Feb 2008 8:55:12 26 624 A.... "C:\Windows\System32\ieUnatt.exe"
        14 Feb 2008 8:55:16 1 831 424 A.... "C:\Windows\System32\inetcpl.cpl"
        22 Feb 2008 2:23:36 135 168 A.... "C:\Windows\System32\java.exe"
        22 Feb 2008 2:23:40 135 168 A.... "C:\Windows\System32\javaw.exe"
        22 Feb 2008 3:33:32 139 264 A.... "C:\Windows\System32\javaws.exe"
        14 Feb 2008 8:55:34 27 648 A.... "C:\Windows\System32\jsproxy.dll"
        12 Mar 2008 10:33:40 6 408 A.... "C:\Windows\System32\jupdate-1.6.0_05-b13.log"
        14 Feb 2008 9:05:00 6 656 A.... "C:\Windows\System32\kbd106n.dll"
        14 Feb 2008 9:04:52 115 200 A.... "C:\Windows\System32\loadperf.dll"
        14 Feb 2008 9:04:52 39 424 A.... "C:\Windows\System32\lodctr.exe"
        5 Mar 2008 18:30:54 19 148 408 A.... "C:\Windows\System32\mrt.exe"
        14 Feb 2008 8:55:38 3 592 192 A.... "C:\Windows\System32\mshtml.dll"
        14 Feb 2008 8:55:36 1 383 424 A.... "C:\Windows\System32\mshtml.tlb"
        14 Feb 2008 8:55:38 478 208 A.... "C:\Windows\System32\mshtmled.dll"
        14 Feb 2008 8:55:24 671 232 A.... "C:\Windows\System32\mstime.dll"
        14 Feb 2008 8:58:28 24 064 A.... "C:\Windows\System32\netcfg.exe"
        14 Feb 2008 8:58:28 22 016 A.... "C:\Windows\System32\netiougc.exe"
        14 Feb 2008 9:04:52 23 552 A.... "C:\Windows\System32\nshhttp.dll"
        14 Feb 2008 8:58:46 3 504 696 A.... "C:\Windows\System32\ntkrnlpa.exe"
        14 Feb 2008 8:58:46 3 470 392 A.... "C:\Windows\System32\ntoskrnl.exe"
        25 Mar 2008 21:33:50 22 A.... "C:\Windows\System32\nvs2.inf"
        14 Feb 2008 9:05:00 558 080 A.... "C:\Windows\System32\oleaut32.dll"
        2 Apr 2008 17:16:50 103 924 A.... "C:\Windows\System32\perfc009.dat"
        2 Apr 2008 17:16:50 117 572 A.... "C:\Windows\System32\perfc00C.dat"
        2 Apr 2008 17:16:50 610 142 A.... "C:\Windows\System32\perfh009.dat"
        2 Apr 2008 17:16:50 690 832 A.... "C:\Windows\System32\perfh00C.dat"
        2 Apr 2008 17:16:50 1 512 256 A.... "C:\Windows\System32\PerfStringBackup.INI"
        14 Feb 2008 8:55:34 44 544 A.... "C:\Windows\System32\pngfilt.dll"
        14 Feb 2008 9:04:52 17 408 A.... "C:\Windows\System32\prflbmsg.dll"
        14 Feb 2008 9:04:50 595 456 A.... "C:\Windows\System32\schedsvc.dll"
        14 Feb 2008 9:04:58 1 585 664 A.... "C:\Windows\System32\setupapi.dll"
        14 Feb 2008 8:58:28 167 424 A.... "C:\Windows\System32\tcpipcfg.dll"
        14 Feb 2008 9:05:02 221 696 A.... "C:\Windows\System32\umpnpmgr.dll"
        14 Feb 2008 9:04:52 32 256 A.... "C:\Windows\System32\unlodctr.exe"
        14 Feb 2008 8:55:32 1 159 680 A.... "C:\Windows\System32\urlmon.dll"
        14 Feb 2008 9:07:36 194 560 A.... "C:\Windows\System32\WebClnt.dll"
        14 Feb 2008 8:55:34 824 832 A.... "C:\Windows\System32\wininet.dll"
        14 Feb 2008 9:04:54 943 800 A.... "C:\Windows\System32\winload.exe"
        14 Feb 2008 9:05:04 613 888 A.... "C:\Windows\System32\wpd_ci.dll"
        25 Mar 2008 10:00:02 386 A.... "C:\Windows\Tasks\rpc.job"
        2 Apr 2008 17:11:22 6 A..H. "C:\Windows\Tasks\SA.DAT"
        2 Apr 2008 17:08:18 32 592 A.... "C:\Windows\Tasks\SCHEDLGU.TXT"
        2 Apr 2008 17:20:20 424 A..H. "C:\Windows\Tasks\User_Feed_Synchronization-{D33C3C54-64BC-4C4B-8E03-1058671110AE}.job"
        20 Mar 2008 22:43:16 120 A.... "C:\Windows\Temp\fwtsqmfile13.sqm"
        20 Mar 2008 23:04:18 120 A.... "C:\Windows\Temp\fwtsqmfile14.sqm"
        20 Mar 2008 22:31:08 608 A.... "C:\Windows\Temp\fwtsqmfile11.sqm"
        20 Mar 2008 22:31:08 120 A.... "C:\Windows\Temp\fwtsqmfile12.sqm"
        25 Mar 2008 17:50:48 120 A.... "C:\Windows\Temp\fwtsqmfile04.sqm"
        21 Mar 2008 0:01:22 120 A.... "C:\Windows\Temp\fwtsqmfile17.sqm"
        21 Mar 2008 20:33:16 608 A.... "C:\Windows\Temp\fwtsqmfile18.sqm"
        20 Mar 2008 23:20:02 120 A.... "C:\Windows\Temp\fwtsqmfile15.sqm"
        20 Mar 2008 23:41:40 120 A.... "C:\Windows\Temp\fwtsqmfile16.sqm"
        28 Mar 2008 2:17:48 120 A.... "C:\Windows\Temp\fwtsqmfile07.sqm"
        28 Mar 2008 2:19:04 120 A.... "C:\Windows\Temp\fwtsqmfile08.sqm"
        26 Mar 2008 16:33:16 608 A.... "C:\Windows\Temp\fwtsqmfile05.sqm"
        28 Mar 2008 2:17:48 608 A.... "C:\Windows\Temp\fwtsqmfile06.sqm"
        21 Mar 2008 20:33:18 120 A.... "C:\Windows\Temp\fwtsqmfile19.sqm"
        29 Mar 2008 3:12:40 120 A.... "C:\Windows\Temp\fwtsqmfile09.sqm"
        19 Mar 2008 21:20:52 120 A.... "C:\Windows\Temp\fwtsqmfile10.sqm"
        25 Mar 2008 17:05:16 608 A.... "C:\Windows\Temp\fwtsqmfile00.sqm"
        25 Mar 2008 17:05:16 120 A.... "C:\Windows\Temp\fwtsqmfile01.sqm"
        25 Mar 2008 17:16:58 120 A.... "C:\Windows\Temp\fwtsqmfile02.sqm"
        25 Mar 2008 17:33:38 120 A.... "C:\Windows\Temp\fwtsqmfile03.sqm"
        6 Feb 2008 10:00:02 622 A.... "C:\Windows\Temp\lpksetup-20080206-085959-0.log"
        4 Mar 2008 16:12:28 11 522 A.... "C:\Windows\Temp\lpksetup-20080304-151211-0.log"
        10 Mar 2008 13:39:12 622 A.... "C:\Windows\Temp\lpksetup-20080310-123910-0.log"
        6 Mar 2008 9:20:28 11 522 A.... "C:\Windows\Temp\lpksetup-20080306-082010-0.log"
        18 Mar 2008 13:19:24 622 A.... "C:\Windows\Temp\lpksetup-20080318-121921-0.log"
        14 Mar 2008 16:01:34 622 A.... "C:\Windows\Temp\lpksetup-20080314-150130-0.log"
        12 Mar 2008 21:04:50 11 522 A.... "C:\Windows\Temp\lpksetup-20080312-200440-0.log"
        30 Mar 2008 14:54:00 11 672 A.... "C:\Windows\Temp\lpksetup-20080330-145242-0.log"
        4 Mar 2008 19:51:46 622 A.... "C:\Windows\Temp\lpksetup-20080304-185143-0.log"
        4 Mar 2008 12:59:02 622 A.... "C:\Windows\Temp\lpksetup-20080304-115859-0.log"
        14 Mar 2008 16:01:32 11 672 A.... "C:\Windows\Temp\lpksetup-20080314-150105-0.log"
        18 Mar 2008 13:19:22 11 672 A.... "C:\Windows\Temp\lpksetup-20080318-121905-0.log"
        26 Mar 2008 10:36:10 622 A.... "C:\Windows\Temp\lpksetup-20080326-093608-0.log"
        4 Mar 2008 16:12:28 622 A.... "C:\Windows\Temp\lpksetup-20080304-151226-0.log"
        23 Mar 2008 0:29:34 11 672 A.... "C:\Windows\Temp\lpksetup-20080322-232921-0.log"
        6 Mar 2008 9:20:30 622 A.... "C:\Windows\Temp\lpksetup-20080306-082027-0.log"
        8 Mar 2008 18:56:14 11 522 A.... "C:\Windows\Temp\lpksetup-20080308-175602-0.log"
        23 Mar 2008 0:29:34 622 A.... "C:\Windows\Temp\lpksetup-20080322-232932-0.log"
        12 Mar 2008 21:04:50 622 A.... "C:\Windows\Temp\lpksetup-20080312-200449-0.log"
        8 Mar 2008 18:56:16 622 A.... "C:\Windows\Temp\lpksetup-20080308-175613-0.log"
        4 Mar 2008 19:51:44 11 522 A.... "C:\Windows\Temp\lpksetup-20080304-185134-0.log"
        10 Mar 2008 13:39:12 11 522 A.... "C:\Windows\Temp\lpksetup-20080310-123855-0.log"
        12 Mar 2008 10:37:00 622 A.... "C:\Windows\Temp\lpksetup-20080312-093654-0.log"
        26 Mar 2008 10:36:08 11 672 A.... "C:\Windows\Temp\lpksetup-20080326-093553-0.log"
        4 Mar 2008 12:59:00 11 522 A.... "C:\Windows\Temp\lpksetup-20080304-115846-0.log"
        30 Mar 2008 14:54:02 622 A.... "C:\Windows\Temp\lpksetup-20080330-145359-0.log"
        21 Feb 2008 16:30:18 11 522 A.... "C:\Windows\Temp\lpksetup-20080221-153004-0.log"
        12 Mar 2008 10:36:56 11 522 A.... "C:\Windows\Temp\lpksetup-20080312-092919-0.log"
        7 Feb 2008 9:13:26 622 A.... "C:\Windows\Temp\lpksetup-20080207-081321-0.log"
        17 Feb 2008 21:14:54 11 218 A.... "C:\Windows\Temp\lpksetup-20080217-201323-0.log"
        17 Feb 2008 21:14:56 622 A.... "C:\Windows\Temp\lpksetup-20080217-201453-0.log"
        25 Feb 2008 17:55:58 622 A.... "C:\Windows\Temp\lpksetup-20080225-165555-0.log"
        11 Feb 2008 17:37:12 622 A.... "C:\Windows\Temp\lpksetup-20080211-163708-0.log"
        19 Feb 2008 13:09:26 11 522 A.... "C:\Windows\Temp\lpksetup-20080219-120912-0.log"
        21 Feb 2008 16:30:20 622 A.... "C:\Windows\Temp\lpksetup-20080221-153018-0.log"
        19 Feb 2008 13:09:26 622 A.... "C:\Windows\Temp\lpksetup-20080219-120925-0.log"
        3 Feb 2008 21:35:28 10 130 A.... "C:\Windows\Temp\lpksetup-20080203-203515-0.log"
        29 Feb 2008 15:29:36 11 522 A.... "C:\Windows\Temp\lpksetup-20080229-142918-0.log"
        13 Feb 2008 10:38:30 622 A.... "C:\Windows\Temp\lpksetup-20080213-093826-0.log"
        13 Feb 2008 10:38:28 10 306 A.... "C:\Windows\Temp\lpksetup-20080213-093721-0.log"
        3 Feb 2008 21:35:28 622 A.... "C:\Windows\Temp\lpksetup-20080203-203526-0.log"
        23 Feb 2008 23:57:20 622 A.... "C:\Windows\Temp\lpksetup-20080223-225717-0.log"
        9 Feb 2008 18:21:12 10 306 A.... "C:\Windows\Temp\lpksetup-20080209-171732-0.log"
        7 Feb 2008 9:13:22 10 306 A.... "C:\Windows\Temp\lpksetup-20080207-081046-0.log"
        29 Feb 2008 15:29:38 622 A.... "C:\Windows\Temp\lpksetup-20080229-142934-0.log"
        11 Feb 2008 17:37:10 10 306 A.... "C:\Windows\Temp\lpksetup-20080211-163644-0.log"
        25 Feb 2008 17:55:56 11 522 A.... "C:\Windows\Temp\lpksetup-20080225-165535-0.log"
        9 Feb 2008 18:22:28 622 A.... "C:\Windows\Temp\lpksetup-20080209-172147-0.log"
        23 Feb 2008 23:57:18 11 522 A.... "C:\Windows\Temp\lpksetup-20080223-225649-0.log"
        1 Mar 2008 19:00:14 622 A.... "C:\Windows\Temp\lpksetup-20080301-180011-0.log"
        15 Mar 2008 13:36:14 11 672 A.... "C:\Windows\Temp\lpksetup-20080315-123601-0.log"
        29 Mar 2008 18:22:26 11 672 A.... "C:\Windows\Temp\lpksetup-20080329-172213-0.log"
        15 Mar 2008 13:36:14 622 A.... "C:\Windows\Temp\lpksetup-20080315-123612-0.log"
        13 Mar 2008 10:04:50 11 672 A.... "C:\Windows\Temp\lpksetup-20080313-090430-0.log"
        9 Mar 2008 20:52:34 11 522 A.... "C:\Windows\Temp\lpksetup-20080309-195222-0.log"
        9 Mar 2008 20:52:34 622 A.... "C:\Windows\Temp\lpksetup-20080309-195232-0.log"
        29 Mar 2008 14:44:46 11 672 A.... "C:\Windows\Temp\lpksetup-20080329-134359-0.log"
        13 Mar 2008 9:14:18 622 A.... "C:\Windows\Temp\lpksetup-20080313-081415-0.log"
        29 Mar 2008 17:24:08 622 A.... "C:\Windows\Temp\lpksetup-20080329-162407-0.log"
        31 Mar 2008 14:07:50 11 672 A.... "C:\Windows\Temp\lpksetup-20080331-140736-0.log"
        7 Mar 2008 21:37:30 11 522 A.... "C:\Windows\Temp\lpksetup-20080307-203716-0.log"
        29 Mar 2008 18:22:26 622 A.... "C:\Windows\Temp\lpksetup-20080329-172224-0.log"
        13 Mar 2008 10:04:52 622 A.... "C:\Windows\Temp\lpksetup-20080313-090449-0.log"
        31 Mar 2008 14:07:52 622 A.... "C:\Windows\Temp\lpksetup-20080331-140749-0.log"
        7 Mar 2008 21:37:30 622 A.... "C:\Windows\Temp\lpksetup-20080307-203728-0.log"
        11 Mar 2008 12:58:48 11 522 A.... "C:\Windows\Temp\lpksetup-20080311-115827-0.log"
        11 Mar 2008 18:49:52 11 522 A.... "C:\Windows\Temp\lpksetup-20080311-174934-0.log"
        13 Mar 2008 9:14:16 11 672 A.... "C:\Windows\Temp\lpksetup-20080313-081359-0.log"
        27 Mar 2008 10:38:52 11 496 A.... "C:\Windows\Temp\lpksetup-20080327-093840-0.log"
        11 Mar 2008 12:58:48 622 A.... "C:\Windows\Temp\lpksetup-20080311-115847-0.log"
        29 Mar 2008 14:44:48 622 A.... "C:\Windows\Temp\lpksetup-20080329-134445-0.log"
        27 Mar 2008 10:38:52 622 A.... "C:\Windows\Temp\lpksetup-20080327-093850-0.log"
        29 Mar 2008 17:24:08 11 672 A.... "C:\Windows\Temp\lpksetup-20080329-162357-0.log"
        11 Mar 2008 18:49:54 622 A.... "C:\Windows\Temp\lpksetup-20080311-174951-0.log"
        1 Mar 2008 19:00:12 11 522 A.... "C:\Windows\Temp\lpksetup-20080301-175953-0.log"
        20 Feb 2008 10:51:06 622 A.... "C:\Windows\Temp\lpksetup-20080220-095101-0.log"
        12 Feb 2008 13:04:04 622 A.... "C:\Windows\Temp\lpksetup-20080212-120321-0.log"
        22 Feb 2008 13:13:42 11 522 A.... "C:\Windows\Temp\lpksetup-20080222-121221-0.log"
        24 Feb 2008 23:18:26 622 A.... "C:\Windows\Temp\lpksetup-20080224-221821-0.log"
        12 Feb 2008 19:11:44 10 306 A.... "C:\Windows\Temp\lpksetup-20080212-181131-0.log"
        1 Apr 2008 13:58:12 622 A.... "C:\Windows\Temp\lpksetup-20080401-135810-0.log"
        12 Feb 2008 19:11:44 622 A.... "C:\Windows\Temp\lpksetup-20080212-181143-0.log"
        2 Feb 2008 18:34:54 622 A.... "C:\Windows\Temp\lpksetup-20080202-173452-0.log"
        14 Feb 2008 10:09:08 622 A.... "C:\Windows\Temp\lpksetup-20080214-090906-0.log"
        26 Feb 2008 13:18:08 622 A.... "C:\Windows\Temp\lpksetup-20080226-121805-0.log"
        14 Feb 2008 10:09:08 11 068 A.... "C:\Windows\Temp\lpksetup-20080214-090832-0.log"
        20 Feb 2008 10:51:02 11 522 A.... "C:\Windows\Temp\lpksetup-20080220-095028-0.log"
        14 Feb 2008 9:08:18 10 764 A.... "C:\Windows\Temp\lpksetup-20080214-080449-0.log"
        24 Feb 2008 23:18:22 11 522 A.... "C:\Windows\Temp\lpksetup-20080224-221739-0.log"
        18 Feb 2008 21:35:38 11 522 A.... "C:\Windows\Temp\lpksetup-20080218-203524-0.log"
        22 Feb 2008 13:13:58 622 A.... "C:\Windows\Temp\lpksetup-20080222-121347-0.log"
        16 Feb 2008 18:28:58 11 068 A.... "C:\Windows\Temp\lpksetup-20080216-172833-0.log"
        2 Feb 2008 18:34:54 10 306 A.... "C:\Windows\Temp\lpksetup-20080202-173437-0.log"
        12 Feb 2008 13:03:18 10 306 A.... "C:\Windows\Temp\lpksetup-20080212-120059-0.log"
        26 Feb 2008 13:18:06 11 522 A.... "C:\Windows\Temp\lpksetup-20080226-121749-0.log"
        18 Feb 2008 21:35:40 622 A.... "C:\Windows\Temp\lpksetup-20080218-203537-0.log"
        16 Feb 2008 18:28:58 622 A.... "C:\Windows\Temp\lpksetup-20080216-172856-0.log"
        1 Apr 2008 13:58:12 11 672 A.... "C:\Windows\Temp\lpksetup-20080401-135756-0.log"
        21 Mar 2008 0:33:02 622 A.... "C:\Windows\Temp\lpksetup-20080320-233300-0.log"
        16 Mar 2008 13:13:54 11 672 A.... "C:\Windows\Temp\lpksetup-20080316-121210-0.log"
        14 Feb 2008 9:09:08 622 A.... "C:\Windows\Temp\lpksetup-20080214-080829-0.log"
        24 Mar 2008 22:36:14 622 A.... "C:\Windows\Temp\lpksetup-20080324-213611-0.log"
        14 Mar 2008 1:34:36 11 672 A.... "C:\Windows\Temp\lpksetup-20080314-003423-0.log"
        14 Mar 2008 1:34:36 622 A.... "C:\Windows\Temp\lpksetup-20080314-003434-0.log"
        22 Mar 2008 19:33:54 11 672 A.... "C:\Windows\Temp\lpksetup-20080322-183342-0.log"
        16 Mar 2008 13:14:02 622 A.... "C:\Windows\Temp\lpksetup-20080316-121354-0.log"
        4 Mar 2008 22:17:20 11 522 A.... "C:\Windows\Temp\lpksetup-20080304-211705-0.log"
        20 Mar 2008 9:26:30 11 672 A.... "C:\Windows\Temp\lpksetup-20080320-082612-0.log"
        2 Mar 2008 15:43:08 622 A.... "C:\Windows\Temp\lpksetup-20080302-144305-0.log"
        4 Mar 2008 22:17:20 622 A.... "C:\Windows\Temp\lpksetup-20080304-211718-0.log"
        20 Mar 2008 9:26:30 622 A.... "C:\Windows\Temp\lpksetup-20080320-082628-0.log"
        6 Mar 2008 20:09:32 11 522 A.... "C:\Windows\Temp\lpksetup-20080306-190920-0.log"
        5 Mar 2008 0:36:30 11 522 A.... "C:\Windows\Temp\lpksetup-20080304-233617-0.log"
        6 Mar 2008 20:09:32 622 A.... "C:\Windows\Temp\lpksetup-20080306-190930-0.log"
        5 Mar 2008 0:36:32 622 A.... "C:\Windows\Temp\lpksetup-20080304-233629-0.log"
        21 Mar 2008 0:33:02 11 672 A.... "C:\Windows\Temp\lpksetup-20080320-233248-0.log"
        22 Mar 2008 19:33:56 622 A.... "C:\Windows\Temp\lpksetup-20080322-183353-0.log"
        24 Mar 2008 22:36:12 11 672 A.... "C:\Windows\Temp\lpksetup-20080324-213556-0.log"
        2 Mar 2008 15:43:06 11 522 A.... "C:\Windows\Temp\lpksetup-20080302-144255-0.log"
        2 Apr 2008 16:05:34 11 672 A.... "C:\Windows\Temp\lpksetup-20080402-160510-0.log"
        27 Feb 2008 14:28:28 622 A.... "C:\Windows\Temp\lpksetup-20080227-132820-0.log"
        3 Feb 2008 15:43:10 10 306 A.... "C:\Windows\Temp\lpksetup-20080203-144252-0.log"
        2 Apr 2008 14:09:52 622 A.... "C:\Windows\Temp\lpksetup-20080402-140928-0.log"
        3 Feb 2008 15:43:10 622 A.... "C:\Windows\Temp\lpksetup-20080203-144308-0.log"
        2 Apr 2008 14:09:24 11 672 A.... "C:\Windows\Temp\lpksetup-20080402-140625-0.log"
        5 Feb 2008 8:49:14 10 306 A.... "C:\Windows\Temp\lpksetup-20080205-074904-0.log"
        27 Feb 2008 14:28:22 11 522 A.... "C:\Windows\Temp\lpksetup-20080227-132713-0.log"
        21 Feb 2008 9:23:38 11 522 A.... "C:\Windows\Temp\lpksetup-20080221-082323-0.log"
        2 Apr 2008 16:05:36 622 A.... "C:\Windows\Temp\lpksetup-20080402-160533-0.log"
        23 Feb 2008 15:42:18 622 A.... "C:\Windows\Temp\lpksetup-20080223-144215-0.log"
        5 Feb 2008 8:49:14 622 A.... "C:\Windows\Temp\lpksetup-20080205-074913-0.log"
        21 Feb 2008 9:23:38 622 A.... "C:\Windows\Temp\lpksetup-20080221-082336-0.log"
        23 Feb 2008 15:42:16 11 522 A.... "C:\Windows\Temp\lpksetup-20080223-144125-0.log"
        3 Mar 2008 16:00:42 11 522 A.... "C:\Windows\Temp\lpksetup-20080303-150014-0.log"
        29 Mar 2008 21:20:06 622 A.... "C:\Windows\Temp\lpksetup-20080329-202004-0.log"
        17 Mar 2008 16:45:52 11 672 A.... "C:\Windows\Temp\lpksetup-20080317-154311-0.log"
        3 Mar 2008 16:00:50 622 A.... "C:\Windows\Temp\lpksetup-20080303-150041-0.log"
        7 Mar 2008 15:53:24 622 A.... "C:\Windows\Temp\lpksetup-20080307-145321-0.log"
        7 Mar 2008 15:53:22 11 522 A.... "C:\Windows\Temp\lpksetup-20080307-145224-0.log"
        19 Mar 2008 21:38:46 11 672 A.... "C:\Windows\Temp\lpksetup-20080319-203832-0.log"
        23 Mar 2008 16:04:34 11 672 A.... "C:\Windows\Temp\lpksetup-20080323-150419-0.log"
        19 Mar 2008 10:38:18 11 672 A.... "C:\Windows\Temp\lpksetup-20080319-093804-0.log"
        23 Mar 2008 16:04:36 622 A.... "C:\Windows\Temp\lpksetup-20080323-150433-0.log"
        19 Mar 2008 10:38:18 622 A.... "C:\Windows\Temp\lpksetup-20080319-093816-0.log"
        20 Mar 2008 0:39:24 622 A.... "C:\Windows\Temp\lpksetup-20080319-233921-0.log"
        5 Mar 2008 10:35:56 11 522 A.... "C:\Windows\Temp\lpksetup-20080305-093539-0.log"
        11 Mar 2008 23:46:48 11 522 A.... "C:\Windows\Temp\lpksetup-20080311-224636-0.log"
        11 Mar 2008 23:46:50 622 A.... "C:\Windows\Temp\lpksetup-20080311-224647-0.log"
        19 Mar 2008 21:38:46 622 A.... "C:\Windows\Temp\lpksetup-20080319-203844-0.log"
        29 Mar 2008 21:20:06 11 672 A.... "C:\Windows\Temp\lpksetup-20080329-201952-0.log"
        5 Mar 2008 10:35:56 622 A.... "C:\Windows\Temp\lpksetup-20080305-093554-0.log"
        17 Mar 2008 16:46:00 622 A.... "C:\Windows\Temp\lpksetup-20080317-154556-0.log"
        28 Feb 2008 17:04:26 11 522 A.... "C:\Windows\Temp\lpksetup-20080228-160213-0.log"
        2 Feb 2008 22:46:14 10 306 A.... "C:\Windows\Temp\lpksetup-20080202-214600-0.log"
        20 Mar 2008 0:39:22 11 496 A.... "C:\Windows\Temp\lpksetup-20080319-233909-0.log"
        2 Feb 2008 22:46:14 622 A.... "C:\Windows\Temp\lpksetup-20080202-214612-0.log"
        1 Apr 2008 21:24:42 11 672 A.... "C:\Windows\Temp\lpksetup-20080401-212330-0.log"
        1 Apr 2008 21:24:42 622 A.... "C:\Windows\Temp\lpksetup-20080401-212440-0.log"
        18 Feb 2008 17:24:44 622 A.... "C:\Windows\Temp\lpksetup-20080218-162441-0.log"
        4 Feb 2008 17:33:44 622 A.... "C:\Windows\Temp\lpksetup-20080204-163340-0.log"
        8 Feb 2008 18:06:50 10 306 A.... "C:\Windows\Temp\lpksetup-20080208-170204-0.log"
        18 Feb 2008 17:24:42 11 522 A.... "C:\Windows\Temp\lpksetup-20080218-162419-0.log"
        28 Feb 2008 17:05:02 622 A.... "C:\Windows\Temp\lpksetup-20080228-160437-0.log"
        4 Feb 2008 17:33:42 10 306 A.... "C:\Windows\Temp\lpksetup-20080204-163139-0.log"
        8 Feb 2008 18:06:54 622 A.... "C:\Windows\Temp\lpksetup-20080208-170649-0.log"
        6 Feb 2008 10:00:00 10 306 A.... "C:\Windows\Temp\lpksetup-20080206-085945-0.log"
        1 Apr 2008 21:29:24 266 666 A.... "C:\Windows\Temp\MpCmdRun.log"
        2 Apr 2008 14:03:40 253 498 A.... "C:\Windows\Temp\MpSigStub.log"
        25 Mar 2008 21:33:50 7 A.... "C:\Windows\Temp\msksetup.log"
        2 Apr 2008 15:18:18 524 288 A.... "C:\Windows\Temp\TMP0000000A5C550E75DCF0B11B"
        14 Feb 2008 9:51:42 2 720 A.... "C:\Windows\winsxs\cleanup.xml"
        13 Mar 2008 9:47:58 526 A.... "C:\Windows\winsxs\poqexec.log"
        2 Apr 2008 17:01:18 0 A.... "C:\Windows\Debug\UserMode\ChkAcc.bak"
        2 Apr 2008 17:11:20 0 A.... "C:\Windows\Debug\UserMode\ChkAcc.log"
        28 Mar 2008 18:43:00 57 683 A.... "C:\Windows\Debug\WIA\wiatrace.log"
        2 Apr 2008 17:16:34 3 953 A.... "C:\Windows\inf\WmiApRpl\WmiApRpl.h"
        2 Apr 2008 17:08:18 19 327 424 A.... "C:\Windows\Logs\CBS\CBS.log"
        16 Feb 2008 1:44:52 56 682 186 A.... "C:\Windows\Logs\CBS\CBS.persist.log"
        12 Mar 2008 10:26:44 30 458 A.... "C:\Windows\Logs\DPX\setupact.log"
        12 Mar 2008 10:26:44 30 458 A.... "C:\Windows\Logs\DPX\setuperr.log"
        14 Feb 2008 9:55:28 946 532 A.... "C:\Windows\rescache\rc0005\Segment0.cmf"
        14 Feb 2008 9:55:28 48 064 A.... "C:\Windows\rescache\rc0005\Segment0.toc"
        14 Feb 2008 9:55:28 1 240 652 A.... "C:\Windows\rescache\rc0005\Segment1.cmf"
        14 Feb 2008 9:55:28 48 064 A.... "C:\Windows\rescache\rc0005\Segment1.toc"
        14 Feb 2008 9:55:30 927 186 A.... "C:\Windows\rescache\rc0005\Segment2.cmf"
        14 Feb 2008 9:55:30 48 064 A.... "C:\Windows\rescache\rc0005\Segment2.toc"
        14 Feb 2008 9:55:30 1 141 823 A.... "C:\Windows\rescache\rc0005\Segment3.cmf"
        14 Feb 2008 9:55:30 48 064 A.... "C:\Windows\rescache\rc0005\Segment3.toc"
        14 Feb 2008 9:55:32 766 206 A.... "C:\Windows\rescache\rc0005\Segment4.cmf"
        14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment4.toc"
        14 Feb 2008 9:55:32 855 554 A.... "C:\Windows\rescache\rc0005\Segment5.cmf"
        14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment5.toc"
        14 Feb 2008 9:55:32 1 313 717 A.... "C:\Windows\rescache\rc0005\Segment6.cmf"
        14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment6.toc"
        14 Feb 2008 9:55:32 924 827 A.... "C:\Windows\rescache\rc0005\Segment7.cmf"
        14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment7.toc"
        14 Feb 2008 9:55:32 1 163 209 A.... "C:\Windows\rescache\rc0005\Segment8.cmf"
        14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment8.toc"
        14 Feb 2008 9:55:32 446 934 A.... "C:\Windows\rescache\rc0005\Segment9.cmf"
        14 Feb 2008 9:55:32 48 064 A.... "C:\Windows\rescache\rc0005\Segment9.toc"
        25 Feb 2008 23:17:42 2 408 A.... "C:\Windows\servicing\Packages\Package_1_for_KB905866~31bf3856ad364e35~x86~~6.0.17.0.mum"
        25 Feb 2008 23:18:14 12 686 A.... "C:\Windows\servicing\Packages\Package_1_for_KB905866~31bf3856ad364e35~x86~~6.0.17.0.cat"
        2 Apr 2008 17:13:44 262 144 A.SH. "C:\Windows\ServiceProfiles\LocalService\ntuser.dat"
        2 Apr 2008 17:13:44 262 144 A..H. "C:\Windows\ServiceProfiles\LocalService\ntuser.dat.LOG1"
        2 Apr 2008 17:13:38 262 144 A.SH. "C:\Windows\ServiceProfiles\NetworkService\ntuser.dat"
        2 Apr 2008 17:13:38 262 144 A..H. "C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1"
        30 Mar 2008 14:47:22 3 561 333 A.... "C:\Windows\System32\CodeIntegrity\bootcat.cache"
        14 Feb 2008 8:58:46 21 560 A.... "C:\Windows\System32\drivers\atapi.sys"
        14 Feb 2008 8:58:46 109 624 A.... "C:\Windows\System32\drivers\ataport.sys"
        14 Feb 2008 9:04:56 54 784 A.... "C:\Windows\System32\drivers\i8042prt.sys"
        14 Feb 2008 8:58:44 17 464 A.... "C:\Windows\System32\drivers\intelide.sys"
        14 Feb 2008 9:04:56 35 384 A.... "C:\Windows\System32\drivers\kbdclass.sys"
        14 Feb 2008 9:04:56 34 360 A.... "C:\Windows\System32\drivers\mouclass.sys"
        14 Feb 2008 9:07:36 110 080 A.... "C:\Windows\System32\drivers\mrxdav.sys"
        14 Feb 2008 8:58:28 216 632 A.... "C:\Windows\System32\drivers\netio.sys"
        14 Feb 2008 8:58:44 154 624 A.... "C:\Windows\System32\drivers\nwifi.sys"
        14 Feb 2008 8:58:46 45 112 A.... "C:\Windows\System32\drivers\pciidex.sys"
        14 Feb 2008 9:04:56 19 968 A.... "C:\Windows\System32\drivers\sermouse.sys"
        14 Feb 2008 8:58:28 803 328 A.... "C:\Windows\System32\drivers\tcpip.sys"
        14 Feb 2008 9:04:58 495 160 A.... "C:\Windows\System32\drivers\Wdf01000.sys"
        14 Feb 2008 9:04:58 35 384 A.... "C:\Windows\System32\drivers\WdfLdr.sys"
        14 Feb 2008 8:58:28 49 152 A.... "C:\Windows\System32\migration\netiomig.dll"
        9 Mar 2008 0:21:52 131 072 A.... "C:\Windows\System32\NDF\eventlog.etl"
        2 Apr 2008 17:13:24 10 965 A.... "C:\Windows\System32\spool\spooler.xml"
        2 Apr 2008 17:11:22 4 096 ..... "C:\Windows\System32\spool\SpoolerETW.etl"
        2 Apr 2008 17:14:06 48 626 A.... "C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin"
        21 Feb 2008 12:27:52 4 A.... "C:\Windows\System32\WDI\ERCQueuedResolutions.dat"
        2 Apr 2008 17:14:04 43 106 A.... "C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin"
        2 Apr 2008 17:12:22 16 384 ..... "C:\Windows\System32\wfp\wfpdiag.etl"
        15 Feb 2008 10:17:44 690 A.... "C:\Windows\Temp\MPTelemetrySubmit\client_manifest.txt"
        15 Feb 2008 10:17:44 716 A.... "C:\Windows\Temp\MPTelemetrySubmit\watson_manifest.txt"
        14 Feb 2008 9:06:54 101 888 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_drvinst.exe_6593e92a"
        14 Feb 2008 9:06:54 3 692 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_umpnpmgr.mof_112f9e6c"
        14 Feb 2008 9:06:56 39 424 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_lodctr.exe_b02cefba"
        14 Feb 2008 8:57:04 195 203 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlactivexcompat_31bf3856ad364e35_6.0.6000.16609_none_1592313b129ab58c.manifest"
        14 Feb 2008 9:06:52 3 726 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_173e50dcd9ce3198.manifest"
        14 Feb 2008 9:06:54 53 248 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_0b0664296d2c92b1_setupapi.dll.mui_bcc172a4"
        14 Feb 2008 9:06:54 88 936 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16609_none_bb22ee81fe4b8646.manifest"
        14 Feb 2008 8:58:30 22 016 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_netiougc.exe_94123cfe"
        13 Mar 2008 9:04:20 1 060 920 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.16615_none_a4851c9d1fc8a346_ntfs.sys_e80dca04"
        14 Feb 2008 9:06:56 30 674 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfd.dat_f1e3dfd2"
        14 Feb 2008 8:58:50 3 470 392 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934_ntoskrnl.exe_0fb0ab79"
        14 Feb 2008 8:58:30 167 424 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_tcpipcfg.dll_e3a99e8a"
        13 Mar 2008 9:04:20 14 737 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6000.16615_none_a4851c9d1fc8a346.manifest"
        14 Feb 2008 9:06:52 3 472 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913_clfs.mof_04dfde60"
        14 Feb 2008 8:57:06 3 592 192 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16609_none_1165d69024face3a_mshtml.dll_fab8f891"
        14 Feb 2008 8:58:50 3 504 696 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934_ntkrnlpa.exe_165c312a"
        14 Feb 2008 9:06:56 287 440 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfi.dat_e3a35ecf"
        14 Feb 2008 8:58:30 216 632 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16627_none_54a6905db830dfb1_netio.sys_a06e75d0"
        14 Feb 2008 8:57:08 64 512 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504_wininetplugin.dll_f2ff35f9"
        14 Feb 2008 8:57:06 6 066 176 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67_ieframe.dll_c6cbe33f"
        14 Feb 2008 8:57:08 824 832 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504_wininet.dll_790e2e3a"
        14 Feb 2008 9:06:54 17 524 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23.manifest"
        14 Feb 2008 9:06:52 8 279 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913.manifest"
        14 Feb 2008 9:06:54 3 685 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_drvinst.mof_6593cf80"
        14 Feb 2008 8:57:06 829 928 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67.manifest"
        14 Feb 2008 9:06:54 3 689 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.16609_none_33181da4c90f2d73_setupapi.mof_8d9de59f"
        14 Feb 2008 8:57:08 347 136 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585_dxtmsft.dll_4b67eac6"
        14 Feb 2008 9:06:54 120 320 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_cntrtextmig.dll_08675f2d"
        14 Feb 2008 8:57:06 1 383 424 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16609_none_1165d69024face3a_mshtml.tlb_fab8f577"
        18 Feb 2008 17:16:46 2 027 008 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16551_none_b6d829dc9d87e0b4_win32k.sys_0d7a6fb3"
        18 Feb 2008 17:16:46 88 300 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.0.6000.16553_none_0161deb32631b63d_wbemcomn.tmf_e233833d"
        14 Feb 2008 9:06:56 287 440 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfh.dat_e67d1236"
        14 Feb 2008 8:57:28 124 928 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16609_none_a9ee296df5a1e10e_advpack.dll_8c6ea088"
        14 Feb 2008 8:57:12 283 492 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16609_none_b305dbcfd99b3e71.manifest"
        18 Feb 2008 17:16:46 6 928 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16551_none_b6d829dc9d87e0b4.manifest"
        14 Feb 2008 8:58:30 28 871 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a.manifest"
        14 Feb 2008 8:57:08 463 701 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585.manifest"
        18 Feb 2008 17:16:46 7 520 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.0.6000.16553_none_0161deb32631b63d.manifest"
        14 Feb 2008 9:06:54 17 408 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_prflbmsg.dll_2e46e937"
        14 Feb 2008 9:06:54 558 080 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ole-automation_31bf3856ad364e35_6.0.6000.16609_none_bb22ee81fe4b8646_oleaut32.dll_730e3d41"
        14 Feb 2008 8:57:28 7 571 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-advpack_31bf3856ad364e35_6.0.6000.16609_none_a9ee296df5a1e10e.manifest"
        14 Feb 2008 9:06:52 17 408 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_173e50dcd9ce3198_winresume.exe.mui_ff8b5358"
        14 Feb 2008 8:58:50 18 778 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6000.16584_none_69f7a2dcb739c934.manifest"
        14 Feb 2008 9:06:54 19 532 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.16609_none_33181da4c90f2d73.manifest"
        14 Feb 2008 8:57:04 42 229 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-extcompat_31bf3856ad364e35_6.0.6000.16609_none_3ad26ff6d96b5938.manifest"
        14 Feb 2008 8:58:30 3 908 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-netio-infrastructure_31bf3856ad364e35_6.0.6000.16627_none_54a6905db830dfb1.manifest"
        18 Feb 2008 17:16:46 356 352 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-wmi-core-wbemcomn-dll_31bf3856ad364e35_6.0.6000.16553_none_0161deb32631b63d_wbemcomn.dll_e2337e3c"
        14 Feb 2008 8:57:06 180 736 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ieframe_31bf3856ad364e35_6.0.6000.16609_none_62c53093b0f05c67_ieui.dll_f0fcf806"
        14 Feb 2008 9:06:56 32 256 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_unlodctr.exe_69df45bb"
        14 Feb 2008 9:06:56 943 800 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366_winload.exe_75835076"
        14 Feb 2008 9:06:56 115 200 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_loadperf.dll_3a569bab"
        14 Feb 2008 9:06:52 28 672 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_173e50dcd9ce3198_winload.exe.mui_3bc5b827"
        14 Feb 2008 9:06:52 123 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913_clfsuninstall.mof_d0605990"
        14 Feb 2008 9:06:52 224 824 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-commonlog_31bf3856ad364e35_6.0.6000.16609_none_7ca55ea12a5d5913_clfs.sys_04dfdff9"
        14 Feb 2008 8:57:06 928 494 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_6.0.6000.16609_none_1165d69024face3a.manifest"
        14 Feb 2008 8:57:08 27 648 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504_jsproxy.dll_3cc8d651"
        18 Feb 2008 17:16:46 5 868 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6000.16553_none_c5179c13c95485bd.manifest"
        14 Feb 2008 8:58:30 803 328 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_tcpip.sys_3339bd51"
        14 Feb 2008 9:06:54 1 585 664 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi_31bf3856ad364e35_6.0.6000.16609_none_33181da4c90f2d73_setupapi.dll_8d9de2e7"
        14 Feb 2008 9:06:54 20 589 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f.manifest"
        14 Feb 2008 8:57:12 1 159 680 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.16609_none_b305dbcfd99b3e71_urlmon.dll_95c89473"
        14 Feb 2008 8:57:08 56 602 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_6.0.6000.16609_none_000bb771a4a46504.manifest"
        14 Feb 2008 9:06:56 30 674 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-p..unterinfrastructure_31bf3856ad364e35_6.0.6000.16609_none_6fa8c14c01b81c8f_perfc.dat_f4bd9339"
        14 Feb 2008 9:06:54 19 456 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_cfgmgr32.dll_7bc7e545"
        14 Feb 2008 8:58:30 49 152 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-tcpip_31bf3856ad364e35_6.0.6000.16627_none_5f90b964923d030a_netiomig.dll_917b9a36"
        14 Feb 2008 9:06:54 221 696 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-coreusermodepnp_31bf3856ad364e35_6.0.6000.16609_none_75246f2a2fbd4c23_umpnpmgr.dll_112f9bb4"
        14 Feb 2008 8:57:08 214 528 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-ie-directxtransforms_31bf3856ad364e35_6.0.6000.16609_none_95e9130384756585_dxtrans.dll_814d2aee"
        14 Feb 2008 9:06:54 3 034 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-setupapi.resources_31bf3856ad364e35_6.0.6000.16609_fr-fr_0b0664296d2c92b1.manifest"
        14 Feb 2008 9:06:56 5 227 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366.manifest"
        18 Feb 2008 17:16:46 24 064 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-t..services-publicapis_31bf3856ad364e35_6.0.6000.16553_none_c5179c13c95485bd_wtsapi32.dll_470d4d41"
        14 Feb 2008 9:06:56 905 400 A.... "C:\Windows\winsxs\Backup\x86_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.0.6000.16609_none_59497e266f783366_winresume.exe_85cd1215"
        13 Feb 2008 15:30:22 23 834 A.... "C:\Windows\winsxs\Catalogs\050b2a0163102501b05d9e43ac4c53e538cd93c9907b91c69907b04c365369b4.cat"
        13 Feb 2008 15:30:10 26 186 A.... "C:\Windows\winsxs\Catalogs\0ad6f09f2b2b39e5e7cfc19103cb31b78ead81597edba64691c6a502ae1f996d.cat"
        14 Feb 2008 9:16:40 24 195 A.... "C:\Windows\winsxs\Catalogs\10338debac71ca966896e544f26291a99bf38cc4b87e69c1798037b49a292a3d.cat"
        13 Feb 2008 15:33:36 43 345 A.... "C:\Windows\winsxs\Catalogs\1418952aacdf47d43eff052dd144e84b0acf1e45aa1af266830a59fcd6a881da.cat"
        13 Feb 2008 15:29:42 23 834 A.... "C:\Windows\winsxs\Catalogs\19c7a4321d55036bd0f9aa87035a15ad62ec65e1d2d9c17978a81ef9ad0ea40f.cat"
        13 Feb 2008 15:33:04 14 740 A.... "C:\Windows\winsxs\Catalogs\1a3194f88073e6c03595db376a21306107a54b38fed11cf525c81d285871cd2f.cat"
        13 Feb 2008 15:29:54 23 834 A.... "C:\Windows\winsxs\Catalogs\1d6ebd3202f0931663348dc7328a614a25f513295a47a6ad3a50c4d64d4bab0f.cat"
        13 Feb 2008 15:29:44 14 442 A.... "C:\Windows\winsxs\Catalogs\37ae5936ba24fa473a5cbf11576ea349e1104dd54e48677cd2f844436c5633c1.cat"
        13 Feb 2008 15:30:00 23 834 A.... "C:\Windows\winsxs\Catalogs\3c6df958a8804ac9c1ad4af40edf97584f03fd8c1e911630f2ccbd82efea2704.cat"
        13 Feb 2008 15:30:06 23 834 A.... "C:\Windows\winsxs\Catalogs\417ad390502bf43875823bf5f549ab2031ac7531b518a2c50999f9e6b7735ce7.cat"
        13 Feb 2008 15:29:28 14 442 A.... "C:\Windows\winsxs\Catalogs\42820e7ec5f40412f525313282e3275550b72cda5621575a2fa437ad0849bbde.cat"
        13 Feb 2008 15:29:56 23 834 A.... "C:\Windows\winsxs\Catalogs\4548a2d79a4c9b0b9c97427ef50d1dec446548527929bf413532f9b5b0f70b39.cat"
        13 Feb 2008 15:30:34 14 442 A.... "C:\Windows\winsxs\Catalogs\45693e0f2c4ab93267df6ea67e58f33aaee6d12f796be1d26e196d7ba2f419fd.cat"
        13 Feb 2008 15:30:36 14 442 A.... "C:\Windows\winsxs\Catalogs\4600288784bed7de0849a49ca0c3e2569b02a27c1e54f448a61f3ea736f3c442.cat"
        13 Feb 2008 15:30:28 23 834 A.... "C:\Windows\winsxs\Catalogs\5658d911f1157c47dc0eec0603e9cff03918bdbcde0f5d6cee0a501a1c7d60d2.cat"
        13 Feb 2008 15:29:48 26 186 A.... "C:\Windows\winsxs\Catalogs\5a7b34dcbe7ba738719fa5c490ed3c0f863becc4844a8be011b0732be3678c34.cat"
        13 Feb 2008 15:30:12 26 186 A.... "C:\Windows\winsxs\Catalogs\64b20eb1d2e76ffad87d8824e80145679bfc0ef3a93bfcc5c70a688fad06aef0.cat"
        13 Feb 2008 15:33:34 37 850 A.... "C:\Windows\winsxs\Catalogs\6d88c5f3d266b8fa19190a8adae6f1729d1b8d51b9e698e9d358c4551bbce86e.cat"
        13 Feb 2008 15:30:44 23 834 A.... "C:\Windows\winsxs\Catalogs\6eb7ed514cde77a2b0b27813ebb2e1db09baa5c81e84869d5a16681d77cfe733.cat"
        13 Feb 2008 15:29:26 23 834 A.... "C:\Windows\winsxs\Catalogs\6ef00608b280e84f38da471beccf79ecd2613cbcc5b10d869ef11b83445afcfe.cat"
        13 Feb 2008 15:29:40 26 186 A.... "C:\Windows\winsxs\Catalogs\7329a042cd17487bca411bd79b935eff81009162f092c3775e1c4a995eb24837.cat"
        13 Feb 2008 15:30:30 23 834 A.... "C:\Windows\winsxs\Catalogs\74c0aef9ec661126070eb1e01c25a94f7477f36dd92f4fde5f53fa4fbf8087c6.cat"
        13 Feb 2008 15:30:38 23 834 A.... "C:\Windows\winsxs\Catalogs\7c34856c5ef792d12929068d0871b07a0451fbe6d33b6dbca3d9e90b71c37db9.cat"
        13 Feb 2008 15:27:10 12 686 A.... "C:\Windows\winsxs\Catalogs\8272c03d107e462deb7a0bed70335833781b7e27bc6bbd24470701f9e4facde2.cat"
        13 Feb 2008 15:27:12 33 241 A.... "C:\Windows\winsxs\Cata
        0
        1. bon telecharge ToolsCleaner sur ton bureau

          http://www.commentcamarche.net/tel [...] nions.php3

          Click dessus et click sur rechercher
          ensuite effacer.
          Ce programme va detecter et enlever SDfix de ton pc

          ensuite telecharge combofix sur ton bureau et pas ailleur.

          http://download.bleepingcomputer.com/sUBs/ComboFix.exe

          En mode sans echec lance combofix et poste moi le rapport

          Pour ton probleme d espace disque on verra apres l elimination de ton petit virus.
          Sur le rapport de sdfix que tu me poste je ne trouve pas le type de virus.
          0
          1. Autre question: est ce que ton probleme est apparu le 13 mars ?
            0
            1. Non, c'était plus récent, il y 4-5 jours... mais c'est bon, c'est réglé, j'ai utilisé navilog pour me débarasser du spyware. C'était du au logiciel Internet Game Box. Merci!
              0
              1. Au fait, la place sur le disque dur n'avait rien à voir avec ça! ><
                Quant aux problèmes de clavier, ils se sont résolus en même temps que je me suis débarassée du spyware!
                0